last executing test programs: 6.947962156s ago: executing program 4 (id=1061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}}, 0x20000050) 6.788775358s ago: executing program 4 (id=1064): r0 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x8503}], 0x1, 0x0, 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x6, 0xf}, {0xb, 0x7}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}]}, 0x4c}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r9, @ANYBLOB], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x3}, {0x8, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) sendto$inet6(r11, 0x0, 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r11, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) 6.232632789s ago: executing program 4 (id=1073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60640, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) close(r3) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000ef00080029"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001080006040002aaaaaaaaaabbac148c70d5d0f5b596"], 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, 0x0) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.346506255s ago: executing program 1 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x3feff, 0x20110}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x38}}, 0x0) 3.244816787s ago: executing program 1 (id=1106): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000039000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) 3.162313229s ago: executing program 1 (id=1108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.999895612s ago: executing program 1 (id=1112): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) 1.806102525s ago: executing program 1 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 1.498335911s ago: executing program 1 (id=1125): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {}, {}, {@barrier_val={'barrier', 0x3d, 0x6d62}}]}, 0x3, 0x469, &(0x7f0000000800)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xb8, 0x5002004a, 0xb, 0xb8, 0xea13, 0x150, 0x3c8, 0x3c8, 0x150, 0x3c8, 0x3, 0x0, {[{{@ip={@local, @local, 0xff000000, 0x0, 'veth1_vlan\x00', 'erspan0\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 1.126727958s ago: executing program 3 (id=1131): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0xb433ce711a2ab0dc}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x30}], 0x1, 0x40400d4) 1.065078529s ago: executing program 2 (id=1132): unshare(0x400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1}, 0x1}, 0x18) 1.03374624s ago: executing program 2 (id=1133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="89e7ee2cdcdad9b4b47380c988ca", 0xe}, {&(0x7f00000007c0)="1fe31c4340b9cc0a776a96eb8de7bdb1eef77cca9b45c37dbcd065f6e905ca32737bdeda70a659e2c0e86bebafdbe7b8827fb9c7b54d7ef1daf97794", 0x3c}], 0x2) 900.935293ms ago: executing program 3 (id=1136): unshare(0x400) r0 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100), 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3fab00000000000000002e0000000e0001006e657464653673696d00"], 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x6}, {0x6, 0x0, 0x3, 0x365}]}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200010100000000", @ANYRES32=r8, @ANYBLOB="540000804e0031"], 0x70}}, 0x0) recvmmsg(r8, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000020, 0x0) write$ppp(r7, &(0x7f0000000400)="6b27e58a4a", 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'macsec0\x00'}) setsockopt$inet6_tcp_int(r6, 0x6, 0x8, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e24, 0xfffffffc, @remote, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(r6) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x10000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x50}}, 0x0) 676.647097ms ago: executing program 2 (id=1138): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0xf, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 668.093567ms ago: executing program 0 (id=1139): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x90}, 0x1, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002240)={'gretap0\x00', 0x0}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r4 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 547.328499ms ago: executing program 0 (id=1140): sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20080014}, 0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) 519.39491ms ago: executing program 2 (id=1141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 518.68801ms ago: executing program 4 (id=1142): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 444.709341ms ago: executing program 3 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='module_request\x00', r1}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 444.321091ms ago: executing program 0 (id=1144): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x45a9, 0x4) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) write(r0, &(0x7f00000001c0)='+', 0x1) recvfrom(r0, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) 383.317442ms ago: executing program 3 (id=1145): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0xf, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 339.226543ms ago: executing program 0 (id=1146): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)="7a5da19f13db894c946036e4df73df4492d2cb53", 0x14}, {&(0x7f0000000640)="dd9e", 0x2}, {&(0x7f0000000700)="85661ced661a00150118be00c9", 0xd}], 0x3}, 0x20000040) 326.532474ms ago: executing program 4 (id=1147): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x101, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffd, @loopback}}}, 0x108) close(r4) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000004060104000000000000000007000005050001000700"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 230.617995ms ago: executing program 0 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 229.969875ms ago: executing program 2 (id=1149): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0x34, 0x28}, 0x20) 129.464477ms ago: executing program 4 (id=1150): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x501, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0) 128.410388ms ago: executing program 3 (id=1151): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 43.127009ms ago: executing program 2 (id=1152): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0xf, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 42.642869ms ago: executing program 0 (id=1153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60640, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) close(r3) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000ef00080029"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001080006040002aaaaaaaaaabbac148c70d5d0f5b596"], 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, 0x0) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=1154): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x7, 0x2, 0xffffffff}]}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 64.176123][ T4173] cgroup: Unknown subsys name 'net' [ 64.306915][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.820101][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.297451][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.334098][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.362106][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 67.413486][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 67.495388][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.504764][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.512061][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.520935][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.532880][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.539969][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.548338][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.622634][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.629809][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.639203][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.646781][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.654077][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.662192][ T4193] device bridge_slave_0 entered promiscuous mode [ 67.682808][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.692161][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.699235][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.708683][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.716050][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.723263][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.731923][ T4193] device bridge_slave_1 entered promiscuous mode [ 67.750617][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.759796][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.766919][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.774942][ T4196] device bridge_slave_0 entered promiscuous mode [ 67.809082][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.816383][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.824834][ T4196] device bridge_slave_1 entered promiscuous mode [ 67.871039][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.881980][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.900529][ T4186] team0: Port device team_slave_0 added [ 67.915000][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.933974][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.943301][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.950704][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.958580][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.967757][ T4186] team0: Port device team_slave_1 added [ 67.975356][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.007165][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.014359][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.022947][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.039082][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.058490][ T4184] team0: Port device team_slave_0 added [ 68.067120][ T4193] team0: Port device team_slave_0 added [ 68.100384][ T4184] team0: Port device team_slave_1 added [ 68.108171][ T4193] team0: Port device team_slave_1 added [ 68.124296][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.135591][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.142939][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.169131][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.182821][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.189886][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.215916][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.229879][ T4196] team0: Port device team_slave_0 added [ 68.254559][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.268743][ T4196] team0: Port device team_slave_1 added [ 68.313904][ T4185] team0: Port device team_slave_0 added [ 68.329474][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.336522][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.362864][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.374563][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.381996][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.408631][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.421382][ T4185] team0: Port device team_slave_1 added [ 68.427675][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.434880][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.461213][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.490626][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.497611][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.523674][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.553665][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.560901][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.586975][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.610967][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.617949][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.644229][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.659663][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.666818][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.684043][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.691222][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.717761][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.734551][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.741589][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.767540][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.832803][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.839590][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.846570][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.854647][ T4184] Cannot create hsr debugfs directory [ 68.870730][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.877570][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.884636][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.896019][ T4193] Cannot create hsr debugfs directory [ 68.949098][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.951385][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 68.955405][ T4187] Bluetooth: hci4: command 0x0409 tx timeout [ 68.967066][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 68.968399][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 68.973455][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 68.987074][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.994057][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.001790][ T4196] Cannot create hsr debugfs directory [ 69.020504][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.027563][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.034401][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.042364][ T4185] Cannot create hsr debugfs directory [ 69.346726][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.365947][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.375503][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.385421][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.436140][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.453510][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.481459][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.491224][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.549120][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.567023][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.583043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.593345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.609690][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.629184][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.643012][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.649902][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.684234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.695959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.706096][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.713455][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.722216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.770623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.779303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.788671][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.795799][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.805785][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.825200][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.834873][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.846641][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.885253][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.901849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.921891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.933296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.942975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.954681][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.962522][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.992504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.001824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.011048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.028450][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.039129][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.052773][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.061904][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.078724][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.086716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.095575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.105865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.115607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.124470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.132830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.144504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.180664][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.195794][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.205859][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.213015][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.238553][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.266607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.284855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.302983][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.310142][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.319526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.335077][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.345128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.380809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.388723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.416765][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.425135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.434849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.444505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.453590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.463027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.502260][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.515747][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.528090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.541034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.549580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.558553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.566996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.576024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.584944][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.592074][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.599765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.608788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.619642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.627342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.648220][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.672607][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.682640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.696428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.708316][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.715514][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.735996][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.751564][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.774768][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.793772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.808860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.817418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.833797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.843510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.854758][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.867271][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.891950][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.909061][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.918830][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.927985][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.936821][ T551] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.944025][ T551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.953395][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.962283][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.972796][ T551] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.979876][ T551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.987927][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.995803][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.003665][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.012580][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.021258][ T551] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.028424][ T551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.035964][ T4175] Bluetooth: hci0: command 0x041b tx timeout [ 71.036629][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.049632][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 71.049760][ T4175] Bluetooth: hci1: command 0x041b tx timeout [ 71.062478][ T4175] Bluetooth: hci3: command 0x041b tx timeout [ 71.063561][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.076258][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 71.090641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.112132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.121555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.130403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.138804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.148267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.156778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.167634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.177186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.186072][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.193200][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.205554][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.214510][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.228593][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.239940][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.262102][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.287255][ T4186] device veth0_vlan entered promiscuous mode [ 71.302871][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.315901][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.325379][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.334655][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.345099][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.357876][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364563][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.375601][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.383974][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.393495][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.402475][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.410415][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.428005][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.442720][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.466593][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.476123][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.491469][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.501679][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.511441][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.527954][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.537103][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.546444][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.555179][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.563988][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.571966][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.593079][ T4186] device veth1_vlan entered promiscuous mode [ 71.629778][ T4184] device veth0_vlan entered promiscuous mode [ 71.637867][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.650530][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.659261][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.669855][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.679550][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.691304][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.698931][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.707233][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.728060][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.737500][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.759882][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.783091][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.799484][ T4184] device veth1_vlan entered promiscuous mode [ 71.811105][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.828664][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.837528][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.846117][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.855369][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.896098][ T4186] device veth0_macvtap entered promiscuous mode [ 71.920161][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.929616][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.942996][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.951251][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.960984][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.973582][ T4186] device veth1_macvtap entered promiscuous mode [ 71.989034][ T4184] device veth0_macvtap entered promiscuous mode [ 72.002694][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.015597][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.031024][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.040008][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.056802][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.077763][ T4184] device veth1_macvtap entered promiscuous mode [ 72.090872][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.099356][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.110207][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.130781][ T4196] device veth0_vlan entered promiscuous mode [ 72.140272][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.148603][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.159515][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.167942][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.179166][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.187769][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.207013][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.222793][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.234659][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.244454][ T4196] device veth1_vlan entered promiscuous mode [ 72.264099][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.274936][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.286921][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.299203][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.313011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.323028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.331887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.343787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.353012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.362525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.373685][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.381696][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.410153][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.424613][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.448744][ T4196] device veth0_macvtap entered promiscuous mode [ 72.463070][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.473218][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.483236][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.492698][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.502402][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.511516][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.531177][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.540348][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.549120][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.560374][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.573719][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.583743][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.593552][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.602557][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.616040][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.645622][ T4196] device veth1_macvtap entered promiscuous mode [ 72.674773][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.694692][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.706147][ T4185] device veth0_vlan entered promiscuous mode [ 72.732693][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.741695][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.757384][ T4185] device veth1_vlan entered promiscuous mode [ 72.794145][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.811568][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.822776][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.833944][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.846701][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.858820][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.871737][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.882159][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.892893][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.904545][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.925211][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.935373][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.944119][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.954494][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.964358][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.973755][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.035030][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045465][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.054610][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.066103][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.076311][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.085309][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.094254][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.103536][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.112341][ T4175] Bluetooth: hci2: command 0x040f tx timeout [ 73.118480][ T4175] Bluetooth: hci3: command 0x040f tx timeout [ 73.121314][ T2302] Bluetooth: hci4: command 0x040f tx timeout [ 73.124850][ T4175] Bluetooth: hci1: command 0x040f tx timeout [ 73.136952][ T4175] Bluetooth: hci0: command 0x040f tx timeout [ 73.156819][ T4193] device veth0_vlan entered promiscuous mode [ 73.164989][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.174600][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.183754][ T4185] device veth0_macvtap entered promiscuous mode [ 73.198316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.208256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.216528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.225113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.248527][ T4185] device veth1_macvtap entered promiscuous mode [ 73.255029][ T551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.262145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.271274][ T551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.275469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.288056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.296314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.308332][ T4193] device veth1_vlan entered promiscuous mode [ 73.355529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.394487][ T551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.402854][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.413628][ T551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.420243][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.437177][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.447959][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.458104][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.470835][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.482237][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.496529][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.509034][ T551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.517107][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.517125][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.517141][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.517152][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.517165][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.518802][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.528917][ T551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.585252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.594862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.603202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.611907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.621851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.630711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.639566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.661379][ T4193] device veth0_macvtap entered promiscuous mode [ 73.672693][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.682708][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.692379][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.701350][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.715284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.734015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.773092][ T4193] device veth1_macvtap entered promiscuous mode [ 73.783970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.792993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.865021][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.871919][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.910584][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.921052][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.923606][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.945851][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.957517][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.969102][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.979781][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.995760][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.007498][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.024188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.035198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.044344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.085754][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.089559][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.099814][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.118678][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.122632][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.139080][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.149946][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.162188][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.173672][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.185201][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.197065][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.217129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.225342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.235562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.248010][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.258480][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.269868][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.280363][ T4295] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.298113][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.333215][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.342582][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.359123][ T4302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 74.374347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.442975][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.459402][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.495184][ T4307] loop0: detected capacity change from 0 to 128 [ 74.528319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.565072][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.579158][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.181577][ T4315] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 75.189389][ T4315] FAT-fs (loop0): Filesystem has been set read-only [ 75.270881][ T4315] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 75.292679][ T4295] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 75.307350][ T4295] usb 3-1: config 0 has no interface number 0 [ 75.313787][ T4311] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 75.315374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.321632][ T4295] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.330316][ T4175] Bluetooth: hci0: command 0x0419 tx timeout [ 75.342588][ T4311] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 75.348221][ T4175] Bluetooth: hci4: command 0x0419 tx timeout [ 75.356764][ T4311] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 75.362994][ T4175] Bluetooth: hci1: command 0x0419 tx timeout [ 75.375215][ T4175] Bluetooth: hci3: command 0x0419 tx timeout [ 75.384744][ T4295] usb 3-1: New USB device found, idVendor=056a, idProduct=f6ca, bcdDevice=88.7b [ 75.389869][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.401142][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.432764][ T4175] Bluetooth: hci2: command 0x0419 tx timeout [ 75.573776][ T4295] usb 3-1: config 0 descriptor?? [ 75.584218][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.667055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.726470][ T4325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.910555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.920099][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.929110][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.938035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.946939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.955850][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.964743][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.973651][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.982640][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.991532][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.730319][ T4295] usbhid 3-1:0.4: can't add hid device: -71 [ 77.736725][ T4295] usbhid: probe of 3-1:0.4 failed with error -71 [ 77.773100][ T4340] loop2: detected capacity change from 0 to 512 [ 77.784412][ T4295] usb 3-1: USB disconnect, device number 2 [ 77.852854][ T4340] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.910917][ T4340] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.995012][ T4340] EXT4-fs (loop2): 1 truncate cleaned up [ 78.010598][ T4340] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.270239][ T1110] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 78.280811][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.288520][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.307953][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.326397][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.341751][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.356684][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.370608][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.378275][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.391083][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.398923][ T4295] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 78.457782][ T4295] hid-generic 00A0:0008:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 78.582691][ T4352] loop2: detected capacity change from 0 to 128 [ 78.690461][ T1110] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 78.709861][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.763559][ T1110] usb 2-1: config 0 descriptor?? [ 78.936010][ T4358] loop3: detected capacity change from 0 to 1024 [ 79.705638][ T1110] hid-generic 0003:05AC:029F.0002: unbalanced delimiter at end of report description [ 79.724086][ T1110] hid-generic: probe of 0003:05AC:029F.0002 failed with error -22 [ 79.943310][ T4367] loop0: detected capacity change from 0 to 128 [ 79.958383][ T1110] usb 2-1: USB disconnect, device number 2 [ 80.008647][ T4367] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.044748][ T4367] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.077702][ T4372] loop3: detected capacity change from 0 to 1024 [ 80.117400][ T4372] ======================================================= [ 80.117400][ T4372] WARNING: The mand mount option has been deprecated and [ 80.117400][ T4372] and is ignored by this kernel. Remove the mand [ 80.117400][ T4372] option from the mount to silence this warning. [ 80.117400][ T4372] ======================================================= [ 80.169810][ T4372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.452949][ T4376] process 'syz.0.20' launched './file1' with NULL argv: empty string added [ 80.882054][ T4175] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 81.002719][ T4378] loop2: detected capacity change from 0 to 128 [ 81.128260][ T4380] loop1: detected capacity change from 0 to 8 [ 81.280964][ T4175] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 81.311979][ T4175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.345463][ T4386] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 81.353518][ T4386] FAT-fs (loop2): Filesystem has been set read-only [ 81.363533][ T4386] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 81.374022][ T4386] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 81.384415][ T4386] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 81.394908][ T4386] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 81.488515][ T4175] usb 5-1: config 0 descriptor?? [ 81.633817][ T4175] cp210x 5-1:0.0: cp210x converter detected [ 82.030265][ T4175] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: 0 [ 82.038382][ T4175] cp210x 5-1:0.0: GPIO initialisation failed: -5 [ 82.048869][ T4175] usb 5-1: cp210x converter now attached to ttyUSB0 [ 82.273803][ T4380] SQUASHFS error: lzo decompression failed, data probably corrupt [ 82.310090][ T4373] loop4: detected capacity change from 0 to 512 [ 82.326725][ T4380] SQUASHFS error: Failed to read block 0x0: -5 [ 82.361864][ T4380] SQUASHFS error: Unable to read data cache entry [0] [ 83.894047][ T4380] SQUASHFS error: Unable to read page, block 0, size ff [ 83.901242][ T4380] SQUASHFS error: Unable to read data cache entry [0] [ 83.908044][ T4380] SQUASHFS error: Unable to read page, block 0, size ff [ 83.942925][ T4380] SQUASHFS error: lzo decompression failed, data probably corrupt [ 84.001117][ T4380] SQUASHFS error: Failed to read block 0x0: -5 [ 84.023822][ T4241] usb 5-1: USB disconnect, device number 2 [ 84.072007][ T4380] SQUASHFS error: lzo decompression failed, data probably corrupt [ 84.080215][ T4380] SQUASHFS error: Failed to read block 0x0: -5 [ 84.088085][ T26] audit: type=1800 audit(1759585473.219:2): pid=4380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.24" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 84.112250][ T4241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 84.149531][ T4241] cp210x 5-1:0.0: device disconnected [ 84.343230][ T4411] loop3: detected capacity change from 0 to 512 [ 84.533070][ T4411] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 84.548341][ T4417] loop1: detected capacity change from 0 to 128 [ 84.611999][ T4417] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 84.688247][ T4411] EXT4-fs (loop3): Test dummy encryption mode enabled [ 84.707631][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000. Quota mode: none. [ 85.180145][ T4431] loop3: detected capacity change from 0 to 128 [ 85.303680][ T4436] loop0: detected capacity change from 0 to 128 [ 85.634448][ T4440] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 85.642143][ T4440] FAT-fs (loop3): Filesystem has been set read-only [ 85.651424][ T4440] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 85.661138][ T4440] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 85.670961][ T4440] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 85.680873][ T4440] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 87.115342][ T23] cfg80211: failed to load regulatory.db [ 87.230217][ T4293] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 87.314047][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 88.773796][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 88.931473][ T4473] 9pnet: p9_fd_create_tcp (4473): problem connecting socket to 127.0.0.1 [ 88.970991][ T4293] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 89.033601][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.130086][ T4293] usb 4-1: config 0 descriptor?? [ 89.201067][ T4293] cp210x 4-1:0.0: cp210x converter detected [ 89.480224][ T4293] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 89.487962][ T4293] cp210x 4-1:0.0: querying part number failed [ 89.502571][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 89.621995][ T4293] usb 4-1: cp210x converter now attached to ttyUSB0 [ 89.632806][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 89.708370][ T4477] loop4: detected capacity change from 0 to 128 [ 89.746379][ T4293] usb 4-1: USB disconnect, device number 2 [ 89.804088][ T4293] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 89.845445][ T4293] cp210x 4-1:0.0: device disconnected [ 90.256514][ T4477] FAT-fs (loop4): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 90.529505][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 90.692246][ T4484] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.330712][ T4493] loop4: detected capacity change from 0 to 128 [ 92.559150][ T4493] FAT-fs (loop4): bogus number of FAT structure [ 92.576457][ T4493] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 93.307483][ T4493] FAT-fs (loop4): Can't find a valid FAT filesystem [ 94.017838][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.035439][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.043960][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.251436][ T4528] loop1: detected capacity change from 0 to 1024 [ 97.800706][ T4545] fuse: Bad value for 'fd' [ 98.410315][ T4234] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 98.841305][ T4234] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 98.979177][ T4234] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.111074][ T4234] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 99.306753][ T4234] usb 4-1: config 1 has no interface number 1 [ 99.313779][ T4234] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.327055][ T4234] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.590510][ T4234] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.599988][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.608594][ T4234] usb 4-1: Product: syz [ 99.613729][ T4234] usb 4-1: Manufacturer: syz [ 99.618449][ T4234] usb 4-1: SerialNumber: syz [ 100.550407][ T4241] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.477608][ T4295] Bluetooth: hci3: command 0x0406 tx timeout [ 102.227390][ T4241] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.268334][ T4606] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 102.291046][ T4234] usb 4-1: USB disconnect, device number 3 [ 102.360353][ T4241] usb 2-1: string descriptor 0 read error: -71 [ 102.376212][ T4613] loop3: detected capacity change from 0 to 256 [ 102.376901][ T4241] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.451535][ T4613] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 102.485597][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.560450][ T4241] usb 2-1: can't set config #1, error -71 [ 102.601119][ T4241] usb 2-1: USB disconnect, device number 3 [ 102.663326][ T4321] udevd[4321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.750243][ T4541] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 103.220296][ T4541] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 103.370114][ T4541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.595579][ T4541] usb 5-1: config 0 descriptor?? [ 103.782607][ T4634] capability: warning: `syz.1.100' uses deprecated v2 capabilities in a way that may be insecure [ 104.482906][ T4541] hid-generic 0003:05AC:029F.0003: unbalanced delimiter at end of report description [ 104.513503][ T4541] hid-generic: probe of 0003:05AC:029F.0003 failed with error -22 [ 106.010314][ T4541] usb 5-1: USB disconnect, device number 3 [ 107.221278][ T4541] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.610237][ T4541] usb 5-1: Using ep0 maxpacket: 16 [ 108.270310][ T4541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.351531][ T4541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 108.392386][ T4541] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 108.415246][ T4541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.484012][ T4541] usb 5-1: config 0 descriptor?? [ 108.540409][ T4650] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.584694][ T4652] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 108.885038][ T4675] loop1: detected capacity change from 0 to 128 [ 108.941371][ T4675] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 109.327743][ T4541] hid-alps 0003:044E:1215.0004: unexpected long global item [ 109.337944][ T4541] hid-alps 0003:044E:1215.0004: parse failed [ 109.346854][ T4541] hid-alps: probe of 0003:044E:1215.0004 failed with error -22 [ 109.748127][ T4295] usb 5-1: USB disconnect, device number 4 [ 110.154244][ T4690] 9pnet: p9_fd_create_tcp (4690): problem connecting socket to 127.0.0.1 [ 111.281806][ T4696] loop2: detected capacity change from 0 to 512 [ 111.456367][ T4696] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 111.527321][ T4696] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 111.562478][ T4696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e04ce028, mo2=0002] [ 111.629612][ T4696] System zones: 0-1, 15-15, 18-18, 34-34 [ 111.722056][ T4696] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.782594][ T4696] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 111.859871][ T4696] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.900708][ T4696] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 111.932650][ T4696] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.118: bg 0: block 40: padding at end of block bitmap is not set [ 112.048304][ T4696] EXT4-fs (loop2): Remounting filesystem read-only [ 112.074620][ T4696] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 112.141890][ T4696] EXT4-fs (loop2): Remounting filesystem read-only [ 112.225832][ T4696] EXT4-fs (loop2): 1 truncate cleaned up [ 112.270841][ T4696] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,resuid=0x0000000000000000,nojournal_checksum,mblk_io_submit,acl,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 113.314840][ T4688] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.118: iget: bad i_size value: 360287970189639690 [ 114.331921][ T4736] loop4: detected capacity change from 0 to 8 [ 114.822469][ T4736] squashfs: Unknown parameter '' [ 116.583488][ T4241] Bluetooth: hci4: command 0x0405 tx timeout [ 116.704833][ T4750] loop4: detected capacity change from 0 to 764 [ 117.033790][ T4754] loop3: detected capacity change from 0 to 256 [ 117.423568][ T4754] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.978226][ T4764] loop2: detected capacity change from 0 to 512 [ 118.335462][ T4769] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.388075][ T4764] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.141: casefold flag without casefold feature [ 118.415507][ T4764] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.141: couldn't read orphan inode 15 (err -117) [ 118.812929][ T4766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.890336][ T4764] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.300172][ T4773] loop_set_status: loop2 () has still dirty pages (nrpages=3) [ 119.308113][ T26] audit: type=1107 audit(1759585508.439:3): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ŗ%jY:-R}"_Ņ{S&cēEé*Ü&›JĶU+9o<ʡppHi[AM…±Śėlć/ż^@U|€±BÉ!ķ:5Ć÷īŽų°mń±%Ū¦Ę£—“—/Õ1²s™^fuB†¸ ĆVöP>ČŲ®µäTŠT‘?…µ¤H"GAü-!