last executing test programs: 3m31.914493856s ago: executing program 2 (id=234): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none, 0x1}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r3, r3, 0x4, 0x7, &(0x7f00000001c0)="afe5c64e4a103f", 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 3m31.853283889s ago: executing program 2 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) setuid(0xee01) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffeff024}, {0x6, 0x0, 0xff}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3m27.551896447s ago: executing program 2 (id=240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x1400c883}, 0x4000084) 3m21.025236673s ago: executing program 2 (id=259): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000140)) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpid() sched_setaffinity(r4, 0x1, &(0x7f0000000180)=0x7) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 3m20.073063756s ago: executing program 2 (id=262): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r1 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) socket$netlink(0x10, 0x3, 0x0) 3m19.303796953s ago: executing program 2 (id=270): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m3.580482687s ago: executing program 32 (id=270): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 12.624159094s ago: executing program 4 (id=834): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c) syz_open_dev$sndpcmc(&(0x7f0000001180), 0x0, 0x2100) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'rr\x00', 0x23, 0x81, 0x5}, {@multicast1, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905"], 0x0) r4 = accept4$x25(r2, 0x0, &(0x7f0000000080), 0x800) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f00000000c0)={0x36, "dffe64f0fc3301cf49fd59c032eef7c468acc444d09ff681dc338180146a18156d842f4def9050cc9a75bafeb07fda227edd9ac56c2fcbe4117dc2f1a45970ff22b9f87dfa4bede767c60a577aad36efcda599eac8bc13ce81bc0dc20d83d718083e1aca0eaeb0f4900f854f2705e43ac6c06f8e73385b537c2d06aa631d5bd7"}) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 12.547631856s ago: executing program 5 (id=835): bpf$PROG_LOAD(0x5, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r0, r0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x0) fchdir(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x5}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xa2) 10.529534776s ago: executing program 5 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 9.653512547s ago: executing program 4 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x2, 0x7e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000", @ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xff92, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d, 0x0, 0xffffffffffffffff, 0xfe45}, 0x23) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000300)=""/138) 8.67873235s ago: executing program 5 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0xf0, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xbc, 0x2, [@TCA_MATCHALL_ACT={0xb8, 0x2, [@m_gact={0xb4, 0x1, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0x7, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf3b, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x1000, 0x5, 0xa053, 0x1}}, @TCA_GACT_PARMS={0xfffffd89, 0x2, {0x80000001, 0x3, 0x5, 0x7, 0xfe68b8da}}, @TCA_GACT_PARMS={0x18, 0x2, {0x118, 0x9, 0x1, 0xfffffff2, 0x1ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x31, 0xffffffffefffffff, 0xc0f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 8.282201814s ago: executing program 5 (id=854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff85}, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x23) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000010340)={[{@dioread_nolock}, {@orlov}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x40) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000500)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x9) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x8000, 0x638}) 7.985030454s ago: executing program 0 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 6.815963594s ago: executing program 0 (id=856): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 5.594062607s ago: executing program 3 (id=859): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 5.423462743s ago: executing program 5 (id=860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x70bd29, 0x0, 0xa, 0x3, 0x0, 0x2f}, [@algo_auth={0x48, 0x1, {{'wp256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff, 0x70bd28}}]}, 0x154}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x8040) 5.423327263s ago: executing program 3 (id=861): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a300000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) 5.379479844s ago: executing program 0 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 4.409048378s ago: executing program 0 (id=863): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{0xb000, 0xffffffff, 0x8, 0x40, 0x8f, 0x3, 0x9, 0x80, 0x7, 0x80, 0x7f, 0x5}, {0x60000, 0x7000, 0xf, 0x7, 0x5, 0xae, 0x8, 0x80, 0x7, 0x9, 0x58, 0x6}, {0x41000, 0x0, 0x4, 0xd, 0x64, 0x6, 0xea, 0x40, 0x3, 0x9, 0x0, 0x81}, {0x58000, 0xb000, 0x0, 0x95, 0x5, 0x5, 0xb, 0xff, 0x28, 0x6, 0x7, 0x2}, {0xeeee0000, 0x200000, 0xe, 0x2, 0x5, 0x5, 0xff, 0x7, 0x40, 0x8, 0x6, 0x1}, {0xdddd1000, 0xfec00000, 0x9, 0x9, 0x1, 0x1, 0x4, 0x80, 0x1c, 0x2, 0x10, 0xf4}, {0x10000, 0xa000, 0xf, 0x87, 0xfd, 0x9, 0xd, 0xff, 0x58, 0x1, 0x9b, 0x4}, {0xa000, 0x2, 0xf, 0x8, 0xff, 0x8, 0x0, 0x7, 0x6, 0x9, 0x4, 0xf9}, {0x1}, {0x41000, 0x1}, 0x8, 0x0, 0xc000, 0x416084, 0x6, 0x6101, 0x0, [0x3, 0x3, 0x71, 0x2]}) syz_kvm_add_vcpu$x86(0x0, 0x0) gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000600)="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", 0xb3c, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 4.35400464s ago: executing program 1 (id=864): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) tkill(0x0, 0xd) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 4.321109171s ago: executing program 3 (id=865): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x705000, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000380)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000080)=0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 4.309204081s ago: executing program 4 (id=866): quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) wait4(0x0, 0x0, 0x4000000a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fanotify_init(0x200, 0x400) ioprio_set$pid(0x2, 0x0, 0x0) 4.221964755s ago: executing program 1 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.209779565s ago: executing program 0 (id=868): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x65, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xfffe, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.947932994s ago: executing program 4 (id=869): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getdents64(r1, &(0x7f0000001f80)=""/4108, 0x100c) bind$tipc(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x101c, 0x6, 0x9, 0x9fb4, 0xd, 0x1}) bind$tipc(r0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 3.218419719s ago: executing program 1 (id=871): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x404c084) mq_unlink(&(0x7f0000000340)='eth0\x00') 3.151417291s ago: executing program 0 (id=872): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket(0x14, 0x2, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 3.090152863s ago: executing program 5 (id=873): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac030000000000008500000033"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r3, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000340)=ANY=[], 0x0) 3.078436824s ago: executing program 3 (id=874): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 2.969609868s ago: executing program 1 (id=875): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x114, 0x0, 0x0, {{@in6=@local, @in6=@mcast1}}}, 0x50}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x8, 0x8, 0x2, 0x4002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed203e, &(0x7f0000000440)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@noacl}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@noload}]}, 0xfe, 0x470, &(0x7f00000004c0)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x120002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000940)}, 0x10) 1.806162728s ago: executing program 1 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.798151518s ago: executing program 4 (id=877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x50) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 730.695946ms ago: executing program 1 (id=878): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x15, 0x3, 'wrr\x00', 0x1, 0x6, 0x48}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 201.580274ms ago: executing program 4 (id=879): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000040)=0x5) 196.367914ms ago: executing program 3 (id=880): quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) wait4(0x0, 0x0, 0x4000000a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fanotify_init(0x200, 0x400) ioprio_set$pid(0x2, 0x0, 0x0) 0s ago: executing program 3 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000900000000000300000000000200", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c61766500000000580005800500190003000000050005000000000006001f00d5000000050007000000000005000a00000000000500210001000000040018000500060001000000060002000100000008002200", @ANYRES32, @ANYBLOB="0500010005000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e24, 0x8, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0xdb, r5, 0xffffffffffffffff}, {0x3, 0x1, 0x2, 0x5, 0x5, 0x80000000, 0x2, 0x6}, {0x456534d3, 0x0, 0x4, 0x5}, 0x7fffffff, 0x6e6bb1, 0x0, 0x0, 0x3, 0x3}, {{@in6=@local, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x8001, 0x0, 0x3, 0x8, 0x7ed, 0x1ff, 0x8}}, 0xe8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000f1f6c9f3c1f39ad4d7112af0cb8b56409d794bed7966ee9e841f609cc37b4e9c2047284f872c114c9f01e9fa160e52f2eb3eb63ae3e2fc2415124d2a66010efc28261d5ef862b7b4b70f80a8df2b", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000500040001000000050002000a000000"], 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. syzkaller login: [ 56.765140][ T4170] cgroup: Unknown subsys name 'net' [ 56.909662][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.346615][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.744240][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 59.774270][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 59.813731][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 59.878394][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 59.910304][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 59.958366][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.966220][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.974306][ T4191] device bridge_slave_0 entered promiscuous mode [ 60.016053][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.023260][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.031061][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.067138][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.074789][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.082566][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.090457][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.098576][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.107053][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.130343][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.137767][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.146127][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.153264][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.160422][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.168802][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.186632][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.211646][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.219081][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.227599][ T4189] device