last executing test programs: 16.884990599s ago: executing program 1 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001800010000000000000018000200000000000009c7"], 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @initdev}, &(0x7f0000000140)=0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000240)=ANY=[], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000005c0)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000780)={0xd0, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfaac203179cf3a31}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd0}}, 0x2404c084) 14.568664477s ago: executing program 1 (id=254): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000050000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 13.877918086s ago: executing program 1 (id=256): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev, @in6=@local}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@local}}, 0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000140), 0x4) r2 = socket(0x10, 0x3, 0x2) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x0, 0x200000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdd46c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000580), 0x24, 0x0) 11.142211809s ago: executing program 1 (id=262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x2, 0x4}, &(0x7f0000000180)=0x8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r1, 0x8e, "bdd650df072a68361d9ef2062e7be3e1637cf733c57a7ee726c2b64647834496190c4a28a785e93d6920af5e790f6f5c9ece27fd5ab8b78730bebe70d7701e1f6ac4df75983c7fd1f2c9f13d2a12e7a6c95b316504b9dd88b55b98ace97fef74c58b94317fa4fd95054a0cd5d5f183b0ebcb585cbec31a1a6fb7c3712c8c63e5b8d8b4b220c9895d729213f280ca"}, &(0x7f0000000280)=0x96) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000480)={@map=0x1, 0x0, 0x19, 0x0, &(0x7f0000000380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f00000010c0)={0x58, 0x0, 0x9, 0x6, 0x4f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) sendmsg$unix(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="3ba3", 0x2}], 0x1}, 0x20000001) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x2000000, 0x0}, 0x10002) 8.983592274s ago: executing program 0 (id=264): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x700, 0x8, 0x4, {{0x13, 0x4, 0x0, 0x2d, 0x4c, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, {[@generic={0x7, 0x10, "d623198b8ebc065030b272ff4291"}, @cipso={0x86, 0x11, 0x3, [{0x0, 0x3, "dd"}, {0x5, 0x8, "c63ca792b6d0"}]}, @rr={0x7, 0xf, 0xb8, [@empty, @broadcast, @multicast1]}, @rr={0x7, 0x7, 0x1f, [@multicast1]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0xff, 0x9, 0x2210, r0, 0x8, '\x00', r1, r0, 0xffffffff, 0x5, 0x5, 0x100000008}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18001aef12710405006900000000000018110800", @ANYRES32=r2, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe3a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40001) openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) clock_settime(0xffffffffffffffff, &(0x7f0000000680)) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) 8.545107601s ago: executing program 3 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02", 0x31, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x122, 0x0) 6.779512991s ago: executing program 0 (id=279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 6.761083703s ago: executing program 3 (id=271): r0 = socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x803, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0xb3ed03910ad937da, &(0x7f00000002c0)={@private, @private}, &(0x7f0000000300)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) getitimer(0x0, 0x0) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 6.544239552s ago: executing program 1 (id=272): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xb, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.370200727s ago: executing program 3 (id=273): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 4.368932567s ago: executing program 0 (id=274): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) ptrace(0xffffffffffffffff, 0x0) 3.481128733s ago: executing program 3 (id=275): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000001c0)=0xf40, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b86dd1327c9167c64294a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xdc59, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x20000000}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) inotify_rm_watch(r4, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="480000001400010b000000000000000002ff"], 0x48}}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) write$dsp(r6, &(0x7f0000000040)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000000c0)=0x40) 3.188141398s ago: executing program 0 (id=277): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="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"/3493], &(0x7f0000000340)='syzkaller\x00'}, 0x3f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba538a44cc2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/18, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="10030300ffff"], 0xffdd) 3.102466095s ago: executing program 4 (id=278): unshare(0x0) 3.019515632s ago: executing program 4 (id=280): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0xd) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) tkill(r6, 0x16) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1886002, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESOCT], 0x1, 0x1ce, &(0x7f00000004c0)="$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") 3.017526382s ago: executing program 3 (id=281): socket(0x10, 0x3, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x80, &(0x7f00000004c0)={[{@space_cache_v1}, {@nodatacow}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@check_int_data}]}, 0xff, 0x5101, &(0x7f0000005140)="$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") socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x0) 2.793422572s ago: executing program 0 (id=282): r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000040)="f0", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000000)=""/20, 0xffffffffffffffbb) r1 = socket$isdn(0x22, 0x2, 0x26) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x5028, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000b20e175903"], 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) listen(r2, 0x80) fcntl$setsig(r2, 0xa, 0x3e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x111) close_range(r4, 0xffffffffffffffff, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x101, 0x48001051, r4, 0x0) keyctl$unlink(0x9, r0, r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x2c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.709793788s ago: executing program 4 (id=283): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000002700), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000002d00)={0x1, 0x8, [0x0, 0x0]}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x0, "9754328ac07908a643c7e305c40974978199d6812b309189d2336649cb57c5ef", 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1f, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, 0x1c224}}, 0x20}}, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fanotify_init(0xa00, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r6, &(0x7f0000000200)=[{&(0x7f0000000400)="db", 0x1}], 0x1, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fb00) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)=@xdp={0x2c, 0x6, 0x0, 0x8}, 0x80, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000400)="b3f483d7e37eadb68efb64e5b073fcc0ac042ddb19f5ff7320607c350717f31bc81463acf2b777ba089d36560f1a9bfa40e10421251bba1a77cedcf2bd417582234e10a42b35da7d8f1d2c56736c4950c25e45034fedbd9a1509364739ec06e9c3ba672db230da247c0d2022335be842d18a", 0x72}, {&(0x7f0000000480)="7a19c0a7656fef207cfade83b56127ad9fc10b261ab886b2011b0cf4cefa885aefcb21dacc54cf33e41fb8e535950609da0bb4e19547db41e3be568527c5d23dac8399e1fb784403e4bd54829f0e5cb1c05a60619d3d2dae2508e69f0dd3163bb4e9dc540e3b0daaf9586daa10671d15220d6cd2267534fbbf2f312e7264d9d75a45247af90f5f497b5ebc8fece0d8109294a6ab3ad2fca134941088a7eb72154bd884e5f5ca3fb32f2ab645f10c791ffb2415aed8b4d37418ace05b8e743f32b21db11efa9561e6c4d28f70ac5397fdb30dcf7c9c386556", 0xd8}], 0x3}, 0x0) 2.605467997s ago: executing program 4 (id=284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xfffffdee, 0x1, [@ss_cap={0xa}]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ffffc1a, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) fstat(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x1004c09, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRES64], 0x2, 0x1f3, &(0x7f0000000800)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r5}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 2.261132407s ago: executing program 2 (id=285): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) 1.780122878s ago: executing program 4 (id=286): socket$nl_route(0x10, 0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) close(r0) symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={0x0}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 1.232315405s ago: executing program 2 (id=287): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.191843098s ago: executing program 2 (id=288): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) ptrace(0xffffffffffffffff, 0x0) 203.463903ms ago: executing program 4 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000180016801400018010000200ffffffff000000000000000008000d"], 0x40}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0xfe}, 0xe) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40}, {0x6}]}) write$ppp(r4, &(0x7f0000000440)='\x00\x00', 0x2) listen(r3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000980), 0xe) listen(r5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x20, 0x1, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="89000000120081ae08060cdc040000000000000a0000000000e2ffca1b1f0000000006c00e72f7507a05d08a56096e362d6dbff5ca1ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc020000003240ea7c12f21308f868fece01955fed0009d78f0a947ee6b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 185.875484ms ago: executing program 2 (id=290): unshare(0x0) 113.43558ms ago: executing program 3 (id=291): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000040)=""/1, 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setrlimit(0xb, &(0x7f00000000c0)={0x1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000940)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@debug}]}, 0xfc, 0x564, &(0x7f00000003c0)="$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") r3 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r3, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f00000003c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB="0400000000000000100001000000000020"], 0x34, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x841, 0x0) 113.19561ms ago: executing program 2 (id=292): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000001c0)=0xf40, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b86dd1327c9167c64294a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xdc59, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x20000000}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) inotify_rm_watch(r4, 0x0) 39.663847ms ago: executing program 2 (id=293): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) write$dsp(r0, &(0x7f0000000040)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x40) 11.405229ms ago: executing program 1 (id=294): r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1040882, &(0x7f00000000c0), 0xfc, 