last executing test programs: 2.841396639s ago: executing program 1 (id=227): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x163e, 0x80, 0x1fffff, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47b8, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) 2.800748692s ago: executing program 3 (id=228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, 0x0, 0x0) 2.630629315s ago: executing program 3 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) capget(&(0x7f00000001c0)={0x19980330}, 0x0) 2.630147285s ago: executing program 1 (id=234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1d, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000240)={0x80, 0x6, 0xc4, 0x0, 0x9, 0x3e}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2, 0x7}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYRESHEX=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='erofs_destroy_inode\x00', r3, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1, 0x0, 0x0, 0xc}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="010026bd70e9fedbdf250a00000004000380ef1b4758c4b365e2a699615e85266ea88370fb6967cb5b7896c79ebf0e6e40b3c6ed26afe9858e9624435a1f1481d5640abbc22a3d6d89fe6542f91d6b43d63cbae3c3c01b4f3d99fcd71a58a39594c27d70eae027ac9eec3ebd3ae2e2c5ef893d40023ff88224c02ba50933f146c15644b436d7bf491cde7dc76d6b31371974c76c848cab712f8dda0c97a565"], 0x18}, 0x1, 0x0, 0x0, 0x40814}, 0x8040) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x40010) sysinfo(&(0x7f0000000540)=""/145) r9 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r9, 0x0, 0xbf5, 0x2000402) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") 2.529765723s ago: executing program 2 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060089"], 0x24}}, 0x10) 2.486731836s ago: executing program 3 (id=237): r0 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r0, 0x0, 0xfdef) 2.43178109s ago: executing program 3 (id=239): r0 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x76c6, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 2.346485397s ago: executing program 2 (id=240): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) 2.292761972s ago: executing program 3 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) brk(0x400000ffc000) 2.130528784s ago: executing program 3 (id=243): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000fba466a9340d47103c000000000000020000000900020073797a31000000735d7a301e00000008000000000000c9051400000000000000000a00"/100, @ANYRESOCT], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz7utAjEUBNB5eou1KwIktD2QkBJTBCKnEkQLtEFEgwhkzKcDtME5gcfXGgc3TMK5xeqaTY7j8vP+/8rbdyrbrl773JPMM2uFLkONv/ecvh67MTk8f5Z1ktOQLLqU1ijZX36zHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2yMAAP//2qsHZg==") r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.130257914s ago: executing program 2 (id=244): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.990551835s ago: executing program 2 (id=246): pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) acct(&(0x7f0000000040)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180000001c000000000000ce2900000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r0, 0x0, 0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x6}, 0xffffffffffffffb1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) fcntl$dupfd(r4, 0x0, r4) fcntl$setsig(r0, 0xa, 0x13) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='cgroup\x00') lseek(r5, 0xffffff60, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="9110c3ff0000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) 1.242124073s ago: executing program 1 (id=250): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) msgget$private(0x0, 0x0) 1.087673065s ago: executing program 4 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 967.430724ms ago: executing program 1 (id=253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 917.557179ms ago: executing program 4 (id=254): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000680001000000ffc3000000000a000000000000000600070007000000080008800400010008000500", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 866.648222ms ago: executing program 0 (id=255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005200)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000001000000090000000000000014000000000000000000000002000000bb0000000000000040000000000000000000000007"], 0x70}}], 0x1, 0x24008084) 737.415742ms ago: executing program 0 (id=256): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ef00", 0x30, 0x2b, 0x0, @private1, @local, {[@hopopts={0x87}, @srh={0x3a, 0x2, 0x4, 0x1, 0x9, 0x0, 0xfff8, [@private2={0xfc, 0x2, '\x00', 0x1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 730.453213ms ago: executing program 4 (id=257): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x5}, 0x8) 521.357479ms ago: executing program 0 (id=258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 521.131209ms ago: executing program 4 (id=259): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x43, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000000000018010000756c6c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x1000, 0x0, 0x0, 0x20680, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffff, 0x0) vmsplice(r2, &(0x7f00000009c0)=[{&(0x7f00000002c0)="8a", 0x1}], 0x1, 0x6) sendmmsg$unix(r4, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)="18", 0x1}], 0x1, 0x0, 0x0, 0x24004080}}], 0x1, 0x4000) 407.400218ms ago: executing program 1 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x28, r3, 0xc4fc9e906872338b, 0x3, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 357.896002ms ago: executing program 0 (id=261): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0xa846, 0x10, 0x3, 0x178}, &(0x7f0000002380)=0x0, &(0x7f0000000140)=0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 262.598289ms ago: executing program 2 (id=262): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000180), 0x3c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 259.4404ms ago: executing program 4 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x81}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f00000003c0)={0x1, 0x2, 0xffffffffffff7bbb, 0x100000001}) 152.330188ms ago: executing program 1 (id=264): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) chdir(&(0x7f0000000000)='./file0\x00') r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="e5ffff6e18"], 0xa0, 0x4841}, 0x4004881) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 133.449189ms ago: executing program 0 (id=265): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7f, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_delete(0x0) 66.644994ms ago: executing program 4 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='id:\xff\xffe{') 18.459408ms ago: executing program 2 (id=267): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$9p_rdma(&(0x7f0000000140), &(0x7f00000002c0)='./file2\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x3}}]}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=268): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000040)='./bus\x00', 0xe0b40, 0x389b0d52417bb2ab) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 53.019136][ T4172] cgroup: Unknown subsys name 'net' [ 53.153567][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.655552][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.673819][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 56.716490][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 56.732916][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 56.815672][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 56.843440][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 56.926501][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.934748][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.942927][ T4188] device bridge_slave_0 entered promiscuous mode [ 