bridge_slave_0 entered promiscuous mode [ 60.236737][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.266937][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.276114][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.284425][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.292578][ T4189] device bridge_slave_1 entered promiscuous mode [ 60.308357][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.320064][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.329316][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.336545][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.344730][ T4193] device bridge_slave_0 entered promiscuous mode [ 60.358936][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.366035][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.374232][ T4193] device bridge_slave_1 entered promiscuous mode [ 60.389356][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.426164][ T4191] team0: Port device team_slave_0 added [ 60.452064][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.463011][ T4191] team0: Port device team_slave_1 added [ 60.477315][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.489127][ T4183] team0: Port device team_slave_0 added [ 60.497904][ T4187] team0: Port device team_slave_0 added [ 60.505561][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.523398][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.533177][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.540135][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.566336][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.579858][ T4183] team0: Port device team_slave_1 added [ 60.586834][ T4187] team0: Port device team_slave_1 added [ 60.611123][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.618440][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.644864][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.694601][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.701633][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.727758][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.739536][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.746870][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.773046][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.786944][ T4189] team0: Port device team_slave_0 added [ 60.796553][ T4193] team0: Port device team_slave_0 added [ 60.803886][ T4189] team0: Port device team_slave_1 added [ 60.812010][ T4193] team0: Port device team_slave_1 added [ 60.818348][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.825619][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.852193][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.887613][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.894809][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.921799][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.971529][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.978820][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.005173][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.024766][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.031762][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.058414][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.074167][ T4191] device hsr_slave_0 entered promiscuous mode [ 61.080940][ T4191] device hsr_slave_1 entered promiscuous mode [ 61.089721][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.096767][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.123790][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.146246][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.153415][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.179499][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.212334][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.219510][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.226561][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.234753][ T4183] Cannot create hsr debugfs directory [ 61.256717][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.263810][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.270425][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.278356][ T4187] Cannot create hsr debugfs directory [ 61.313938][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 61.338945][ T4189] device hsr_slave_0 entered promiscuous mode [ 61.345832][ T4189] device hsr_slave_1 entered promiscuous mode [ 61.352609][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.360382][ T4189] Cannot create hsr debugfs directory [ 61.377263][ T4193] device hsr_slave_0 entered promiscuous mode [ 61.383614][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 61.390213][ T4193] device hsr_slave_1 entered promiscuous mode [ 61.398257][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.406071][ T4193] Cannot create hsr debugfs directory [ 61.463458][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 61.469597][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 61.557291][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 61.723610][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.738915][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.752154][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.762242][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.812674][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.827150][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.841827][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.856269][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.917881][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.927678][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.962718][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.972111][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.008844][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.024554][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.045579][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.052499][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.078211][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.087942][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.096150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.106668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.121947][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.130192][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.150737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.158894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.167705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.176890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.186526][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.193879][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.202495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.211914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.220570][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.227740][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.238050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.272326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.281674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.294050][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.301224][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.311460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.320795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.346385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.355237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.365264][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.372432][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.380990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.390110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.401137][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.425690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.436633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.445825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.460412][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.469598][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.479300][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.488316][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.521794][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.530181][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.541780][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.550327][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.561296][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.570469][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.579575][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.588862][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.597970][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.609652][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.619126][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.630405][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.651896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.667377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.681167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.695521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.712338][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.735131][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.760053][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.774493][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.800323][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.853313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.862777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.873319][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.880413][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.888833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.898753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.909012][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.916159][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.925392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.964456][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.980233][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.989169][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.998667][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.010575][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.025386][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.054126][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.063857][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.072546][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.095216][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.110087][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.134161][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.142136][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.150873][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.160952][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.172832][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.182476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.191940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.206052][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.218761][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.234705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.243860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.252429][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.259545][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.270618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.297195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.307953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.317636][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.324751][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.334293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.344639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.359906][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.373841][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.386248][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 