0x462, &(0x7f0000000940)="$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") r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000001e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hoplimit={{0x14}}, @dontfrag={{0x14}}], 0x30}}], 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @private1, 0x1f}, 0x1c) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x83, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "66cf"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "4984abd2d14180c4b378ac79d4e6e1ccc0"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) r4 = syz_pidfd_open(0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x56, 0x6) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x7, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4812) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d5}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x70}}, 0x0) setns(r5, 0x66020000) getcwd(&(0x7f0000000040)=""/147, 0x93) 0s ago: executing program 0 (id=295): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000002c0)={@empty, @multicast1, 0x0}, &(0x7f0000000300)=0xc) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x74}}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6gre0\x00', r3, 0x29, 0x0, 0x1, 0x6, 0x60, @private0, @remote, 0x8000, 0x7, 0x6, 0x3ff}}) pidfd_getfd(r4, r0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0xc0884113, 0x40944f9c780000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. [ 44.049938][ T4015] cgroup: Unknown subsys name 'net' [ 44.308395][ T4015] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.615438][ T4015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 45.899088][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 45.944955][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 46.009916][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.011818][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.014815][ T4027] device bridge_slave_0 entered promiscuous mode [ 46.020350][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.022309][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.024876][ T4027] device bridge_slave_1 entered promiscuous mode [ 46.053283][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.055133][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.057600][ T4031] device bridge_slave_0 entered promiscuous mode [ 46.081287][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.085798][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.088408][ T4031] device bridge_slave_1 entered promiscuous mode [ 46.117742][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.122881][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.162675][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.167470][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.187532][ T4027] team0: Port device team_slave_0 added [ 46.211656][ T4031] team0: Port device team_slave_0 added [ 46.214517][ T4027] team0: Port device team_slave_1 added [ 46.217086][ T4031] team0: Port device team_slave_1 added [ 46.239025][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 46.259695][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.261518][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.269011][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.282286][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.284116][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.290587][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.297241][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.299159][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.306296][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.312352][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.314177][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.320760][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.330529][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 46.414551][ T4031] device hsr_slave_0 entered promiscuous mode [ 46.452488][ T4031] device hsr_slave_1 entered promiscuous mode [ 46.503737][ T4038] chnl_net:caif_netlink_parms(): no params data found [ 46.553887][ T4027] device hsr_slave_0 entered promiscuous mode [ 46.592437][ T4027] device hsr_slave_1 entered promiscuous mode [ 46.642134][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.644188][ T4027] Cannot create hsr debugfs directory [ 46.717296][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.719067][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.721566][ T4037] device bridge_slave_0 entered promiscuous mode [ 46.727751][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.729729][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.732503][ T4037] device bridge_slave_1 entered promiscuous mode [ 46.764312][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.766193][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.768719][ T4034] device bridge_slave_0 entered promiscuous mode [ 46.781214][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.795468][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.797352][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.800066][ T4034] device bridge_slave_1 entered promiscuous mode [ 46.804556][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.845631][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.847507][ T4038] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.850330][ T4038] device bridge_slave_0 entered promiscuous mode [ 46.873315][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.878222][ T4037] team0: Port device team_slave_0 added [ 46.889469][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.892290][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.894182][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.896779][ T4038] device bridge_slave_1 entered promiscuous mode [ 46.920522][ T4037] team0: Port device team_slave_1 added [ 46.961644][ T4034] team0: Port device team_slave_0 added [ 46.971344][ T4038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.975942][ T4038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.992243][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.994042][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.000494][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.006075][ T4034] team0: Port device team_slave_1 added [ 47.017629][ T4038] team0: Port device team_slave_0 added [ 47.019721][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.021503][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.028380][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.045442][ T4038] team0: Port device team_slave_1 added [ 47.047587][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.049322][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.056189][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.084931][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.086775][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.093815][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.154044][ T4037] device hsr_slave_0 entered promiscuous mode [ 47.192512][ T4037] device hsr_slave_1 entered promiscuous mode [ 47.242195][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.244100][ T4037] Cannot create hsr debugfs directory [ 47.272272][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.274037][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.280326][ T4038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.285099][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.286944][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.293629][ T4038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.315092][ T4031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.394527][ T4034] device hsr_slave_0 entered promiscuous mode [ 47.452456][ T4034] device hsr_slave_1 entered promiscuous mode [ 47.492219][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.494097][ T4034] Cannot create hsr debugfs directory [ 47.504593][ T4031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.564331][ T4031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.632501][ T4031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.742816][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 47.746041][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 47.754392][ T4038] device hsr_slave_0 entered promiscuous mode [ 47.792470][ T4038] device hsr_slave_1 entered promiscuous mode [ 47.812322][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 47.814010][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 47.832282][ T4038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.834281][ T4038] Cannot create hsr debugfs directory [ 47.892111][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 47.915974][ T4027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.934717][ T4027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.986952][ T4027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.043193][ T4027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.130451][ T4037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.166500][ T4037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.217972][ T4037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.295366][ T4037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.366485][ T4034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.414545][ T4034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.444918][ T4034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.496732][ T4034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.550246][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.580288][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.593330][ T4038] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.617018][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.619335][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.623732][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.631310][ T4038] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.664360][ T4038] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.719581][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.728749][ T4038] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.763962][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.766584][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.768945][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.773392][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.776487][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.778516][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.781385][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.786574][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.789247][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.791086][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.793669][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.831216][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.834198][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.836600][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.838388][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.840534][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.847163][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.849945][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.853296][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.855138][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.857428][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.860361][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.864040][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.866914][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.870029][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.874870][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.877548][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.881228][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.884886][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.890801][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.894935][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.922224][ T4031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.924904][ T4031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.929888][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.934045][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.936619][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.939756][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.944294][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.946986][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.971544][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.983931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.986749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.989778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.995388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.998158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.000813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.011212][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.070833][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.075253][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.077676][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.079993][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.084198][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.094838][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.113460][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.128659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.134103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.137114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.139878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.143983][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.145826][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.148162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.150890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.160177][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.162081][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.164584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.167509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.189605][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.198433][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.201305][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.204693][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.221416][ T4038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.233536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.236493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.239124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.250131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.253355][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.255100][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.257304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.259807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.266698][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.269359][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.275343][ T4031] device veth0_vlan entered promiscuous mode [ 49.291484][ T4038] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.294163][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.296639][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.299150][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.303567][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.306635][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.309518][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.312377][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.314352][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.316764][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.319330][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.327884][ T4037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.330672][ T4037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.338227][ T4031] device veth1_vlan entered promiscuous mode [ 49.352418][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.355794][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.358556][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.361245][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.366074][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.368661][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.371530][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.375699][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.377722][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.380312][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.386191][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.388043][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.410928][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.436874][ T4031] device veth0_macvtap entered promiscuous mode [ 49.448280][ T4031] device veth1_macvtap entered promiscuous mode [ 49.469984][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.473867][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.476204][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.478587][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.481767][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.485271][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.487887][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.490330][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.494469][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.496874][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.498689][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.500969][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.506220][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.509111][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.511767][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.515456][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.518044][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.520464][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.523615][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.526151][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.541621][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.556307][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.568369][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.570940][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.574473][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.577182][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.579974][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.595739][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.599987][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.609591][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.614327][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.617104][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.640898][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.644708][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.647245][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.649910][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.657387][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.669204][ T4031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.671564][ T4031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.675948][ T4031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.678213][ T4031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.684853][ T4027] device veth0_vlan entered promiscuous mode [ 49.691490][ T4027] device veth1_vlan entered promiscuous mode [ 49.697090][ T4038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.700480][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.705588][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.708811][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.711499][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.715383][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.717894][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.720479][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.724120][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.740280][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.743450][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.745996][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.748454][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.750417][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.767932][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.778468][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.780633][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.811775][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.815622][ T4070] Bluetooth: hci0: command 0x041b tx timeout [ 49.817378][ T4070] Bluetooth: hci1: command 0x041b tx timeout [ 49.825570][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.828384][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.845266][ T4027] device veth0_macvtap entered promiscuous mode [ 49.870899][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.875464][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.878117][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.890694][ T4027] device veth1_macvtap entered promiscuous mode [ 49.893505][ T4070] Bluetooth: hci2: command 0x041b tx timeout [ 49.895198][ T4070] Bluetooth: hci3: command 0x041b tx timeout [ 49.900437][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.903996][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.906700][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.918960][ T4037] device veth0_vlan entered promiscuous mode [ 49.934720][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.936838][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.946479][ T4037] device veth1_vlan entered promiscuous mode [ 49.949445][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.953371][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.964776][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.967357][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.980958][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.984665][ T4070] Bluetooth: hci4: command 0x041b tx timeout [ 49.988294][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.992577][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.008102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.010673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.017450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.021225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.023970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.032572][ T544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.032940][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.037429][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.040905][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.051920][ T4038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.056221][ T544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.061157][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.065084][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.067805][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.074898][ T4027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.077248][ T4027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.079431][ T4027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.088198][ T4027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.110558][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.115793][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.123884][ T4037] device veth0_macvtap entered promiscuous mode [ 50.140670][ T4037] device veth1_macvtap entered promiscuous mode [ 50.213100][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.215704][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.218091][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.220669][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.244683][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.245240][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.273184][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.273705][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.276696][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.276719][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.276732][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.276746][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.277928][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.280171][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.303885][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.306426][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.309292][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.314088][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.317177][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.317207][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.317223][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.318394][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.318504][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.319205][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.319966][ T4034] device veth0_vlan entered promiscuous mode [ 50.327998][ T4038] device veth0_vlan entered promiscuous mode [ 50.363681][ T4037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.366285][ T4037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.368493][ T4037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.370725][ T4037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.381094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.385604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.388373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.391419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.398016][ T4034] device veth1_vlan entered promiscuous mode [ 50.418760][ T4038] device veth1_vlan entered promiscuous mode [ 50.497479][ T4034] device veth0_macvtap entered promiscuous mode [ 50.534155][ T4034] device veth1_macvtap entered promiscuous mode [ 50.544328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.548813][ T26] audit: type=1326 audit(50.490:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.555821][ T26] audit: type=1326 audit(50.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.561241][ T26] audit: type=1326 audit(50.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.572762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.577969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.582429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.589223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.591537][ T26] audit: type=1326 audit(50.490:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.610826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.613652][ T26] audit: type=1326 audit(50.490:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.617736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.621228][ T26] audit: type=1326 audit(50.490:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.633342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.640100][ T26] audit: type=1326 audit(50.490:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.650582][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.653169][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.657049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.659848][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.664581][ T26] audit: type=1326 audit(50.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.669924][ T26] audit: type=1326 audit(50.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.673995][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.677216][ T26] audit: type=1326 audit(50.500:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889a7ee8 code=0x7ffc0000 [ 50.677973][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.687693][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.690346][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.693897][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.698474][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.729804][ T4038] device veth0_macvtap entered promiscuous mode [ 50.733554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.736198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.739083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.743500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.751900][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.755442][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.757854][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.760364][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.764225][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.767039][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.771412][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.798717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.801344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.804741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.818117][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.820293][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.825986][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.828267][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.833608][ T4038] device veth1_macvtap entered promiscuous mode [ 50.855937][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.859119][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.892527][ T312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.894681][ T312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.900108][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.905038][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.907664][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.925610][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.928295][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.930770][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.939340][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.941897][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.949786][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.952962][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.955574][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.960050][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.970223][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.973639][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.976102][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.978719][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.981269][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.984819][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.987772][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.991054][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.009037][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.029420][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.032803][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.039068][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.041849][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.065275][ T4038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.067535][ T4038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.069736][ T4038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.071845][ T4038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.112727][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.114758][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.127999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.165270][ T404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.167385][ T404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.220614][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.250677][ T544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.251720][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.258440][ T544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.259010][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.261534][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.266843][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.295936][ T4121] bridge0: port 3(vlan2) entered blocking state [ 51.297781][ T4121] bridge0: port 3(vlan2) entered disabled state [ 51.344817][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.348048][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.352662][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.166641][ T4075] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.170534][ T4110] Bluetooth: hci1: command 0x040f tx timeout [ 53.184444][ T4110] Bluetooth: hci0: command 0x040f tx timeout [ 53.192562][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 53.194317][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 53.196168][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 53.397847][ T4139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12'. [ 53.400356][ T4139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 53.403364][ T4139] device vlan0 entered promiscuous mode [ 53.720068][ T4075] usb 1-1: Using ep0 maxpacket: 16 [ 55.266963][ T4155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16'. [ 55.479851][ T4156] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 56.396587][ T4110] Bluetooth: hci4: command 0x0419 tx timeout [ 56.398176][ T4110] Bluetooth: hci2: command 0x0419 tx timeout [ 56.399733][ T4110] Bluetooth: hci3: command 0x0419 tx timeout [ 56.401263][ T4110] Bluetooth: hci0: command 0x0419 tx timeout [ 56.402865][ T4110] Bluetooth: hci1: command 0x0419 tx timeout [ 56.487853][ T4165] loop1: detected capacity change from 0 to 256 [ 56.495087][ T4075] usb 1-1: device descriptor read/all, error -71 [ 56.515091][ T4165] exfat: Unknown parameter 'iocharset]cp855' [ 56.566205][ T4165] xt_limit: Overflow, try lower: 0/0 [ 57.570056][ T4188] udc-core: couldn't find an available UDC or it's busy [ 57.581721][ T4188] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.961691][ T4200] capability: warning: `syz.3.27' uses 32-bit capabilities (legacy support in use) [ 59.391981][ C1] sched: RT throttling activated [ 59.631196][ T4208] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 60.864382][ T4223] input: syz1 as /devices/virtual/input/input2 [ 61.727867][ T4098] Bluetooth: hci2: command 0x0409 tx timeout [ 62.183207][ T4232] loop1: detected capacity change from 0 to 2048 [ 62.581960][ T4232] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.111835][ T4251] Cannot find add_set index 0 as target [ 63.143057][ T4228] fs-verity: sha512 using implementation "sha512-arm64" [ 63.322253][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 63.400938][ T4265] loop4: detected capacity change from 0 to 1024 [ 63.459046][ T4260] loop2: detected capacity change from 0 to 8192 [ 63.492669][ T4265] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 63.512862][ T4260] ======================================================= [ 63.512862][ T4260] WARNING: The mand mount option has been deprecated and [ 63.512862][ T4260] and is ignored by this kernel. Remove the mand [ 63.512862][ T4260] option from the mount to silence this warning. [ 63.512862][ T4260] ======================================================= [ 63.551783][ T4267] loop1: detected capacity change from 0 to 4096 [ 63.557676][ T4260] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 63.560710][ T4260] REISERFS (device loop2): using ordered data mode [ 63.563497][ T4260] reiserfs: using flush barriers [ 63.581686][ T4260] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 63.595520][ T4260] REISERFS (device loop2): checking transaction log (loop2) [ 63.610933][ T4260] REISERFS (device loop2): Using r5 hash to sort names [ 63.620783][ T4260] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 63.644387][ T4260] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 64.765411][ T4274] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 64.769728][ T4274] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 64.773600][ T4274] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 65.188369][ T4267] ntfs3: Unknown parameter 'sidden' [ 65.738278][ T4280] loop0: detected capacity change from 0 to 256 [ 66.404227][ T4282] loop4: detected capacity change from 0 to 1024 [ 66.450710][ T4282] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 66.465963][ T4282] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 66.468339][ T4282] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.537556][ T4286] Zero length message leads to an empty skb [ 66.623738][ T4282] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,. Quota mode: writeback. [ 66.721820][ T4298] udc-core: couldn't find an available UDC or it's busy [ 66.724057][ T4298] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.831005][ T4294] loop0: detected capacity change from 0 to 4096 [ 66.908351][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 66.910600][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 66.914969][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 66.915017][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 66.915051][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 66.915078][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 66.915105][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 66.915139][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 66.915183][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 66.915209][ T4294] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 66.930651][ T4288] udc-core: couldn't find an available UDC or it's busy [ 66.940109][ T4299] udc-core: couldn't find an available UDC or it's busy [ 66.940132][ T4299] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.960390][ T4288] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.999414][ T4299] udc-core: couldn't find an available UDC or it's busy [ 67.001412][ T4299] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.036063][ T4310] netlink: 'syz.1.58': attribute type 11 has an invalid length. [ 67.043130][ T4310] netlink: 'syz.1.58': attribute type 11 has an invalid length. [ 67.045609][ T4310] debugfs: Directory 'netdev:' with parent 'phy5' already present! [ 67.446598][ T4317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 68.648718][ T4327] syz.0.63 uses obsolete (PF_INET,SOCK_PACKET) [ 69.665047][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.666882][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.740164][ T4341] loop0: detected capacity change from 0 to 512 [ 69.773956][ T4341] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 69.812990][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 69.827536][ T4341] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 69.869094][ T4345] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.890858][ T4347] netlink: 'syz.3.71': attribute type 11 has an invalid length. [ 69.980666][ T4350] delete_channel: no stack [ 70.022278][ T4347] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 70.309591][ T4354] loop0: detected capacity change from 0 to 40427 [ 70.315512][ T4354] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 70.317612][ T4354] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 70.345337][ T4354] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.370914][ T4354] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 70.373386][ T4354] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 73.408591][ T4370] netlink: 32 bytes leftover after parsing attributes in process `syz.2.77'. [ 73.545920][ T4374] capability: warning: `syz.3.78' uses deprecated v2 capabilities in a way that may be insecure [ 73.708331][ T4383] udc-core: couldn't find an available UDC or it's busy [ 73.730550][ T4383] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 73.956254][ T4385] loop3: detected capacity change from 0 to 2048 [ 74.220325][ T4385] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.294329][ T4403] loop4: detected capacity change from 0 to 65 [ 74.368754][ T4403] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 74.371293][ T4403] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 74.398766][ T4403] BFS-fs: bfs_fill_super(): Last block not available on loop4: 262208 [ 75.267610][ T1536] cfg80211: failed to load regulatory.db [ 75.590670][ T4419] loop1: detected capacity change from 0 to 512 [ 75.687289][ T4419] EXT4-fs (loop1): Ignoring removed oldalloc option [ 75.713799][ T4419] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 75.731466][ T4419] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 75.745035][ T4419] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 75.759624][ T4419] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 76.484705][ T4419] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 76.495533][ T4419] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 76.516902][ T4419] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.529343][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 76.561650][ T4419] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.92: bg 0: block 34: padding at end of block bitmap is not set [ 76.575416][ T4426] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 76.577805][ T4419] __quota_error: 18 callbacks suppressed [ 76.577819][ T4419] Quota error (device loop1): write_blk: dquota write failed [ 76.594530][ T4419] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 76.597436][ T4419] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.92: Failed to acquire dquot type 1 [ 76.629949][ T4426] device vlan2 entered promiscuous mode [ 76.633372][ T4426] device macvtap0 entered promiscuous mode [ 76.642530][ T4426] device macvtap0 left promiscuous mode [ 76.645578][ T4419] EXT4-fs (loop1): 1 truncate cleaned up [ 76.651441][ T4419] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,discard,usrjquota=./file0,noblock_validity,,errors=continue. Quota mode: writeback. [ 76.995094][ T4435] loop2: detected capacity change from 0 to 4096 [ 77.023681][ T4435] ntfs: (device loop2): parse_options(): Unrecognized mount option n¡ ls. [ 77.210307][ T4444] loop0: detected capacity change from 0 to 4096 [ 77.230685][ T4447] binder: 4446:4447 ioctl 4018620d 0 returned -22 [ 77.256556][ T4447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'. [ 77.283884][ T4447] device veth0_macvtap left promiscuous mode [ 77.304196][ T4444] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.456797][ T4459] udc-core: couldn't find an available UDC or it's busy [ 78.458776][ T4459] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.567864][ T4463] loop4: detected capacity change from 0 to 512 [ 78.607881][ T4466] nbd1: detected capacity change from 0 to 12 [ 78.611003][ T4466] block nbd1: NBD_DISCONNECT [ 78.630808][ T4466] block nbd1: Send disconnect failed -89 [ 78.638063][ T227] block nbd1: Send control failed (result -89) [ 78.639904][ T227] block nbd1: Request send failed, requeueing [ 78.645489][ T227] block nbd1: Disconnected due to user request. [ 78.649115][ T227] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.652253][ T227] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.665240][ T227] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.668034][ T227] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.670175][ T227] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.672964][ T227] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.675769][ T227] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.678542][ T227] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.680756][ T227] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.683585][ T227] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.686647][ T227] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.689526][ T227] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.734937][ T149] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.737706][ T149] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.739936][ T149] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.742730][ T149] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.744877][ T4466] ldm_validate_partition_table(): Disk read failed. [ 78.746925][ T149] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.749601][ T149] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.751895][ T149] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.754817][ T149] Buffer I/O error on dev nbd1, logical block 0, async page read [ 78.757400][ T4466] Dev nbd1: unable to read RDB block 0 [ 78.759377][ T4466] nbd1: unable to read partition table [ 78.760883][ T4466] nbd1: partition table beyond EOD, truncated [ 78.773405][ T4463] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 79.645668][ T4469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.104'. [ 79.647945][ T4469] netlink: 52 bytes leftover after parsing attributes in process `syz.3.104'. [ 79.650117][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'. [ 79.706065][ T4021] ldm_validate_partition_table(): Disk read failed. [ 79.708354][ T4021] Dev nbd1: unable to read RDB block 0 [ 79.710287][ T4021] nbd1: unable to read partition table [ 79.711708][ T4021] nbd1: partition table beyond EOD, truncated [ 79.723967][ T4021] ldm_validate_partition_table(): Disk read failed. [ 79.733451][ T4021] Dev nbd1: unable to read RDB block 0 [ 79.736260][ T4021] nbd1: unable to read partition table [ 79.737680][ T4021] nbd1: partition table beyond EOD, truncated [ 79.935184][ T4476] loop2: detected capacity change from 0 to 256 [ 80.261136][ T26] audit: type=1326 audit(80.200:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5ca1ee8 code=0x7ffc0000 [ 80.281369][ T26] audit: type=1326 audit(80.220:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5ca1ee8 code=0x7ffc0000 [ 81.007770][ T26] audit: type=1326 audit(80.940:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa5ca1ee8 code=0x7ffc0000 [ 81.027625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.033605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.045559][ T26] audit: type=1326 audit(80.940:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5ca1ee8 code=0x7ffc0000 [ 81.224537][ T26] audit: type=1326 audit(80.940:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5ca1ee8 code=0x7ffc0000 [ 81.229827][ T26] audit: type=1326 audit(80.950:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffa5ca1ee8 code=0x7ffc0000 [ 81.235272][ T26] audit: type=1326 audit(80.950:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5ca1ee8 code=0x7ffc0000 [ 85.566960][ T4516] loop2: detected capacity change