56.960149][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.967536][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.975230][ T4194] device bridge_slave_0 entered promiscuous mode [ 56.983502][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.990952][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.999146][ T4183] device bridge_slave_0 entered promiscuous mode [ 57.015973][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.023472][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.032069][ T4188] device bridge_slave_1 entered promiscuous mode [ 57.042648][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.050374][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.058461][ T4194] device bridge_slave_1 entered promiscuous mode [ 57.065837][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.073531][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.082089][ T4183] device bridge_slave_1 entered promiscuous mode [ 57.156361][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.163725][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.172343][ T4187] device bridge_slave_0 entered promiscuous mode [ 57.181842][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.193498][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.213102][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.224633][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.237026][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.253222][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.260540][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.268529][ T4187] device bridge_slave_1 entered promiscuous mode [ 57.291319][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.321303][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.328821][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.337062][ T4184] device bridge_slave_0 entered promiscuous mode [ 57.356504][ T4183] team0: Port device team_slave_0 added [ 57.373013][ T4188] team0: Port device team_slave_0 added [ 57.379408][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.386481][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.394854][ T4184] device bridge_slave_1 entered promiscuous mode [ 57.412306][ T4183] team0: Port device team_slave_1 added [ 57.419991][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.431034][ T4188] team0: Port device team_slave_1 added [ 57.439013][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.458346][ T4194] team0: Port device team_slave_0 added [ 57.495469][ T4194] team0: Port device team_slave_1 added [ 57.523492][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.542087][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.549340][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.576296][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.589192][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.596321][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.623711][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.637766][ T4187] team0: Port device team_slave_0 added [ 57.645514][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.670154][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.677389][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.704193][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.716078][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.724439][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.750724][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.764497][ T4187] team0: Port device team_slave_1 added [ 57.776607][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.783830][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.810406][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.843210][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.850651][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.878018][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.923032][ T4184] team0: Port device team_slave_0 added [ 57.947571][ T4194] device hsr_slave_0 entered promiscuous mode [ 57.957452][ T4194] device hsr_slave_1 entered promiscuous mode [ 57.964648][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.971784][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.997917][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.010601][ T4184] team0: Port device team_slave_1 added [ 58.016755][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.024243][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.051408][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.072047][ T4183] device hsr_slave_0 entered promiscuous mode [ 58.079470][ T4183] device hsr_slave_1 entered promiscuous mode [ 58.086033][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.093967][ T4183] Cannot create hsr debugfs directory [ 58.150792][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.158257][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.184735][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.199573][ T4188] device hsr_slave_0 entered promiscuous mode [ 58.206882][ T4188] device hsr_slave_1 entered promiscuous mode [ 58.213727][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.221755][ T4188] Cannot create hsr debugfs directory [ 58.246446][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.253774][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.280208][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.316509][ T4187] device hsr_slave_0 entered promiscuous mode [ 58.323778][ T4187] device hsr_slave_1 entered promiscuous mode [ 58.331832][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.339651][ T4187] Cannot create hsr debugfs directory [ 58.358492][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 58.365456][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 58.367889][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 58.388466][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 58.394594][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 58.451584][ T4184] device hsr_slave_0 entered promiscuous mode [ 58.458983][ T4184] device hsr_slave_1 entered promiscuous mode [ 58.465787][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.473854][ T4184] Cannot create hsr debugfs directory [ 58.710920][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.729629][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.739130][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.751157][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.803948][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.816704][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.828724][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.838811][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.942880][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.965321][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.983401][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.995608][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.004511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.015284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.026837][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.035000][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.066840][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.079261][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.089505][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.096971][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.106051][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.116960][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.125793][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.133226][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.141644][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.150975][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.160464][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.186167][