last executing test programs: 5m21.122283431s ago: executing program 0 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 4m38.721650617s ago: executing program 2 (id=2789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 4m36.422166857s ago: executing program 0 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 3m52.907480624s ago: executing program 2 (id=2789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 3m51.186649709s ago: executing program 0 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 3m19.172576535s ago: executing program 2 (id=2789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 3m15.978012294s ago: executing program 0 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 2m38.01413977s ago: executing program 2 (id=2789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 2m36.322525191s ago: executing program 0 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 1m54.653503534s ago: executing program 2 (id=2789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 1m52.464594771s ago: executing program 0 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 1m6.123977042s ago: executing program 4 (id=5625): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)) 1m0.582720672s ago: executing program 4 (id=5628): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}]}, 0x50}}, 0x0) 1m0.578936244s ago: executing program 4 (id=5632): pipe(&(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() userfaultfd(0x180001) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) fchdir(0xffffffffffffffff) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00b632fe61db617f2790f748904ee5d80b4db0d9df"], 0x1, 0x266, &(0x7f0000000340)="$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") timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) ioctl$UI_SET_PROPBIT(r3, 0x5501, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b4311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 1m0.575943085s ago: executing program 4 (id=5639): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04220400c90000"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x50) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18000, &(0x7f0000000080)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000004f80), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000004fc0)={0x0, 0xfffffeff, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x104}}}) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0xffffffffffffff75) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xd086, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c4701800824d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x100002000000000]}) 56.986486591s ago: executing program 4 (id=5650): creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 48.509210272s ago: executing program 4 (id=5659): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f00000000c0)) 46.316395403s ago: executing program 3 (id=5668): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 46.241116184s ago: executing program 3 (id=5669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)={0x6ac, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x690, 0x33, @beacon={{{}, {}, @device_b}, 0x2000000, @random, 0x0, @val, @void, @void, @val={0x4, 0x6, {0x0, 0x1f}}, @val={0x6, 0x2, 0x800}, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0xe4, "8aa886a4a88b61418ef437076c182468ef7658178361e2a3c8c51ebc8bc082fd5e89fc0882660b4a0d82263f205d52b65d91e9ff4a3a41116280d74b11b4905f7267ba2b7c5ecd7574ba5aaf56137bbeedec51c44b54ecea6d565a515de1e73f45767f859e475b892a57ccd449ab213a250b92f7a7b31c6f9363d5fa32a5b44da3bfafc61a7942c481ae483078d79a1d5a26cae35c29ab4fbd6620a2d09538389c2bd496fa101becbd3dcfb17382012b7fb0d6d006d110f0ca6c84d054642b541ed1207609167c2ff2b1ea9bc5ea468456c21b425b71449ce2daebba5dfe234707e071e4"}, {0xdd, 0x6c, "ee1e56116310701474ef4a1b29b226517cf2a6e34de69ac54ccde44574cb86dc7dbe2feabaff18e95c0f6b3e60982511a456a58e677594589df746faada7c996d306b6ceada82f52375c6704a28502037ffa9ba8919219e4f365cf6fc8f3cb8a1707430a8671287763f17a82"}, {0xdd, 0xd, "8284c4283ac8b4b5c15135a405"}, {0xdd, 0xa4, "aa7f57eae931f772507e5c62316a79a8fbf5c80508de9513cfa2a5d5a717337c6e9c0e87229d621261cde0780776919bd0e4c03e613b5468de36c97c41d34cdb3abd901e3e737bdcd2266e8e6fd46d57e1cb87e74747b2e5d31fac82af26d46954cfb88233c367a8fd320f88293d04db452818f64a3420d6e7641fc00301c0396e434e9b4a8a154f21b938116426ee46b796306a2fa1455b888c07a5c75af34dd5e86837"}, {0xdd, 0xcd, "7f2353f6c05b07f729d226108f041dabee8b197524c603f225ad5b55bf5b88354bc24ecaf9fc20eff4af361e40f392b1b2a29d49c3856c5189bef249193b23af2ea110306e87e41c273f388c0cee6704d7436d0abbb1e6298b45dcbb0a3a43fb4be81d777f6b22a4dcb2442fef43c68722e691e5216d7ef7356c945bd4dfb6f8acd066c1ec031532632fd34928109f45065cc65788feab1f1dfc1272b57569a86c8c47263fd45856adbede86563cfbfe3c5ecf84f88b7757d3622cd8090d86681038897d3d6caf710eab663239"}, {0xdd, 0x5b, "1b395ca4764254b963a8bb9cd251fa8a3352a5520c11c74d142559b1a5f69be7f63660ffae91e9c535a241c0873603eaf07cc2b11237bf02a66a447ccb0dde0bc83470f7b66f2121716c96a7bed835968388a8749ceea9601bd0fd"}, {0xdd, 0xff, "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"}, {0xdd, 0xd1, "1ca5ef6e83fe41a700292908cfe9e9bd10284561380b29577522c7af8e748608fb43f820f374fc6799858df2f2f80b7de8a868779dafe3cf5f1f996346f54c7a84bd0b4f1cbcd9d396400623fc55008ec0bb73e5548ca2470b02e69f8ec18b9a6751b78a088727c059b3fe2e5aa277b80792ec8ad0c81af0f526a1191e2b40624839292178df43b585a0e15519b25a7995801e059b8e21ee0fd003c225675b3ea3a18bba894e9f20f1cbb97fdf17a1e2cbfa7487a9f12b8f7e5ccc75f0797607863541564ee1172d455c050d360e5554e0"}, {0xdd, 0xf5, "345a398ce624ff1097e1506a9d74cb623a88035bb3f4e3fef41bc3edfd40a2d4580df1ed9cba1f6f67b612efb18f5bf6eb350c6166590cb3eb17aed689a19d7ae6dad1a3d3d933378f38f922478e66b110aa19d5bda75c212e648fbf659fb93a75acd7a5223658deec7d2b5d223ab4793feac4082810c48fff2eec83db836c9c39e1f17b1457c83c27e6457c5172cdaaa556320c8b88cef37d998abf0b5e0727ab2af894570172d763f02600607b2edb3431e4eaed0ee2811677f6c45d332ff7b494df535179fbf1fa1fe60e47b279b85b0db1bb9dcb86a1cd9c7bb535d3a31bb87781438f1c09b0080c06bfab8fc74b7bec8bfc71"}, {0xdd, 0x50, "699173e638ac8d31a6543099cea8e306b40d068cb061cf1a376477c1766d26b83d3474c187d019fdda1a414308456df7c89379b3a7d3036b74a2af92aed8679c9a861fd0b19cbb97316737397730c993"}]}}]}, 0x6ac}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@allocspi={0x100, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in6=@private1}, {@in6=@private1, 0x0, 0x33}, @in=@empty}, 0x0, 0xfdffff00}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={0x0}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x241, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/424, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 42.779917477s ago: executing program 3 (id=5678): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f00000009c0)=@ethtool_dump={0x3e}}) 42.330427891s ago: executing program 3 (id=5681): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04220400c90000"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x50) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18000, &(0x7f0000000080)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000004f80), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000004fc0)={0x0, 0xfffffeff, 0x1, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x104}}}) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0xffffffffffffff75) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xd086, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c4701800824d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x100002000000000]}) 40.092960584s ago: executing program 3 (id=5689): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV88755b2beY8+9npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzcdTXfNTki1MAYRiG3GsBPB1qTgpAT8nJm8CqaCKUObwRHmwAqPjd64o3GG51uo2203Yubbu2Z+1Y1q5dOeu4jhX9MuUKagVcNwHweS0o+2kAD5SziCRMeRrtM7U2o8ywvJasNZTaWBleZW0W8f8FnGAdOQA3AVPckjjFhGipDoYUBVVTeV90V05sbDev3NYYDCwum8CUZ1SnSMvAVoPafhA/e0xaIq2TTkinpIU/n4wpTnikqBwAGdw2fL9f5UOKVtKzpWcvB+rA+K0vRrK5NwMajUaj0Wg0Go1G89/5DQAA///T4Xqr") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4}, {0x6}]}) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x800) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8}]}, 0x20}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde1}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a81, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r5, &(0x7f0000000880)=[{&(0x7f00000010c0)="aabf", 0x7ffff}], 0x1, 0x0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e21, 0x2000009, @mcast2, 0x8}}, 0x0, 0x0, 0x10, 0x0, "246575a4000000404fb62fe6bcddeef560726ac7f28557a8046964d292934c2a2b9ddc04000c01070400004a00000dbcdf27009000000500000800"}, 0xd8) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 38.624108699s ago: executing program 3 (id=5695): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair(0x10, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000}, 0x48) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080)=0x7, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1, @ANYBLOB="0000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000400b70400000000000085000000010000001801000020756c250000fcf35044"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000280)="060350031603480301020200c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x802, 0x0, 0x2f) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.227856119s ago: executing program 5 (id=5803): r0 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001100)={{}, 0x0, 0x10, @unused=[0x4, 0x0, 0x800, 0x1], @devid}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x4c, 0x1a, 0x160, 0x25, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@broadcast}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @remote, @empty, [], [], [], 0x0, 0xce3b3cf727cbd6bc}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 1.794970774s ago: executing program 5 (id=5804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003100000005003500000000000500330000040000050036000000000008000200", @ANYRES32=r3], 0x34}}, 0x0) 1.573073135s ago: executing program 1 (id=5806): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1402, 0x1}, 0x10}}, 0x0) 1.56454809s ago: executing program 5 (id=5807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000340)='smaps\x00') 1.403550868s ago: executing program 1 (id=5808): open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10101}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 1.292106522s ago: executing program 5 (id=5809): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x124}}, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0xe00) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r5, &(0x7f0000000440)={0x1f, 0x4, 0x4}, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r4, r5, 0x0, 0x2e, &(0x7f00000003c0)='\xff\xdd>\xb3\xd7A\x9d\x1cF\xbe\xc0{\xd3?e\xe6\xc1\xe2\x06\xdd\x04\x06\x91\xa0\xb2\x14\x9ds\xc1\xaeIC\xb7\x89\xca\xaa\"\x85A\xc9\xde\xef\xb0\x00e\xb0'}, 0x30) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x13, {0x1102}}]}, 0x24}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r8, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r11], 0x20}}, 0x0) 1.026234003s ago: executing program 1 (id=5810): r0 = socket$isdn(0x22, 0x2, 0x25) r1 = socket$isdn(0x22, 0x2, 0x23) dup3(r0, r1, 0x0) 751.98639ms ago: executing program 1 (id=5811): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d010000000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8cc658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ad539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c97888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5a444a41bac326ddea7d7b9c90d44f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2a4d39b43878b6ef26ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee92ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93b71db0a2366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000000000009a8329eb97567787ff28dd96c8e0f9e3c84394afc8f83dc6c6c813fafed61cdd6117092562837a3fa3fc388ab57429a9ecc4fddb0f0a7e4a1415d82d8bac999696d9130e36fc86df796a72559c523fae90d0b742d09cd2edf652c67aa62742e9ce0ff5283f627b622a83576f57d0899e0da8483f9dc296"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 462.611674ms ago: executing program 5 (id=5812): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="d0772e4cad93"}) 351.836398ms ago: executing program 1 (id=5813): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000001280)=0x90) 96.80935ms ago: executing program 1 (id=5814): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) 32.993085ms ago: executing program 5 (id=5815): r0 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001100)={{}, 0x0, 0x10, @unused=[0x4, 0x0, 0x800, 0x1], @devid}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x4c, 0x1a, 0x160, 0x25, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@broadcast}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @remote, @empty, [], [], [], 0x0, 0xce3b3cf727cbd6bc}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 0s ago: executing program 2 (id=2789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4.110293][T19896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1564.129688][T19896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.175408][T19896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1564.232736][T19896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.262882][T19896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1564.273626][T19896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.304205][T19896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1564.328772][T19896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.338863][T19896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1564.363111][T19896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.379075][T19896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1564.543786][T20309] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5081'. [ 