from 0 to 512 [ 85.596057][ T4516] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.599405][ T4516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.095770][ T4524] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 87.105498][ T4519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.573292][ T4516] EXT4-fs (loop2): 1 truncate cleaned up [ 87.575870][ T4516] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.149206][ T4537] ebt_limit: overflow, try lower: 0/0 [ 89.018480][ T4545] mkiss: ax0: crc mode is auto. [ 89.029238][ T4538] loop3: detected capacity change from 0 to 4096 [ 89.093065][ T4538] ntfs3: Unknown parameter 'wlan1' [ 90.168700][ T4553] loop0: detected capacity change from 0 to 4096 [ 90.389907][ T4553] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 93.635331][ T4580] loop4: detected capacity change from 0 to 256 [ 93.879402][ T4580] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 94.834348][ T4587] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 94.836321][ T4587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.895809][ T4587] vhci_hcd vhci_hcd.0: Device attached [ 94.897892][ T4580] exFAT-fs (loop4): hint_cluster is invalid (33) [ 94.899979][ T4580] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) [ 94.916109][ T4580] exFAT-fs (loop4): Filesystem has been set read-only [ 94.918001][ T4580] exFAT-fs (loop4): error, failed to bmap (inode : 00000000acb06ecc iblock : 9, err : -5) [ 94.921120][ T4580] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) [ 94.993866][ T4580] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) [ 95.117106][ T4587] loop0: detected capacity change from 0 to 1764 [ 95.128362][ T4588] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 95.133705][ T4202] vhci_hcd: stop threads [ 95.179199][ T4202] vhci_hcd: release socket [ 95.184380][ T4202] vhci_hcd: disconnect device [ 96.037047][ T4116] vhci_hcd: vhci_device speed not set [ 96.091535][ T4603] loop3: detected capacity change from 0 to 64 [ 96.115644][ T4607] loop1: detected capacity change from 0 to 256 [ 96.138262][ T4605] loop4: detected capacity change from 0 to 2048 [ 96.152087][ T4605] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 96.212609][ T4605] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 96.214296][ T4603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 96.500727][ T4617] device team_slave_0 entered promiscuous mode [ 97.375046][ T4617] team0: Port device team_slave_0 removed [ 97.853130][ T4632] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 98.766836][ T4630] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 99.946253][ T4647] loop0: detected capacity change from 0 to 128 [ 100.015287][ T4643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.065437][ T4652] loop2: detected capacity change from 0 to 256 [ 100.201519][ T4644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.209203][ T4643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.240321][ T4652] FAT-fs (loop2): Directory bread(block 64) failed [ 101.652384][ T4652] FAT-fs (loop2): Directory bread(block 65) failed [ 101.654229][ T4652] FAT-fs (loop2): Directory bread(block 66) failed [ 101.656075][ T4652] FAT-fs (loop2): Directory bread(block 67) failed [ 101.669066][ T4652] FAT-fs (loop2): Directory bread(block 68) failed [ 101.670952][ T4652] FAT-fs (loop2): Directory bread(block 69) failed [ 101.697435][ T4652] FAT-fs (loop2): Directory bread(block 70) failed [ 101.707521][ T4652] FAT-fs (loop2): Directory bread(block 71) failed [ 101.717707][ T4652] FAT-fs (loop2): Directory bread(block 72) failed [ 101.719429][ T4652] FAT-fs (loop2): Directory bread(block 73) failed [ 102.967069][ T4673] loop0: detected capacity change from 0 to 164 [ 103.081645][ T4670] trusted_key: encrypted_key: keylen parameter is missing [ 104.033189][ T4667] loop3: detected capacity change from 0 to 8192 [ 104.105557][ T4667] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 104.108222][ T4667] REISERFS (device loop3): using ordered data mode [ 104.109785][ T4667] reiserfs: using flush barriers [ 104.245737][ T4667] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.264294][ T4667] REISERFS (device loop3): checking transaction log (loop3) [ 104.284206][ T4667] REISERFS (device loop3): Using r5 hash to sort names [ 104.286601][ T4667] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 104.301366][ T4667] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 105.388527][ T4693] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 105.547320][ T4697] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 105.554091][ T4697] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 105.560641][ T4697] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 106.259468][ T4693] device syzkaller0 entered promiscuous mode [ 106.380133][ T4694] loop0: detected capacity change from 0 to 8192 [ 106.429791][ T4694] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 106.433617][ T4694] REISERFS (device loop0): using ordered data mode [ 106.435273][ T4694] reiserfs: using flush barriers [ 106.438751][ T4694] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.445539][ T4694] REISERFS (device loop0): checking transaction log (loop0) [ 106.450934][ T4694] REISERFS (device loop0): Using r5 hash to sort names [ 106.453040][ T4694] REISERFS (device loop0): using 3.5.x disk format [ 106.455039][ T4694] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 106.486685][ T4694] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.493014][ T4694] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 107.473417][ T4694] siw: device registration error -19 [ 107.477545][ T4707] netlink: 'syz.3.169': attribute type 9 has an invalid length. [ 107.479595][ T4707] netlink: 'syz.3.169': attribute type 8 has an invalid length. [ 107.484512][ T4714] loop4: detected capacity change from 0 to 164 [ 107.501677][ T4707] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 107.515839][ T4707] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 107.518020][ T4707] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 107.520128][ T4707] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 107.528474][ T4709] device veth1_macvtap left promiscuous mode [ 107.556804][ T4714] Unable to read rock-ridge attributes [ 107.615926][ T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.694182][ T4720] binder: tried to use weak ref as strong ref [ 107.696171][ T4720] binder: 4719:4720 Acquire 1 refcount change on invalid ref 0 ret -22 [ 107.730781][ T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.803822][ T4725] process 'syz.3.179' launched '/dev/fd/3' with NULL argv: empty string added [ 107.967872][ T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.047107][ T4715] chnl_net:caif_netlink_parms(): no params data found [ 108.143961][ T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.160720][ T4736] loop0: detected capacity change from 0 to 4096 [ 108.192330][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.194387][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.208880][ T4715] device bridge_slave_0 entered promiscuous mode [ 108.220756][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.222873][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.225435][ T4715] device bridge_slave_1 entered promiscuous mode [ 108.259448][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.268713][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.445227][ T4715] team0: Port device team_slave_0 added [ 108.471654][ T4715] team0: Port device team_slave_1 added [ 108.546756][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.550764][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.582274][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.335892][ T4751] xt_CT: No such helper "snmp_trap" [ 109.415875][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.417745][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.441213][ T4756] loop4: detected capacity change from 0 to 512 [ 109.442756][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.572692][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 109.604648][ T4715] device hsr_slave_0 entered promiscuous mode [ 109.617807][ T4756] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.643278][ T4715] device hsr_slave_1 entered promiscuous mode [ 109.682294][ T4715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.684326][ T4715] Cannot create hsr debugfs directory [ 110.255814][ T4774] loop2: detected capacity change from 0 to 2048 [ 110.388963][ T4774] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.429606][ T4774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.012700][ T1536] Bluetooth: hci0: command 0x041b tx timeout [ 113.930882][ T4715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.006712][ T4715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.350397][ T4821] cgroup: fork rejected by pids controller in /syz3 [ 114.902047][ T1536] Bluetooth: hci0: command 0x040f tx timeout [ 114.922059][ T4715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.966969][ T4715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.077191][ T4825] input: syz1 as /devices/virtual/input/input7 [ 115.321735][ T136] device hsr_slave_0 left promiscuous mode [ 115.370596][ T136] device hsr_slave_1 left promiscuous mode [ 115.443401][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.445485][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.478331][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.480210][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.487190][ T136] device bridge_slave_1 left promiscuous mode [ 115.490086][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.556130][ T136] device bridge_slave_0 left promiscuous mode [ 115.557862][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.752954][ T136] device veth1_macvtap left promiscuous mode [ 115.757269][ T136] device veth1_vlan left promiscuous mode [ 115.760357][ T136] device veth0_vlan left promiscuous mode [ 116.095763][ T136] team0 (unregistering): Port device team_slave_1 removed [ 116.932381][ T4017] Bluetooth: hci0: command 0x0419 tx timeout [ 116.952674][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.038442][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.215343][ T136] bond0 (unregistering): Released all slaves [ 117.392749][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.430963][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.432536][ T4863] loop4: detected capacity change from 0 to 40427 [ 117.444951][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.447552][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.503057][ T4863] F2FS-fs (loop4): Unrecognized mount option "errore" or missing value [ 117.514459][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.518015][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.535474][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.537478][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.560366][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.570115][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.579077][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.581141][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.590399][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.597721][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.602864][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.617546][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.638289][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.647989][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.669549][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.688641][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.710982][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.737183][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.748678][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.752792][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.755812][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.766416][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.810674][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.022127][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.057966][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 