last executing test programs: 4.658981795s ago: executing program 1 (id=2): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @private=0xa010100}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3.946422513s ago: executing program 0 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2e, 0x6, 0xef, 0x42}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0xbb}, @generic={0x80, 0x9, 0x4, 0x8, 0x5}]}, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r0, &(0x7f0000000380), &(0x7f0000000480)=""/106, 0x2}, 0x20) 3.946271653s ago: executing program 2 (id=3): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/188, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb73, 0x0, "4415264a88b82c002013fb23590aaf2574c69e"}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.796476524s ago: executing program 0 (id=12): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x8000002000009) 3.796243824s ago: executing program 4 (id=13): syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000300)=ANY=[], 0x1, 0x606, &(0x7f00000014c0)="$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") 3.72856526s ago: executing program 1 (id=15): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@del={0xe0, 0x10, 0x94b3a63dd6d0c713, 0x0, 0x0, {{'authenc(blake2b-256,cbc-camellia-aesni)\x00'}}}, 0xe0}}, 0x0) 3.638333327s ago: executing program 4 (id=16): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98, &(0x7f00000001c0)}) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000500)) 3.637132097s ago: executing program 0 (id=17): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1c9e01) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000003c0)={0x191c, 0x1, [{0x8}]}) 3.616455259s ago: executing program 1 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 3.398060976s ago: executing program 4 (id=19): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x8, "a8f8495fd95d6d9466e67e6073056d24c90781bcfa35a196ee7791a6f40d5284", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x2, "d2c492eb0165203dc6e4bec77202abb42c000000002231a11000", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000280)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"96045442ca2941e00ad05c912e6463f218b58c309f97aa65bd9bc4b652ab894c", r5}) 1.690345424s ago: executing program 0 (id=21): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0xfffffc5f) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000a40)={[{@block_validity}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@abort}, {@data_ordered}, {@nodelalloc}, {@noinit_itable}, {@noauto_da_alloc}]}, 0xfb, 0x54c, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x8004480a, &(0x7f00000000c0)) 1.642313798s ago: executing program 4 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r0) 1.458143623s ago: executing program 3 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x0, 0x3, 0x101, 0x0, 0x0, {}, [@generic='>']}, 0x18}}, 0x0) 1.434498355s ago: executing program 1 (id=25): r0 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4102, 0x1006}], 0x1) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x445b, 0x4) 1.394549448s ago: executing program 2 (id=26): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.394402088s ago: executing program 3 (id=27): syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000300)=ANY=[], 0x1, 0x606, &(0x7f00000014c0)="$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") 1.338690982s ago: executing program 2 (id=28): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@del={0xe0, 0x10, 0x94b3a63dd6d0c713, 0x0, 0x0, {{'authenc(blake2b-256,cbc-camellia-aesni)\x00'}}}, 0xe0}}, 0x0) 1.276366437s ago: executing program 3 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9, 0x0, r2, 0x0}]) 1.268430568s ago: executing program 1 (id=30): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:'], 0xa) 1.258569249s ago: executing program 0 (id=31): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESOCT], 0x1, 0x600, &(0x7f00000002c0)="$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") add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0), 0x0, &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) 1.189815894s ago: executing program 2 (id=32): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x8, "a8f8495fd95d6d9466e67e6073056d24c90781bcfa35a196ee7791a6f40d5284", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x2, "d2c492eb0165203dc6e4bec77202abb42c000000002231a11000", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000280)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000040)={"96045442ca2941e00ad05c912e6463f218b58c309f97aa65bd9bc4b652ab894c", r5}) 1.148876658s ago: executing program 1 (id=33): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000400)=[{0x6, 0x3, 0x7, 0x7613}, {0x4, 0x2, 0x8, 0x2b52}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x2}, 0x18) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x1f}, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) fchdir(r0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) io_uring_setup(0xfc2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private1}, 0x1c) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8"], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f00000003c0)) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x45, 0x0, 0x2, 0xffffffff}, {0x2}, {}, {0x6}]}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002) 1.138148039s ago: executing program 4 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2e, 0x6, 0xef, 0x42}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0xbb}, @generic={0x80, 0x9, 0x4, 0x8, 0x5}]}, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r0, &(0x7f0000000380), &(0x7f0000000480)=""/106, 0x2}, 0x20) 1.034572907s ago: executing program 2 (id=35): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x0, @remote}}) 1.00364898s ago: executing program 3 (id=36): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8cb64dbea9f06ed6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x74}}, 0x800) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x440, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) 124.44853ms ago: executing program 2 (id=38): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/188, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb73, 0x0, "4415264a88b82c002013fb23590aaf2574c69e"}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 107.455831ms ago: executing program 3 (id=39): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) listen(r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.1449ms ago: executing program 3 (id=40): r0 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4102, 0x1006}], 0x1) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001bbb8389a46eb7225600dde7", @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x445b, 0x4) 0s ago: executing program 0 (id=41): syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000300)=ANY=[], 0x1, 0x606, &(0x7f00000014c0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. [ 32.389089][ T4216] cgroup: Unknown subsys name 'net' [ 32.660942][ T4216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.990427][ T4216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.138234][ T4228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.141123][ T4228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.143507][ T4228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.146312][ T4228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.149596][ T4228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 33.151879][ T4228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.172426][ T4228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.175618][ T4228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.178021][ T4228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.180613][ T4228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.182896][ T4228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 33.184770][ T4228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.219092][ T4228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.225367][ T4230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.227909][ T4230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.230603][ T4230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.232798][ T4230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 33.234851][ T4230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.240441][ T4230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.246087][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.248926][ T4230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.251868][ T4230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.256419][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.262091][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.264286][ T4230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.266454][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 33.268717][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.271694][ T4228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.277569][ T4241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 33.279722][ T4241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.411509][ T4227] chnl_net:caif_netlink_parms(): no params data found [ 33.419896][ T4232] chnl_net:caif_netlink_parms(): no params data found [ 33.510217][ T4234] chnl_net:caif_netlink_parms(): no params data found [ 33.543047][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.544882][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.548071][ T4227] device bridge_slave_0 entered promiscuous mode [ 33.551698][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.553879][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.556772][ T4232] device bridge_slave_0 entered promiscuous mode [ 33.561748][ T4231] chnl_net:caif_netlink_parms(): no params data found [ 33.569446][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.571312][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.573706][ T4232] device bridge_slave_1 entered promiscuous mode [ 33.576856][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.578618][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.581122][ T4227] device bridge_slave_1 entered promiscuous mode [ 33.605483][ T4232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.634613][ T4232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.653999][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.656114][ T4234] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.658720][ T4234] device bridge_slave_0 entered promiscuous mode [ 33.671760][ T4227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.683335][ T4227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.686317][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.688181][ T4234] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.690544][ T4234] device bridge_slave_1 entered promiscuous mode [ 33.711137][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.713114][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.715492][ T4231] device bridge_slave_0 entered promiscuous mode [ 33.730520][ T4232] team0: Port device team_slave_0 added [ 33.733525][ T4227] team0: Port device team_slave_0 added [ 33.737610][ T4232] team0: Port device team_slave_1 added [ 33.740085][ T4227] team0: Port device team_slave_1 added [ 33.747140][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.748987][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.751404][ T4231] device bridge_slave_1 entered promiscuous mode [ 33.763606][ T4234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.769456][ T4234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.777941][ T4227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.779959][ T4227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.787431][ T4227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.814402][ T4227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.816306][ T4227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.822857][ T4227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.826494][ T4232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.828237][ T4232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.834755][ T4232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.839837][ T4235] chnl_net:caif_netlink_parms(): no params data found [ 33.853321][ T4234] team0: Port device team_slave_0 added [ 33.856423][ T4231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.861770][ T4232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.863634][ T4232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.871374][ T4232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.880822][ T4234] team0: Port device team_slave_1 added [ 33.890562][ T4231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.927569][ T4234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.929377][ T4234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.936368][ T4234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.950279][ T4231] team0: Port device team_slave_0 added [ 33.977764][ T4227] device hsr_slave_0 entered promiscuous mode [ 34.016079][ T4227] device hsr_slave_1 entered promiscuous mode [ 34.072351][ T4234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.074106][ T4234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.081404][ T4234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.127280][ T4232] device hsr_slave_0 entered promiscuous mode [ 34.177152][ T4232] device hsr_slave_1 entered promiscuous mode [ 34.215898][ T4232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.218055][ T4232] Cannot create hsr debugfs directory [ 34.220969][ T4231] team0: Port device team_slave_1 added [ 34.241564][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.243628][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.246423][ T4235] device bridge_slave_0 entered promiscuous mode [ 34.268294][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.270292][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.277512][ T4231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.280913][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.282769][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.285391][ T4235] device bridge_slave_1 entered promiscuous mode [ 34.309273][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.310992][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.317746][ T4231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.377384][ T4234] device hsr_slave_0 entered promiscuous mode [ 34.436093][ T4234] device hsr_slave_1 entered promiscuous mode [ 34.475850][ T4234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.477757][ T4234] Cannot create hsr debugfs directory [ 34.489670][ T4235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.528028][ T4235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.607451][ T4231] device hsr_slave_0 entered promiscuous mode [ 34.646117][ T4231] device hsr_slave_1 entered promiscuous mode [ 34.685848][ T4231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.687820][ T4231] Cannot create hsr debugfs directory [ 34.727131][ T4235] team0: Port device team_slave_0 added [ 34.732155][ T4235] team0: Port device team_slave_1 added [ 34.762224][ T4235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.764244][ T4235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.771586][ T4235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.800784][ T4235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.802716][ T4235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.810425][ T4235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.917555][ T4235] device hsr_slave_0 entered promiscuous mode [ 34.956053][ T4235] device hsr_slave_1 entered promiscuous mode [ 35.015825][ T4235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.017916][ T4235] Cannot create hsr debugfs directory [ 35.026512][ T4227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.077566][ T4227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.135038][ T4227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.195006][ T4227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.216093][ T4241] Bluetooth: hci1: command tx timeout [ 35.216100][ T4238] Bluetooth: hci0: command tx timeout [ 35.256782][ T4232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.296538][ T4241] Bluetooth: hci4: command tx timeout [ 35.298356][ T4241] Bluetooth: hci2: command tx timeout [ 35.299981][ T4241] Bluetooth: hci3: command tx timeout [ 35.318049][ T4232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.377355][ T4232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.419547][ T4232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.509331][ T4231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.547327][ T4231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.603217][ T4231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.627978][ T4231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.691661][ T4232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.713385][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.721373][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.742461][ T4232] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.749971][ T4234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.792261][ T4234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.827414][ T4234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.888113][ T4227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.904028][ T4234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.937587][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.940791][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.943415][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.945387][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.948624][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.951148][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.953708][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.955431][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.958265][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.960538][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.964543][ T4227] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.986972][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.989986][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.992733][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.995312][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.998563][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.000520][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.014156][ T4235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.061352][ T4231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.076864][ T4231] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.079046][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.081317][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.083925][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.086805][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.088676][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.090857][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.093558][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.097479][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.100106][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.102831][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.107122][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.109917][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.112479][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.114801][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.117487][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.120140][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.123335][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.126494][ T4235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.177550][ T4235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.221388][ T4227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.224576][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.233013][ T4235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.287962][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.290456][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.293114][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.296140][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.300346][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.302762][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.305483][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.308099][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.310032][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.321233][ T4232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.324032][ T4232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.336316][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.338667][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.342360][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.346189][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.349179][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.352407][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.354873][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.358791][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.361355][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.363808][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.365762][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.368040][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.410609][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.413056][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.417619][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.420394][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.423240][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.425904][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.428516][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.430707][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.433454][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.455351][ T4234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.458238][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.460930][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.465174][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.509220][ T4234] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.522745][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.525294][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.552958][ T4227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.558508][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.560502][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.562521][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.565071][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.569377][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.571231][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.573706][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.589161][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.591870][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.594282][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.596151][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.613539][ T4235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.629977][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.632773][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.635594][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.638725][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.641680][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.667923][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.670295][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.673302][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.676372][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.678948][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.681629][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.686388][ T4235] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.703691][ T4227] device veth0_vlan entered promiscuous mode [ 36.710403][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.713041][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.715363][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.717372][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.719702][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.722147][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.724686][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.728591][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.730974][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.732873][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.734926][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.737745][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.740186][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.742908][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.744951][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.750777][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.753399][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.757585][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.760105][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.763279][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.767843][ T4232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.785099][ T4231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.790149][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.796455][ T4227] device veth1_vlan entered promiscuous mode [ 36.809876][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.812477][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.814862][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.818522][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.820663][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.824306][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.828025][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.830790][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.833563][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.836552][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.839149][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.841982][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.863977][ T4231] device veth0_vlan entered promiscuous mode [ 36.873681][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.877125][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.879677][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.882219][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.900154][ T4227] device veth0_macvtap entered promiscuous mode [ 36.904178][ T4227] device veth1_macvtap entered promiscuous mode [ 36.919480][ T4231] device veth1_vlan entered promiscuous mode [ 36.922673][ T4235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.925408][ T4235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.934427][ T4232] device veth0_vlan entered promiscuous mode [ 36.937580][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.940014][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.942487][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.944810][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.949346][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.951862][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.954292][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.957244][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.959858][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.962642][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.965111][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.968254][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.981135][ T4232] device veth1_vlan entered promiscuous mode [ 36.998986][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.001523][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.004497][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.007984][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.010312][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.012515][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.014875][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.020030][ T4227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.033461][ T4234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.039289][ T4231] device veth0_macvtap entered promiscuous mode [ 37.043379][ T4231] device veth1_macvtap entered promiscuous mode [ 37.048305][ T4227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.052591][ T4227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.054933][ T4227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.059538][ T4227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.061821][ T4227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.070139][ T4232] device veth0_macvtap entered promiscuous mode [ 37.077898][ T4232] device veth1_macvtap entered promiscuous mode [ 37.085934][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.088524][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.091135][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.093179][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.095173][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.099091][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.101695][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.104207][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.107118][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.109560][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.112117][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.114713][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.125002][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.129072][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.132797][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.147921][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.150543][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.153051][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.155556][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.188697][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.191451][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.194994][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.202463][ T4231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.204750][ T4231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.208208][ T4231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.210494][ T4231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.220675][ T4235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.229114][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.231778][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.234596][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.242474][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.244494][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.247532][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.250345][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.253140][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.255591][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.259717][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.263323][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.296202][ T4228] Bluetooth: hci1: command tx timeout [ 37.298433][ T4228] Bluetooth: hci0: command tx timeout [ 