1564.887147][T19896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.901706][T19896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.912658][T19896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.953145][T19896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.982203][T19896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.007321][T19896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.031241][T19896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1565.040367][T20322] netlink: 'syz.5.5087': attribute type 13 has an invalid length. [ 1565.088958][T20322] veth0_macvtap: left promiscuous mode [ 1565.114389][T20322] macvtap0: entered promiscuous mode [ 1565.198850][T20322] macvtap0: refused to change device tx_queue_len [ 1565.280517][T19896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.324617][T19896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.368621][T19896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.390246][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5086'. [ 1565.399414][T19896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.491566][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5086'. [ 1565.694227][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.996871][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.164456][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.279110][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.433692][T19021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.450738][T19021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.696034][T19017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.707459][T19017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.744281][ T11] bridge_slave_1: left allmulticast mode [ 1566.764518][ T11] bridge_slave_1: left promiscuous mode [ 1566.781711][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.814539][ T11] bridge_slave_0: left allmulticast mode [ 1566.828251][ T11] bridge_slave_0: left promiscuous mode [ 1566.849979][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.721830][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.789880][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.849442][ T11] bond0 (unregistering): Released all slaves [ 1568.556573][T20349] loop4: detected capacity change from 0 to 2048 [ 1569.013400][T20349] loop4: detected capacity change from 0 to 2048 [ 1569.084670][T20349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1569.187907][ T11] hsr_slave_0: left promiscuous mode [ 1569.200157][ T11] hsr_slave_1: left promiscuous mode [ 1569.206972][T13395] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1569.216094][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.238603][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.246772][T13395] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1569.257030][T13395] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1569.266238][T13395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1569.283660][T13395] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1569.296579][T13395] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1569.318381][T20349] UDF-fs: error (device loop4): udf_read_inode: (ino 1329) failed !bh [ 1569.337249][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.344738][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.439511][ T11] veth1_macvtap: left promiscuous mode [ 1569.453504][ T11] veth0_macvtap: left promiscuous mode [ 1569.459758][ T11] veth1_vlan: left promiscuous mode [ 1569.473509][ T11] veth0_vlan: left promiscuous mode [ 1570.479806][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1570.558428][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1570.781558][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5102'. [ 1570.838672][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5102'. [ 1571.003080][T20364] loop3: detected capacity change from 0 to 512 [ 1571.048464][T20364] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1571.127553][T20364] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 1571.204828][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5104'. [ 1571.217146][T20364] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.5100: inode #15: comm syz.3.5100: iget: illegal inode # [ 1571.257664][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5104'. [ 1571.301976][T20364] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5100: couldn't read orphan inode 15 (err -117) [ 1571.340505][T20364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1571.394237][T13395] Bluetooth: hci2: command tx timeout [ 1572.189198][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1572.212386][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1572.239129][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1572.252015][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1572.265615][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1572.275352][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1573.200662][T20361] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5100'. [ 1573.382984][T17860] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1573.470368][ T5096] Bluetooth: hci2: command tx timeout [ 1573.987278][T20407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5116'. [ 1574.037370][T20407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5116'. [ 1574.212984][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1574.249686][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1574.349215][ T5096] Bluetooth: hci3: command tx timeout [ 1575.805124][ T5096] Bluetooth: hci2: command tx timeout [ 1576.351662][T20418] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1576.426127][ T5096] Bluetooth: hci3: command tx timeout [ 1576.614539][ T29] audit: type=1326 audit(4147491011.565:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20438 comm="syz.3.5125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e82d75b29 code=0x0 [ 1576.812302][T19028] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.227616][T20447] loop3: detected capacity change from 0 to 1764 [ 1577.588155][T19028] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.864181][ T5096] Bluetooth: hci2: command tx timeout [ 1578.029225][T20352] chnl_net:caif_netlink_parms(): no params data found [ 1578.318038][T19028] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.503513][ T5096] Bluetooth: hci3: command tx timeout [ 1578.841196][T19028] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.426840][T20384] chnl_net:caif_netlink_parms(): no params data found [ 1579.503227][T20474] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722.115(bad) [ 1579.510488][T20474] PKCS7: Only support pkcs7_signedData type [ 1579.799736][T20352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.831486][T20352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.838828][T20352] bridge_slave_0: entered allmulticast mode [ 1579.851395][T20476] loop4: detected capacity change from 0 to 4096 [ 1579.879251][T20476] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1579.880567][T20352] bridge_slave_0: entered promiscuous mode [ 1579.959539][ T29] audit: type=1800 audit(4147491014.910:689): pid=20481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5138" name="bus" dev="sda1" ino=2223 res=0 errno=0 [ 1580.090437][T20352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.116520][T20352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.131507][T20352] bridge_slave_1: entered allmulticast mode [ 1580.157294][T20352] bridge_slave_1: entered promiscuous mode [ 1580.188991][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5141'. [ 1580.226456][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5141'. [ 1580.466712][T20352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.576487][T19028] bridge_slave_1: left allmulticast mode [ 1580.583049][ T5096] Bluetooth: hci3: command tx timeout [ 1580.590942][T19028] bridge_slave_1: left promiscuous mode [ 1580.614887][T19028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.659461][T19028] bridge_slave_0: left allmulticast mode [ 1580.702213][T19028] bridge_slave_0: left promiscuous mode [ 1580.749056][T19028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.778358][ T29] audit: type=1326 audit(4147491015.731:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20495 comm="syz.5.5145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x0 [ 1582.810581][T19028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.845169][T19028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.861217][T19028] bond0 (unregistering): Released all slaves [ 1582.913409][T20352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.027768][T20384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.043678][T20384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.068434][T20384] bridge_slave_0: entered allmulticast mode [ 1583.106090][T20384] bridge_slave_0: entered promiscuous mode [ 1583.240365][T20545] loop3: detected capacity change from 0 to 2048 [ 1583.305014][T20545] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1583.502287][T20545] Process accounting resumed [ 1583.753604][T20384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.780278][T20384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.809769][T20384] bridge_slave_1: entered allmulticast mode [ 1583.857500][T20384] bridge_slave_1: entered promiscuous mode [ 1583.999754][T20352] team0: Port device team_slave_0 added [ 1584.036140][T20352] team0: Port device team_slave_1 added [ 1584.301287][ T29] audit: type=1326 audit(4147491019.236:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.5.5171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x0 [ 1584.515907][T20571] loop3: detected capacity change from 0 to 2048 [ 1585.303001][T20384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1585.335012][T20352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1585.342011][T20352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.399893][T20352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1585.477679][T20384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1585.534946][T20352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1585.541957][T20352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.647072][T20352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.949794][T19028] hsr_slave_0: left promiscuous mode [ 1585.981667][T19028] hsr_slave_1: left promiscuous mode [ 1586.022085][T19028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.070456][T19028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.128910][T19028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.163318][T19028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.341934][T20598] loop4: detected capacity change from 0 to 2048 [ 1586.390251][T19028] veth1_macvtap: left promiscuous mode [ 1586.405438][T20598] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1586.433053][T19028] veth0_macvtap: left promiscuous mode [ 1586.462734][T19028] veth1_vlan: left promiscuous mode [ 1586.488432][T19028] veth0_vlan: left promiscuous mode [ 1586.544102][T20598] Process accounting resumed [ 1587.296626][T20589] loop3: detected capacity change from 0 to 131072 [ 1587.318477][T20589] F2FS-fs (loop3): invalid crc value [ 1587.370431][T20589] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1587.489050][T20589] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1588.479616][ T29] audit: type=1326 audit(4147491023.441:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.5.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1588.560076][ T29] audit: type=1326 audit(4147491023.441:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.5.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1588.598088][ T29] audit: type=1326 audit(4147491023.451:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.5.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1588.699537][ T29] audit: type=1326 audit(4147491023.451:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.5.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1588.723421][ T29] audit: type=1326 audit(4147491023.451:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.5.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1588.788873][ T29] audit: type=1326 audit(4147491023.451:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.5.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1588.830006][ T29] audit: type=1326 audit(4147491023.451:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.5.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1588.856964][ T29] audit: type=1326 audit(4147491023.451:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.5.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1588.886931][ T29] audit: type=1326 audit(4147491023.471:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.5.