´tó~ –;‘´Üy WčSĆ×Ö3fŁļ°ć' [ 120.016313][ T4789] 9pnet: p9_fd_create_tcp (4789): problem connecting socket to 127.0.0.1 [ 120.725601][ T4806] loop2: detected capacity change from 0 to 512 [ 120.791745][ T4806] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.472220][ T4811] ODEBUG: Out of memory. ODEBUG disabled [ 122.195371][ T4806] EXT4-fs (loop2): 1 orphan inode deleted [ 122.230159][ T4806] EXT4-fs (loop2): 1 truncate cleaned up [ 122.235871][ T4806] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,bsddf,bsddf,barrier=0x0000000000006d62,. Quota mode: none. [ 123.125222][ T4824] 9pnet: p9_fd_create_tcp (4824): problem connecting socket to 127.0.0.1 [ 123.142926][ T4822] loop3: detected capacity change from 0 to 1024 [ 124.202929][ T4845] binder: 4844:4845 unknown command 0 [ 124.227922][ T4845] binder: 4844:4845 ioctl c0306201 200000000080 returned -22 [ 124.582404][ T4849] loop1: detected capacity change from 0 to 4096 [ 124.647072][ T4849] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.717538][ T4849] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 124.760427][ T4849] System zones: 0-5 [ 124.792088][ T4849] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 125.257527][ T4866] loop2: detected capacity change from 0 to 128 [ 125.345018][ T4866] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 125.399037][ T4866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.475036][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.602186][ T4872] loop3: detected capacity change from 0 to 16 [ 125.718880][ T4874] loop2: detected capacity change from 0 to 1024 [ 125.793028][ T4874] EXT4-fs (loop2): Ignoring removed nobh option [ 125.799349][ T4874] EXT4-fs (loop2): Ignoring removed bh option [ 125.828797][ T4872] erofs: (device loop3): mounted with root inode @ nid 36. [ 125.857541][ T4874] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.890386][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.957171][ T4874] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,bsddf,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 126.003036][ T23] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 126.075872][ T23] usb 2-1: config 14 has no interface number 0 [ 126.110887][ T4882] syz.0.184 uses obsolete (PF_INET,SOCK_PACKET) [ 126.136993][ T23] usb 2-1: config 14 interface 21 altsetting 249 bulk endpoint 0xA has invalid maxpacket 32 [ 126.248683][ T23] usb 2-1: config 14 interface 21 has no altsetting 0 [ 126.440390][ T23] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 126.481723][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.548573][ T23] usb 2-1: Product: syz [ 126.583789][ T23] usb 2-1: Manufacturer: syz [ 126.615903][ T23] usb 2-1: SerialNumber: syz [ 126.689785][ T4891] loop4: detected capacity change from 0 to 1024 [ 127.006221][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 127.016679][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 127.020380][ T4891] hfsplus: request for non-existent node 3 in B*Tree [ 127.130246][ T23] usb 2-1: MIDIStreaming interface descriptor not found [ 127.140214][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 127.193126][ T4891] hfsplus: request for non-existent node 3 in B*Tree [ 127.258804][ T26] audit: type=1326 audit(1759585516.389:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe912bec9 code=0x7ffc0000 [ 127.259052][ T26] audit: type=1326 audit(1759585516.389:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe912bec9 code=0x7ffc0000 [ 127.259394][ T26] audit: type=1326 audit(1759585516.389:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6fe912bec9 code=0x7ffc0000 [ 127.259586][ T26] audit: type=1326 audit(1759585516.389:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe912bec9 code=0x7ffc0000 [ 127.259855][ T26] audit: type=1326 audit(1759585516.389:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f6fe912bec9 code=0x7ffc0000 [ 127.260603][ T26] audit: type=1326 audit(1759585516.399:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe912bec9 code=0x7ffc0000 [ 127.260937][ T26] audit: type=1326 audit(1759585516.399:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f6fe912bec9 code=0x7ffc0000 [ 127.261119][ T26] audit: type=1326 audit(1759585516.399:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe912bec9 code=0x7ffc0000 [ 127.261369][ T26] audit: type=1326 audit(1759585516.399:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe912bec9 code=0x7ffc0000 [ 127.292221][ T23] usb 2-1: USB disconnect, device number 4 [ 128.120822][ T4320] udevd[4320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.309903][ T4919] loop1: detected capacity change from 0 to 512 [ 129.059004][ T4919] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.250692][ T4919] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.257159][ T4919] EXT4-fs (loop1): 1 truncate cleaned up [ 129.257185][ T4919] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 129.731294][ T4927] netlink: 'syz.0.197': attribute type 2 has an invalid length. [ 129.778349][ T4931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.196'. [ 130.518878][ T4939] loop2: detected capacity change from 0 to 8 [ 131.098397][ T4919] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 13: comm syz.1.195: lblock 0 mapped to illegal pblock 13 (length 1) [ 131.565924][ T551] EXT4-fs error (device loop1): __ext4_get_inode_loc:4321: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 131.799926][ T4957] loop3: detected capacity change from 0 to 1024 [ 131.999418][ T4961] loop2: detected capacity change from 0 to 1024 [ 132.469736][ T4961] EXT4-fs (loop2): Ignoring removed orlov option [ 132.795031][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801390][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.370029][ C1] sched: RT throttling activated [ 133.429091][ T4961] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000001045,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,noauto_da_alloc,orlov,user_xattr,nodioread_nolock,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 134.449847][ T4957] EXT4-fs (loop3): Ignoring removed orlov option [ 134.519505][ T4957] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 134.666626][ T4957] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 134.691521][ T4982] loop2: detected capacity change from 0 to 16 [ 134.771128][ T4982] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.961383][ T4999] loop3: detected capacity change from 0 to 256 [ 137.448797][ T4999] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 137.488915][ T5001] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 137.585003][ T5011] loop2: detected capacity change from 0 to 2048 [ 137.591910][ T5001] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 137.681660][ T5011] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 137.913340][ T5013] loop4: detected capacity change from 0 to 4096 [ 137.956773][ T5011] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 138.408037][ T5011] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 138.430361][ T5013] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 138.454029][ T5011] UDF-fs: Scanning with blocksize 512 failed [ 138.524442][ T5011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.542828][ T5013] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,init_itable=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 138.771593][ T26] audit: type=1800 audit(1759585527.909:13): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.213" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 138.985963][ T5032] loop2: detected capacity change from 0 to 1024 [ 139.103650][ T4250] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.177342][ T5032] EXT4-fs (loop2): Ignoring removed orlov option [ 139.345895][ T5043] loop4: detected capacity change from 0 to 16 [ 139.356023][ T5032] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 139.407310][ T5043] erofs: (device loop4): mounted with root inode @ nid 36. [ 139.480130][ T4175] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 139.571504][ T4250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.584489][ T4250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.595127][ T4250] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.609088][ T4250] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.636941][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.708687][ T5048] loop2: detected capacity change from 0 to 512 [ 139.720412][ T4250] usb 4-1: config 0 descriptor?? [ 139.777461][ T5048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.840287][ T4175] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.875933][ T4175] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 139.891797][ T5048] EXT4-fs (loop2): 1 truncate cleaned up [ 139.930149][ T5048] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 139.934079][ T4175] usb 2-1: config 1 has no interface number 0 [ 139.950764][ T4175] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.976367][ T4175] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 139.994919][ T5048] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.236: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 140.000106][ T4175] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 140.030181][ T4175] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 140.042111][ T4175] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.066589][ T5048] EXT4-fs (loop2): Remounting filesystem read-only [ 140.080068][ T5048] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 140.109927][ T5048] EXT4-fs (loop2): Remounting filesystem read-only [ 140.329066][ T4250] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 140.337300][ T4250] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 140.344887][ T4250] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 140.360089][ T4250] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 140.367625][ T4250] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 140.375653][ T4250] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 140.396769][ T4250] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 140.840789][ T5060] loop2: detected capacity change from 0 to 16 [ 140.881114][ T5060] erofs: (device loop2): mounted with root inode @ nid 36. [ 140.983723][ T4175] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.995378][ T4250] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.003345][ T4175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.011480][ T4250] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.019604][ T4175] usb 2-1: Product: syz [ 141.023892][ T4175] usb 2-1: Manufacturer: syz [ 141.029635][ T4250] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 141.038034][ T4175] usb 2-1: SerialNumber: syz [ 141.076325][ T5063] loop3: detected capacity change from 0 to 512 [ 141.092829][ T5038] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 141.108625][ T4250] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 141.152343][ T5063] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 141.180346][ T4250] usb 4-1: USB disconnect, device number 4 [ 141.191173][ T5063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803e01c, mo2=0002] [ 141.220241][ T5063] System zones: 1-12 [ 141.601280][ T5067] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 142.623548][ T5063] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.240: bg 0: block 328: padding at end of block bitmap is not set [ 142.696595][ T5063] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 142.730265][ T4175] cdc_ncm 2-1:1.1: bind() failure [ 142.730960][ T5065] fido_id[5065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 142.768728][ T4175] usb 2-1: USB disconnect, device number 5 [ 142.791792][ T5063] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.240: invalid indirect mapped block 65280 (level 0) [ 142.826714][ T5063] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.240: attempt to clear invalid blocks 33619980 len 1 [ 142.867838][ T5063] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.240: invalid indirect mapped block 1819239214 (level 0) [ 142.938000][ T5063] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.240: invalid indirect mapped block 1819239214 (level 1) [ 143.186703][ T5072] loop1: detected capacity change from 0 to 2048 [ 143.262443][ T5063] EXT4-fs (loop3): 1 orphan inode deleted [ 143.758709][ T5063] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,nomblk_io_submit,data_err=ignore,,errors=continue. Quota mode: none. [ 143.869896][ T5072] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 143.888705][ T5072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.165405][ T5063] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 2: comm syz.3.240: lblock 0 mapped to illegal pblock 2 (length 1) [ 144.182923][ T5063] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.240: error -117 reading directory block [ 144.204327][ T5063] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 2: comm syz.3.240: lblock 0 mapped to illegal pblock 2 (length 1) [ 144.228023][ T5063] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.240: error -117 reading directory block [ 144.490666][ T5080] loop4: detected capacity change from 0 to 128 [ 144.510132][ T1110] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 144.663109][ T4201] Bluetooth: hci4: link tx timeout [ 144.668558][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.678393][ T4201] Bluetooth: hci4: link tx timeout [ 144.683598][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.693355][ T4201] Bluetooth: hci4: link tx timeout [ 144.698582][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.715766][ T4201] Bluetooth: hci4: link tx timeout [ 144.721056][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.729033][ T4201] Bluetooth: hci4: link tx timeout [ 144.734400][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.742838][ T4201] Bluetooth: hci4: link tx timeout [ 144.747976][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.869891][ T4201] Bluetooth: hci4: link tx timeout [ 144.875418][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.890785][ T4201] Bluetooth: hci4: link tx timeout [ 144.895981][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.904532][ T4201] Bluetooth: hci4: link tx timeout [ 144.910238][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.918390][ T4201] Bluetooth: hci4: link tx timeout [ 144.933762][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.941649][ T1110] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.960176][ T4201] Bluetooth: hci4: link tx timeout [ 144.965335][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.973540][ T4201] Bluetooth: hci4: link tx timeout [ 144.978794][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.987623][ T4201] Bluetooth: hci4: link tx timeout [ 144.993012][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.066030][ T1110] usb 2-1: not running at top speed; connect to a high speed hub [ 145.650990][ T1110] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.670753][ T1110] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.762525][ T5101] loop4: detected capacity change from 0 to 512 [ 145.892804][ T5101] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.950309][ T1110] usb 2-1: string descriptor 0 read error: -22 [ 145.956596][ T1110] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.009754][ T5101] EXT4-fs (loop4): 1 truncate cleaned up [ 146.015716][ T5101] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 146.021200][ T5111] loop2: detected capacity change from 0 to 1024 [ 146.067095][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.138437][ T1110] usb 2-1: 0:2 : does not exist [ 146.381911][ T5111] EXT4-fs (loop2): Ignoring removed orlov option [ 146.731510][ T4241] Bluetooth: hci4: command 0x0406 tx timeout [ 