63.395229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.403174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.411584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.422419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.430459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.440359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.449370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.458917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.463683][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 63.487320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.500694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.509854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.519419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.529388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.538178][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.545348][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.553868][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 63.560074][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 63.585465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.595837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.605766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.615190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.623470][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 63.631628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.642124][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.649258][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.671450][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.685637][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.710667][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.720426][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.730850][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.742114][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.752844][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.761791][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.770765][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.779737][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.789199][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.797634][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.841580][ T4191] device veth0_vlan entered promiscuous mode [ 63.857311][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.874514][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.883417][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.892178][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.904872][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.913580][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.922648][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.931528][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.940182][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.947917][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.955725][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.967537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.976112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.987119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.995766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.009597][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.024565][ T4191] device veth1_vlan entered promiscuous mode [ 64.053506][ T4193] device veth0_vlan entered promiscuous mode [ 64.118495][ T4193] device veth1_vlan entered promiscuous mode [ 64.167193][ T4191] device veth0_macvtap entered promiscuous mode [ 64.182784][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.192596][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.211023][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.225235][ T4191] device veth1_macvtap entered promiscuous mode [ 64.244313][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.252866][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.266520][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.281032][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.297873][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.311989][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.327183][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.364640][ T4193] device veth0_macvtap entered promiscuous mode [ 64.372659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.382600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.391797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.425167][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.446589][ T4193] device veth1_macvtap entered promiscuous mode [ 64.456514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.472727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.482742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.497345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.506133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.513874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.522700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.540920][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.551289][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.560589][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.570145][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.579098][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.602285][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.613716][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.626055][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.639595][ T4187] device veth0_vlan entered promiscuous mode [ 64.652837][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.661645][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.670765][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.680522][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.689740][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.698250][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.710667][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.721307][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.733786][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.766297][ T4187] device veth1_vlan entered promiscuous mode [ 64.773315][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.781427][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.791024][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.800892][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.809849][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.819852][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.829705][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.859439][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.868571][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.880101][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.890336][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.940622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.949365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.960390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.969019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.993312][ T4189] device veth0_vlan entered promiscuous mode [ 65.015713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.028712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.037584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.050317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.058282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.069350][ T4183] device veth0_vlan entered promiscuous mode [ 65.098090][ T4189] device veth1_vlan entered promiscuous mode [ 65.112779][ T4187] device veth0_macvtap entered promiscuous mode [ 65.124944][ T4183] device veth1_vlan entered promiscuous mode [ 65.144042][ T308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.152353][ T308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.169171][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.178798][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.189223][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.197969][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.215937][ T4187] device veth1_macvtap entered promiscuous mode [ 65.277427][ T4183] device veth0_macvtap entered promiscuous mode [ 65.300319][ T308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.302186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.318569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.327757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.331949][ T308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.340474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.352654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.365313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.374424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.389519][ T4183] device veth1_macvtap entered promiscuous mode [ 65.402070][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.412829][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.424111][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.439961][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.442399][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.451588][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.468514][ T4225] Bluetooth: hci0: command 0x040f tx timeout [ 65.476792][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.488663][ T4189] device veth0_macvtap entered promiscuous mode [ 65.504066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.513774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.521990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.530402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.539388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.548210][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 65.559105][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.570640][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.580778][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.591895][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.603478][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.623780][ T4225] Bluetooth: hci3: command 0x040f tx timeout [ 65.631308][ T4225] Bluetooth: hci2: command 0x040f tx timeout [ 65.643256][ T4189] device veth1_macvtap entered promiscuous mode [ 65.652462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.662407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.674085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.687298][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.701724][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.712192][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 65.719136][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.728599][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.746122][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.756731][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.766782][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.777378][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.788828][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.799544][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.810860][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.824828][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.835876][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.845828][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.846627][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.865327][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.874182][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.885659][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.897737][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.911530][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.920550][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.934349][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.961654][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.971093][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.980840][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.008829][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.020515][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.035224][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.045711][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.057615][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 