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.196083][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.217993][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.236798][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.246067][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.255927][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.264875][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.277999][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.295159][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.308100][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.327250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.339109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.349162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.359160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.367796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.375822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.389430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.397204][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.408665][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.424616][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.438439][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.459406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.476488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.486263][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.493767][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.510549][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.534562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.542765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.553373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.563023][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.570462][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.589199][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.605470][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.632347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.641630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.651751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.662312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.672079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.695668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.704483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.714619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.724747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.733465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.742025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.771966][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.810807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.821481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.875681][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.903783][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.915298][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.937893][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.946155][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.972911][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.019045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.028718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.039355][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.072034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.081521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.091269][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.098841][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.108967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.118650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.128662][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.135834][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.143817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.155148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.164860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.173862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.183169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.191959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.216441][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.231398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.249013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.264605][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.271948][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.281050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.290192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.299554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.307225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.315370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.333974][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.353164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.363814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.373013][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.380241][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.389398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.398887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.416028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.424935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.434327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.443335][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 60.447786][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 60.449954][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 60.463910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.473003][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 60.479503][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 60.485195][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.502310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.512810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.522465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.531987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.541078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.551295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.560536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.570129][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.577538][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.585973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.595101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.604358][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.611490][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.619834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.631861][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.643222][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.664544][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.675986][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.707122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.716837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.726335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.736442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.745401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.754143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.764468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.774024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.782793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.844146][ T4194] device veth0_vlan entered promiscuous mode [ 