118.986063][ T4887] device bridge_slave_1 left promiscuous mode [ 118.989344][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.017862][ T4887] bridge1: port 1(bridge_slave_1) entered blocking state [ 119.019755][ T4887] bridge1: port 1(bridge_slave_1) entered disabled state [ 119.022408][ T4887] device bridge_slave_1 entered promiscuous mode [ 119.139947][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.142140][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.164633][ T25] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 119.168324][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.170038][ T25] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 119.181853][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.186751][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.229706][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.233530][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.236262][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.238874][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.245542][ T25] usb 1-1: config 0 descriptor?? [ 119.259997][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.285168][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.304591][ T4715] device veth0_vlan entered promiscuous mode [ 119.317417][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 119.323043][ T4715] device veth1_vlan entered promiscuous mode [ 119.333167][ T4876] chnl_net:caif_netlink_parms(): no params data found [ 119.467341][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.470091][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.472924][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.475516][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.505333][ T4715] device veth0_macvtap entered promiscuous mode [ 119.530186][ T4715] device veth1_macvtap entered promiscuous mode [ 119.556678][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.566070][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.578951][ T4876] device bridge_slave_0 entered promiscuous mode [ 119.639197][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.652517][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.663373][ T4098] usb 1-1: USB disconnect, device number 4 [ 119.672877][ T4876] device bridge_slave_1 entered promiscuous mode [ 119.728728][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.731662][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.740271][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.750176][ T4924] loop2: detected capacity change from 0 to 2048 [ 119.753207][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.760196][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.763023][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.768404][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.771208][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.780295][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.799737][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.803389][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.806934][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.809587][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.819588][ T4069] Bluetooth: hci4: command 0x0409 tx timeout [ 119.844727][ T4876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.848998][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.851705][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.875532][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.878789][ T4924] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.896478][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.899066][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.901747][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.941783][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.953844][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.957724][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.961676][ T4876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.038117][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.040938][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.054923][ T4715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.060795][ T4715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.066833][ T4715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.080305][ T4715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.090142][ T4930] netlink: 'syz.4.215': attribute type 21 has an invalid length. [ 120.092682][ T4930] netlink: 160 bytes leftover after parsing attributes in process `syz.4.215'. [ 120.147771][ T4876] team0: Port device team_slave_0 added [ 120.155831][ T4876] team0: Port device team_slave_1 added [ 120.279601][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.281535][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.301007][ T4876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.334586][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.336474][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.354616][ T4876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.358226][ T4935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.217'. [ 120.365270][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.367616][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.400490][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.483466][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.485941][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.490468][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.496968][ T4940] loop2: detected capacity change from 0 to 256 [ 120.508349][ T4941] MTD: Couldn't look up 'ns/ipc': -2 [ 120.534376][ T4876] device hsr_slave_0 entered promiscuous mode [ 120.554142][ T4940] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3289bd7c, utbl_chksum : 0xe619d30d) [ 120.564233][ T4876] device hsr_slave_1 entered promiscuous mode [ 120.774490][ T4876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.780809][ T4876] Cannot create hsr debugfs directory [ 122.324586][ T4953] loop4: detected capacity change from 0 to 512 [ 122.410512][ T25] Bluetooth: hci4: command 0x041b tx timeout [ 122.490481][ T4953] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 122.532641][ T4952] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 122.550773][ T4956] loop0: detected capacity change from 0 to 512 [ 122.591638][ T4876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.650352][ T4956] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.697296][ T4958] loop2: detected capacity change from 0 to 128 [ 122.895163][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 122.930440][ T4876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.091815][ T4876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.344118][ T4876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.378447][ T4876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.417276][ T4989] loop0: detected capacity change from 0 to 64 [ 124.452252][ T4098] Bluetooth: hci4: command 0x040f tx timeout [ 125.275267][ T4876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.308709][ T4989] hfs: get root inode failed [ 125.355190][ T4876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.370084][ T4992] binder: 4991:4992 tried to acquire reference to desc 0, got 1 instead [ 125.385512][ T4876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.618472][ T4998] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 125.654320][ T4998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.083510][ T4876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.151066][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.153911][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.187296][ T4876] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.308076][ T4876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.310763][ T4876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.535214][ T4098] Bluetooth: hci4: command 0x0419 tx timeout [ 127.562317][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.565405][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.567934][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.569720][ T5066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.600561][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.638639][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.817405][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.819311][ T5066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.821956][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.848248][ T5085] loop0: detected capacity change from 0 to 8 [ 128.596202][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.606348][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.619831][ T5085] SQUASHFS error: lzo decompression failed, data probably corrupt [ 128.633944][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.636278][ T5085] SQUASHFS error: Failed to read block 0x91: -5 [ 128.637785][ T5085] SQUASHFS error: Unable to read metadata cache entry [8f] [ 128.639597][ T5085] SQUASHFS error: Unable to read inode 0x11f [ 128.662263][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.668878][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.675101][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.688116][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.701023][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.708401][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.795978][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.829478][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.832330][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.942308][ T5097] loop1: detected capacity change from 0 to 128 [ 131.095267][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.097553][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.416127][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.418224][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.471726][ T4876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.516626][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.519847][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.566749][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.569886][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.573511][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.580501][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.603183][ T4876] device veth0_vlan entered promiscuous mode [ 131.654990][ T4876] device veth1_vlan entered promiscuous mode [ 131.668964][ T5109] binder: 5108:5109 tried to acquire reference to desc 0, got 1 instead [ 131.830483][ T4876] device veth0_macvtap entered promiscuous mode [ 131.871110][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.874772][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.877585][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.902583][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.914283][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.783787][ T5116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'. [ 133.788803][ T4876] device veth1_macvtap entered promiscuous mode [ 133.810878][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.835803][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.952304][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.000500][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.073493][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.183024][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.271283][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.384453][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.475754][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.570012][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.679291][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.683312][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.688383][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.691175][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.694832][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.697408][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.699939][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.702917][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.705458][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.708489][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.711366][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.714241][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.718064][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.742924][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.745705][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.749464][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.769684][ T5133] loop0: detected capacity change from 0 to 512 [ 134.773835][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.806114][ T4876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.808338][ T4876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.810495][ T4876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.845675][ T5133] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 134.867806][ T4876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.898049][ T5127] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 135.933981][ T5141] loop1: detected capacity change from 0 to 8192 [ 136.016006][ T5144] loop2: detected capacity change from 0 to 16 [ 136.047621][ T5141] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 136.050412][ T5141] REISERFS (device loop1): using ordered data mode [ 136.052340][ T5141] reiserfs: using flush barriers [ 136.088948][ T5148] loop0: detected capacity change from 0 to 512 [ 136.095447][ T5141] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.106272][ T5141] REISERFS (device loop1): checking transaction log (loop1) [ 136.134972][ T5141] REISERFS (device loop1): Using r5 hash to sort names [ 136.137003][ T5141] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 136.146462][ T5144] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 136.182191][ T5141] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 136.193613][ T5073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.196878][ T5073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.238395][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.447892][ T5148] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.258: inode #1: comm syz.0.258: iget: illegal inode # [ 136.455188][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.457631][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.468209][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.479251][ T5148] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.258: error while reading EA inode 1 err=-117 [ 136.643185][ T5148] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 136.646704][ T5148] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.258: inode #1: comm syz.0.258: iget: illegal inode # [ 136.676336][ T5148] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.258: error while reading EA inode 1 err=-117 [ 136.882186][ T5159] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 136.886134][ T5159] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 136.889987][ T5159] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 137.549712][ T5148] EXT4-fs (loop0): 1 orphan inode deleted [ 137.551223][ T5148] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 137.565444][ T5158] binder: 5157:5158 tried to acquire reference to desc 0, got 1 instead [ 138.303626][ T5161] input: syz0 as /devices/virtual/input/input8 [ 140.091474][ T5176] loop4: detected capacity change from 0 to 1024 [ 141.879716][ T4173] hfsplus: b-tree write err: -5, ino 4 [ 144.307772][ T5202] loop2: detected capacity change from 0 to 512 [ 144.423645][ T5206] binder: 5204:5206 tried to acquire reference to desc 0, got 1 instead [ 144.463488][ T5206] binder: 5204:5206 got transaction with invalid data ptr [ 144.465759][ T5206] binder: 5204:5206 transaction failed 29201/-14, size 0-24 line 3185 [ 145.035872][ T4116] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.208933][ T5202] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 145.851326][ T5229] loop4: detected capacity change from 0 to 64 [ 146.131896][ T5246] udc-core: couldn't find an available UDC or it's busy [ 146.140479][ T5246] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.173135][ T5246] loop4: detected capacity change from 0 to 16 [ 146.182504][ T4069] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.236860][ T5246] erofs: (device loop4): mounted with root inode @ nid 36. [ 146.299104][ T5246] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 146.325586][ T5246] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 146.432185][ T4069] usb 1-1: Using ep0 maxpacket: 16 [ 146.583553][ T4069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.586413][ T4069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.592238][ T4069] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.595640][ T4069] usb 1-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 146.600600][ T5226] loop3: detected capacity change from 0 to 32768 [ 146.602612][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.607065][ T4069] usb 1-1: config 0 descriptor?? [ 147.135104][ T4069] hid-multitouch 0003:18D1:5028.0001: hidraw0: USB HID v0.00 Device [HID 18d1:5028] on usb-dummy_hcd.0-1/input0 [ 147.330590][ T5226] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.281 (5226) [ 147.357893][ T4069] usb 1-1: USB disconnect, device number 5 [ 147.366267][ T5237] delete_channel: no stack [ 147.400799][ T5226] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 147.410465][ T5226] BTRFS info (device loop3): enabling disk space caching [ 147.416124][ T5226] BTRFS info (device loop3): setting nodatacow, compression disabled [ 147.422053][ T5226] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 147.430005][ T5226] BTRFS info (device loop3): use zstd compression, level 3 [ 147.435672][ T5226] BTRFS info (device loop3): enabling ssd optimizations [ 147.438692][ T5226] BTRFS info (device loop3): using spread ssd allocation scheme [ 147.444309][ T5226] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 147.449065][ T5226] BTRFS error (device loop3): cannot disable free space tree [ 147.493584][ T5299] binder: 5298:5299 tried to acquire reference to desc 0, got 1 instead [ 147.496414][ T5299] binder: 5298:5299 got transaction with invalid data ptr [ 147.498915][ T5299] binder: 5298:5299 transaction failed 29201/-14, size 0-24 line 3185 [ 147.501832][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.822674][ T5226] BTRFS error (device loop3): open_ctree failed [ 148.571329][ T5308] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 148.643330][ T4305] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (4305) [ 148.746766][ T5308] BUG: sleeping function called from invalid context at net/core/sock.c:3282 [ 148.749400][ T5308] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5308, name: syz.4.289 [ 148.751606][ T5308] 7 locks held by syz.4.289/5308: [ 148.753094][ T5308] #0: ffff800016bec8c8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x2c/0x54 [ 148.755538][ T5308] #1: ffff800016bec728 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x15c/0x39c [ 148.758280][ T5308] #2: ffff0000da9a2690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: netlink_dump+0xbc/0xa88 [ 148.760934][ T5308] #3: ffff800016cc5e68 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x17c/0x33c [ 148.763815][ T5308] #4: ffff800014c817a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 148.766381][ T5308] #5: ffff0000c562da38 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x7b0/0x10dc [ 148.769081][ T5308] #6: ffff0000d9122f20 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xcb8/0x17b4 [ 148.771897][ T5308] Preemption disabled at: [ 148.771912][ T5308] [] mptcp_diag_dump+0x7b0/0x10dc [ 148.775125][ T5308] CPU: 1 PID: 5308 Comm: syz.4.289 Not tainted 5.15.165-syzkaller #0 [ 148.777351][ T5308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 148.780255][ T5308] Call trace: [ 148.781164][ T5308] dump_backtrace+0x0/0x530 [ 148.781662][ T5319] loop1: detected capacity change from 0 to 512 [ 148.782299][ T5308] show_stack+0x2c/0x3c [ 148.782355][ T5308] dump_stack_lvl+0x108/0x170 [ 148.782366][ T5308] dump_stack+0x1c/0x58 [ 148.782375][ T5308] ___might_sleep+0x380/0x4dc [ 148.782385][ T5308] __might_sleep+0x98/0xf0 [ 148.782394][ T5308] __lock_sock_fast+0x3c/0xf0 [ 148.782406][ T5308] mptcp_diag_get_info+0x210/0x8a0 [ 148.782418][ T5308] inet_sk_diag_fill+0xcb8/0x17b4 [ 148.782429][ T5308] mptcp_diag_dump+0xb4c/0x10dc [ 148.782439][ T5308] __inet_diag_dump+0x1e8/0x33c [ 148.782449][ T5308] inet_diag_dump_compat+0x17c/0x288 [ 148.782459][ T5308] netlink_dump+0x470/0xa88 [ 148.782470][ T5308] __netlink_dump_start+0x488/0x6ec [ 148.782481][ T5308] inet_diag_rcv_msg_compat+0x1c8/0x434 [ 148.782491][ T5308] sock_diag_rcv_msg+0x174/0x39c [ 148.782503][ T5308] netlink_rcv_skb+0x20c/0x3b8 [ 148.782514][ T5308] sock_diag_rcv+0x3c/0x54 [ 148.782524][ T5308] netlink_unicast+0x664/0x938 [ 148.782535][ T5308] netlink_sendmsg+0x844/0xb38 [ 148.782545][ T5308] ____sys_sendmsg+0x584/0x870 [ 148.782557][ T5308] ___sys_sendmsg+0x214/0x294 [ 148.782567][ T5308] __arm64_sys_sendmsg+0x1ac/0x25c [ 148.782584][ T5308] invoke_syscall+0x98/0x2b8 [ 148.782596][ T5308] el0_svc_common+0x138/0x258 [ 148.782607][ T5308] do_el0_svc+0x58/0x14c [ 148.782617][ T5308] el0_svc+0x7c/0x1f0 [ 148.782626][ T5308] el0t_64_sync_handler+0x84/0xe4 [ 148.782636][ T5308] el0t_64_sync+0x1a0/0x1a4 [ 151.179896][ T136] device hsr_slave_0 left promiscuous mode [ 151.222620][ T136] device hsr_slave_1 left promiscuous mode [ 151.322347][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.324487][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.327175][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.329190][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.331678][ T136] device bridge_slave_1 left promiscuous mode [ 151.333593][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.373499][ T136] device bridge_slave_0 left promiscuous mode [ 151.375224][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.532434][ T136] device veth0_macvtap left promiscuous mode [ 151.534147][ T136] device veth1_vlan left promiscuous mode [ 151.535765][ T136] device veth0_vlan left promiscuous mode [ 151.813668][ T136] team0 (unregistering): Port device team_slave_1 removed [ 151.827064][ T136] team0 (unregistering): Port device team_slave_0 removed [ 151.840258][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.889614][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.038507][ T136] bond0 (unregistering): Released all slaves