66.066005][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.079229][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.095405][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.107934][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.118588][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.131132][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.159666][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.170382][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.187302][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.187887][ T4261] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.236712][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.270689][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.286722][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.297733][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.307863][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.318519][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.328389][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.338986][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.350234][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.360881][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.375425][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.404805][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.421162][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.457438][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.479862][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.510314][ T4265] loop2: detected capacity change from 0 to 64 [ 66.513538][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.526262][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.662476][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.702197][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.778359][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.793239][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.801236][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.817895][ T4220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.818403][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.849639][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.862644][ T4220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.885769][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.894499][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.902060][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.922354][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.931889][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.948852][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.994198][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.002053][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.021237][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.211021][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 68.253611][ T4222] Bluetooth: hci1: command 0x0419 tx timeout [ 68.292641][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 68.303178][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 68.338862][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 68.766400][ T4299] loop7: detected capacity change from 0 to 7 [ 68.817659][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.828753][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.856473][ T4303] syz.1.12 sent an empty control message without MSG_MORE. [ 68.885923][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.896938][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.952669][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.963623][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 69.070359][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.081387][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.030362][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.041564][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.113820][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.113865][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.115529][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.115564][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.123461][ T4176] ldm_validate_partition_table(): Disk read failed. [ 70.124696][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.124740][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.032825][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.032916][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.173729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.173766][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.173888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.173976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.174026][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.174079][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.174127][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.174187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.174231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.174290][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 71.201695][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.201742][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.299633][ T4176] Dev loop7: unable to read RDB block 0 [ 71.302017][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.302392][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.415988][ T4176] loop7: unable to read partition table [ 71.416670][ T4176] loop7: partition table beyond EOD, truncated [ 71.451339][ T4299] ldm_validate_partition_table(): Disk read failed. [ 71.455187][ T4299] Dev loop7: unable to read RDB block 0 [ 71.458201][ T4299] loop7: unable to read partition table [ 71.458883][ T4299] loop7: partition table beyond EOD, truncated [ 71.460263][ T4299] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 73.620268][ T4354] loop1: detected capacity change from 0 to 1024 [ 73.816340][ T4354] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,grpid,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 74.773349][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.644869][ T4380] loop2: detected capacity change from 0 to 512 [ 75.717716][ T4380] EXT4-fs (loop2): 1 truncate cleaned up [ 76.259390][ T4380] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 76.573075][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 76.886004][ T1108] usb 4-1: device descriptor read/all, error -71 [ 78.052887][ C0] sched: RT throttling activated [ 78.930365][ T4396] ODEBUG: Out of memory. ODEBUG disabled [ 79.085188][ T4376] loop0: detected capacity change from 0 to 32768 [ 79.327753][ T4412] device syzkaller0 entered promiscuous mode [ 79.422327][ T4416] virtio-fs: tag not found [ 80.125592][ T4417] netlink: 'syz.2.35': attribute type 3 has an invalid length. [ 80.251882][ T4417] netlink: 'syz.2.35': attribute type 3 has an invalid length. [ 81.473865][ T2855] cfg80211: failed to load regulatory.db [ 81.739896][ T4432] loop2: detected capacity change from 0 to 16 [ 82.293480][ T4432] ======================================================= [ 82.293480][ T4432] WARNING: The mand mount option has been deprecated and [ 82.293480][ T4432] and is ignored by this kernel. Remove the mand [ 82.293480][ T4432] option from the mount to silence this warning. [ 82.293480][ T4432] ======================================================= [ 82.972483][ T4432] erofs: (device loop2): mounted with root inode @ nid 36. [ 83.343022][ T4268] syzkaller0: tun_net_xmit 76 [ 83.393604][ T4268] syzkaller0: tun_net_xmit 48 [ 83.607231][ T4255] syzkaller0: tun_net_xmit 76 [ 84.108358][ T4268] syzkaller0: tun_net_xmit 76 [ 84.133592][ T4438] syzkaller0: create flow: hash 4182485048 index 1 [ 84.340830][ T4268] syzkaller0: tun_net_xmit 76 [ 84.403326][ T4450] syzkaller0: delete flow: hash 4182485048 index 1 [ 86.335635][ T4455] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 86.847490][ T4457] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 86.895555][ T4457] bond1 (unregistering): Released all slaves [ 87.195857][ T26] audit: type=1804 audit(1775102883.893:2): pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.57" name="file0" dev="hugetlbfs" ino=33290 res=1 errno=0 [ 87.297050][ T26] audit: type=1804 audit(1775102883.963:3): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.57" name="file0" dev="hugetlbfs" ino=33290 res=1 errno=0 [ 91.349876][ T4512] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 91.481587][ T23] hid (null): unknown global tag 0xd [ 91.495841][ T23] hid (null): unknown global tag 0xda [ 91.711590][ T23] hid-generic 0005:0001:0002.0001: collection stack underflow [ 91.719836][ T23] hid-generic 0005:0001:0002.0001: item 0 1 0 12 parsing failed [ 92.814756][ T23] hid-generic: probe of 0005:0001:0002.0001 failed with error -22 [ 92.918619][ T26] audit: type=1800 audit(1775102889.613:4): pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.74" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 93.918710][ T4553] fuse: Bad value for 'fd' [ 96.380656][ T4582] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 97.531190][ T4593] gfs2: gfs2 mount does not exist [ 98.839311][ T4591] process 'syz.0.86' launched './file0' with NULL argv: empty string added [ 98.868447][ T4599] device bridge1 entered promiscuous mode [ 98.876405][ T4602] syz.2.92 uses obsolete (PF_INET,SOCK_PACKET) [ 98.898857][ T4599] team0: Port device bridge1 added [ 98.916210][ T4599] bridge0: port 3(team0) entered blocking state [ 98.923609][ T4599] bridge0: port 3(team0) entered disabled state [ 98.932606][ T4599] device team0 entered promiscuous mode [ 98.938923][ T4599] device team_slave_0 entered promiscuous mode [ 98.951376][ T4599] device team_slave_1 entered promiscuous mode [ 98.972663][ T4604] loop4: detected capacity change from 0 to 2048 [ 98.987654][ T4599] bridge0: port 3(team0) entered blocking state [ 98.994354][ T4599] bridge0: port 3(team0) entered forwarding state [ 99.937997][ T4604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.218408][ T4615] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.355606][ T4621] sctp: failed to load transform for md5: -2 [ 101.900321][ T4643] device macvtap0 entered promiscuous mode [ 101.930976][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 101.948956][ T4646] loop0: detected capacity change from 0 to 4096 [ 101.956951][ T4643] device veth0_macvtap left promiscuous mode [ 102.113900][ T4643] device macvtap0 left promiscuous mode [ 102.117929][ T4653] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.147993][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 103.029968][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 103.120166][ T26] audit: type=1800 audit(1775102899.813:5): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.100" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 103.203244][ T26] audit: type=1800 audit(1775102899.863:6): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.100" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 103.340543][ T26] audit: type=1800 audit(1775102899.863:7): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.100" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 103.433785][ T4674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 103.602936][ T4222] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.768813][ T4682] netlink: 'syz.4.113': attribute type 33 has an invalid length. [ 103.794355][ T4682] netlink: 152 bytes leftover after parsing attributes in process `syz.4.113'. [ 103.893066][ T4222] usb 2-1: Using ep0 maxpacket: 32 [ 104.073520][ T4222] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 104.353479][ T4222] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 104.483770][ T4222] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 104.692372][ T4222] usb 2-1: Product: syz [ 104.696928][ T4222] usb 2-1: Manufacturer: syz [ 104.701588][ T4222] usb 2-1: SerialNumber: syz [ 104.733666][ T4222] usb 2-1: config 0 descriptor?? [ 104.761661][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 104.766930][ T4672] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.685078][ T4222] hub 2-1:0.0: bad descriptor, ignoring hub [ 105.691292][ T4222] hub: probe of 2-1:0.0 failed with error -5 [ 105.756327][ T4702] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.877911][ T4700] loop4: detected capacity change from 0 to 4096 [ 105.971597][ T4706] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.753605][ T4709] loop0: detected capacity change from 0 to 4096 [ 106.819008][ T4714] loop4: detected capacity change from 0 to 512 [ 106.840078][ T4715] Zero length message leads to an empty skb [ 106.866440][ T4709] EXT4-fs (loop0): inline encryption not supported [ 106.875187][ T4714] FAT-fs (loop4): Unrecognized mount option "/dev/comedi5" or missing value [ 106.984270][ T4709] EXT4-fs (loop0): Test dummy encryption mode enabled [ 107.003785][ T4709] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 107.012421][ T4709] System zones: 0-5 [ 107.020862][ T4730] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 107.020862][ T4730] The task syz.4.122 (4730) triggered the difference, watch for misbehavior. [ 107.067973][ T4709] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 108.609839][ T4748] syz.3.132: vmalloc error: size 18446744073709551614, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 108.627396][ T4748] CPU: 1 PID: 4748 Comm: syz.3.132 Not tainted syzkaller #0 [ 108.634984][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.645254][ T4748] Call Trace: [ 108.648737][ T4748] [ 108.651703][ T4748] dump_stack_lvl+0x188/0x250 [ 108.656433][ T4748] ? rcu_lock_release+0x5/0x20 [ 108.661449][ T4748] ? show_regs_print_info+0x20/0x20 [ 108.666716][ T4748] ? load_image+0x400/0x400 [ 108.671273][ T4748] warn_alloc+0x243/0x320 [ 108.675645][ T4748] ? zone_watermark_ok_safe+0x240/0x240 [ 108.676897][ T4755] netlink: 'syz.0.136': attribute type 10 has an invalid length. [ 108.681225][ T4748] ? __mutex_lock_common+0x465/0x2400 [ 108.694398][ T4748] ? verify_lock_unused+0x140/0x140 [ 108.699647][ T4748] __vmalloc_node_range+0x2b1/0x8b0 [ 108.704899][ T4748] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 108.709968][ T4748] vmalloc+0x75/0x80 [ 108.713892][ T4748] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 108.718951][ T4748] dvb_dvr_do_ioctl+0x12a/0x220 [ 108.723839][ T4748] dvb_usercopy+0x191/0x2b0 [ 108.728468][ T4748] ? dvb_dvr_release+0x3d0/0x3d0 [ 108.733462][ T4748] ? dvb_generic_ioctl+0xb0/0xb0 [ 108.738452][ T4748] ? dvb_dvr_poll+0x230/0x230 [ 108.743163][ T4748] dvb_dvr_ioctl+0x25/0x30 [ 108.747604][ T4748] __se_sys_ioctl+0xfa/0x170 [ 108.752340][ T4748] do_syscall_64+0x4c/0xa0 [ 108.756799][ T4748] ? clear_bhb_loop+0x30/0x80 [ 108.761503][ T4748] ? clear_bhb_loop+0x30/0x80 [ 108.766211][ T4748] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.772164][ T4748] RIP: 0033:0x7f785f668819 [ 108.776608][ T4748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.796241][ T4748] RSP: 002b:00007f785d8a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.804704][ T4748] RAX: ffffffffffffffda RBX: 00007f785f8e2090 RCX: 00007f785f668819 [ 108.812774][ T4748] RDX: fffffffffffffffe RSI: 0000000000006f2d RDI: 0000000000000004 [ 108.820779][ T4748] RBP: 00007f785f6fec91 R08: 0000000000000000 R09: 0000000000000000 [ 108.828918][ T4748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.836927][ T4748] R13: 00007f785f8e2128 R14: 00007f785f8e2090 R15: 00007fffbcf5b0e8 [ 108.844964][ T4748] [ 108.855802][ T4748] Mem-Info: [ 108.859342][ T4748] active_anon:268 inactive_anon:5482 isolated_anon:0 [ 108.859342][ T4748] active_file:4734 inactive_file:46512 isolated_file:0 [ 108.859342][ T4748] unevictable:768 dirty:328 writeback:0 [ 108.859342][ T4748] slab_reclaimable:20335 slab_unreclaimable:94125 [ 108.859342][ T4748] mapped:29731 shmem:1653 pagetables:640 bounce:0 [ 108.859342][ T4748] kernel_misc_reclaimable:0 [ 108.859342][ T4748] free:1380010 free_pcp:12169 free_cma:0 [ 108.901301][ T4748] Node 0 active_anon:1040kB inactive_anon:21420kB active_file:18732kB inactive_file:186048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118924kB dirty:1308kB writeback:0kB shmem:4536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10628kB pagetables:2560kB all_unreclaimable? no [ 108.943817][ T4748] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 108.976189][ T4748] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.006833][ T4748] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 109.012655][ T4748] Node 0 DMA32 free:1593832kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1040kB inactive_anon:21420kB active_file:18732kB inactive_file:186048kB unevictable:1536kB writepending:1308kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:39672kB local_pcp:18104kB free_cma:0kB [ 109.050545][ T4748] lowmem_reserve[]: 0 0 0 0 0 [ 109.056041][ T4755] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 109.057294][ T4748] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.092923][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 109.108124][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 109.119599][ T4748] lowmem_reserve[]: 0 0 0 0 0 [ 109.124760][ T4748] Node 1 Normal free:3910808kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9344kB local_pcp:3508kB free_cma:0kB [ 109.155581][ T4748] lowmem_reserve[]: 0 0 0 0 0 [ 109.160447][ T4748] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.174766][ T4748] Node 0 DMA32: 619*4kB (ME) 442*8kB (UME) 282*16kB (UME) 116*32kB (UME) 313*64kB (UME) 85*128kB (UME) 32*256kB (UM) 16*512kB (ME) 6*1024kB (M) 1*2048kB (M) 372*4096kB (M) = 1593436kB [ 109.205459][ T4755] syz.0.136 (4755) used greatest stack depth: 20720 bytes left [ 109.205623][ T4748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 109.243906][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 109.259575][ T4748] Node 1 Normal: 92*4kB (UME) 21*8kB (UME) 16*16kB (UE) 140*32kB (UE) 46*64kB (UE) 9*128kB (UM) 6*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 0*2048kB 951*4096kB (M) = 3910808kB [ 109.311444][ T4748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.326750][ T4748] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 109.349130][ T4748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.391708][ T4748] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.415852][ T4748] 53873 total pagecache pages [ 109.420642][ T4748] 0 pages in swap cache [ 109.430362][ T4748] Swap cache stats: add 0, delete 0, find 0/0 [ 109.437961][ T4748] Free swap = 124996kB [ 109.442207][ T4748] Total swap = 124996kB [ 109.451691][ T4748] 2097051 pages RAM [ 109.457463][ T4748] 0 pages HighMem/MovableOnly [ 109.462302][ T4748] 411490 pages reserved [ 109.474221][ T4748] 0 pages cma reserved [ 110.913819][ T4781] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.298815][ T4800] kvm: pic: non byte write [ 112.345741][ T4800] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42 (84 ns) > initial count (14 ns). Using initial count to start timer. [ 113.934741][ T4829] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.877928][ T4268] usb 2-1: USB disconnect, device number 2 [ 118.926859][ T4866] loop5: detected capacity change from 0 to 7 [ 118.959125][ T4866] Dev loop5: unable to read RDB block 7 [ 118.996264][ T4866] loop5: AHDI p1 p2 p3 [ 119.006600][ T4866] loop5: partition table partially beyond EOD, truncated [ 119.095055][ T4866] loop5: p1 start 1818582900 is beyond EOD, truncated [ 119.168252][ T4866] loop5: p3 start 335544320 is beyond EOD, truncated [ 119.270732][ T4871] atomic_op ffff888076c03198 conn xmit_atomic 0000000000000000 [ 120.263142][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.271896][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.404047][ T4888] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid [ 123.609677][ T4900] xt_l2tp: missing protocol rule (udp|l2tpip) [ 123.829447][ T4852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.555496][ T4852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.166999][ T4852] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.175987][ T4852] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.185286][ T4852] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.194272][ T4852] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.036071][ T4852] syz.1.164 (4852) used greatest stack depth: 20336 bytes left [ 127.161189][ T4929] device ip6gre1 entered promiscuous mode [ 127.200192][ T4226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.210124][ T4944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.223378][ T4226] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.257788][ T4256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.260437][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 127.483942][ T4256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.200236][ T4256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.024496][ T4955] comedi comedi0: Minor 3 could not be opened [ 131.542997][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.760614][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.777217][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.099976][ T5006] [U]  [ 133.302379][ T5020] loop4: detected capacity change from 0 to 4096 [ 133.334610][ T5022] device syzkaller0 entered promiscuous mode [ 133.377457][ T5020] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 133.456269][ T5020] ntfs3: loop4: Inode r=19 is not in use! [ 133.473302][ T5020] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 133.507711][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.518911][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.532589][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.542575][ T5026] device bridge_slave_0 left promiscuous mode [ 133.551412][ T5026] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.581196][ T5026] device bridge_slave_1 left promiscuous mode [ 133.587674][ T5026] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.604372][ T5026] bond0: (slave bond_slave_0): Releasing backup interface [ 133.626190][ T5026] bond0: (slave bond_slave_1): Releasing backup interface [ 133.676170][ T5026] team0: Port device team_slave_0 removed [ 133.713853][ T5026] team0: Port device team_slave_1 removed [ 133.730712][ T5026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.740427][ T5026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.750874][ T5026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.758862][ T5026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.850115][ T5029] team0: Mode changed to "loadbalance" [ 133.891055][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 135.597379][ T5067] loop4: detected capacity change from 0 to 128 [ 136.386040][ T5074] attempt to access beyond end of device [ 136.386040][ T5074] loop4: rw=2049, want=1041, limit=128 [ 136.739338][ T4328] attempt to access beyond end of device [ 136.739338][ T4328] loop4: rw=1, want=151, limit=128 [ 136.750661][ T4328] buffer_io_error: 25 callbacks suppressed [ 136.750694][ T4328] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 140.352990][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.017117][ T5104] cgroup2: Unexpected value for 'memory_localevents' [ 141.090347][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 141.120562][ T5105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 142.273199][ T4224] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.440268][ T5117] virt_wifi0 speed is unknown, defaulting to 1000 [ 142.448060][ T5117] virt_wifi0 speed is unknown, defaulting to 1000 [ 142.471045][ T5117] virt_wifi0 speed is unknown, defaulting to 1000 [ 142.519105][ T5117] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.597991][ T5117] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.069365][ T5117] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.077019][ T5117] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.084496][ T5117] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.092298][ T5117] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.100211][ T5117] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.107466][ T5117] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.473108][ T4224] usb 1-1: config 0 has no interfaces? [ 143.633027][ T4224] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 143.642197][ T4224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.650803][ T4224] usb 1-1: Product: syz [ 143.655256][ T4224] usb 1-1: Manufacturer: syz [ 143.660632][ T4224] usb 1-1: SerialNumber: syz [ 143.669254][ T4224] usb 1-1: config 0 descriptor?? [ 143.902940][ T4268] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.998019][ T4256] usb 1-1: USB disconnect, device number 2 [ 144.222173][ T4268] usb 2-1: Using ep0 maxpacket: 8 [ 144.433463][ T4268] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.573979][ T4268] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 144.693635][ T4268] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 145.173107][ T4268] usb 2-1: string descriptor 0 read error: -22 [ 145.179477][ T4268] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 145.252159][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.953940][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 146.053422][ T5150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.117206][ T5152] device bond1 entered promiscuous mode [ 146.230438][ T5152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.265618][ T5152] team0: Port device bond1 added [ 146.277113][ T5150] device vxcan3 entered promiscuous mode [ 146.351673][ T5150] bond1: (slave vxcan3): refused to change device type [ 147.511689][ T4221] usb 2-1: USB disconnect, device number 3 [ 147.546359][ T5167] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 148.375879][ T5172] loop4: detected capacity change from 0 to 4096 [ 148.429035][ T5180] overlayfs: failed to clone upperpath [ 148.443117][ T5172] EXT4-fs (loop4): inline encryption not supported [ 148.460233][ T5172] EXT4-fs (loop4): Test dummy encryption mode enabled [ 148.512966][ T5172] EXT4-fs (loop4): Ignoring removed oldalloc option [ 148.552311][ T5172] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 148.589559][ T5172] System zones: 0-5 [ 148.650338][ T5172] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,i_version,oldalloc,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 149.745556][ T5203] loop0: detected capacity change from 0 to 256 [ 149.795021][ T5206] bridge0: port 3(vlan2) entered blocking state [ 149.801415][ T5206] bridge0: port 3(vlan2) entered disabled state [ 149.809304][ T5206] device vlan2 entered promiscuous mode [ 150.093200][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 150.241703][ T5218] loop0: detected capacity change from 0 to 512 [ 150.305057][ T5218] FAT-fs (loop0): bogus number of FAT sectors [ 150.329492][ T5218] FAT-fs (loop0): Can't find a valid FAT filesystem [ 152.504998][ T5243] device syzkaller0 entered promiscuous mode [ 153.196371][ T5253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.513439][ T5259] "syz.4.289" (5259) uses obsolete ecb(arc4) skcipher [ 154.197835][ T5253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.458258][ T5265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'. [ 154.492965][ T5265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.291'. [ 154.543098][ T5265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'. [ 154.963275][ T5265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.291'. [ 154.985853][ T5265] netlink: 'syz.4.291': attribute type 6 has an invalid length. [ 156.342337][ T5283] device syzkaller0 entered promiscuous mode [ 156.423523][ T5290] loop1: detected capacity change from 0 to 2048 [ 156.497198][ T5290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.683955][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.272757][ T5301] syz.1.301 (5301) used greatest stack depth: 17392 bytes left [ 161.690772][ T5316] loop0: detected capacity change from 0 to 1024 [ 161.732820][ T5322] loop1: detected capacity change from 0 to 1024 [ 161.787896][ T5320] device syzkaller0 entered promiscuous mode [ 161.811636][ T5322] EXT4-fs (loop1): Ignoring removed orlov option [ 161.849428][ T5322] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 161.929093][ T5316] hfsplus: failed to load root directory [ 162.648369][ T5333] netlink: 'syz.0.311': attribute type 10 has an invalid length. [ 163.914105][ T5358] loop1: detected capacity change from 0 to 512 [ 163.980430][ T5360] device syzkaller0 entered promiscuous mode [ 164.723407][ T5358] EXT4-fs (loop1): Ignoring removed nobh option [ 164.776608][ T5358] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 164.860258][ T5358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.928707][ T5358] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 164.945754][ T5372] loop0: detected capacity change from 0 to 2048 [ 164.963049][ T5358] EXT4-fs (loop1): 1 truncate cleaned up [ 165.002818][ T5377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.324'. [ 165.034122][ T5358] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 165.066798][ T5379] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 165.081498][ T26] audit: type=1326 audit(1775102961.773:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785f668819 code=0x7ffc0000 [ 165.114889][ T5372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.172362][ T26] audit: type=1326 audit(1775102961.783:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f785f668819 code=0x7ffc0000 [ 165.513843][ T26] audit: type=1326 audit(1775102961.783:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785f668819 code=0x7ffc0000 [ 165.852230][ T26] audit: type=1326 audit(1775102961.783:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f785f668819 code=0x7ffc0000 [ 165.999950][ T26] audit: type=1326 audit(1775102961.783:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5378 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785f668819 code=0x7ffc0000 [ 166.315306][ T4271] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.365123][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.328'. [ 166.391828][ T5404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.408993][ T5398] virt_wifi0 speed is unknown, defaulting to 1000 [ 166.459098][ T4271] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.435175][ T4271] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.639871][ T4271] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.680240][ T5398] chnl_net:caif_netlink_parms(): no params data found [ 168.446177][ T4224] Bluetooth: hci4: command 0x0409 tx timeout [ 172.066271][ T4222] Bluetooth: hci4: command 0x041b tx timeout [ 172.319162][ T5444] loop4: detected capacity change from 0 to 2048 [ 172.344621][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.362059][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.387622][ T5398] device bridge_slave_0 entered promiscuous mode [ 172.415384][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.431203][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.465023][ T5444] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.478373][ T5398] device bridge_slave_1 entered promiscuous mode [ 172.531457][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.705140][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.407849][ T5398] team0: Port device team_slave_0 added [ 173.475273][ T5398] team0: Port device team_slave_1 added [ 173.582099][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.602404][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.860723][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.128178][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 175.825387][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.200334][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.495222][ T4224] Bluetooth: hci4: command 0x0419 tx timeout [ 176.501936][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.826050][ T5398] device hsr_slave_0 entered promiscuous mode [ 176.859564][ T5398] device hsr_slave_1 entered promiscuous mode [ 176.885757][ T5398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.902976][ T5398] Cannot create hsr debugfs directory [ 177.036438][ T5482] sctp: failed to load transform for md5: -2 [ 178.789096][ T5398] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.876592][ T5398] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.915790][ T5398] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.964629][ T5398] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.996001][ T5529] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.215730][ T5542] capability: warning: `syz.4.361' uses 32-bit capabilities (legacy support in use) [ 179.227531][ T5539] sctp: [Deprecated]: syz.0.359 (pid 5539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.227531][ T5539] Use struct sctp_sack_info instead [ 179.487346][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.846062][ T5555] device syzkaller0 entered promiscuous mode [ 180.126381][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.228407][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.383631][ T5398] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.441024][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.474378][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.497279][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.504440][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.516823][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.526845][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.535896][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.543013][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.552135][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.561430][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.587656][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 180.679144][ T5572] bridge1: port 1(erspan0) entered blocking state [ 180.700656][ T5572] bridge1: port 1(erspan0) entered disabled state [ 180.716935][ T5572] device erspan0 entered promiscuous mode [ 180.725385][ T5572] bridge1: port 1(erspan0) entered blocking state [ 180.731917][ T5572] bridge1: port 1(erspan0) entered forwarding state [ 180.743675][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.752152][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.775946][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.794589][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.806698][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.845096][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.051412][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.070131][ T4271] device hsr_slave_0 left promiscuous mode [ 181.081119][ T4271] device hsr_slave_1 left promiscuous mode [ 182.822067][ T4271] device veth1_macvtap left promiscuous mode [ 182.841254][ T4271] device veth0_macvtap left promiscuous mode [ 182.852390][ T4271] device veth1_vlan left promiscuous mode [ 182.876726][ T4271] device veth0_vlan left promiscuous mode [ 184.482290][ T4271] bond0 (unregistering): Released all slaves [ 184.887454][ T5398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.120375][ T5398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.236285][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.247383][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.255933][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.297629][ T5612] device ip6gre1 entered promiscuous mode [ 185.433555][ T5618] netlink: 104 bytes leftover after parsing attributes in process `syz.1.382'. [ 185.499440][ T5624] ipt_CLUSTERIP: Please specify destination IP [ 188.007249][ T2855] Bluetooth: hci0: command 0x0406 tx timeout [ 188.032926][ T2855] Bluetooth: hci1: command 0x0406 tx timeout [ 188.049405][ T2855] Bluetooth: hci2: command 0x0406 tx timeout [ 188.100076][ T2855] Bluetooth: hci3: command 0x0406 tx timeout [ 188.388754][ T5636] loop0: detected capacity change from 0 to 4096 [ 188.419293][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.597636][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.605304][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.554192][ T5685] fuse: Bad value for 'fd' [ 190.866820][ T5693] tipc: Failed to remove unknown binding: 66,0,0/0:1337956998/1337956999 [ 190.900235][ T5696] tipc: Failed to remove unknown binding: 66,0,0/0:2673913386/2673913388 [ 190.912127][ T5693] tipc: Failed to remove unknown binding: 66,0,0/0:1337956998/1337956999 [ 191.050752][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.109954][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.142069][ T5701] loop4: detected capacity change from 0 to 256 [ 191.271398][ T5701] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.323749][ T5701] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 191.372491][ T5711] atomic_op ffff88807e74a998 conn xmit_atomic 0000000000000000 [ 191.551478][ T5701] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 191.619648][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.739084][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.968111][ T5398] device veth0_vlan entered promiscuous mode [ 192.005825][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.062101][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.080315][ T5398] device veth1_vlan entered promiscuous mode [ 192.143891][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.728848][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.812659][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.984877][ T5398] device veth0_macvtap entered promiscuous mode [ 193.142328][ T5398] device veth1_macvtap entered promiscuous mode [ 193.162430][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.173766][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.204624][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.215468][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.229763][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.243316][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.273929][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.293268][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.298078][ T5734] mmap: syz.0.416 (5734) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 193.324252][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.340786][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.372992][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.400624][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.424116][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.459392][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.499828][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.515034][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.528883][ T5398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.543446][ T5398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.552163][ T5398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.616909][ T5398] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.632754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.656941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.839516][ T5751] loop4: detected capacity change from 0 to 64 [ 194.111836][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.124019][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.134202][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.060827][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.086346][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.138417][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.179617][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.202315][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.229381][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.000411][ T5817] xt_CT: No such helper "pptp" [ 200.043545][ T5823] overlayfs: failed to clone upperpath [ 201.624160][ T5841] netlink: 56 bytes leftover after parsing attributes in process `syz.5.431'. [ 201.699131][ T5848] capability: warning: `syz.4.433' uses deprecated v2 capabilities in a way that may be insecure [ 201.762068][ T5855] loop5: detected capacity change from 0 to 1024 [ 202.101074][ T5860] atomic_op ffff888061df3998 conn xmit_atomic 0000000000000000 [ 203.511983][ T5866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.824049][ T5866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.955183][ T5912] device syzkaller0 entered promiscuous mode [ 208.272981][ T4255] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.434808][ T4255] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.781491][ T5931] loop4: detected capacity change from 0 to 128 [ 210.083059][ T4255] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 210.092596][ T4255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.133333][ T4255] usb 6-1: Product: syz [ 210.137634][ T4255] usb 6-1: Manufacturer: syz [ 210.142247][ T4255] usb 6-1: SerialNumber: syz [ 210.184124][ T4255] usb 6-1: config 0 descriptor?? [ 210.285549][ T4255] ims_pcu 6-1:0.0: Union descriptor too short (2 vs 5) [ 210.292509][ T4255] ims_pcu: probe of 6-1:0.0 failed with error -22 [ 210.312615][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 210.574271][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.451'. [ 211.528140][ T4255] usb 6-1: USB disconnect, device number 2 [ 211.680094][ T5967] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 212.781700][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 212.851241][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.478'. [ 212.901631][ T5991] device syzkaller0 entered promiscuous mode [ 216.379462][ T6060] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 216.492884][ T6063] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 216.765600][ T6068] loop5: detected capacity change from 0 to 32768 [ 216.816096][ T6068] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.487 (6068) [ 217.652702][ T6068] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 217.661995][ T6068] BTRFS info (device loop5): enabling auto defrag [ 217.668503][ T6068] BTRFS info (device loop5): use no compression [ 217.674816][ T6068] BTRFS info (device loop5): max_inline at 4096 [ 217.681096][ T6068] BTRFS info (device loop5): using free space tree [ 217.687695][ T6068] BTRFS info (device loop5): has skinny extents [ 217.816114][ T6077] Illegal XDP return value 4292604712, expect packet loss! [ 218.287566][ T6068] BTRFS info (device loop5): enabling ssd optimizations [ 218.744669][ T6120] loop4: detected capacity change from 0 to 40427 [ 218.784496][ T6120] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 218.792738][ T6120] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 218.805374][ T6120] F2FS-fs (loop4): invalid crc value [ 219.225151][ T6120] F2FS-fs (loop4): Found nat_bits in checkpoint [ 219.437772][ T6120] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 219.445208][ T6120] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 219.863474][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 221.982737][ T26] audit: type=1326 audit(1775103018.673:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.0.505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f949d813819 code=0x0 [ 225.445455][ T6182] bridge0: port 3(team0) entered disabled state [ 225.452667][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.460107][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.881876][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.932161][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.367889][ T6182] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.377118][ T6182] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.386114][ T6182] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.395326][ T6182] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.500060][ T6182] device ip6gre1 left promiscuous mode [ 227.609055][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 227.666547][ T6216] device team1 entered promiscuous mode [ 227.684390][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.515'. [ 227.923075][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 227.965755][ T6241] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 228.149330][ T26] audit: type=1326 audit(1775103024.843:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 228.353858][ T6216] device team2 entered promiscuous mode [ 228.376323][ T26] audit: type=1326 audit(1775103024.893:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 228.618333][ T26] audit: type=1326 audit(1775103024.903:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 228.640543][ T26] audit: type=1326 audit(1775103024.913:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 228.703756][ T26] audit: type=1326 audit(1775103024.913:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 228.860454][ T6251] netlink: 'syz.3.520': attribute type 10 has an invalid length. [ 228.989752][ T26] audit: type=1326 audit(1775103024.933:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.1.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 229.016326][ T6251] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 229.948184][ T6256] loop5: detected capacity change from 0 to 40427 [ 229.971952][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 230.020378][ T6251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.047471][ T6256] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 230.055384][ T6256] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 230.066592][ T6256] F2FS-fs (loop5): invalid crc value [ 230.250115][ T6256] F2FS-fs (loop5): Found nat_bits in checkpoint [ 230.461231][ T6256] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 230.468412][ T6256] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 230.569421][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 230.871065][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 230.956672][ T6251] bond2: (slave bond0): Error -16 calling set_mac_address [ 231.666741][ T6296] device syzkaller0 entered promiscuous mode [ 231.813303][ T6301] syz.3.541 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 231.871391][ T6303] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 231.890595][ T6306] loop4: detected capacity change from 0 to 512 [ 231.940783][ T26] audit: type=1326 audit(1775103028.633:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949d813819 code=0x7ffc0000 [ 232.209065][ T6306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 232.418583][ T6306] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.502458][ T26] audit: type=1326 audit(1775103028.663:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f949d813819 code=0x7ffc0000 [ 232.865207][ T26] audit: type=1326 audit(1775103028.663:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949d813819 code=0x7ffc0000 [ 232.949761][ T26] audit: type=1326 audit(1775103028.663:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949d813819 code=0x7ffc0000 [ 238.213499][ T6377] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 238.256602][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 238.256614][ T26] audit: type=1326 audit(1775103034.953:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc3acd819 code=0x7ffc0000 [ 238.388968][ T26] audit: type=1326 audit(1775103034.953:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fedc3acd819 code=0x7ffc0000 [ 238.411801][ T26] audit: type=1326 audit(1775103034.953:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc3acd819 code=0x7ffc0000 [ 238.577466][ T26] audit: type=1326 audit(1775103034.953:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fedc3acd819 code=0x7ffc0000 [ 238.623199][ T26] audit: type=1326 audit(1775103034.953:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc3acd819 code=0x7ffc0000 [ 241.498977][ T26] audit: type=1326 audit(1775103038.193:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.1.