60.856010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.880005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.896663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.907195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.917612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.926241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.936568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.944905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.953446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.961593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.970333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.990650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.001110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.015848][ T4194] device veth1_vlan entered promiscuous mode [ 61.031118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.064549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.073616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.117171][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.130345][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.151830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.161404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.171009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.194394][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.211709][ T4188] device veth0_vlan entered promiscuous mode [ 61.233521][ T4194] device veth0_macvtap entered promiscuous mode [ 61.243159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.252563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.261571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.270786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.279957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.287940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.295534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.304636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.314096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.322970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.331108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.352533][ T4194] device veth1_macvtap entered promiscuous mode [ 61.380779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.390094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.400416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.410590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.418928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.433155][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.442906][ T4188] device veth1_vlan entered promiscuous mode [ 61.471249][ T4183] device veth0_vlan entered promiscuous mode [ 61.485103][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.494997][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.504112][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.513229][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.522258][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.531672][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.540994][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.549540][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.570162][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.594507][ T4183] device veth1_vlan entered promiscuous mode [ 61.607432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.616042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.624470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.633764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.645727][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.662881][ T4188] device veth0_macvtap entered promiscuous mode [ 61.675375][ T4188] device veth1_macvtap entered promiscuous mode [ 61.685649][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.694843][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.704542][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.714968][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.725412][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.734827][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.744875][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.755162][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.764627][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.773984][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.822108][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.834651][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.848774][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.872810][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.883441][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.892948][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.902740][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.913064][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.922082][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.932650][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.940767][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.958099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.968757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.984432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.993287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.003287][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.014248][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.029341][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.036872][ T4187] device veth0_vlan entered promiscuous mode [ 62.046583][ T4184] device veth0_vlan entered promiscuous mode [ 62.063446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.071606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.080032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.089302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.101232][ T4183] device veth0_macvtap entered promiscuous mode [ 62.115459][ T4187] device veth1_vlan entered promiscuous mode [ 62.130887][ T4184] device veth1_vlan entered promiscuous mode [ 62.142853][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.152348][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.161559][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.171892][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.224470][ T4183] device veth1_macvtap entered promiscuous mode [ 62.256844][ T4184] device veth0_macvtap entered promiscuous mode [ 62.271283][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.283359][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.291962][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.300704][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.309063][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.317016][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.325576][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.334568][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.360020][ T4184] device veth1_macvtap entered promiscuous mode [ 62.383777][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.392491][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.438739][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.451368][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.461731][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.472443][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.484501][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.508338][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.519545][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 62.521317][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.527884][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 62.536106][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.552689][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 62.552927][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.559195][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 62.574515][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.575816][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 