37.300751][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.302758][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.308185][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.310295][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.350239][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.352783][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.355312][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.361215][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.363624][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.370024][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.372861][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.375300][ T4232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.379022][ T249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.381136][ T249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.385972][ T4241] Bluetooth: hci3: command tx timeout [ 37.387416][ T4241] Bluetooth: hci2: command tx timeout [ 37.388708][ T4241] Bluetooth: hci4: command tx timeout [ 37.392951][ T4232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.398376][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.404186][ T4234] device veth0_vlan entered promiscuous mode [ 37.409680][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.412199][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.414792][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.427569][ T4232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.429888][ T4232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.431981][ T4232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.434184][ T4232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.445456][ T249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.455283][ T249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.469226][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.485122][ T4234] device veth1_vlan entered promiscuous mode [ 37.537305][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.539949][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.542352][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.544957][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.562348][ T4235] device veth0_vlan entered promiscuous mode [ 37.584809][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.590287][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.594016][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.599854][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.614413][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.618685][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.626488][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.628481][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.639898][ T4235] device veth1_vlan entered promiscuous mode [ 37.642402][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.644834][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.647587][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.650240][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.652835][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.658496][ T4234] device veth0_macvtap entered promiscuous mode [ 37.663629][ T4234] device veth1_macvtap entered promiscuous mode [ 37.670728][ T249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.672817][ T249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.681817][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.684450][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.688060][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.690769][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.693176][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.696970][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.701381][ T4234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.703575][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.706615][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.708949][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.711411][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.724606][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.727755][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.730323][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.733115][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.735528][ T4234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.738897][ T4234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.742697][ T4234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.749476][ T4234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.751782][ T4234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.754754][ T4234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.757300][ T4234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.790897][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.793618][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.799405][ T4235] device veth0_macvtap entered promiscuous mode [ 37.804361][ T4235] device veth1_macvtap entered promiscuous mode [ 37.821918][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.824586][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.834396][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.839171][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.855458][ T4235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.860901][ T4235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.863520][ T4235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.868522][ T4235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.871308][ T4235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.874103][ T4235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.877494][ T4235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.880411][ T4235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.884970][ T4235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.901428][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.906308][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.928886][ T4235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.931637][ T4235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.934081][ T4235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.941061][ T4235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.944192][ T4235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.947617][ T4235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.950351][ T4235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.953207][ T4235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.960161][ T4235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.980719][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.983531][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.993962][ T4235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.996968][ T4235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.999965][ T4235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.002100][ T4235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.039058][ T414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.041010][ T414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.051660][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.078192][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 38.081664][ T4314] netlink: 'syz.3.7': attribute type 20 has an invalid length. [ 38.125993][ T249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.138983][ T249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.158820][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.174783][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.189186][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.193161][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.226591][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.228877][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.232080][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.393273][ T4332] loop0: detected capacity change from 0 to 512 [ 38.398895][ T4329] loop4: detected capacity change from 0 to 1024 [ 38.425400][ T4329] hfsplus: wrong filesystem version [ 38.451502][ T4332] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.12: casefold flag without casefold feature [ 38.457858][ T4332] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.12: missing EA_INODE flag [ 38.467283][ T4332] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.12: error while reading EA inode 12 err=-117 [ 38.475036][ T4332] EXT4-fs (loop0): 1 orphan inode deleted [ 38.481053][ T4219] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.487768][ T4332] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.561075][ T4232] EXT4-fs (loop0): unmounting filesystem. [ 38.609930][ T4339] loop3: detected capacity change from 0 to 1024 [ 40.569731][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.571819][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.573722][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.575551][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.602687][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.604585][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.628829][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.632021][ T4358] loop0: detected capacity change from 0 to 1024 [ 40.636341][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.638243][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.640190][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.662705][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.664674][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.669909][ T4360] device pim6reg1 entered promiscuous mode [ 40.682970][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.685056][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.703228][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.705299][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.708126][ T4358] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 40.714953][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.725177][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.731502][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.733441][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.738928][ T4228] Bluetooth: hci0: command tx timeout [ 40.740459][ T4228] Bluetooth: hci1: command tx timeout [ 40.741892][ T4228] Bluetooth: hci4: command tx timeout [ 40.743279][ T4228] Bluetooth: hci2: command tx timeout [ 40.744748][ T4228] Bluetooth: hci3: command tx timeout [ 40.754919][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.762194][ T4366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 40.794655][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.798438][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.809891][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.812362][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.815534][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.821599][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.824833][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.828302][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.831324][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.833287][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.838490][ T4370] loop3: detected capacity change from 0 to 1024 [ 40.841589][ T4370] hfsplus: wrong filesystem version [ 40.841721][ T110] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.848787][ T110] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 41.017329][ T4378] loop0: detected capacity change from 0 to 1024 [ 41.219085][ T4394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37'. [ 42.052536][ T4394] usb usb9: usbfs: process 4394 (syz.4.37) did not claim interface 0 before use [ 42.119447][ T27] audit: type=1326 audit(42.100:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.33" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95342de8 code=0x0 [ 42.186774][ T249] ================================================================== [ 42.188830][ T249] BUG: KASAN: slab-out-of-bounds in copy_page_from_iter_atomic+0x9a4/0x1104 [ 42.190859][ T249] Read of size 1024 at addr ffff0000d169ac00 by task kworker/u4:4/249 [ 42.192919][ T249] [ 42.193484][ T249] CPU: 1 PID: 249 Comm: kworker/u4:4 Not tainted 6.1.96-syzkaller #0 [ 42.195632][ T249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 42.198216][ T249] Workqueue: loop0 loop_workfn [ 42.199417][ T249] Call trace: [ 42.200279][ T249] dump_backtrace+0x1c8/0x1f4 [ 42.201499][ T249] show_stack+0x2c/0x3c [ 42.202576][ T249] dump_stack_lvl+0x108/0x170 [ 42.203842][ T249] print_report+0x174/0x4c0 [ 42.204979][ T249] kasan_report+0xd4/0x130 [ 42.206134][ T249] kasan_check_range+0x264/0x2a4 [ 42.207487][ T249] memcpy+0x48/0x90 [ 42.208480][ T249] copy_page_from_iter_atomic+0x9a4/0x1104 [ 42.210013][ T249] generic_perform_write+0x2fc/0x55c [ 42.211372][ T249] __generic_file_write_iter+0x168/0x388 [ 42.212795][ T249] generic_file_write_iter+0xb8/0x2b4 [ 42.214214][ T249] do_iter_write+0x534/0x964 [ 42.215396][ T249] vfs_iter_write+0x88/0xac [ 42.216602][ T249] loop_process_work+0x15b4/0x24a4 [ 42.217982][ T249] loop_workfn+0x54/0x68 [ 42.219050][ T249] process_one_work+0x7ac/0x1404 [ 42.220344][ T249] worker_thread+0x8e4/0xfec [ 42.221497][ T249] kthread+0x250/0x2d8 [ 42.222490][ T249] ret_from_fork+0x10/0x20 [ 42.223649][ T249] [ 42.224272][ T249] Allocated by task 4378: [ 42.225367][ T249] kasan_set_track+0x4c/0x80 [ 42.226464][ T249] kasan_save_alloc_info+0x24/0x30 [ 42.227992][ T249] __kasan_kmalloc+0xac/0xc4 [ 42.229155][ T249] __kmalloc+0xd8/0x1c4 [ 42.230211][ T249] hfsplus_read_wrapper+0x3ac/0xfcc [ 42.231593][ T249] hfsplus_fill_super+0x2f0/0x166c [ 42.232967][ T249] mount_bdev+0x274/0x370 [ 42.234084][ T249] hfsplus_mount+0x44/0x58 [ 42.235192][ T249] legacy_get_tree+0xd4/0x16c [ 42.236428][ T249] vfs_get_tree+0x90/0x274 [ 42.237630][ T249] do_new_mount+0x278/0x8fc [ 42.238759][ T249] path_mount+0x590/0xe5c [ 42.239894][ T249] __arm64_sys_mount+0x45c/0x594 [ 42.241202][ T249] invoke_syscall+0x98/0x2c0 [ 42.242389][ T249] el0_svc_common+0x138/0x258 [ 42.243644][ T249] do_el0_svc+0x64/0x218 [ 42.244691][ T249] el0_svc+0x58/0x168 [ 42.245743][ T249] el0t_64_sync_handler+0x84/0xf0 [ 42.247044][ T249] el0t_64_sync+0x18c/0x190 [ 42.248234][ T249] [ 42.248858][ T249] The buggy address belongs to the object at ffff0000d169ac00 [ 42.248858][ T249] which belongs to the cache kmalloc-512 of size 512 [ 42.252505][ T249] The buggy address is located 0 bytes inside of [ 42.252505][ T249] 512-byte region [ffff0000d169ac00, ffff0000d169ae00) [ 42.255949][ T249] [ 42.256611][ T249] The buggy address belongs to the physical page: [ 42.258123][ T249] page:00000000056666ca refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111698 [ 42.260802][ T249] head:00000000056666ca order:2 compound_mapcount:0 compound_pincount:0 [ 42.262850][ T249] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 42.265029][ T249] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002600 [ 42.267363][ T249] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 42.269621][ T249] page dumped because: kasan: bad access detected [ 42.271257][ T249] [ 42.271863][ T249] Memory state around the buggy address: [ 42.273338][ T249] ffff0000d169ad00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.275510][ T249] ffff0000d169ad80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.277681][ T249] >ffff0000d169ae00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.279891][ T249] ^ [ 42.280894][ T249] ffff0000d169ae80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.283031][ T249] ffff0000d169af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.285124][ T249] ================================================================== [ 42.287980][ T249] Disabling lock debugging due to kernel taint [ 42.355399][ T4410] loop0: detected capacity change from 0 to 1024 [ 42.362913][ T4410] hfsplus: wrong filesystem version [ 42.815868][ T4228] Bluetooth: hci3: command tx timeout [ 42.816790][ T4238] Bluetooth: hci2: command tx timeout [ 42.817364][ T4228] Bluetooth: hci4: command tx timeout [ 42.818874][ T4238] Bluetooth: hci1: command tx timeout [ 42.820614][ T4228] Bluetooth: hci0: command tx timeout