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1589.128173][T20615] loop4: detected capacity change from 0 to 64 [ 1589.661039][T19028] team0 (unregistering): Port device team_slave_1 removed [ 1589.788696][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5190'. [ 1589.905673][T19028] team0 (unregistering): Port device team_slave_0 removed [ 1591.344666][T20633] binder: 20632:20633 ioctl c00c6211 0 returned -14 [ 1591.482230][T20384] team0: Port device team_slave_0 added [ 1591.594419][T20639] loop4: detected capacity change from 0 to 2048 [ 1591.653770][T20639] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1591.757757][T20639] Process accounting resumed [ 1591.951226][T20352] hsr_slave_0: entered promiscuous mode [ 1591.975644][T20352] hsr_slave_1: entered promiscuous mode [ 1592.005041][T20352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1592.050580][T20352] Cannot create hsr debugfs directory [ 1592.081941][T20384] team0: Port device team_slave_1 added [ 1592.814128][T20384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1592.855960][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.976078][T20384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.046665][T20384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.094500][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.194321][T20384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.690546][T20663] loop3: detected capacity change from 0 to 256 [ 1593.743163][T20663] exfat: Unknown parameter 'ÿÿNFxX]Ãß%Q¡jEÐ(@…»Æ–š¶PÈîôýè¸*ã½O eì7z¡ò[ÅliÜŒÇÛÂ]@#ktTúv2n0ÜiG§í„0S™½[IDþ¸fŠ¡™þf;ÈmpÄBº‚®sj¯*iH‰®Qy¾„£ºH˜1-Å#]}ª&<ÊŽ£Ôm£zh©Ê¯È•ÐU"†ÏN»jr)ãñú©V' [ 1594.102515][T20384] hsr_slave_0: entered promiscuous mode [ 1594.133481][T20384] hsr_slave_1: entered promiscuous mode [ 1594.148135][T20665] binder: 20664:20665 ioctl c00c6211 0 returned -14 [ 1594.158501][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1594.158528][ T29] audit: type=1326 audit(4147491029.138:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1594.201869][T20384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1594.226931][T20384] Cannot create hsr debugfs directory [ 1594.226985][ T29] audit: type=1326 audit(4147491029.168:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1594.318347][ T29] audit: type=1326 audit(4147491029.188:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1594.347657][ T29] audit: type=1326 audit(4147491029.188:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1594.430058][ T29] audit: type=1326 audit(4147491029.188:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1594.501325][ T29] audit: type=1326 audit(4147491029.188:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1594.579547][ T29] audit: type=1326 audit(4147491029.188:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1594.607718][T20676] IPVS: length: 96 != 8 [ 1594.634219][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5213'. [ 1594.672662][ T29] audit: type=1326 audit(4147491029.188:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1594.748269][ T29] audit: type=1326 audit(4147491029.188:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1594.832437][ T29] audit: type=1326 audit(4147491029.188:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20661 comm="syz.3.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82d75b29 code=0x7ffc0000 [ 1595.514870][T20699] binder: 20697:20699 ioctl c00c6211 0 returned -14 [ 1596.014387][T20691] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1596.312555][T20352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1596.372526][T20352] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1596.488567][T20712] input: syz1 as /devices/virtual/input/input27 [ 1596.572189][T20352] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1596.647056][T20352] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1597.818576][T20352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.277688][T20352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.328477][T20745] cgroup: No subsys list or none specified [ 1598.328497][T20384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1598.365961][T20384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1598.403817][T20384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1598.436216][T13680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.436454][T13680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.440116][T20384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1598.486516][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.486752][ T5555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.763143][T20751] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1599.250342][T20384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.390850][T20384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1599.526428][T17865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.526677][T17865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.552456][T17865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.552700][T17865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.884902][T20759] Process accounting resumed [ 1600.390255][T20352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.981492][T20352] veth0_vlan: entered promiscuous mode [ 1601.003430][T20762] loop3: detected capacity change from 0 to 131072 [ 1601.021822][T20762] F2FS-fs (loop3): invalid crc value [ 1601.080644][T20352] veth1_vlan: entered promiscuous mode [ 1601.092569][T20762] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1601.200400][T20762] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1601.482887][T20384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.533683][T20352] veth0_macvtap: entered promiscuous mode [ 1601.571243][T20352] veth1_macvtap: entered promiscuous mode [ 1601.843985][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1602.125077][T20787] loop4: detected capacity change from 0 to 40427 [ 1602.151580][T20787] F2FS-fs (loop4): invalid crc value [ 1602.160165][T20352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.209816][T20787] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1602.243919][T20352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.294381][T20352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.305879][T20787] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1602.325378][T20352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.335866][T20352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.350428][T20352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.484355][T20352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.535649][T20352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.571886][T20795] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1602.609425][T20352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.660882][T20352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.746906][T20352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.764089][T20352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.774616][T20352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.784551][T20352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.796946][T20352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.824943][T20352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.257694][T20352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.322802][T20352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.383461][T20352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.423836][T20352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.581654][T20384] veth0_vlan: entered promiscuous mode [ 1603.759846][T20384] veth1_vlan: entered promiscuous mode [ 1604.110809][T20384] veth0_macvtap: entered promiscuous mode [ 1604.218274][T20384] veth1_macvtap: entered promiscuous mode [ 1604.376503][T19019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.432601][T19019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.521525][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.581341][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.591220][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.641344][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.677908][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.724964][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.771347][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.809601][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.881074][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.930990][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.958839][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.983029][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.015076][T20384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1605.107365][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1605.160681][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.190375][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1605.238332][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.257685][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1605.281234][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.306414][T20384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1605.372320][T19028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.396322][T20384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.398476][T19028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.429039][T20384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.460385][T20384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.479462][T20384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.526563][T19030] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.727519][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.750670][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.877994][T19030] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.915591][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1606.923902][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.003522][T19030] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.212919][T19030] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.385553][T19030] bridge_slave_1: left allmulticast mode [ 1607.391510][T19030] bridge_slave_1: left promiscuous mode [ 1607.397339][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.410142][T19030] bridge_slave_0: left allmulticast mode [ 1607.415812][T19030] bridge_slave_0: left promiscuous mode [ 1607.422703][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.400009][T19030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1608.414322][T19030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1608.442900][T19030] bond0 (unregistering): Released all slaves [ 1608.496699][T13395] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1608.515727][T13395] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1608.537982][T13395] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1608.555111][T13395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1608.579861][T13395] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1608.600969][T13395] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1609.041202][T19030] hsr_slave_0: left promiscuous mode [ 1609.056145][T19030] hsr_slave_1: left promiscuous mode [ 1609.062726][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1609.071540][T19030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1609.081668][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1609.089200][T19030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1609.147452][T19030] veth1_macvtap: left promiscuous mode [ 1609.153071][T19030] veth0_macvtap: left promiscuous mode [ 1609.161314][T19030] veth1_vlan: left promiscuous mode [ 1609.166850][T19030] veth0_vlan: left promiscuous mode [ 1609.781567][T20844] loop3: detected capacity change from 0 to 128 [ 1609.823448][T20844] vfat filesystem being mounted at /root/syzkaller.pI2xML/210/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1610.705353][ T5096] Bluetooth: hci2: command tx timeout [ 1611.063252][T13395] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1611.084927][T13395] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1611.116013][T13395] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1611.132788][T13395] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1611.142202][T13395] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1611.152077][T13395] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1611.212802][T20854] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1611.881260][T19030] team0 (unregistering): Port device team_slave_1 removed [ 1612.205899][T19030] team0 (unregistering): Port device team_slave_0 removed [ 1612.786543][T13395] Bluetooth: hci2: command tx timeout [ 1613.262730][T13395] Bluetooth: hci3: command tx timeout [ 1614.628932][T20838] chnl_net:caif_netlink_parms(): no params data found [ 1614.873373][T13395] Bluetooth: hci2: command tx timeout [ 1615.343799][T13395] Bluetooth: hci3: command tx timeout [ 1616.044172][T20914] syz.3.5304: attempt to access beyond end of device [ 1616.044172][T20914] loop5: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 1616.058845][T20916] syz.3.5304: attempt to access beyond end of device [ 1616.058845][T20916] loop5: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 1616.404809][T20838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.413977][T20838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.421365][T20838] bridge_slave_0: entered allmulticast mode [ 1616.432713][T20838] bridge_slave_0: entered promiscuous mode [ 1616.485751][T20838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.505910][T20838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.551240][T20838] bridge_slave_1: entered allmulticast mode [ 1616.570437][T20838] bridge_slave_1: entered promiscuous mode [ 1616.786550][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.793106][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 1616.952817][T13395] Bluetooth: hci2: command tx timeout [ 1617.043873][T20941] loop4: detected capacity change from 0 to 64 [ 1617.059856][T20941] minix filesystem being mounted at /root/syzkaller.ibH2iN/237/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1617.342767][T20838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.420479][T13395] Bluetooth: hci3: command tx timeout [ 1617.683377][T19030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.630388][T20838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.740625][T20957] syz.1.5321: attempt to access beyond end of device [ 1618.740625][T20957] loop5: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 1618.753858][T20958] syz.1.5321: attempt to access beyond end of device [ 1618.753858][T20958] loop5: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 1618.944376][T20861] chnl_net:caif_netlink_parms(): no params data found [ 1619.242564][T19030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.455573][T20838] team0: Port device team_slave_0 added [ 1619.496370][T13395] Bluetooth: hci3: command tx timeout [ 1619.675443][T19030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.720832][T20838] team0: Port device team_slave_1 added [ 1620.216585][T19030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.528397][T20838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.591856][T20838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1620.769146][T20838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.965026][T20838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1621.016047][T20838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1621.042022][ C1] vkms_vblank_simulate: vblank timer overrun [ 1621.145980][T20838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1621.320886][T20861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.345396][T20861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.353556][T20861] bridge_slave_0: entered allmulticast mode [ 1621.398567][T20861] bridge_slave_0: entered promiscuous mode [ 1621.445058][T21011] tmpfs: Bad value for 'mpol' [ 1621.459046][T21010] netlink: 'syz.1.5343': attribute type 274 has an invalid length. [ 1621.514823][T21010] netlink: 134308 bytes leftover after parsing attributes in process `syz.1.5343'. [ 1621.584782][T20861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.593989][T20861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.608624][T20861] bridge_slave_1: entered allmulticast mode [ 1621.628704][T20861] bridge_slave_1: entered promiscuous mode [ 1621.730614][T21010] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1621.736732][T20861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1621.753479][T21010] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1621.788349][T20838] hsr_slave_0: entered promiscuous mode [ 1621.806144][T20838] hsr_slave_1: entered promiscuous mode [ 1621.815126][T20838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1621.822761][T20838] Cannot create hsr debugfs directory [ 1621.925207][T20861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1622.445909][T20861] team0: Port device team_slave_0 added [ 1622.494617][T20861] team0: Port device team_slave_1 added [ 1622.532459][T19030] bridge_slave_1: left allmulticast mode [ 1622.560186][T19030] bridge_slave_1: left promiscuous mode [ 1622.566631][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.591460][T19030] bridge_slave_0: left allmulticast mode [ 1622.598585][T19030] bridge_slave_0: left promiscuous mode [ 1622.607275][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.657336][T20891] syz.5.5297 (20891): drop_caches: 1 [ 1622.774260][T21032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5352'. [ 1622.800689][T21032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5352'. [ 1623.065554][T21039] tmpfs: Bad value for 'mpol' [ 1623.246750][T21042] loop3: detected capacity change from 0 to 256 [ 1623.323419][T21042] vfat filesystem being mounted at /root/syzkaller.pI2xML/235/file0 supports timestamps until 2107-12-31 (0x103901ffe) [ 1623.408644][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1623.408670][ T29] audit: type=1800 audit(4147491058.419:731): pid=21042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5356" name="file0" dev="loop3" ino=1049209 res=0 errno=0 [ 1623.435976][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.063572][ T29] audit: type=1804 audit(4147491059.069:732): pid=21046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5356" name="/root/syzkaller.pI2xML/235/file0/file0" dev="loop3" ino=1049209 res=1 errno=0 [ 1624.087061][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.334237][T19030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.373516][T19030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1624.400303][T19030] bond0 (unregistering): Released all slaves [ 1624.881591][ T29] audit: type=1326 audit(4147491059.870:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21054 comm="syz.4.5361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc9f75b29 code=0x0 [ 1624.903477][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.952433][T21057] netlink: 'syz.1.5362': attribute type 274 has an invalid length. [ 1625.040969][T21057] netlink: 134308 bytes leftover after parsing attributes in process `syz.1.5362'. [ 1625.189131][T20861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.196466][T20861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1625.222741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1625.250303][T20861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1625.303352][T21057] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1625.318671][T21057] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1625.337958][T20861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1625.348004][T20861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1625.373960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1625.374775][T21061] loop3: detected capacity change from 0 to 128 [ 1625.399553][T20861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.426708][T21061] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1625.448918][T21061] ext4 filesystem being mounted at /root/syzkaller.pI2xML/236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1625.482928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1625.971050][T17860] EXT4-fs error (device loop3): ext4_readdir:218: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1626.006848][T17860] EXT4-fs error (device loop3): ext4_readdir:218: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1626.034929][T17860] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1626.079105][T17860] EXT4-fs error (device loop3): ext4_readdir:218: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1626.101643][T17860] EXT4-fs error (device loop3): ext4_readdir:218: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1626.132780][T17860] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1626.147560][T19030] hsr_slave_0: left promiscuous mode [ 1626.169885][T17860] EXT4-fs error (device loop3): ext4_readdir:218: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1626.199689][T19030] hsr_slave_1: left promiscuous mode [ 1626.201745][T17860] EXT4-fs error (device loop3): ext4_readdir:218: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1626.221319][T17860] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1626.243641][T17860] EXT4-fs error (device loop3): ext4_readdir:218: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1626.250027][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.296963][T19030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.352662][T21082] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5372'. [ 1626.360625][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.362765][T21082] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5372'. [ 1626.399840][T19030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.643566][T19030] veth1_macvtap: left promiscuous mode [ 1626.649181][T19030] veth0_macvtap: left promiscuous mode [ 1626.698479][T19030] veth1_vlan: left promiscuous mode [ 1626.726023][T19030] veth0_vlan: left promiscuous mode [ 1626.785420][T21091] Bluetooth: MGMT ver 1.22 [ 1626.995557][ T29] audit: type=1326 audit(4147491062.002:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1627.018013][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.031852][ T29] audit: type=1326 audit(4147491062.002:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1627.067859][ T29] audit: type=1326 audit(4147491062.002:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1627.103382][ T29] audit: type=1326 audit(4147491062.002:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.1.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1627.993326][T19030] team0 (unregistering): Port device team_slave_1 removed [ 1628.072674][T19030] team0 (unregistering): Port device team_slave_0 removed [ 1628.970303][T20861] hsr_slave_0: entered promiscuous mode [ 1628.990471][T20861] hsr_slave_1: entered promiscuous mode [ 1628.998885][T20861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1629.006525][T20861] Cannot create hsr debugfs directory [ 1629.014229][T21087] smc: net device lo applied user defined pnetid SYZ2 [ 1629.052734][T21089] smc: net device lo erased user defined pnetid SYZ2 [ 1629.453858][ T29] audit: type=1326 audit(4147491064.464:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21098 comm="syz.4.5379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc9f75b29 code=0x0 [ 1629.535425][T17860] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1630.805524][T19030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.841754][T21112] tmpfs: Bad value for 'mpol' [ 1631.154382][T21118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5389'. [ 1631.191749][T21118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5389'. [ 1631.218061][T19030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.281792][T21120] netlink: 'syz.5.5390': attribute type 274 has an invalid length. [ 1631.295766][T20838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1631.305186][T21120] netlink: 134308 bytes leftover after parsing attributes in process `syz.5.5390'. [ 1631.548793][T19030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.561765][ T29] audit: type=1326 audit(4147491066.576:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21121 comm="syz.1.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1631.596001][ T29] audit: type=1326 audit(4147491066.606:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21121 comm="syz.1.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1631.623983][T20838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1631.626414][T21120] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1631.639954][ T29] audit: type=1326 audit(4147491066.606:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21121 comm="syz.1.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1631.650668][T21120] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1631.699828][ T29] audit: type=1326 audit(4147491066.606:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21121 comm="syz.1.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1631.778389][T19030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.846852][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1631.863082][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1631.872775][T20838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1631.881036][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1631.893610][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1631.894008][T20838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1631.917650][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1631.925594][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1632.440987][ T29] audit: type=1326 audit(4147491067.457:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21133 comm="syz.5.5395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x0 [ 1632.685510][T19030] bridge_slave_1: left allmulticast mode [ 1632.691239][T19030] bridge_slave_1: left promiscuous mode [ 1632.698133][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.755819][T19030] bridge_slave_0: left allmulticast mode [ 1632.761716][T19030] bridge_slave_0: left promiscuous mode [ 1632.768173][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.370227][T21161] serio: Serial port ptm0 [ 1633.854251][T19030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.878630][T19030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1633.891716][T19030] bond0 (unregistering): Released all slaves [ 1633.961224][T21164] vxcan1: MTU too low for tipc bearer [ 1633.973387][T21164] tipc: Enabling of bearer rejected, failed to enable media [ 1634.044115][T13395] Bluetooth: hci1: command tx timeout [ 1634.372768][T20861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1634.417867][T20861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1634.602801][T20861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1634.684507][T20861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1634.872354][ T5152] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1634.935049][T21187] program syz.4.5417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1635.062912][ T5152] usb 6-1: Using ep0 maxpacket: 16 [ 1635.074440][ T5152] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1635.107550][ T5152] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1635.161813][ T5152] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1635.197186][ T5152] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1635.216820][ T5152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.245951][ T5152] usb 6-1: Product: syz [ 1635.250203][ T5152] usb 6-1: Manufacturer: syz [ 1635.258909][T19030] hsr_slave_0: left promiscuous mode [ 1635.276910][ T5152] usb 6-1: SerialNumber: syz [ 1635.282054][T19030] hsr_slave_1: left promiscuous mode [ 1635.296012][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1635.303779][T19030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.352792][T19030] veth1_macvtap: left promiscuous mode [ 1635.358533][T19030] veth0_macvtap: left promiscuous mode [ 1635.364563][T19030] veth1_vlan: left promiscuous mode [ 1635.370769][T19030] veth0_vlan: left promiscuous mode [ 1636.128767][T13395] Bluetooth: hci1: command tx timeout [ 1636.523934][T19030] team0 (unregistering): Port device team_slave_1 removed [ 1636.607029][T19030] team0 (unregistering): Port device team_slave_0 removed [ 1637.767744][T21193] vxcan1: MTU too low for tipc bearer [ 1637.784701][T21193] tipc: Enabling of bearer rejected, failed to enable media [ 1638.063306][T21126] chnl_net:caif_netlink_parms(): no params data found [ 1638.083625][ T5152] usb 6-1: 0:2 : does not exist [ 1638.160798][ T5152] usb 6-1: USB disconnect, device number 12 [ 1638.199575][T13395] Bluetooth: hci1: command tx timeout [ 1638.257505][T21201] serio: Serial port ptm0 [ 1638.514097][T20838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.906388][T21126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.923380][T21126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.931145][T21126] bridge_slave_0: entered allmulticast mode [ 1638.943988][T21126] bridge_slave_0: entered promiscuous mode [ 1638.962568][T20838] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.987556][T21126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.998170][T21126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.006276][T21126] bridge_slave_1: entered allmulticast mode [ 1639.015507][T21126] bridge_slave_1: entered promiscuous mode [ 