62.586493][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.605673][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.615206][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.624414][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.633833][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.642846][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.652334][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.661291][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.675349][ T4187] device veth0_macvtap entered promiscuous mode [ 62.683507][ T1249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.689542][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.702886][ T1249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.709564][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.720871][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.731881][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.743142][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.760669][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.775692][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.785693][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.797197][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.808032][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.818924][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.831332][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.842213][ T4187] device veth1_macvtap entered promiscuous mode [ 62.850827][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.859490][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.867793][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.875889][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.885652][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.894816][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.903536][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.920280][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.935192][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.944690][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.954295][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.967693][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.976455][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.986233][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.995185][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.014585][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.026097][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.036413][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.049368][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.059623][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.070341][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.081271][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.091889][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.103223][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.136440][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.146220][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.157295][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.172964][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.190439][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.199347][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.215175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.225897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.234454][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.247107][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.257763][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.268391][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.279150][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.290201][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.300287][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.311219][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.323573][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.335623][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.345004][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.354819][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.363766][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.393803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.410532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.432651][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.462934][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.499165][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.640234][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.665168][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.682145][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.715965][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.725879][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.740846][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.775420][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.775768][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.821732][ T1249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.828119][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.834009][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.854228][ T1249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.879042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.897632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.906326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.916836][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.949851][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.011406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.289836][ T4311] 9pnet_virtio: no channels available for device [ 64.575773][ T4322] device netdevsim0 entered promiscuous mode [ 64.598568][ T4174] Bluetooth: hci2: command 0x0419 tx timeout [ 64.604413][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 64.606409][ T4174] Bluetooth: hci0: command 0x0419 tx timeout [ 64.643012][ T4322] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 64.648283][ T4174] Bluetooth: hci3: command 0x0419 tx timeout [ 64.674884][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 64.685586][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 64.882076][ T4332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 64.924536][ T4332] device macvlan2 entered promiscuous mode [ 64.975976][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 65.032016][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 65.064349][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 65.118015][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 65.150108][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 65.180401][ T4344] loop3: detected capacity change from 0 to 512 [ 65.198143][ T4351] sch_fq: defrate 4294967291 ignored. [ 65.234805][ T4352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 65.378443][ T4344] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 65.387182][ T4352] device team1 entered promiscuous mode [ 65.411795][ T4344] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.423514][ T4352] 8021q: adding VLAN 0 to HW filter on device team1 [ 65.542493][ T26] audit: type=1800 audit(1765611935.676:2): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.24" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 65.573676][ T4371] loop0: detected capacity change from 0 to 512 [ 65.661428][ T4371] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 65.700978][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.738160][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.745944][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.766057][ T4371] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,auto_da_alloc,bsdgroups,jqfmt=vfsold,acl,,errors=continue. Quota mode: writeback. [ 65.803774][ T4371] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.846003][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.875608][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.903761][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.914699][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.941312][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.957653][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.965485][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.981101][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 65.992003][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.002941][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.025230][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.044571][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.058132][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.065957][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.080565][ T4226] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 66.118156][ T4226] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 66.163985][ T4388] loop2: detected capacity change from 0 to 8192 [ 66.212887][ T4393] loop3: detected capacity change from 0 to 1024 [ 66.285196][ T4393] EXT4-fs (loop3): Ignoring removed orlov option [ 66.344633][ T4388] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 66.354853][ T4393] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 66.416503][ T4388] FAT-fs (loop2): Filesystem has been set read-only [ 66.450775][ T4388] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 66.461122][ T4388] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 66.477563][ T4388] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 66.486448][ T4388] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2195) [ 66.512085][ T26] audit: type=1800 audit(1765611936.646:3): pid=4388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.37" name="file0" dev="loop2" ino=1048592 res=0 errno=0 [ 66.892019][ T4421] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 66.935655][ T4423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.49'. [ 67.001696][ T4423] netlink: 48 bytes leftover after parsing attributes in process `syz.4.49'. [ 67.072638][ T4427] tmpfs: Bad value for 'mpol' [ 67.272980][ T4431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.301673][ T4426] fido_id[4426]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.489546][ T4444] loop4: detected capacity change from 0 to 512 [ 67.529819][ T4444] ======================================================= [ 67.529819][ T4444] WARNING: The mand mount option has been deprecated and [ 67.529819][ T4444] and is ignored by this kernel. Remove the mand [ 67.529819][ T4444] option from the mount to silence this warning. [ 67.529819][ T4444] ======================================================= [ 67.625950][ T4451] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET) [ 67.734615][ T4437] loop1: detected capacity change from 0 to 512 [ 67.872436][ T4437] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 67.914455][ T4463] sd 0:0:1:0: device reset [ 67.920903][ T4431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.138815][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 68.238877][ T4437] EXT4-fs (loop1): too many log groups per flexible block group [ 68.246930][ T4437] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 68.254931][ T4437] EXT4-fs (loop1): mount failed [ 68.281980][ T4477] device bond0 entered promiscuous mode [ 68.305959][ T4477] device bond_slave_0 entered promiscuous mode [ 68.327650][ T4477] device bond_slave_1 entered promiscuous mode [ 68.371751][ T4477] device ip6gretap0 entered promiscuous mode [ 68.435257][ T4477] device hsr1 entered promiscuous mode [ 68.484455][ T4452] mmap: syz.1.51 (4452) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 68.617136][ T4431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.656477][ T4487] loop4: detected capacity change from 0 to 128 [ 68.744077][ T4487] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.758492][ T4487] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.832026][ T4487] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 68.888888][ T4494] loop2: detected capacity change from 0 to 764 [ 69.015221][ T4431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.050506][ T4496] loop4: detected capacity change from 0 to 512 [ 69.133756][ T4500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.142381][ T4500] IPv6: NLM_F_CREATE should be set when creating new route [ 69.149885][ T4500] IPv6: NLM_F_CREATE should be set when creating new route [ 69.166404][ T4496] EXT4-fs (loop4): too many log groups per flexible block group [ 69.214388][ T4496] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 69.221644][ T4496] EXT4-fs (loop4): mount failed [ 69.251159][ T4431] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.269736][ T4431] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.293021][ T4431] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.348257][ T4431] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.488335][ T4506] loop4: detected capacity change from 0 to 512 [ 69.531529][ T4506] EXT4-fs (loop4): Ignoring removed bh option [ 69.561385][ T4506] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 69.682675][ T4506] EXT4-fs (loop4): 1 truncate cleaned up [ 69.716248][ T4506] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 69.864303][ T4506] EXT4-fs (loop4): shut down requested (0) [ 69.891735][ T4508] __nla_validate_parse: 4 callbacks suppressed [ 69.891754][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 70.168433][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 70.364452][ T4522] Cannot find add_set index 0 as target [ 70.527121][ T4542] loop1: detected capacity change from 0 to 1024 [ 70.685141][ T4550] loop2: detected capacity change from 0 to 512 [ 70.709241][ T4542] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,abort,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 70.789449][ T4550] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.875397][ T4542] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.908773][ T4558] netlink: 'syz.4.100': attribute type 1 has an invalid length. [ 70.926667][ T4550] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.98: bad orphan inode 13 [ 70.959549][ T4550] ext4_test_bit(bit=12, block=18) = 1 [ 70.989641][ T4550] is_bad_inode(inode)=0 [ 70.994001][ T4550] NEXT_ORPHAN(inode)=2130706432 [ 71.012237][ T4542] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 3: comm syz.1.94: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.067463][ T4550] max_ino=32 [ 71.070805][ T4550] i_nlink=1 [ 71.074594][ T4550] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.107909][ T4563] netlink: 'syz.0.101': attribute type 3 has an invalid length. [ 71.123389][ T4542] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 71.169034][ T4563] Zero length message leads to an empty skb [ 71.308410][ T4542] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.308410][ T4542] [ 71.380311][ T4562] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.94: lblock 0 mapped to illegal pblock 0 (length 3) [ 71.408817][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.415577][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.482031][ T4562] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 71.523426][ T4562] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.523426][ T4562] [ 71.658948][ T4580] loop2: detected capacity change from 0 to 4096 [ 71.745808][ T4580] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 71.768083][ T4585] serio: Serial port ttyS3 [ 71.866461][ T4587] loop1: detected capacity change from 0 to 512 [ 71.980612][ T26] audit: type=1800 audit(1765611943.114:4): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.105" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 72.094056][ T4587] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000005,init_itable,discard,acl,grpjquota=,bsdgroups,discard,quota,,errors=continue. Quota mode: writeback. [ 72.118940][ T4587] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.440073][ T26] audit: type=1326 audit(1765611943.574:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a0537749 code=0x7ffc0000 [ 72.535715][ T26] audit: type=1326 audit(1765611943.614:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a0537749 code=0x7ffc0000 [ 72.623392][ T4621] process 'syz.0.120' launched '/dev/fd/6' with NULL argv: empty string added [ 72.658142][ T26] audit: type=1326 audit(1765611943.614:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f62a0537749 code=0x7ffc0000 [ 72.747679][ T4627] loop2: detected capacity change from 0 to 512 [ 72.776709][ T26] audit: type=1326 audit(1765611943.614:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a0537749 code=0x7ffc0000 [ 72.835957][ T4630] loop3: detected capacity change from 0 to 512 [ 72.852375][ T4627] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.885278][ T26] audit: type=1326 audit(1765611943.614:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a0537749 code=0x7ffc0000 [ 72.898851][ T4630] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.943363][ T4627] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.063529][ T26] audit: type=1326 audit(1765611944.194:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906fe2749 code=0x7ffc0000 [ 73.091808][ T4627] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.138101][ T26] audit: type=1326 audit(1765611944.194:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906fe2749 code=0x7ffc0000 [ 73.157055][ T4627] EXT4-fs (loop2): 1 truncate cleaned up [ 73.161757][ T26] audit: type=1326 audit(1765611944.194:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc906fe2749 code=0x7ffc0000 [ 73.191057][ T26] audit: type=1326 audit(1765611944.194:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc906fe2749 code=0x7ffc0000 [ 73.193740][ T4630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.124: Parent and EA inode have the same ino 15 [ 73.229684][ T4630] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.124: Parent and EA inode have the same ino 15 [ 73.231566][ T4639] loop4: detected capacity change from 0 to 764 [ 73.245515][ T4630] EXT4-fs (loop3): 1 orphan inode deleted [ 73.254887][ T4627] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 73.257496][ T4630] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,nombcache,sysvgroups,,errors=continue. Quota mode: none. [ 73.507071][ T4646] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.574822][ T4646] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.856776][ T4633] loop1: detected capacity change from 0 to 1024 [ 73.978667][ T4633] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.038526][ T4633] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.058816][ T4633] JBD2: no valid journal superblock found [ 74.104101][ T4633] EXT4-fs (loop1): error loading journal [ 74.210819][ T4666] syz.3.139[4666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.210939][ T4666] syz.3.139[4666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.230180][ T4668] syz.2.138[4668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.363852][ T4668] syz.2.138[4668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.844432][ T4699] loop4: detected capacity change from 0 to 764 [ 75.501118][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.713170][ T23] usb 1-1: device descriptor read/64, error -71 [ 75.975961][ T4748] capability: warning: `syz.3.170' uses 32-bit capabilities (legacy support in use) [ 75.997406][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.197674][ T23] usb 1-1: device descriptor read/64, error -71 [ 76.318664][ T23] usb usb1-port1: attempt power cycle [ 76.435212][ T4767] loop3: detected capacity change from 0 to 1024 [ 76.521607][ T4767] EXT4-fs (loop3): Unrecognized mount option "uid<00000000000000000000" or missing value [ 76.556742][ T4771] syz.2.181[4771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.556853][ T4771] syz.2.181[4771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.660671][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 76.758312][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.776875][ T4771] loop2: detected capacity change from 0 to 1024 [ 76.802625][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 76.857703][ T23] usb 1-1: device descriptor read/8, error -71 [ 76.968420][ T4771] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.990504][ T4782] netlink: 'syz.4.183': attribute type 3 has an invalid length. [ 77.127562][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.217675][ T23] usb 1-1: device descriptor read/8, error -71 [ 77.254317][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 77.254334][ T26] audit: type=1326 audit(1765611948.384:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 77.362338][ T23] usb usb1-port1: unable to enumerate USB device [ 77.435818][ T26] audit: type=1326 audit(1765611948.434:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 77.616951][ T26] audit: type=1326 audit(1765611948.434:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 77.647492][ T26] audit: type=1326 audit(1765611948.434:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 77.692491][ T4803] syz.4.192[4803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.692644][ T4803] syz.4.192[4803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.773720][ T26] audit: type=1326 audit(1765611948.434:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 77.917581][ T26] audit: type=1326 audit(1765611948.434:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 77.940203][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.995200][ T26] audit: type=1326 audit(1765611948.434:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 78.055820][ T26] audit: type=1326 audit(1765611948.434:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 78.154792][ T26] audit: type=1326 audit(1765611948.434:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 78.250385][ T26] audit: type=1326 audit(1765611948.434:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a830749 code=0x7ffc0000 [ 78.272703][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.847612][ T4856] syz.0.216[4856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.847718][ T4856] syz.0.216[4856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.852525][ T4853] atomic_op ffff88807c9bd998 conn xmit_atomic 0000000000000000 [ 79.083731][ T4863] netlink: 'syz.3.219': attribute type 29 has an invalid length. [ 79.663966][ T4896] loop1: detected capacity change from 0 to 512 [ 79.808720][ T4896] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 80.046927][ T4896] loop1: detected capacity change from 0 to 512 [ 80.178993][ T4896] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.234: Failed to acquire dquot type 1 [ 80.246313][ T4896] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.234: Failed to acquire dquot type 1 [ 80.350800][ T4896] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.234: bg 0: block 248: padding at end of block bitmap is not set [ 80.477776][ T4896] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 80.560602][ T4896] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.234: Failed to acquire dquot type 1 [ 80.671490][ T4896] EXT4-fs (loop1): 1 orphan inode deleted [ 80.697431][ T4896] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.757414][ T4896] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.012677][ T4932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.249'. [ 81.350917][ T4947] netlink: 'syz.4.254': attribute type 1 has an invalid length. [ 81.639774][ T1110] cfg80211: failed to load regulatory.db [ 81.884226][ T4972] capability: warning: `syz.0.261' uses deprecated v2 capabilities in a way that may be insecure [ 81.966419][ T4975] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.252540][ T4980] [ 82.254925][ T4980] ====================================================== [ 