146.764371][ T5111] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 147.480856][ T5127] mmap: syz.0.261 (5127) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 148.513343][ T5142] IPv6: NLM_F_REPLACE set, but no existing node found! [ 149.866653][ T5147] cgroup: Unknown subsys name 'nofavordynmods' [ 149.872613][ T5144] loop2: detected capacity change from 0 to 512 [ 149.981791][ T5144] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.996485][ T4250] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 150.032319][ T4250] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 150.087070][ T5144] EXT4-fs (loop2): 1 orphan inode deleted [ 150.100179][ T5144] EXT4-fs (loop2): 1 truncate cleaned up [ 150.106080][ T5144] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,bsddf,bsddf,barrier=0x0000000000006d62,. Quota mode: none. [ 150.170171][ T1110] usb 2-1: Warning! Unlikely big volume range (=31667), cval->res is probably wrong. [ 150.179691][ T1110] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/31667/1 [ 150.384869][ T5150] loop4: detected capacity change from 0 to 4096 [ 150.717325][ T5150] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.915026][ T5150] EXT4-fs (loop4): shut down requested (1) [ 150.981209][ T5150] fs-verity: sha256 using implementation "sha256-avx2" [ 151.120803][ T1110] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 151.531166][ T1110] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 151.593318][ T1110] usb 2-1: USB disconnect, device number 6 [ 152.425759][ T4321] udevd[4321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.238264][ T5196] loop4: detected capacity change from 0 to 512 [ 153.302897][ T5196] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.425324][ T5196] EXT4-fs (loop4): 1 orphan inode deleted [ 153.466702][ T5196] EXT4-fs (loop4): 1 truncate cleaned up [ 153.555577][ T5196] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,bsddf,bsddf,barrier=0x0000000000006d62,. Quota mode: none. [ 154.323707][ T5218] netlink: 92 bytes leftover after parsing attributes in process `syz.0.286'. [ 155.589842][ T5256] netlink: 172 bytes leftover after parsing attributes in process `syz.3.300'. [ 155.987519][ T5260] tipc: Started in network mode [ 155.995917][ T5260] tipc: Node identity 7a023a7a30c1, cluster identity 4711 [ 156.003436][ T5260] tipc: Enabled bearer , priority 0 [ 156.011101][ T5260] device syzkaller0 entered promiscuous mode [ 157.422980][ T7] tipc: Node number set to 1254308474 [ 157.440594][ T5274] tipc: Resetting bearer [ 157.490352][ T5257] tipc: Resetting bearer [ 157.542112][ T5282] sctp: failed to load transform for md5: -2 [ 157.544421][ T5257] tipc: Disabling bearer [ 158.862741][ T5315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.319'. [ 158.958284][ T5322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.322'. [ 159.145781][ T5327] netlink: 92 bytes leftover after parsing attributes in process `syz.0.323'. [ 159.158804][ T5327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.323'. [ 159.415857][ T5344] loop2: detected capacity change from 0 to 128 [ 159.496681][ T5344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.519517][ T5344] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.568811][ T5358] "syz.2.330" (5358) uses obsolete ecb(arc4) skcipher [ 160.584459][ T5358] syz.2.330 sent an empty control message without MSG_MORE. [ 161.322842][ T5363] 9pnet: p9_fd_create_tcp (5363): problem connecting socket to 127.0.0.1 [ 162.795593][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 162.831721][ T5379] netlink: 'syz.3.340': attribute type 11 has an invalid length. [ 162.957666][ T5378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.008816][ T5380] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 163.060352][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 163.072176][ T5380] syz.1.339 (5380) used greatest stack depth: 20288 bytes left [ 164.730288][ T5436] loop4: detected capacity change from 0 to 128 [ 164.750300][ T5432] tipc: Started in network mode [ 164.755267][ T5432] tipc: Node identity 7e04d8211592, cluster identity 4711 [ 164.820470][ T5432] tipc: Enabled bearer , priority 0 [ 164.856962][ T5439] device syzkaller0 entered promiscuous mode [ 164.879019][ T5444] loop3: detected capacity change from 0 to 128 [ 164.953873][ T5432] tipc: Resetting bearer [ 165.004563][ T5431] tipc: Resetting bearer [ 165.050294][ T5431] tipc: Disabling bearer [ 165.537513][ T5461] device veth3 entered promiscuous mode [ 165.572303][ T5436] FAT-fs (loop4): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 165.611896][ T5444] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.634170][ T5444] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.688487][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 165.922782][ T5466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 167.674873][ T5516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 168.017382][ T5540] netlink: 'syz.0.399': attribute type 4 has an invalid length. [ 168.065648][ T5543] loop1: detected capacity change from 0 to 128 [ 168.101393][ T5543] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 168.594916][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 168.607804][ T5562] crypto_alloc_aead failed rc=-4 [ 168.786488][ T5577] device syzkaller0 entered promiscuous mode [ 168.967588][ T5601] tipc: Enabling of bearer rejected, failed to enable media [ 169.046048][ T5609] ksmbd: Unknown IPC event: 6, ignore. [ 169.227609][ T5616] netlink: 44 bytes leftover after parsing attributes in process `syz.3.420'. [ 169.268907][ T5616] netlink: 35 bytes leftover after parsing attributes in process `syz.3.420'. [ 169.286335][ T5624] tipc: Started in network mode [ 169.291578][ T5616] netlink: 'syz.3.420': attribute type 5 has an invalid length. [ 169.334583][ T5616] netlink: 'syz.3.420': attribute type 6 has an invalid length. [ 169.342909][ T5624] tipc: Node identity 76a94108f589, cluster identity 4711 [ 169.360285][ T5616] netlink: 35 bytes leftover after parsing attributes in process `syz.3.420'. [ 169.369423][ T5624] tipc: Enabled bearer , priority 0 [ 169.437222][ T5628] device syzkaller0 entered promiscuous mode [ 169.757149][ T5623] tipc: Resetting bearer [ 169.997641][ T5623] tipc: Disabling bearer [ 170.033857][ T5659] Zero length message leads to an empty skb [ 170.045379][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 170.065361][ T5665] device vlan2 entered promiscuous mode [ 170.072521][ T5665] device wlan0 entered promiscuous mode [ 171.803622][ T5667] 9pnet: p9_fd_create_tcp (5667): problem connecting socket to 127.0.0.1 [ 172.100608][ T5690] loop2: detected capacity change from 0 to 128 [ 172.131269][ T5690] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 172.255235][ T5696] 9pnet: p9_fd_create_tcp (5696): problem connecting socket to 127.0.0.1 [ 173.091222][ T5705] netlink: 165 bytes leftover after parsing attributes in process `syz.4.448'. [ 173.557042][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 173.689055][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 173.876374][ T5736] 9pnet: p9_fd_create_tcp (5736): problem connecting socket to 127.0.0.1 [ 175.023364][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 175.226356][ T5762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.287841][ T5765] device vlan2 entered promiscuous mode [ 175.309165][ T5765] device bond1 entered promiscuous mode [ 175.482998][ T5777] 9pnet: p9_fd_create_tcp (5777): problem connecting socket to 127.0.0.1 [ 176.710254][ T1108] Bluetooth: hci4: command 0x0411 tx timeout [ 177.038277][ T5803] netlink: 'syz.0.480': attribute type 9 has an invalid length. [ 177.354288][ T5821] 9pnet: p9_fd_create_tcp (5821): problem connecting socket to 127.0.0.1 [ 177.769456][ T5817] loop4: detected capacity change from 0 to 512 [ 178.689857][ T5858] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 178.764058][ T5858] team0: Port device dummy0 added [ 178.784210][ T5817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.865274][ T5817] EXT4-fs (loop4): 1 orphan inode deleted [ 178.894300][ T5817] EXT4-fs (loop4): 1 truncate cleaned up [ 178.900281][ T5817] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,bsddf,bsddf,barrier=0x0000000000006d62,. Quota mode: none. [ 179.026414][ T5864] device bond1 entered promiscuous mode [ 179.041525][ T5864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.478682][ T5885] tipc: Enabled bearer , priority 0 [ 179.499862][ T5885] device syzkaller0 entered promiscuous mode [ 179.576595][ T5884] tipc: Resetting bearer [ 179.606004][ T5884] tipc: Disabling bearer [ 180.021628][ T5904] netlink: 'syz.3.513': attribute type 12 has an invalid length. [ 180.342855][ T5915] tipc: Enabled bearer , priority 0 [ 180.431000][ T5915] device syzkaller0 entered promiscuous mode [ 180.460665][ T5922] loop4: detected capacity change from 0 to 512 [ 180.503288][ T5915] tipc: Resetting bearer [ 180.523857][ T5922] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.563244][ T5913] tipc: Resetting bearer [ 180.581890][ T5913] tipc: Disabling bearer [ 180.600253][ T5922] EXT4-fs (loop4): 1 orphan inode deleted [ 180.611232][ T5922] EXT4-fs (loop4): 1 truncate cleaned up [ 180.616934][ T5922] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,bsddf,bsddf,barrier=0x0000000000006d62,. Quota mode: none. [ 180.880703][ T5941] tipc: Enabled bearer , priority 0 [ 181.012086][ T5941] device syzkaller0 entered promiscuous mode [ 181.071347][ T5941] tipc: Resetting bearer [ 181.180819][ T5940] tipc: Resetting bearer [ 181.253706][ T5955] loop3: detected capacity change from 0 to 128 [ 181.268276][ T5940] tipc: Disabling bearer [ 181.375302][ T5955] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 182.388369][ T5974] netlink: 'syz.2.538': attribute type 3 has an invalid length. [ 182.775947][ T5987] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.361074][ T6000] 9pnet: p9_fd_create_tcp (6000): problem connecting socket to 127.0.0.1 [ 183.705554][ T6006] tipc: Started in network mode [ 183.714216][ T6006] tipc: Node identity b6f0d5b711e7, cluster identity 4711 [ 183.744331][ T6006] tipc: Enabled bearer , priority 0 [ 183.807653][ T6008] device syzkaller0 entered promiscuous mode [ 183.849573][ T6006] tipc: Resetting bearer [ 183.867884][ T6005] tipc: Resetting bearer [ 183.910835][ T6005] tipc: Disabling bearer [ 184.317368][ T6024] loop4: detected capacity change from 0 to 128 [ 184.464744][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 184.578210][ T6024] FAT-fs (loop4): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 185.278966][ T6068] loop1: detected capacity change from 0 to 512 [ 185.432142][ T6075] loop2: detected capacity change from 0 to 128 [ 185.847308][ T6068] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.867070][ T6075] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 185.948650][ T6068] EXT4-fs (loop1): 1 orphan inode deleted [ 185.987965][ T6068] EXT4-fs (loop1): 1 truncate cleaned up [ 186.003880][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 186.037148][ T6068] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,bsddf,bsddf,barrier=0x0000000000006d62,. Quota mode: none. [ 186.584035][ T6106] device syzkaller1 entered promiscuous mode [ 186.758061][ T6121] netlink: 104 bytes leftover after parsing attributes in process `syz.1.586'. [ 186.777644][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.587'. [ 186.871385][ T6127] loop4: detected capacity change from 0 to 128 [ 186.981217][ T6127] FAT-fs (loop4): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 187.066540][ T6132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.328573][ T6132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.401669][ T6146] device syz_tun entered promiscuous mode [ 187.408485][ T6146] device macsec1 entered promiscuous mode [ 187.419020][ T6146] device syz_tun left promiscuous mode [ 187.461313][ T6132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.592504][ T6132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.721259][ T6132] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.737663][ T6132] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.753374][ T6132] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.769625][ T6132] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.218258][ T6180] 9pnet: p9_fd_create_tcp (6180): problem connecting socket to 127.0.0.1 [ 189.052630][ T6189] loop2: detected capacity change from 0 to 128 [ 189.623306][ T6189] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 189.727225][ T6203] netlink: 'syz.4.618': attribute type 1 has an invalid length. [ 189.782951][ T6203] netlink: 'syz.4.618': attribute type 1 has an invalid length. [ 190.112546][ T6210] device syzkaller0 entered promiscuous mode [ 190.132607][ T6215] tap0: tun_chr_ioctl cmd 1074025677 [ 190.138441][ T6215] tap0: linktype set to 769 [ 190.222814][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 190.277738][ T6221] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.287433][ T6221] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.296206][ T6221] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.304977][ T6221] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.414447][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 190.553537][ T6235] tipc: Enabled bearer , priority 0 [ 190.591334][ T6234] netlink: 'syz.3.631': attribute type 1 has an invalid length. [ 190.610366][ T6239] device syzkaller0 entered promiscuous mode [ 190.630954][ T6235] tipc: Resetting bearer [ 190.682187][ T6233] tipc: Resetting bearer [ 190.711468][ T6233] tipc: Disabling bearer [ 191.169822][ T6267] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 191.193898][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 