1639.181360][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.188675][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.217184][T21126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.241944][T21126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.411665][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.419028][T13632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.452428][T21229] program syz.5.5429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1639.502508][T21126] team0: Port device team_slave_0 added [ 1639.516771][T21126] team0: Port device team_slave_1 added [ 1639.679481][T21126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1639.705268][T21126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.767861][T21126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1639.853055][T21126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.878416][T21126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.912126][T21126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1639.954633][T20861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.050954][T21238] vxcan1: MTU too low for tipc bearer [ 1640.056510][T21238] tipc: Enabling of bearer rejected, failed to enable media [ 1640.232859][T20838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1640.291429][T13395] Bluetooth: hci1: command tx timeout [ 1640.453206][T21126] hsr_slave_0: entered promiscuous mode [ 1640.486829][T21126] hsr_slave_1: entered promiscuous mode [ 1640.504655][T21126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1640.505654][T21247] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5437'. [ 1640.515894][T21126] Cannot create hsr debugfs directory [ 1640.746146][T20861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.862166][T21259] program syz.1.5442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1641.080822][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.088219][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.275030][T21267] sctp: [Deprecated]: syz.1.5443 (pid 21267) Use of int in max_burst socket option deprecated. [ 1641.275030][T21267] Use struct sctp_assoc_value instead [ 1641.431793][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.439210][T13632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1642.442734][T20838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.686607][T21280] vxcan1: MTU too low for tipc bearer [ 1642.692090][T21280] tipc: Enabling of bearer rejected, failed to enable media [ 1643.001024][T20838] veth0_vlan: entered promiscuous mode [ 1643.198341][T20838] veth1_vlan: entered promiscuous mode [ 1643.369358][T21296] program syz.1.5454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1643.448879][T21294] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5453'. [ 1643.478082][T20838] veth0_macvtap: entered promiscuous mode [ 1643.505217][T21126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1643.551575][T20861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1643.588230][T20838] veth1_macvtap: entered promiscuous mode [ 1643.621658][T21126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1643.697935][T21126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1643.780933][T21126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1643.876897][T20838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.915123][T20838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.933565][T20838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.954048][T20838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.968924][T20838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1643.984902][T20838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.997499][T20838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.010141][T20838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.037062][T20838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1644.110094][T20838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.149912][T20838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.193285][T20838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.236648][T20838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.259905][T20838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1644.341063][T20838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.360409][T20838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.369965][T20838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.382044][T20838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.667135][T20861] veth0_vlan: entered promiscuous mode [ 1644.931081][T20861] veth1_vlan: entered promiscuous mode [ 1645.115586][T21321] vxcan1: MTU too low for tipc bearer [ 1645.237396][ T29] audit: type=1800 audit(4147491080.237:744): pid=21324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5464" name="file1" dev="sda1" ino=2224 res=0 errno=0 [ 1645.263982][T21321] tipc: Enabling of bearer rejected, failed to enable media [ 1648.343213][ T2393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.383509][ T2393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.604936][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.633994][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.667512][T21332] program syz.1.5468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1648.773489][T20861] veth0_macvtap: entered promiscuous mode [ 1648.847643][T20861] veth1_macvtap: entered promiscuous mode [ 1648.953299][T21126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.263824][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.297220][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.330570][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.341464][T21344] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5474'. [ 1649.362737][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.383871][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.420251][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.455214][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.480372][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.500262][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1649.520233][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.545420][T20861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.592225][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.611580][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.633591][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.653546][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.676724][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.718472][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.745608][T20861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.888401][T21126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.914998][T20861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.957513][T20861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.975728][T20861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.984708][T20861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.099615][T19024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.153112][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.160430][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.252282][T19024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.290800][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.298141][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.405546][T19024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.589887][T19024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.745621][T19030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.770198][T19030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.863014][T19017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.871443][T19017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.174365][T19024] bridge_slave_1: left allmulticast mode [ 1651.194062][T19024] bridge_slave_1: left promiscuous mode [ 1651.209200][T19024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.242151][T19024] bridge_slave_0: left allmulticast mode [ 1651.247951][T19024] bridge_slave_0: left promiscuous mode [ 1651.258524][T19024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.356540][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1652.368797][T19024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.386508][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1652.395001][T19024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.402515][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1652.416182][T19024] bond0 (unregistering): Released all slaves [ 1652.418617][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1652.434163][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1652.441938][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1652.673570][T21126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.026225][T19024] hsr_slave_0: left promiscuous mode [ 1653.040094][T19024] hsr_slave_1: left promiscuous mode [ 1653.046670][T19024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1653.061906][T19024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.072061][T19024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1653.081920][T19024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.123732][T19024] veth1_macvtap: left promiscuous mode [ 1653.129562][T19024] veth0_macvtap: left promiscuous mode [ 1653.135367][T19024] veth1_vlan: left promiscuous mode [ 1653.141895][T19024] veth0_vlan: left promiscuous mode [ 1653.720116][T21368] syz.1.5478[21368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1653.720400][T21368] syz.1.5478[21368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1654.073753][ T29] audit: type=1800 audit(4147491088.994:745): pid=21371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5479" name="file1" dev="sda1" ino=2227 res=0 errno=0 [ 1657.405936][ T5096] Bluetooth: hci2: command tx timeout [ 1657.871318][T21375] loop4: detected capacity change from 0 to 16 [ 1657.928767][T21375] erofs: (device loop4): mounted with root inode @ nid 36. [ 1658.023436][T21375] syz.4.5483: attempt to access beyond end of device [ 1658.023436][T21375] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 1658.059660][T21375] syz.4.5483: attempt to access beyond end of device [ 1658.059660][T21375] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 1658.151602][T21375] syz.4.5483: attempt to access beyond end of device [ 1658.151602][T21375] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 1658.214152][T21375] syz.4.5483: attempt to access beyond end of device [ 1658.214152][T21375] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 1658.278521][T21375] syz.4.5483: attempt to access beyond end of device [ 1658.278521][T21375] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 1658.363676][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1658.396042][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1658.405488][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1658.440089][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1658.449898][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1658.459366][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1658.994080][T19024] team0 (unregistering): Port device team_slave_1 removed [ 1659.083478][T19024] team0 (unregistering): Port device team_slave_0 removed [ 1659.492128][ T5096] Bluetooth: hci2: command tx timeout [ 1660.248935][T21126] veth0_vlan: entered promiscuous mode [ 1660.382732][T21126] veth1_vlan: entered promiscuous mode [ 1660.507091][ T5096] Bluetooth: hci3: command tx timeout [ 1660.609683][T21404] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5493'. [ 1661.216877][T21126] veth0_macvtap: entered promiscuous mode [ 1661.261648][T21360] chnl_net:caif_netlink_parms(): no params data found [ 1661.544884][ T5096] Bluetooth: hci2: command tx timeout [ 1661.712371][T21126] veth1_macvtap: entered promiscuous mode [ 1662.621200][ T5096] Bluetooth: hci3: command tx timeout [ 1663.058885][T21445] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5509'. [ 1663.258201][T19024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.619624][ T5096] Bluetooth: hci2: command tx timeout [ 1663.673915][T21360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.702787][T21360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.724944][T21360] bridge_slave_0: entered allmulticast mode [ 1663.747462][T21360] bridge_slave_0: entered promiscuous mode [ 1663.846414][T19024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.876627][T21126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.887947][T21126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.897929][T21126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.908725][T21126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.919343][T21126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.932082][T21126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.949794][T21126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.962147][T21126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.972135][T21126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.983781][T21126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.996887][T21126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.080177][T21360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.107466][T21360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.138296][T21360] bridge_slave_1: entered allmulticast mode [ 1664.157060][T21360] bridge_slave_1: entered promiscuous mode [ 1664.190066][T21126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.201617][T21126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.219059][T21126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.244754][T21126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.259847][T21126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.278844][T21126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.325944][T21126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.486930][T19024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.550435][T21383] chnl_net:caif_netlink_parms(): no params data found [ 1664.672260][ T5096] Bluetooth: hci3: command tx timeout [ 1664.849540][T21360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.115827][T19024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.530700][T21482] loop4: detected capacity change from 0 to 512 [ 1666.401410][T21126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.447746][T21126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.456549][T21126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.471478][T21126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.505282][T21360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.677062][T21482] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 1666.737456][ T5096] Bluetooth: hci3: command tx timeout [ 1666.942586][T21360] team0: Port device team_slave_0 added [ 1667.125881][T21360] team0: Port device team_slave_1 added [ 1667.965015][T21360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1668.046644][T21360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1668.166539][T21360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.888404][T21360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.916130][T21360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.045707][T21360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1669.165928][T21518] dns_resolver: Unsupported server list version (0) [ 1669.334773][T21383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.356407][T21383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.375745][T21383] bridge_slave_0: entered allmulticast mode [ 1669.392298][T21383] bridge_slave_0: entered promiscuous mode [ 1669.438358][T21383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.456166][T21383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.463571][T21383] bridge_slave_1: entered allmulticast mode [ 1669.492065][T21383] bridge_slave_1: entered promiscuous mode [ 1670.972373][T21360] hsr_slave_0: entered promiscuous mode [ 1671.012451][T21360] hsr_slave_1: entered promiscuous mode [ 1671.039270][T21360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1671.068064][T21360] Cannot create hsr debugfs directory [ 1671.264134][T19024] bridge_slave_1: left allmulticast mode [ 1671.269840][T19024] bridge_slave_1: left promiscuous mode [ 1671.290433][T19024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.345443][T19024] bridge_slave_0: left allmulticast mode [ 1671.365892][T19024] bridge_slave_0: left promiscuous mode [ 1671.380275][T19024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.512973][ T29] audit: type=1800 audit(4147491106.537:746): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5544" name="file1" dev="sda1" ino=2205 res=0 errno=0 [ 1676.717708][T21561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5551'. [ 1676.791397][T19024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.813642][T19024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.846767][T19024] bond0 (unregistering): Released all slaves [ 1676.880125][T21383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.146471][T21383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.710296][T21580] loop4: detected capacity change from 0 to 512 [ 1677.738903][T21580] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1677.851427][T21580] EXT4-fs (loop4): 1 truncate cleaned up [ 1677.867524][T21580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1678.186362][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.537017][T21383] team0: Port device team_slave_0 added [ 1678.590485][T21579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5557'. [ 1678.698366][T17874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.003196][ T29] audit: type=1800 audit(4147491113.902:747): pid=21590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5559" name="file1" dev="sda1" ino=2207 res=0 errno=0 [ 1683.474370][T21383] team0: Port device team_slave_1 added [ 1683.587647][T18357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.606486][T18357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.879208][T19024] hsr_slave_0: left promiscuous mode [ 1683.965466][T21609] loop4: detected capacity change from 0 to 512 [ 1683.975909][T19024] hsr_slave_1: left promiscuous mode [ 1683.984492][T21609] EXT4-fs: Mount option(s) incompatible with ext2 [ 1683.991364][T19024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1684.001867][T19024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.018675][T19024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1684.028472][T19024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1684.082975][T19024] veth1_macvtap: left promiscuous mode [ 1684.090267][T19024] veth0_macvtap: left promiscuous mode [ 1684.100155][T19024] veth1_vlan: left promiscuous mode [ 1684.107789][T19024] veth0_vlan: left promiscuous mode [ 1686.140278][T19024] team0 (unregistering): Port device team_slave_1 removed [ 1686.277441][T19024] team0 (unregistering): Port device team_slave_0 removed [ 1687.976567][T21383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.984149][T21383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.013373][T21383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.183982][T21383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.234382][T21383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.355372][T21383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.770531][T21642] loop4: detected capacity change from 0 to 16 [ 1688.860181][T21642] erofs: Unknown parameter 'ÿÿ' [ 1688.898862][T18357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.934782][T18357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.533869][T21383] hsr_slave_0: entered promiscuous mode [ 1689.569426][T21383] hsr_slave_1: entered promiscuous mode [ 1689.658874][T21383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1689.697350][T21383] Cannot create hsr debugfs directory [ 1692.217063][T21651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1693.341263][T21696] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1693.456635][T21698] loop4: detected capacity change from 0 to 1024 [ 1693.631403][T21696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5600'. [ 1693.730640][ T29] audit: type=1326 audit(4147491128.792:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21693 comm="syz.4.5600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc9f75b29 code=0x0 [ 1694.416006][T21360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1694.809491][T21360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1694.863193][T21360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1694.921277][T21360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1695.336837][T21722] loop3: detected capacity change from 0 to 512 [ 1695.402727][T21722] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm syz.3.5611: bg 0: block 5: invalid block bitmap [ 1695.466762][T21722] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1695.487849][T21722] EXT4-fs error (device loop3): ext4_free_branches:1027: inode #11: comm syz.3.5611: invalid indirect mapped block 3 (level 2) [ 1695.516359][T21722] EXT4-fs (loop3): 1 orphan inode deleted [ 1695.527804][T21722] EXT4-fs (loop3): 1 truncate cleaned up [ 1695.545003][T21722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1695.611603][T21722] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5611'. [ 1695.779439][T21126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1695.794810][T21360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.858145][T21360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.929780][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.937118][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.205898][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.213253][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.489784][T21383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1697.548052][T21383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1697.561079][T21745] netlink: 'syz.3.5619': attribute type 1 has an invalid length. [ 1697.588037][T21745] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1697.744759][T21383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1697.993745][T21383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1698.774505][ T29] audit: type=1800 audit(4147491133.555:749): pid=21763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5624" name="file1" dev="sda1" ino=2226 res=0 errno=0 [ 1701.518503][T21383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.694467][T21383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.923976][T21783] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5631'. [ 1702.111917][T21787] loop3: detected capacity change from 0 to 16 [ 1702.167552][T21789] nft_compat: unsupported protocol 0 [ 1702.176635][T15103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.183936][T15103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.294074][T21790] loop4: detected capacity change from 0 to 128 [ 1702.319533][T21787] erofs: (device loop3): mounted with root inode @ nid 36. [ 1702.346334][T21790] vfat filesystem being mounted at /root/syzkaller.ibH2iN/333/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 1702.892332][T15103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.899704][T15103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.014853][ T5096] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 1703.145259][T21787] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1703.247881][ T29] audit: type=1800 audit(4147491138.288:750): pid=21787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5635" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 1703.459039][T21360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.509621][T21799] loop4: detected capacity change from 0 to 128 [ 1703.563281][T21799] udf: Unknown parameter '"' [ 1703.741688][T21360] veth0_vlan: entered promiscuous mode [ 1703.741709][T21799] loop4: detected capacity change from 0 to 512 [ 1703.774136][T21799] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1703.866759][T21360] veth1_vlan: entered promiscuous mode [ 1703.917525][T21799] EXT4-fs (loop4): 1 truncate cleaned up [ 1703.970886][T21799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1704.082668][T21360] veth0_macvtap: entered promiscuous mode [ 1704.127403][T21360] veth1_macvtap: entered promiscuous mode [ 1704.333795][T21360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.383623][T21360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.421613][T21360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.461345][T21360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.502447][T21360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.540712][T21360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.582883][T21360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.630868][T21360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.677398][T21360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.759496][T21824] loop3: detected capacity change from 0 to 512 [ 1706.659913][ T29] audit: type=1326 audit(4147491139.769:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1706.704777][T21824] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1706.712331][T21824] UDF-fs: Scanning with blocksize 512 failed [ 1706.722957][T21360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.743090][T21824] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1706.750504][T21824] UDF-fs: Scanning with blocksize 1024 failed [ 1706.891995][T21824] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1706.900060][T21824] UDF-fs: Scanning with blocksize 2048 failed [ 1706.909143][T21824] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1706.943899][T21360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.965137][T21824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1707.000265][ T29] audit: type=1326 audit(4147491139.769:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1707.037027][T21823] syz.3.5646: attempt to access beyond end of device [ 1707.037027][T21823] loop3: rw=34817, sector=506, nr_sectors = 518 limit=512 [ 1707.066539][T21799] loop4: detected capacity change from 512 to 407 [ 1707.128767][T21360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.238392][T21360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.243102][ T29] audit: type=1326 audit(4147491141.680:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1707.253718][T17874] EXT4-fs error (device loop4): htree_dirblock_to_tree:1108: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1707.278639][ T29] audit: type=1326 audit(4147491141.680:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1707.316830][T21360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.329127][T21360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.353271][ T29] audit: type=1326 audit(4147491141.680:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1707.376777][T21360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.399641][T21360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.418125][ T29] audit: type=1326 audit(4147491141.690:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1707.444442][T21360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1707.495259][ T29] audit: type=1326 audit(4147491141.690:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15ab175b63 code=0x7ffc0000 [ 1711.199829][T21360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.231064][T21360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.259769][ T29] audit: type=1326 audit(4147491141.690:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f15ab1746df code=0x7ffc0000 [ 1711.288244][T21360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.307608][T17874] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1711.345224][T21360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.366468][ T29] audit: type=1326 audit(4147491141.690:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f15ab175bb7 code=0x7ffc0000 [ 1711.505720][ T29] audit: type=1326 audit(4147491141.690:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.5.