82.262045][ T4980] WARNING: possible circular locking dependency detected [ 82.269651][ T4980] syzkaller #0 Not tainted [ 82.274122][ T4980] ------------------------------------------------------ [ 82.281161][ T4980] syz.1.264/4980 is trying to acquire lock: [ 82.287075][ T4980] ffff88807c1f4b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 82.297550][ T4980] [ 82.297550][ T4980] but task is already holding lock: [ 82.304936][ T4980] ffff88807c1f4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 82.314422][ T4980] [ 82.314422][ T4980] which lock already depends on the new lock. [ 82.314422][ T4980] [ 82.324850][ T4980] [ 82.324850][ T4980] the existing dependency chain (in reverse order) is: [ 82.334229][ T4980] [ 82.334229][ T4980] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 82.341907][ T4980] __mutex_lock_common+0x1eb/0x2390 [ 82.347855][ T4980] mutex_lock_nested+0x17/0x20 [ 82.353341][ T4980] hci_dev_do_close+0x5f/0x1030 [ 82.359104][ T4980] hci_rfkill_set_block+0x10a/0x190 [ 82.360470][ T4952] loop3: detected capacity change from 0 to 8159 [ 82.364851][ T4980] rfkill_set_block+0x1c6/0x420 [ 82.364880][ T4980] rfkill_fop_write+0x458/0x560 [ 82.364896][ T4980] vfs_write+0x300/0xd00 [ 82.364913][ T4980] ksys_write+0x14d/0x250 [ 82.391955][ T4980] do_syscall_64+0x4c/0xa0 [ 82.397051][ T4980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.403519][ T4980] [ 82.403519][ T4980] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 82.403912][ T4988] loop2: detected capacity change from 0 to 512 [ 82.411671][ T4980] __mutex_lock_common+0x1eb/0x2390 [ 82.411709][ T4980] mutex_lock_nested+0x17/0x20 [ 82.411727][ T4980] rfkill_register+0x33/0x8a0 [ 82.411743][ T4980] hci_register_dev+0x452/0x970 [ 82.411758][ T4980] vhci_create_device+0x32c/0x5c0 [ 82.411773][ T4980] vhci_write+0x391/0x450 [ 82.411786][ T4980] vfs_write+0x712/0xd00 [ 82.411801][ T4980] ksys_write+0x14d/0x250 [ 82.411816][ T4980] do_syscall_64+0x4c/0xa0 [ 82.411833][ T4980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.411853][ T4980] [ 82.411853][ T4980] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 82.411888][ T4980] __mutex_lock_common+0x1eb/0x2390 [ 82.411908][ T4980] mutex_lock_nested+0x17/0x20 [ 82.491789][ T4980] vhci_send_frame+0x88/0x100 [ 82.497082][ T4980] hci_send_frame+0x1a9/0x2e0 [ 82.502362][ T4980] hci_tx_work+0x9f9/0x1710 [ 82.507666][ T4980] process_one_work+0x863/0x1000 [ 82.513312][ T4980] worker_thread+0xaa8/0x12a0 [ 82.518682][ T4980] kthread+0x436/0x520 [ 82.523722][ T4980] ret_from_fork+0x1f/0x30 [ 82.528858][ T4980] [ 82.528858][ T4980] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 82.538078][ T4980] __lock_acquire+0x2c33/0x7c60 [ 82.543736][ T4980] lock_acquire+0x197/0x3f0 [ 82.548847][ T4980] __flush_work+0xdd/0x1b0 [ 82.553956][ T4980] hci_dev_do_close+0x1e7/0x1030 [ 82.559512][ T4980] hci_rfkill_set_block+0x10a/0x190 [ 82.565521][ T4980] rfkill_set_block+0x1c6/0x420 [ 82.571104][ T4980] rfkill_fop_write+0x458/0x560 [ 82.576490][ T4980] vfs_write+0x300/0xd00 [ 82.581287][ T4980] ksys_write+0x14d/0x250 [ 82.586158][ T4980] do_syscall_64+0x4c/0xa0 [ 82.591506][ T4980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.597938][ T4980] [ 82.597938][ T4980] other info that might help us debug this: [ 82.597938][ T4980] [ 82.608263][ T4980] Chain exists of: [ 82.608263][ T4980] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 82.608263][ T4980] [ 82.623578][ T4980] Possible unsafe locking scenario: [ 82.623578][ T4980] [ 82.631250][ T4980] CPU0 CPU1 [ 82.636609][ T4980] ---- ---- [ 82.641970][ T4980] lock(&hdev->req_lock); [ 82.646396][ T4980] lock(rfkill_global_mutex); [ 82.653983][ T4980] lock(&hdev->req_lock); [ 82.661395][ T4980] lock((work_completion)(&hdev->tx_work)); [ 82.667578][ T4980] [ 82.667578][ T4980] *** DEADLOCK *** [ 82.667578][ T4980] [ 82.675738][ T4980] 2 locks held by syz.1.264/4980: [ 82.680774][ T4980] #0: ffffffff8d4ba7e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 82.690962][ T4980] #1: ffff88807c1f4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 82.700715][ T4980] [ 82.700715][ T4980] stack backtrace: [ 82.706864][ T4980] CPU: 0 PID: 4980 Comm: syz.1.264 Not tainted syzkaller #0 [ 82.714334][ T4980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.724495][ T4980] Call Trace: [ 82.727801][ T4980] [ 82.730737][ T4980] dump_stack_lvl+0x168/0x230 [ 82.735431][ T4980] ? load_image+0x3b0/0x3b0 [ 82.740029][ T4980] ? show_regs_print_info+0x20/0x20 [ 82.746466][ T4980] ? print_circular_bug+0x12b/0x1a0 [ 82.751876][ T4980] check_noncircular+0x274/0x310 [ 82.756839][ T4980] ? add_chain_block+0x940/0x940 [ 82.761918][ T4980] ? lockdep_lock+0xdc/0x1e0 [ 82.766636][ T4980] ? mark_lock+0x94/0x320 [ 82.771004][ T4980] __lock_acquire+0x2c33/0x7c60 [ 82.775876][ T4980] ? lockdep_unlock+0x134/0x2d0 [ 82.780903][ T4980] ? lockdep_lock+0x1e0/0x1e0 [ 82.785578][ T4980] ? mark_lock+0x94/0x320 [ 82.789910][ T4980] ? verify_lock_unused+0x140/0x140 [ 82.795112][ T4980] ? __lock_acquire+0x12d9/0x7c60 [ 82.800212][ T4980] lock_acquire+0x197/0x3f0 [ 82.804716][ T4980] ? __flush_work+0xc1/0x1b0 [ 82.809694][ T4980] ? __mutex_trylock_common+0x14f/0x250 [ 82.815521][ T4980] ? read_lock_is_recursive+0x10/0x10 [ 82.821082][ T4980] ? lock_chain_count+0x20/0x20 [ 82.825937][ T4980] ? mark_lock+0x94/0x320 [ 82.830375][ T4980] __flush_work+0xdd/0x1b0 [ 82.834797][ T4980] ? __flush_work+0xc1/0x1b0 [ 82.839478][ T4980] ? flush_work+0x20/0x20 [ 82.843804][ T4980] ? hci_leds_update_powered+0x148/0x160 [ 82.849544][ T4980] ? rcu_lock_release+0x5/0x20 [ 82.854397][ T4980] ? __lock_acquire+0x7c60/0x7c60 [ 82.859430][ T4980] hci_dev_do_close+0x1e7/0x1030 [ 82.864472][ T4980] ? _raw_spin_unlock+0x40/0x40 [ 82.869413][ T4980] hci_rfkill_set_block+0x10a/0x190 [ 82.875051][ T4980] ? rcu_lock_release+0x20/0x20 [ 82.880014][ T4980] rfkill_set_block+0x1c6/0x420 [ 82.885309][ T4980] rfkill_fop_write+0x458/0x560 [ 82.890360][ T4980] ? rfkill_fop_read+0x4b0/0x4b0 [ 82.895604][ T4980] ? common_file_perm+0xc0/0x1c0 [ 82.900646][ T4980] ? fsnotify_perm+0x5d/0x560 [ 82.905358][ T4980] ? security_file_permission+0x75/0xa0 [ 82.910996][ T4980] ? rfkill_fop_read+0x4b0/0x4b0 [ 82.915953][ T4980] vfs_write+0x300/0xd00 [ 82.920222][ T4980] ? file_end_write+0x250/0x250 [ 82.925101][ T4980] ? __fget_files+0x40f/0x480 [ 82.929812][ T4980] ? __fdget_pos+0x1e2/0x370 [ 82.934585][ T4980] ? ksys_write+0x71/0x250 [ 82.939095][ T4980] ksys_write+0x14d/0x250 [ 82.943697][ T4980] ? __ia32_sys_read+0x80/0x80 [ 82.948458][ T4980] ? lockdep_hardirqs_on+0x94/0x140 [ 82.953670][ T4980] do_syscall_64+0x4c/0xa0 [ 82.958306][ T4980] ? clear_bhb_loop+0x30/0x80 [ 82.962998][ T4980] ? clear_bhb_loop+0x30/0x80 [ 82.967680][ T4980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.973575][ T4980] RIP: 0033:0x7f718a830749 [ 82.977995][ T4980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.997772][ T4980] RSP: 002b:00007f7188a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.006281][ T4980] RAX: ffffffffffffffda RBX: 00007f718aa86fa0 RCX: 00007f718a830749 [ 83.014891][ T4980] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 83.022956][ T4980] RBP: 00007f718a8b4f91 R08: 0000000000000000 R09: 0000000000000000 [ 83.031016][ T4980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.039436][ T4980] R13: 00007f718aa87038 R14: 00007f718aa86fa0 R15: 00007ffd89191678 [ 83.047531][ T4980] [ 83.212398][ T4988] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 83.258272][ T4988] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.333922][ T26] kauditd_printk_skb: 128 callbacks suppressed [ 83.333937][ T26] audit: type=1800 audit(1765611954.464:193): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.267" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 83.348349][ T4988] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm wÞ£ÿ: iget: bad i_size value: 2533274857506816