191.200320][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 191.275426][ T6267] team0: Port device dummy0 added [ 191.670300][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 191.678212][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 191.777106][ T6306] netlink: 'syz.1.660': attribute type 46 has an invalid length. [ 191.786063][ T6306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.660'. [ 191.891799][ T6310] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 191.951903][ T6310] team0: Port device dummy0 added [ 192.185347][ T6313] device syzkaller1 entered promiscuous mode [ 192.417368][ T6332] device veth0_to_bridge entered promiscuous mode [ 192.431826][ T6331] tipc: Enabled bearer , priority 0 [ 192.447966][ T6329] device veth0_to_bridge left promiscuous mode [ 192.456231][ T6331] device syzkaller0 entered promiscuous mode [ 192.496081][ T6331] tipc: Resetting bearer [ 192.518750][ T6327] tipc: Resetting bearer [ 192.539941][ T6327] tipc: Disabling bearer [ 192.548416][ T6334] tipc: Started in network mode [ 192.566262][ T6334] tipc: Node identity 7ee4ef14ddb7, cluster identity 4711 [ 192.589167][ T6334] tipc: Enabled bearer , priority 0 [ 192.621322][ T6339] device syzkaller0 entered promiscuous mode [ 192.653176][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 192.684423][ T6336] device bridge_slave_1 left promiscuous mode [ 192.697044][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.727018][ T6336] device bridge_slave_0 left promiscuous mode [ 192.736136][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.849461][ T6334] tipc: Resetting bearer [ 192.873468][ T6348] netlink: 76 bytes leftover after parsing attributes in process `syz.0.673'. [ 192.886532][ T6333] tipc: Resetting bearer [ 192.909452][ T6333] tipc: Disabling bearer [ 193.052755][ T6353] netlink: 'syz.2.675': attribute type 10 has an invalid length. [ 193.359016][ T6372] netlink: 60 bytes leftover after parsing attributes in process `syz.4.682'. [ 193.603623][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.685'. [ 193.653033][ T6378] device gretap0 entered promiscuous mode [ 193.679529][ T6378] device gretap0 left promiscuous mode [ 193.719908][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.685'. [ 193.758586][ T6383] device gretap0 entered promiscuous mode [ 193.771127][ T6383] device gretap0 left promiscuous mode [ 193.782097][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 193.944457][ T6386] device syzkaller0 entered promiscuous mode [ 194.033686][ T6391] netlink: 'syz.2.689': attribute type 10 has an invalid length. [ 194.123787][ T6391] team0: Port device vlan0 added [ 194.250648][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.256979][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.316036][ T6402] netlink: 'syz.4.692': attribute type 10 has an invalid length. [ 194.390112][ T6402] team0: Port device dummy0 added [ 195.016420][ T6437] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 195.040811][ T6438] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 195.075608][ T6438] netlink: 'syz.0.708': attribute type 4 has an invalid length. [ 195.091888][ T6438] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.708'. [ 195.258366][ T6446] netlink: 'syz.2.711': attribute type 1 has an invalid length. [ 195.291461][ T6446] netlink: 'syz.2.711': attribute type 1 has an invalid length. [ 195.715778][ T6469] loop1: detected capacity change from 0 to 512 [ 195.789838][ T6469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.863353][ T6475] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 195.909696][ T6469] EXT4-fs (loop1): 1 orphan inode deleted [ 195.918064][ T6469] EXT4-fs (loop1): 1 truncate cleaned up [ 195.935936][ T6469] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,bsddf,bsddf,barrier=0x0000000000006d62,. Quota mode: none. [ 195.973897][ T6475] team0: Port device dummy0 added [ 196.143464][ T6487] netlink: 104 bytes leftover after parsing attributes in process `syz.4.725'. [ 197.649527][ T6539] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 198.282172][ T6568] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 198.372791][ T6575] tipc: Enabling of bearer rejected, failed to enable media [ 198.487903][ T6572] device syzkaller0 entered promiscuous mode [ 199.557187][ T6594] device syzkaller0 entered promiscuous mode [ 199.661953][ T6607] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 199.839874][ T6618] tipc: Enabled bearer , priority 0 [ 199.849651][ T6618] device syzkaller0 entered promiscuous mode [ 199.936110][ T6618] tipc: Resetting bearer [ 199.969664][ T6617] tipc: Resetting bearer [ 200.055620][ T6617] tipc: Disabling bearer [ 200.673332][ T6625] tipc: Enabled bearer , priority 0 [ 200.786813][ T6624] device syzkaller0 entered promiscuous mode [ 200.811936][ T6623] tipc: Resetting bearer [ 200.867042][ T6623] tipc: Disabling bearer [ 200.917506][ T6638] unsupported nla_type 52263 [ 201.009572][ T6642] netlink: 'syz.1.773': attribute type 10 has an invalid length. [ 201.268264][ T6649] device syzkaller0 entered promiscuous mode [ 201.421828][ T6664] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 201.567156][ T6669] 9pnet: p9_fd_create_tcp (6669): problem connecting socket to 127.0.0.1 [ 202.102776][ T6674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.788'. [ 202.497753][ T6688] tipc: Enabled bearer , priority 0 [ 202.594352][ T6693] device syzkaller0 entered promiscuous mode [ 202.684639][ T6688] tipc: Resetting bearer [ 202.781402][ T6695] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 202.795816][ T6687] tipc: Resetting bearer [ 202.827823][ T6687] tipc: Disabling bearer [ 202.986341][ T6702] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 203.062856][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 203.155560][ T6705] device syzkaller0 entered promiscuous mode [ 203.617079][ T6736] loop3: detected capacity change from 0 to 128 [ 203.675945][ T6736] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^¯°cwiet" or missing value [ 204.229685][ T6755] device syzkaller0 entered promiscuous mode [ 204.622062][ T6767] netlink: 'syz.3.826': attribute type 10 has an invalid length. [ 204.678482][ T4201] Bluetooth: hci4: link tx timeout [ 204.684573][ T4201] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 204.692829][ T4201] Bluetooth: hci4: link tx timeout [ 204.698275][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.402751][ T6801] netlink: 'syz.1.842': attribute type 10 has an invalid length. [ 205.462067][ T6805] lo speed is unknown, defaulting to 1000 [ 205.505333][ T6805] lo speed is unknown, defaulting to 1000 [ 205.688961][ T6814] 9pnet: p9_fd_create_tcp (6814): problem connecting socket to 127.0.0.1 [ 206.072604][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.310453][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.462164][ T6811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.587003][ T6805] lo speed is unknown, defaulting to 1000 [ 206.654774][ T6835] netlink: 'syz.1.851': attribute type 13 has an invalid length. [ 206.710131][ T4541] Bluetooth: hci4: command 0x0406 tx timeout [ 207.125983][ T6805] infiniband syz0: set active [ 207.179966][ T6834] Set syz1 is full, maxelem 6117 reached [ 207.186785][ T6805] infiniband syz0: added lo [ 207.219733][ T6805] infiniband syz0: Couldn't open port 1 [ 207.271032][ T6805] RDS/IB: syz0: added [ 207.276652][ T6805] smc: adding ib device syz0 with port count 1 [ 207.283391][ T6805] smc: ib device syz0 port 1 has pnetid [ 207.450771][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.458211][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.895526][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.948559][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.133694][ T6835] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.142918][ T6835] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.152554][ T6835] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.161956][ T6835] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.304944][ T6839] tipc: Enabled bearer , priority 0 [ 208.394247][ T7] lo speed is unknown, defaulting to 1000 [ 208.417166][ T6839] tipc: Disabling bearer [ 208.429663][ T6835] syz.1.851 (6835) used greatest stack depth: 19840 bytes left [ 208.451852][ T6842] lo speed is unknown, defaulting to 1000 [ 208.525705][ T6860] device syzkaller0 entered promiscuous mode [ 208.552245][ T6870] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 208.568868][ T6805] lo speed is unknown, defaulting to 1000 [ 208.595687][ T6868] tipc: Enabled bearer , priority 0 [ 208.651344][ T6865] device syzkaller0 entered promiscuous mode [ 208.686119][ T6865] tipc: Resetting bearer [ 208.694389][ T6862] tipc: Resetting bearer [ 208.713571][ T6862] tipc: Disabling bearer [ 208.722484][ T6805] lo speed is unknown, defaulting to 1000 [ 208.928219][ T6878] device syzkaller0 entered promiscuous mode [ 208.979049][ T6805] lo speed is unknown, defaulting to 1000 [ 209.206896][ T6805] lo speed is unknown, defaulting to 1000 [ 209.434900][ T6805] lo speed is unknown, defaulting to 1000 [ 209.488117][ T6897] tipc: Enabled bearer , priority 0 [ 209.496169][ T6897] device syzkaller0 entered promiscuous mode [ 209.530977][ T6897] tipc: Resetting bearer [ 209.539425][ T6896] tipc: Resetting bearer [ 209.574454][ T6896] tipc: Disabling bearer [ 209.612717][ T6805] lo speed is unknown, defaulting to 1000 [ 210.027525][ T6912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.360216][ T6927] 9pnet: p9_fd_create_tcp (6927): problem connecting socket to 127.0.0.1 [ 211.510568][ T6945] netlink: 'syz.0.890': attribute type 1 has an invalid length. [ 211.901010][ T6957] tipc: Enabled bearer , priority 0 [ 211.928765][ T6957] device syzkaller0 entered promiscuous mode [ 211.987016][ T6957] tipc: Resetting bearer [ 212.030282][ T6956] tipc: Resetting bearer [ 212.077366][ T6956] tipc: Disabling bearer [ 212.302273][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 212.416346][ T6977] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 212.441026][ T6977] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 213.127246][ T7004] netlink: 'syz.1.917': attribute type 10 has an invalid length. [ 213.878195][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 214.162154][ T7016] device syzkaller0 entered promiscuous mode [ 214.395979][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'. [ 214.584831][ T7025] device syzkaller0 entered promiscuous mode [ 215.299382][ T7049] device syzkaller0 entered promiscuous mode [ 215.463897][ T7059] device syzkaller0 entered promiscuous mode [ 215.576473][ T7061] device ip6gretap1 entered promiscuous mode [ 216.067494][ T7054] 9pnet: p9_fd_create_tcp (7054): problem connecting socket to 127.0.0.1 [ 216.449353][ T7086] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 216.544773][ T7088] netlink: 'syz.2.952': attribute type 10 has an invalid length. [ 216.899356][ T7093] device syzkaller0 entered promiscuous mode [ 216.948729][ T7097] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 217.307063][ T7105] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 217.354301][ T7109] device ip6gre2 entered promiscuous mode [ 217.403161][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 217.575063][ T7120] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 217.724839][ T7125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.966'. [ 217.764174][ T7129] device wg2 entered promiscuous mode [ 217.781013][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 217.800564][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 217.925002][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.972'. [ 218.041764][ T7138] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 218.705421][ T7174] openvswitch: netlink: Message has 8 unknown bytes. [ 218.800781][ T7172] device syzkaller0 entered promiscuous mode [ 218.822367][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 218.847698][ T7177] device bridge_slave_1 left promiscuous mode [ 218.876800][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.919743][ T7177] device bridge_slave_0 left promiscuous mode [ 218.947173][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.096779][ T7181] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 219.108326][ T7183] netlink: 104 bytes leftover after parsing attributes in process `syz.4.991'. [ 219.412445][ T7191] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 219.429413][ T7193] lo speed is unknown, defaulting to 1000 [ 219.545067][ T7200] netlink: 'syz.0.999': attribute type 6 has an invalid length. [ 219.802748][ T7207] lo speed is unknown, defaulting to 1000 [ 220.758247][ T7219] device syzkaller0 entered promiscuous mode [ 221.007242][ T7224] 9pnet: p9_fd_create_tcp (7224): problem connecting socket to 127.0.0.1 [ 221.741177][ T7256] tipc: Enabled bearer , priority 0 [ 221.759469][ T7256] device syzkaller0 entered promiscuous mode [ 221.848530][ T7262] tipc: Resetting bearer [ 221.919037][ T7255] tipc: Resetting bearer [ 221.989301][ T7255] tipc: Disabling bearer [ 222.012903][ T7264] 8021q: VLANs not supported on vcan0 [ 222.071039][ T7266] device syzkaller0 entered promiscuous mode [ 222.339057][ T7278] team0: No ports can be present during mode change [ 222.702484][ T7290] device vlan3 entered promiscuous mode [ 222.739381][ T7290] device geneve1 entered promiscuous mode [ 223.067536][ T7300] device syzkaller0 entered promiscuous mode [ 223.110260][ T7310] tipc: Enabled bearer , priority 0 [ 223.132803][ T7304] device syzkaller0 entered promiscuous mode [ 223.256019][ T7304] tipc: Resetting bearer [ 223.313426][ T7301] tipc: Resetting bearer [ 223.365176][ T7301] tipc: Disabling bearer [ 223.594145][ T7326] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 