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15ab174590 code=0x7ffc0000 [ 1711.619444][T21383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.857286][T21846] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1713.066642][T21848] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5656'. [ 1713.485876][T19026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.788856][T19026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.965999][T19026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.116549][T19026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.488368][T13395] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1714.502730][T13395] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1714.516453][T13395] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1714.525422][T13395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1714.537712][T13395] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1714.548017][T19026] bridge_slave_1: left allmulticast mode [ 1714.551929][T13395] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1714.553698][T19026] bridge_slave_1: left promiscuous mode [ 1714.573966][T19026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.601910][T19026] bridge_slave_0: left allmulticast mode [ 1714.607911][T19026] bridge_slave_0: left promiscuous mode [ 1714.613824][T19026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.220478][T19026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.248803][T19026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1715.266511][T19026] bond0 (unregistering): Released all slaves [ 1715.370495][T19026] Êü: left promiscuous mode [ 1715.840563][T21858] nft_compat: unsupported protocol 0 [ 1716.148860][T21864] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1716.243074][T21867] loop3: detected capacity change from 0 to 1024 [ 1716.517167][T21864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5662'. [ 1716.616807][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1716.616835][ T29] audit: type=1326 audit(4147491151.676:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21862 comm="syz.3.5662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e25975b29 code=0x0 [ 1716.673346][T13395] Bluetooth: hci2: command tx timeout [ 1716.734125][T19026] hsr_slave_0: left promiscuous mode [ 1716.750965][T19026] hsr_slave_1: left promiscuous mode [ 1716.821226][T19026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1716.832822][T19026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1716.852146][ T29] audit: type=1326 audit(4147491151.926:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.5.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1716.934891][ T29] audit: type=1326 audit(4147491151.926:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.5.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1716.986983][T19026] veth1_macvtap: left promiscuous mode [ 1717.021137][T19026] veth0_macvtap: left promiscuous mode [ 1717.026946][ T29] audit: type=1326 audit(4147491151.956:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.5.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1717.080172][T19026] veth1_vlan: left promiscuous mode [ 1717.114816][T19026] veth0_vlan: left promiscuous mode [ 1717.126216][ T29] audit: type=1326 audit(4147491151.956:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.5.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1717.162938][ T29] audit: type=1326 audit(4147491151.956:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.5.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1717.163893][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1717.208237][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1717.215296][T21865] loop1: detected capacity change from 1024 to 919 [ 1717.224777][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1717.240348][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1717.250161][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1717.258762][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1717.287384][ T29] audit: type=1326 audit(4147491151.966:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.5.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f15ab175b29 code=0x7ffc0000 [ 1717.425097][ T29] audit: type=1326 audit(4147491151.966:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.5.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f15ab175b63 code=0x7ffc0000 [ 1717.468622][ T29] audit: type=1326 audit(4147491151.966:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.5.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f15ab1746df code=0x7ffc0000 [ 1717.493668][ T29] audit: type=1326 audit(4147491151.966:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.5.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f15ab175bb7 code=0x7ffc0000 [ 1717.565355][T13395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1717.580619][T13395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1717.590169][T13395] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1717.602867][T13395] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1717.612610][T13395] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1717.754353][T13395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1718.224591][T21892] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.5669'. [ 1718.235313][T21894] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5670'. [ 1718.483934][T21898] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1718.767918][T13395] Bluetooth: hci2: command tx timeout [ 1719.353840][T13395] Bluetooth: hci3: command tx timeout [ 1719.825893][T13395] Bluetooth: hci5: command tx timeout [ 1719.977444][T19026] team0 (unregistering): Port device team_slave_1 removed [ 1720.123005][T19026] team0 (unregistering): Port device team_slave_0 removed [ 1720.792641][T13395] Bluetooth: hci2: command tx timeout [ 1721.063826][T21905] nft_compat: unsupported protocol 0 [ 1721.301428][T21850] chnl_net:caif_netlink_parms(): no params data found [ 1721.442029][T13395] Bluetooth: hci3: command tx timeout [ 1721.930655][T13395] Bluetooth: hci5: command tx timeout [ 1722.623160][T21929] loop3: detected capacity change from 0 to 128 [ 1722.630406][T21929] udf: Unknown parameter '"' [ 1722.646032][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1722.646057][ T29] audit: type=1326 audit(4147491157.710:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1722.829816][ T29] audit: type=1326 audit(4147491157.750:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1722.853228][ T29] audit: type=1326 audit(4147491157.770:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1722.875708][T13395] Bluetooth: hci2: command tx timeout [ 1722.883902][ T29] audit: type=1326 audit(4147491157.770:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1722.906377][ T29] audit: type=1326 audit(4147491157.770:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1722.969704][T21925] loop3: detected capacity change from 0 to 512 [ 1722.976194][ T29] audit: type=1326 audit(4147491157.810:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1723.002009][T21925] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1723.010305][ T29] audit: type=1326 audit(4147491157.810:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efefa76cba7 code=0x7ffc0000 [ 1723.054787][ T29] audit: type=1326 audit(4147491157.810:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efefa711559 code=0x7ffc0000 [ 1723.102121][T21850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.109095][T21925] EXT4-fs (loop3): 1 truncate cleaned up [ 1723.111905][T21925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1723.117211][T21850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.134627][T21850] bridge_slave_0: entered allmulticast mode [ 1723.143489][T21850] bridge_slave_0: entered promiscuous mode [ 1723.179406][ T29] audit: type=1326 audit(4147491157.810:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efefa76cba7 code=0x7ffc0000 [ 1723.237598][ T29] audit: type=1326 audit(4147491157.810:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.1.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efefa711559 code=0x7ffc0000 [ 1723.305461][T21850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.323009][T21850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.335014][T21850] bridge_slave_1: entered allmulticast mode [ 1723.345828][T21850] bridge_slave_1: entered promiscuous mode [ 1723.501139][T13395] Bluetooth: hci3: command tx timeout [ 1723.589161][T21939] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5685'. [ 1723.628627][T21850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.744813][T21929] loop3: detected capacity change from 512 to 407 [ 1723.770326][T21850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.926723][T21946] nft_compat: unsupported protocol 0 [ 1723.991847][T13395] Bluetooth: hci5: command tx timeout [ 1724.151046][T21126] EXT4-fs error (device loop3): htree_dirblock_to_tree:1108: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1724.306681][T21850] team0: Port device team_slave_0 added [ 1724.344166][T21126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1724.405405][T21850] team0: Port device team_slave_1 added [ 1724.968068][T21958] tmpfs: Bad value for 'mpol' [ 1725.535300][T21850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1725.553689][T21850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1725.581436][T13395] Bluetooth: hci3: command tx timeout [ 1725.629413][T21850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1725.773158][T21883] chnl_net:caif_netlink_parms(): no params data found [ 1728.887581][T13395] Bluetooth: hci5: command tx timeout [ 1728.992510][T21850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.024322][T21850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.136772][T21850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1729.523214][T21850] hsr_slave_0: entered promiscuous mode [ 1729.548163][T21850] hsr_slave_1: entered promiscuous mode [ 1729.567311][T21850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1729.575023][T21850] Cannot create hsr debugfs directory [ 1729.792813][T19021] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.952278][T21977] syz.1.5700: attempt to access beyond end of device [ 1729.952278][T21977] loop5: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 1730.017219][T21879] chnl_net:caif_netlink_parms(): no params data found [ 1730.201258][T19021] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.459056][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1730.553259][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1730.565107][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1730.573077][T21983] loop5: detected capacity change from 0 to 919 [ 1730.581708][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1730.590188][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1730.599426][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1730.711069][T19021] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.980925][T21998] tmpfs: Bad value for 'mpol' [ 1731.127445][T19021] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.159584][T21883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.167428][T21883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.175415][T21883] bridge_slave_0: entered allmulticast mode [ 1731.187974][T21883] bridge_slave_0: entered promiscuous mode [ 1731.275826][T21883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.320826][T21883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.331172][T21883] bridge_slave_1: entered allmulticast mode [ 1731.355188][T21883] bridge_slave_1: entered promiscuous mode [ 1731.886206][T21879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.088330][T21879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.342881][T21879] bridge_slave_0: entered allmulticast mode [ 1732.467655][T21879] bridge_slave_0: entered promiscuous mode [ 1732.698199][T13395] Bluetooth: hci1: command tx timeout [ 1732.900243][T21883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.954032][T21883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.066507][T21879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.073783][T21879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.095699][T21879] bridge_slave_1: entered allmulticast mode [ 1733.128179][T21879] bridge_slave_1: entered promiscuous mode [ 1733.515221][T21850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.637791][T21883] team0: Port device team_slave_0 added [ 1733.708264][T21883] team0: Port device team_slave_1 added [ 1733.810699][T21879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.030811][T21850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.343166][T21879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1734.491216][T21850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.589606][T21883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.622910][T21883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1734.690859][T21883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.784577][T13395] Bluetooth: hci1: command tx timeout [ 1735.012329][T21850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.080961][T21883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.113923][T21883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1735.191237][T21883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.842349][T21879] team0: Port device team_slave_0 added [ 1736.855103][T13395] Bluetooth: hci1: command tx timeout [ 1737.222459][T22053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1737.259370][T21879] team0: Port device team_slave_1 added [ 1737.449292][T21883] hsr_slave_0: entered promiscuous mode [ 1737.464337][T21883] hsr_slave_1: entered promiscuous mode [ 1737.482973][T21883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1737.490562][T21883] Cannot create hsr debugfs directory [ 1737.896346][T21879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1738.010004][T21879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.071741][T21879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1738.522109][T21879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1738.543998][T21879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.630509][T21879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.932025][T13395] Bluetooth: hci1: command tx timeout [ 1739.201418][T21850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1739.264030][T21850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1739.479376][T21850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1739.577833][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 1739.605607][T21879] hsr_slave_0: entered promiscuous mode [ 1739.629927][T21879] hsr_slave_1: entered promiscuous mode [ 1739.656629][T21879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1739.679478][T21879] Cannot create hsr debugfs directory [ 1739.752716][T21992] chnl_net:caif_netlink_parms(): no params data found [ 1739.848809][T21850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1740.138513][T19021] bridge_slave_1: left allmulticast mode [ 1740.151063][T19021] bridge_slave_1: left promiscuous mode [ 1740.171476][T19021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.355945][T19021] bridge_slave_0: left allmulticast mode [ 1740.371554][T19021] bridge_slave_0: left promiscuous mode [ 1740.382037][T19021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.541474][T19021] bridge_slave_1: left allmulticast mode [ 1741.547180][T19021] bridge_slave_1: left promiscuous mode [ 1741.593097][T19021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.620804][T19021] bridge_slave_0: left allmulticast mode [ 1741.632674][T19021] bridge_slave_0: left promiscuous mode [ 1741.646553][T19021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.694388][T19021] bridge_slave_1: left allmulticast mode [ 1741.700092][T19021] bridge_slave_1: left promiscuous mode [ 1741.716794][T19021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.823497][T19021] bridge_slave_0: left allmulticast mode [ 1741.829176][T19021] bridge_slave_0: left promiscuous mode [ 1742.011120][T19021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.773621][T19021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.789207][T19021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.804270][T19021] bond0 (unregistering): Released all slaves [ 1743.995255][T19021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.011683][T19021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.025440][T19021] bond0 (unregistering): Released all slaves [ 1744.263997][T19021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.286662][T19021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.299796][T19021] bond0 (unregistering): Released all slaves [ 1744.498066][T22094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5736'. [ 1746.615338][T21992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.634618][T21992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.665917][T21992] bridge_slave_0: entered allmulticast mode [ 1746.683820][T21992] bridge_slave_0: entered promiscuous mode [ 1747.261834][T21992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.277327][T21992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.285260][T21992] bridge_slave_1: entered allmulticast mode [ 1747.327598][T21992] bridge_slave_1: entered promiscuous mode [ 1747.644063][T21992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.684613][T19021] hsr_slave_0: left promiscuous mode [ 1747.704447][T19021] hsr_slave_1: left promiscuous mode [ 1747.714307][T19021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1747.724875][T19021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1747.736000][T19021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1747.744504][T19021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1747.762716][T19021] hsr_slave_0: left promiscuous mode [ 1747.770960][T19021] hsr_slave_1: left promiscuous mode [ 1747.777740][T19021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1747.786566][T19021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1747.818751][T19021] hsr_slave_0: left promiscuous mode [ 1747.826503][T19021] hsr_slave_1: left promiscuous mode [ 1747.837209][T19021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1747.844929][T19021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1747.859956][T19021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1747.867663][T19021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.007050][T19021] veth1_macvtap: left promiscuous mode [ 1748.012942][T19021] veth0_macvtap: left promiscuous mode [ 1748.025460][T19021] veth1_vlan: left promiscuous mode [ 1748.032283][T19021] veth0_vlan: left promiscuous mode [ 1748.046158][T19021] veth1_macvtap: left promiscuous mode [ 1748.051974][T19021] veth0_macvtap: left promiscuous mode [ 1748.061339][T19021] veth1_vlan: left promiscuous mode [ 1748.067756][T19021] veth0_vlan: left promiscuous mode [ 1749.929475][T19021] team0 (unregistering): Port device team_slave_1 removed [ 1750.008092][T19021] team0 (unregistering): Port device team_slave_0 removed [ 1751.209682][T19021] team0 (unregistering): Port device team_slave_1 removed [ 1751.292142][T19021] team0 (unregistering): Port device team_slave_0 removed [ 1752.628621][T19021] team0 (unregistering): Port device team_slave_1 removed [ 1752.696902][T19021] team0 (unregistering): Port device team_slave_0 removed [ 1753.441780][T21992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.515304][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1753.640197][T21992] team0: Port device team_slave_0 added [ 1753.689477][T21992] team0: Port device team_slave_1 added [ 1753.896790][T21992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1753.906382][T21992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.933700][T21992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1753.995689][T22152] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.5758'. [ 1754.040485][T21992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.058091][T21992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.100129][T21992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.519373][T21992] hsr_slave_0: entered promiscuous mode [ 1754.540989][T21992] hsr_slave_1: entered promiscuous mode [ 1754.579145][T21992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1754.600815][T21992] Cannot create hsr debugfs directory [ 1755.085647][T21883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1755.144409][T21883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1755.321056][T21883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1755.389289][T21850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.449605][T21883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1755.722486][T22177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1756.010772][T21850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1756.112165][T17865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.119503][T17865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.214441][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1756.214470][ T29] audit: type=1326 audit(4147491191.319:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1756.282832][ T29] audit: type=1326 audit(4147491191.319:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1756.360080][ T29] audit: type=1326 audit(4147491191.319:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1756.430541][ T29] audit: type=1326 audit(4147491191.319:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1756.470868][ T29] audit: type=1326 audit(4147491191.329:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1756.550434][ T29] audit: type=1326 audit(4147491191.329:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1756.581945][ T29] audit: type=1326 audit(4147491191.369:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1756.614187][T17865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.621830][T17865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.635159][ T29] audit: type=1326 audit(4147491191.409:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefa775b29 code=0x7ffc0000 [ 1756.661900][ T29] audit: type=1326 audit(4147491191.409:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efefa76cba7 code=0x7ffc0000 [ 1756.718565][ T29] audit: type=1326 audit(4147491191.409:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22186 comm="syz.1.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efefa711559 code=0x7ffc0000 [ 1756.807527][T21879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1756.847369][T21879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1756.911435][T21879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1756.960491][T21879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1757.144053][T22199] tmpfs: Bad value for 'mpol' [ 1757.507742][T21850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1757.533618][T21850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1757.692802][T21883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1757.953192][T21883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1758.213749][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.221096][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1758.245455][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.252772][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1758.490143][T21992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1758.512387][T21992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1758.594180][T21850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1758.620964][T21992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1758.675691][T21992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1758.844744][T21879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1759.046363][T21879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1759.209659][T15103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.216977][T15103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1759.301056][T22234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1759.509664][T22235] ip6t_srh: unknown srh invflags D6BC [ 1760.125017][T15103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.132355][T15103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1760.559823][T21850] veth0_vlan: entered promiscuous mode [ 1760.672594][T22250] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(159267523893930) <= P.seqno(0) <= S.SWH(159267523894004)) and (P.ackno exists or LAWL(136748736930146) <= P.ackno(136748736930147) <= S.AWH(136748736930147), sending SYNC... [ 1760.694904][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.839994][T21850] veth1_vlan: entered promiscuous mode [ 1761.384659][T21850] veth0_macvtap: entered promiscuous mode [ 1761.486807][T21850] veth1_macvtap: entered promiscuous mode [ 1761.537623][T21883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1761.651017][T21992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.800298][T21850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.829132][T21850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.872283][T21850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.938968][T21850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.970073][T21850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1762.018905][T21850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.066142][T21850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1762.139911][T21850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1762.168379][T21850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.188392][T21850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1762.220382][T22276] ip6t_srh: unknown srh invflags D6BC [ 1762.226016][T21850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.251534][T21850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1762.323173][T21850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.338522][T21850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.359283][T21850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.414573][T21850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.551075][T21992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.724847][T21879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.773962][T13680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.781354][T13680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.955765][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.963155][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.014720][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1763.014744][ T29] audit: type=1800 audit(4147491198.103:860): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5808" name="bus" dev="sda1" ino=2224 res=0 errno=0 [ 1763.114168][T21883] veth0_vlan: entered promiscuous mode [ 1763.149783][T19024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.157694][T19024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.293425][T21883] veth1_vlan: entered promiscuous mode [ 1763.379360][T22295] delete_channel: no stack [ 1763.385548][T22294] delete_channel: no stack [ 1763.499102][T19024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.515890][T19024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.837084][T21883] veth0_macvtap: entered promiscuous mode [ 1764.138814][T21883] veth1_macvtap: entered promiscuous mode [ 1764.469631][T22318] ip6t_srh: unknown srh invflags D6BC [ 1764.626237][T19028] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: vendor_pkt_req write failed (errno 77: File descriptor in bad state) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=2789 state=3 status=67 (errno 9: Bad file descriptor) [ 1764.896686][T19028] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.981714][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1765.015699][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.037564][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1765.066313][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.097144][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1765.127302][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.147247][T21883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1765.179640][T21883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1765.217786][T21883] batman_adv: batadv0: Interface activated: batadv_slave_0