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x0 [ 246.489388][ T6499] bridge1: port 1(erspan0) entered disabled state [ 247.500124][ T6546] tipc: Failed to remove unknown binding: 66,0,0/0:1713080731/1713080732 [ 247.739625][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.747071][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.007769][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.041364][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.191924][ T6499] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.205199][ T6499] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.216742][ T6499] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.228801][ T6499] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.598047][ T6570] tipc: Enabling of bearer rejected, failed to enable media [ 251.407487][ T6604] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.599'. [ 253.254280][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.606'. [ 255.545909][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.554848][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.937468][ T6671] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.615'. [ 260.678122][ T6705] orangefs_mount: mount request failed with -4 [ 261.691726][ T6727] netlink: 'syz.4.633': attribute type 9 has an invalid length. [ 268.283973][ T6765] tipc: Started in network mode [ 268.324048][ T6765] tipc: Node identity 4, cluster identity 4711 [ 268.330396][ T6765] tipc: Node number set to 4 [ 268.631980][ T6793] IPVS: stopping master sync thread 6804 ... [ 268.642856][ T6804] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 268.672743][ T6808] device team1 left promiscuous mode [ 268.705301][ T6808] device team2 left promiscuous mode [ 269.462115][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 269.670170][ T6835] virt_wifi0 speed is unknown, defaulting to 1000 [ 271.220332][ T6851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.664'. [ 271.470071][ T6860] hugetlbfs: syz.0.665 (6860): Using mlock ulimits for SHM_HUGETLB is deprecated [ 273.181450][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 273.227592][ T6874] loop5: detected capacity change from 0 to 512 [ 273.378217][ T6874] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 273.423140][ T6874] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.003764][ T6894] loop0: detected capacity change from 0 to 40427 [ 275.084374][ T6894] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 275.092202][ T6894] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 275.113094][ T6894] F2FS-fs (loop0): invalid crc value [ 275.719044][ T6894] F2FS-fs (loop0): Found nat_bits in checkpoint [ 276.184154][ T6894] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 276.191326][ T6894] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 278.721121][ T6921] overlayfs: failed to clone upperpath [ 280.223999][ T4332] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 280.224176][ T4332] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 282.379847][ T6950] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.067645][ T6948] loop0: detected capacity change from 0 to 512 [ 284.343481][ T6948] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.0.681: corrupted xattr block 95 [ 284.360808][ T6948] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.681: bg 0: block 7: invalid block bitmap [ 284.376591][ T6948] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 284.386028][ T6948] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2923: inode #11: comm syz.0.681: corrupted xattr block 95 [ 284.401068][ T6948] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 284.414898][ T6948] EXT4-fs (loop0): 1 orphan inode deleted [ 284.427570][ T6948] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.609038][ T6979] loop5: detected capacity change from 0 to 512 [ 288.649455][ T26] audit: type=1326 audit(2000000020.140:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 289.175271][ T6979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 289.206467][ T26] audit: type=1326 audit(2000000020.180:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 289.213357][ T6979] System zones: [ 289.228794][ T26] audit: type=1326 audit(2000000020.570:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 289.254665][ T26] audit: type=1326 audit(2000000020.570:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 289.278873][ T26] audit: type=1326 audit(2000000020.570:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 289.308787][ T26] audit: type=1326 audit(2000000020.570:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 289.331964][ T26] audit: type=1326 audit(2000000020.570:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 289.354492][ T6979] 1-12 [ 289.357606][ T26] audit: type=1326 audit(2000000020.570:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 289.385855][ T7001] device syzkaller0 entered promiscuous mode [ 289.394455][ T6979] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.698: missing EA_INODE flag [ 289.414911][ T6979] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.698: error while reading EA inode 12 err=-117 [ 289.427625][ T26] audit: type=1326 audit(2000000020.600:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 289.472233][ T6979] EXT4-fs (loop5): 1 orphan inode deleted [ 289.507425][ T6979] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 289.548485][ T26] audit: type=1326 audit(2000000020.600:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.1.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5353a819 code=0x7ffc0000 [ 293.630067][ T7068] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 293.649913][ T7067] device vlan2 entered promiscuous mode [ 293.658838][ T7067] device geneve1 entered promiscuous mode [ 297.784576][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.732'. [ 297.845857][ T7112] netlink: 44 bytes leftover after parsing attributes in process `syz.1.736'. [ 300.353350][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 302.738501][ T7145] loop4: detected capacity change from 0 to 512 [ 303.332257][ T7145] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000e94,max_dir_size_kb=0x0000000000000004,min_batch_time=0x000000000000000b,quota,,errors=continue. Quota mode: writeback. [ 303.353546][ T7145] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.152169][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 304.217332][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.748'. [ 304.239105][ T7159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.263080][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.748'. [ 304.310144][ T7158] device bridge0 entered promiscuous mode [ 304.349132][ T7159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.388207][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 304.398280][ T7158] device ip6gretap0 entered promiscuous mode [ 304.427181][ T7158] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 304.660596][ T7158] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 306.540390][ T7185] device syzkaller0 entered promiscuous mode [ 306.688084][ T7187] ptrace attach of "./syz-executor exec"[4187] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ \x07    "[7187] [ 308.924679][ T7196] loop4: detected capacity change from 0 to 764 [ 309.030837][ T7196] rock: directory entry would overflow storage [ 309.050949][ T7196] rock: sig=0x4654, size=5, remaining=4 [ 309.057687][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 309.415590][ T7214] ipt_CLUSTERIP: Please specify destination IP [ 310.919456][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 311.053467][ T7240] device syzkaller0 entered promiscuous mode [ 313.118857][ T7242] loop4: detected capacity change from 0 to 32768 [ 314.079988][ T7274] device vlan2 left promiscuous mode [ 314.153724][ T7274] device geneve1 left promiscuous mode [ 314.163279][ T7242] JBD2: Ignoring recovery information on journal [ 316.202714][ T7242] JBD2: recovery failed [ 316.241201][ T7242] (syz.4.770,7242,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 316.285791][ T7242] (syz.4.770,7242,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 316.300620][ T7292] loop5: detected capacity change from 0 to 512 [ 316.470014][ T7294] virt_wifi0 speed is unknown, defaulting to 1000 [ 316.583622][ T7242] (syz.4.770,7242,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 316.779488][ T7292] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 316.796774][ T7242] (syz.4.770,7242,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 316.989901][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.996635][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.292688][ T7292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 317.307575][ T7242] (syz.4.770,7242,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 317.329032][ T7292] EXT4-fs (loop5): orphan cleanup on readonly fs [ 317.342267][ T7292] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.784: bad orphan inode 267 [ 317.391842][ T7292] EXT4-fs (loop5): Remounting filesystem read-only [ 317.462923][ T7292] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 318.583309][ T7306] cgroup: noprefix used incorrectly [ 319.121789][ T7292] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.784: dx entry: limit 0 != root limit 125 [ 319.174828][ T7292] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.784: Corrupt directory, running e2fsck is recommended [ 319.327534][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 320.377742][ T7325] loop4: detected capacity change from 0 to 2048 [ 321.490543][ T7338] 9pnet_virtio: no channels available for device syz [ 321.524303][ T7325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.074235][ T7353] virt_wifi0 speed is unknown, defaulting to 1000 [ 323.980071][ T7363] tipc: Enabling of bearer rejected, failed to enable media [ 324.117623][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 328.961528][ T7405] syz.5.813 (7405): drop_caches: 2 [ 331.043315][ T7422] device batadv_slave_1 entered promiscuous mode [ 331.130982][ T7421] device batadv_slave_1 left promiscuous mode [ 331.217579][ T7427] futex_wake_op: syz.1.818 tries to shift op by 144; fix this program [ 331.567234][ T7441] siw: device registration error -23 Stopping sshd: stopped /usr/sbin/sshd (pid 3942) OK Stopping crond: stopped /usr/sbin/crond (pid 3926) OK [ 336.764421][ T4326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 337.233532][ T4326] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 337.335880][ T4326] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 337.543155][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.804812][ T4326] usb 5-1: config 0 descriptor?? [ 337.904943][ T4326] smsusb:smsusb_probe: board id=8, interface number 0 [ 337.933383][ T4326] smsusb:smsusb_probe: Device initialized with return code -19 [ 338.083367][ T7509] netlink: 'syz.0.839': attribute type 12 has an invalid length. [ 338.091148][ T7509] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.839'. [ 338.112702][ T7480] IPVS: lblc: FWM 3 0x00000003 - no destination available Stopping dhcpcd... [ 338.155737][ T4326] usb 5-1: USB disconnect, device number 2 stopped /sbin/dhcpcd (pid 3851) Stopping network: [ 339.762382][ T7539] netlink: 72 bytes leftover after parsing attributes in process `syz.5.847'. [ 339.802025][ T7539] device syzkaller0 entered promiscuous mode [ 340.217893][ T7562] loop5: detected capacity change from 0 to 1024 [ 340.337256][ T7562] EXT4-fs (loop5): Ignoring removed orlov option [ 340.384004][ T7562] EXT4-fs (loop5): Ignoring removed nobh option [ 340.436449][ T7562] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.582701][ T7562] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,orlov,noauto_da_alloc,noauto_da_alloc,data_err=ignore,norecovery,dioread_nolock,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,nobh,lazytime,,errors=continue. Quota mode: writeback. [ 341.656981][ T7583] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 342.678846][ T7583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.839171][ T7588] device ipvlan2 entered promiscuous mode OK Stopping iptables: [ 344.259324][ T7616] kvm: pic: single mode not supported OK [ 344.259800][ T7616] kvm: pic: level sensitive irq not supported [ 345.246560][ T7646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.260921][ T7646] IPv6: NLM_F_CREATE should be set when creating new route Stopping system message bus: done [ 349.302687][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.309999][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state serialport: VM disconnected.