223.983748][ T7342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.169127][ T7342] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.297006][ T7342] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.344508][ T7361] lo speed is unknown, defaulting to 1000 [ 224.430366][ T7342] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.570578][ T7342] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.610518][ T7342] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.677681][ T7342] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.732416][ T7342] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.007820][ T7372] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 225.590854][ T7396] tipc: Enabled bearer , priority 0 [ 225.654194][ T7396] device syzkaller0 entered promiscuous mode [ 225.716109][ T7395] tipc: Resetting bearer [ 225.775150][ T7395] tipc: Disabling bearer [ 225.817914][ T7407] tipc: Enabled bearer , priority 0 [ 225.829166][ T7407] tipc: Resetting bearer [ 225.839661][ T7406] tipc: Disabling bearer [ 226.039920][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1077'. [ 226.554341][ T7434] 9pnet: p9_fd_create_tcp (7434): problem connecting socket to 127.0.0.1 [ 228.062436][ T7473] netlink: 'syz.3.1100': attribute type 1 has an invalid length. [ 228.072261][ T7473] netlink: 'syz.3.1100': attribute type 1 has an invalid length. [ 228.701623][ T7494] tipc: Enabled bearer , priority 0 [ 228.739623][ T7494] device syzkaller0 entered promiscuous mode [ 228.781780][ T7494] tipc: Resetting bearer [ 228.820177][ T7493] tipc: Resetting bearer [ 228.860836][ T7493] tipc: Disabling bearer [ 229.269091][ T7512] 9pnet: p9_fd_create_tcp (7512): problem connecting socket to 127.0.0.1 [ 230.342455][ T7546] loop1: detected capacity change from 0 to 512 [ 230.424510][ T7546] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 230.502156][ T7546] EXT4-fs (loop1): 1 orphan inode deleted [ 230.518109][ T7546] EXT4-fs (loop1): 1 truncate cleaned up [ 230.525836][ T7546] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,bsddf,bsddf,barrier=0x0000000000006d62,. Quota mode: none. [ 230.601152][ T7560] tipc: Enabled bearer , priority 0 [ 230.612698][ T7560] tipc: Resetting bearer [ 230.647567][ T7559] tipc: Disabling bearer [ 230.793100][ T7568] tipc: Enabled bearer , priority 0 [ 230.879752][ T7568] device syzkaller0 entered promiscuous mode [ 230.935546][ T7566] tipc: Resetting bearer [ 230.943707][ T7580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1136'. [ 230.988099][ T7566] tipc: Disabling bearer [ 231.006749][ T7579] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1136'. [ 231.016238][ T7579] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1136'. [ 231.053796][ T7579] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1136'. [ 231.282290][ T7596] netlink: 'syz.4.1142': attribute type 10 has an invalid length. [ 231.444735][ T7604] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 231.486655][ T7604] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 231.526764][ T7607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1147'. [ 231.753616][ T7620] ================================================================== [ 231.762262][ T7620] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640 [ 231.769519][ T7620] Read of size 4 at addr ffff8880251a5738 by task syz.0.1153/7620 [ 231.777359][ T7620] [ 231.779728][ T7620] CPU: 1 PID: 7620 Comm: syz.0.1153 Not tainted syzkaller #0 [ 231.787130][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.797313][ T7620] Call Trace: [ 231.800608][ T7620] [ 231.803549][ T7620] dump_stack_lvl+0x168/0x230 [ 231.808337][ T7620] ? show_regs_print_info+0x20/0x20 [ 231.813657][ T7620] ? _printk+0xcc/0x110 [ 231.817835][ T7620] ? ax25_fillin_cb+0x459/0x640 [ 231.822707][ T7620] ? load_image+0x3b0/0x3b0 [ 231.827269][ T7620] print_address_description+0x60/0x2d0 [ 231.832838][ T7620] ? ax25_fillin_cb+0x459/0x640 [ 231.837701][ T7620] kasan_report+0xdf/0x130 [ 231.842132][ T7620] ? ax25_fillin_cb+0x459/0x640 [ 231.847084][ T7620] ax25_fillin_cb+0x459/0x640 [ 231.851806][ T7620] ax25_setsockopt+0x8a2/0xa40 [ 231.856600][ T7620] ? ax25_shutdown+0x10/0x10 [ 231.861253][ T7620] ? aa_sock_opt_perm+0x74/0x100 [ 231.866204][ T7620] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 231.871760][ T7620] ? security_socket_setsockopt+0x7a/0xa0 [ 231.877487][ T7620] ? ax25_shutdown+0x10/0x10 [ 231.882172][ T7620] __sys_setsockopt+0x2bf/0x3d0 [ 231.887037][ T7620] __x64_sys_setsockopt+0xb1/0xc0 [ 231.892081][ T7620] do_syscall_64+0x4c/0xa0 [ 231.896502][ T7620] ? clear_bhb_loop+0x30/0x80 [ 231.901185][ T7620] ? clear_bhb_loop+0x30/0x80 [ 231.905879][ T7620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.911792][ T7620] RIP: 0033:0x7f64ac06dec9 [ 231.916250][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.935873][ T7620] RSP: 002b:00007f64aa2d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 231.944301][ T7620] RAX: ffffffffffffffda RBX: 00007f64ac2c4fa0 RCX: 00007f64ac06dec9 [ 231.952281][ T7620] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000005 [ 231.960262][ T7620] RBP: 00007f64ac0f0f91 R08: 0000000000000010 R09: 0000000000000000 [ 231.968278][ T7620] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 231.976275][ T7620] R13: 00007f64ac2c5038 R14: 00007f64ac2c4fa0 R15: 00007ffffc4ea798 [ 231.984273][ T7620] [ 231.987297][ T7620] [ 231.989653][ T7620] Allocated by task 6077: [ 231.993979][ T7620] __kasan_kmalloc+0xb5/0xf0 [ 231.998582][ T7620] ax25_dev_device_up+0x50/0x580 [ 232.003524][ T7620] ax25_device_event+0x483/0x4f0 [ 232.008468][ T7620] raw_notifier_call_chain+0xcb/0x160 [ 232.013980][ T7620] __dev_notify_flags+0x178/0x2d0 [ 232.019044][ T7620] dev_change_flags+0xe3/0x1a0 [ 232.023821][ T7620] dev_ifsioc+0x147/0xe70 [ 232.028168][ T7620] dev_ioctl+0x55f/0xe50 [ 232.032419][ T7620] sock_do_ioctl+0x222/0x2f0 [ 232.037017][ T7620] sock_ioctl+0x4ed/0x6e0 [ 232.041360][ T7620] __se_sys_ioctl+0xfa/0x170 [ 232.045955][ T7620] do_syscall_64+0x4c/0xa0 [ 232.050402][ T7620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.056301][ T7620] [ 232.058626][ T7620] Freed by task 7395: [ 232.062604][ T7620] kasan_set_track+0x4b/0x70 [ 232.067209][ T7620] kasan_set_free_info+0x1f/0x40 [ 232.072154][ T7620] ____kasan_slab_free+0xd5/0x110 [ 232.077200][ T7620] slab_free_freelist_hook+0xea/0x170 [ 232.082631][ T7620] kfree+0xef/0x2a0 [ 232.086551][ T7620] ax25_release+0x661/0x870 [ 232.091067][ T7620] sock_close+0xd5/0x240 [ 232.095400][ T7620] __fput+0x234/0x930 [ 232.099388][ T7620] task_work_run+0x125/0x1a0 [ 232.104071][ T7620] exit_to_user_mode_loop+0x10f/0x130 [ 232.109452][ T7620] exit_to_user_mode_prepare+0xee/0x180 [ 232.115009][ T7620] syscall_exit_to_user_mode+0x16/0x40 [ 232.120567][ T7620] do_syscall_64+0x58/0xa0 [ 232.125000][ T7620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.130893][ T7620] [ 232.133217][ T7620] Last potentially related work creation: [ 232.138941][ T7620] kasan_save_stack+0x35/0x60 [ 232.143622][ T7620] kasan_record_aux_stack+0xb8/0x100 [ 232.148911][ T7620] insert_work+0x54/0x3d0 [ 232.153241][ T7620] __queue_work+0x9c5/0xd50 [ 232.157919][ T7620] queue_work_on+0x11d/0x1d0 [ 232.162508][ T7620] netdevice_event+0x803/0x900 [ 232.167377][ T7620] raw_notifier_call_chain+0xcb/0x160 [ 232.172795][ T7620] __dev_notify_flags+0x178/0x2d0 [ 232.177834][ T7620] rtnl_configure_link+0x21f/0x320 [ 232.182974][ T7620] rtnl_newlink+0x1377/0x17d0 [ 232.187665][ T7620] rtnetlink_rcv_msg+0x9b9/0xe60 [ 232.192605][ T7620] netlink_rcv_skb+0x1e0/0x430 [ 232.197389][ T7620] netlink_unicast+0x774/0x920 [ 232.202154][ T7620] netlink_sendmsg+0x8ab/0xbc0 [ 232.206923][ T7620] ____sys_sendmsg+0x5a2/0x8c0 [ 232.211695][ T7620] ___sys_sendmsg+0x1f0/0x260 [ 232.216384][ T7620] __se_sys_sendmsg+0x190/0x250 [ 232.221235][ T7620] do_syscall_64+0x4c/0xa0 [ 232.225653][ T7620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.231638][ T7620] [ 232.233960][ T7620] Second to last potentially related work creation: [ 232.240540][ T7620] kasan_save_stack+0x35/0x60 [ 232.245225][ T7620] kasan_record_aux_stack+0xb8/0x100 [ 232.250513][ T7620] insert_work+0x54/0x3d0 [ 232.254852][ T7620] __queue_work+0x9c5/0xd50 [ 232.259361][ T7620] queue_work_on+0x11d/0x1d0 [ 232.263961][ T7620] netdevice_event+0x803/0x900 [ 232.268728][ T7620] raw_notifier_call_chain+0xcb/0x160 [ 232.274108][ T7620] dev_open+0xf4/0x170 [ 232.278181][ T7620] bond_enslave+0x1095/0x3a40 [ 232.282860][ T7620] do_setlink+0xd84/0x3980 [ 232.287276][ T7620] rtnl_newlink+0x1419/0x17d0 [ 232.291954][ T7620] rtnetlink_rcv_msg+0x9b9/0xe60 [ 232.296891][ T7620] netlink_rcv_skb+0x1e0/0x430 [ 232.301659][ T7620] netlink_unicast+0x774/0x920 [ 232.306419][ T7620] netlink_sendmsg+0x8ab/0xbc0 [ 232.311185][ T7620] ____sys_sendmsg+0x5a2/0x8c0 [ 232.315947][ T7620] ___sys_sendmsg+0x1f0/0x260 [ 232.320622][ T7620] __se_sys_sendmsg+0x190/0x250 [ 232.325469][ T7620] do_syscall_64+0x4c/0xa0 [ 232.329883][ T7620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.335787][ T7620] [ 232.338113][ T7620] The buggy address belongs to the object at ffff8880251a5700 [ 232.338113][ T7620] which belongs to the cache kmalloc-192 of size 192 [ 232.352154][ T7620] The buggy address is located 56 bytes inside of [ 232.352154][ T7620] 192-byte region [ffff8880251a5700, ffff8880251a57c0) [ 232.365364][ T7620] The buggy address belongs to the page: [ 232.371001][ T7620] page:ffffea0000946940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x251a5 [ 232.381150][ T7620] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 232.388696][ T7620] raw: 00fff00000000200 ffffea0000932880 0000000300000003 ffff888016841a00 [ 232.397281][ T7620] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 232.405864][ T7620] page dumped because: kasan: bad access detected [ 232.412275][ T7620] page_owner tracks the page as allocated [ 232.417986][ T7620] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 23, ts 13776974404, free_ts 0 [ 232.432831][ T7620] get_page_from_freelist+0x1b77/0x1c60 [ 232.438380][ T7620] __alloc_pages+0x1e1/0x470 [ 232.442967][ T7620] new_slab+0xc0/0x4b0 [ 232.447033][ T7620] ___slab_alloc+0x81e/0xdf0 [ 232.451615][ T7620] __kmalloc+0x1cd/0x330 [ 232.455851][ T7620] usb_alloc_urb+0x3f/0x140 [ 232.460353][ T7620] usb_control_msg+0x115/0x3e0 [ 232.465116][ T7620] hub_ext_port_status+0x103/0x6d0 [ 232.470231][ T7620] hub_activate+0x6e9/0x1a30 [ 232.474822][ T7620] process_one_work+0x863/0x1000 [ 232.479762][ T7620] worker_thread+0xaa8/0x12a0 [ 232.484438][ T7620] kthread+0x436/0x520 [ 232.488519][ T7620] ret_from_fork+0x1f/0x30 [ 232.492947][ T7620] page_owner free stack trace missing [ 232.498312][ T7620] [ 232.500630][ T7620] Memory state around the buggy address: [ 232.506254][ T7620] ffff8880251a5600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.514314][ T7620] ffff8880251a5680: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 232.522371][ T7620] >ffff8880251a5700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.530425][ T7620] ^ [ 232.536309][ T7620] ffff8880251a5780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 232.544369][ T7620] ffff8880251a5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.552427][ T7620] ================================================================== [ 232.560477][ T7620] Disabling lock debugging due to kernel taint [ 232.571869][ T7620] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 232.579129][ T7620] CPU: 0 PID: 7620 Comm: syz.0.1153 Tainted: G B syzkaller #0 [ 232.587921][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.597999][ T7620] Call Trace: [ 232.601297][ T7620] [ 232.604247][ T7620] dump_stack_lvl+0x168/0x230 [ 232.608951][ T7620] ? show_regs_print_info+0x20/0x20 [ 232.614172][ T7620] ? load_image+0x3b0/0x3b0 [ 232.618702][ T7620] panic+0x2c9/0x7f0 [ 232.622711][ T7620] ? bpf_jit_dump+0xd0/0xd0 [ 232.627242][ T7620] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 232.633149][ T7620] ? _raw_spin_unlock+0x40/0x40 [ 232.638016][ T7620] ? print_memory_metadata+0x314/0x400 [ 232.643497][ T7620] ? ax25_fillin_cb+0x459/0x640 [ 232.648370][ T7620] check_panic_on_warn+0x80/0xa0 [ 232.653324][ T7620] ? ax25_fillin_cb+0x459/0x640 [ 232.658288][ T7620] end_report+0x6d/0xf0 [ 232.662464][ T7620] kasan_report+0x102/0x130 [ 232.666990][ T7620] ? ax25_fillin_cb+0x459/0x640 [ 232.671967][ T7620] ax25_fillin_cb+0x459/0x640 [ 232.676674][ T7620] ax25_setsockopt+0x8a2/0xa40 [ 232.681468][ T7620] ? ax25_shutdown+0x10/0x10 [ 232.686080][ T7620] ? aa_sock_opt_perm+0x74/0x100 [ 232.691035][ T7620] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 232.696604][ T7620] ? security_socket_setsockopt+0x7a/0xa0 [ 232.702342][ T7620] ? ax25_shutdown+0x10/0x10 [ 232.706950][ T7620] __sys_setsockopt+0x2bf/0x3d0 [ 232.711825][ T7620] __x64_sys_setsockopt+0xb1/0xc0 [ 232.716877][ T7620] do_syscall_64+0x4c/0xa0 [ 232.721309][ T7620] ? clear_bhb_loop+0x30/0x80 [ 232.726006][ T7620] ? clear_bhb_loop+0x30/0x80 [ 232.730791][ T7620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.736701][ T7620] RIP: 0033:0x7f64ac06dec9 [ 232.741137][ T7620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.760790][ T7620] RSP: 002b:00007f64aa2d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.769223][ T7620] RAX: ffffffffffffffda RBX: 00007f64ac2c4fa0 RCX: 00007f64ac06dec9 [ 232.777219][ T7620] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000005 [ 232.785214][ T7620] RBP: 00007f64ac0f0f91 R08: 0000000000000010 R09: 0000000000000000 [ 232.793213][ T7620] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 232.801206][ T7620] R13: 00007f64ac2c5038 R14: 00007f64ac2c4fa0 R15: 00007ffffc4ea798 [ 232.809217][ T7620] [ 232.812557][ T7620] Kernel Offset: disabled [ 232.816902][ T7620] Rebooting in 86400 seconds..