last executing test programs: 20.969481982s ago: executing program 0 (id=762): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) 20.817874857s ago: executing program 0 (id=765): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) time(0x0) 20.57678805s ago: executing program 0 (id=769): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) 20.350517742s ago: executing program 0 (id=773): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x90000008}) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 20.15598771s ago: executing program 0 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 19.884975426s ago: executing program 0 (id=777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0x69) 19.582873505s ago: executing program 32 (id=777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0x69) 2.796934801s ago: executing program 4 (id=989): select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000003800090000000000000000000300000004000000270001"], 0x40}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='tlb_flush\x00'}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000006, 0x11012, r1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) 2.012279816s ago: executing program 3 (id=1003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000002800000005002b000300000005002e00000000000a0001007770616e300000000c002d000200aaaaaaaaaaaa"], 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0xc, 0x0, 0x4d, 0x0, 0x0, 0x8000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x181900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000356800000900000015000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getresgid(&(0x7f00000004c0), &(0x7f0000000600), &(0x7f00000011c0)) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 1.805099556s ago: executing program 5 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c61200"], 0x58}}, 0x0) 1.793248957s ago: executing program 4 (id=1007): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x36) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r2, &(0x7f00000002c0), 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x0, 0x200000000000000}) 1.616550354s ago: executing program 4 (id=1008): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340), 0x0) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.616347134s ago: executing program 2 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x10000000, 0x8, 0x450}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 1.391854556s ago: executing program 5 (id=1010): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000380)="fe", 0x1}], 0x1) 1.372658558s ago: executing program 2 (id=1011): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x9}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) 1.254644629s ago: executing program 5 (id=1013): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r0, 0x1, 0x1070bd2a, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) 1.198976274s ago: executing program 2 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.128283531s ago: executing program 5 (id=1016): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x240007fd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r4, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000001600)=""/239, 0xef}], 0x2, 0x5, 0x101, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x51, 0x0, 0x0, {0x0, 0xa}, {0x3}, @const={0x0, {0x0, 0xa, 0x1}}}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe2, 0x0) 1.100350174s ago: executing program 2 (id=1017): select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000003800090000000000000000000300000004000000270001"], 0x40}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='tlb_flush\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000006, 0x11012, r2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) 1.099764044s ago: executing program 3 (id=1018): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x0, r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x0, 0x200000000000000}) 942.725379ms ago: executing program 3 (id=1020): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x8, 0x4], [0x5]}}]}}]}, 0x8c}}, 0x0) 854.054678ms ago: executing program 3 (id=1022): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 732.55109ms ago: executing program 1 (id=1024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000030703000000000000000000000000050c00024000000000000000070c00034000"], 0x70}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000000) 630.887889ms ago: executing program 4 (id=1025): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x9}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) 629.185989ms ago: executing program 1 (id=1026): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r0, 0x1, 0x1070bd2a, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) 489.925103ms ago: executing program 1 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 465.801835ms ago: executing program 4 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 316.533369ms ago: executing program 1 (id=1029): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) 309.09325ms ago: executing program 3 (id=1030): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 231.669438ms ago: executing program 1 (id=1031): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x0, r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x0, 0x200000000000000}) 195.131841ms ago: executing program 5 (id=1032): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x8, 0x4], [0x5]}}]}}]}, 0x8c}}, 0x0) 189.634191ms ago: executing program 3 (id=1033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x0, 'macvlan1\x00', {0x8}, 0x4}) listen(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r3, 0x2) 143.868056ms ago: executing program 2 (id=1034): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000380)="fe", 0x1}], 0x1) 60.416874ms ago: executing program 4 (id=1035): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000a40)={[{@nobh}, {}]}, 0x4, 0x4f8, &(0x7f00000012c0)="$eJzs3c9vU0ceAPCvnZiEEAjscthd7S4syy67Qjg/gAhxKVxaVQipKuqpB0gTE0WxcRQHlaQcwrH3SkXqqf0TeuuhEqceeuutvfVCD5Voi1qRSj24es+PxOR3mx9u4s9Hen5v5jn+ztiZGb9J7AmgbZ2MiPmIOBARtyKiL8vPZVtcaWzJ/Z49vT+68PT+aC7q9Rvf59LzSV40/UziUPaY3RHx+isRb+VWxq3Nzk2OlMul6SzdP1OZ6q/Nzp2byGc5Q8ODwwOXzl8c2ra6nqh8/OTliWtvfPrJPx5/Mf//d5Ji9b57OD3XXI/t1Kh6IXqb8joj4tpOBGuRzuz3h70naW1/iohTafvvi4701QQA9rN6vS/qfc1pAGC/S67/eyOXL2ZzAb2RzxeLjTm849GTL1drM2f7qnfvjEU6h3U0CvnbE+XSQDZXeDQKuSQ9mB4vpYeWpc9HxLGIeK/rYJoujlbLY6184wMAbezQsvH/p67G+A8A7HPdrS4AALDrjP8A0H6M/wDQfn7D+O/TgQCwT7j+B4D2Y/wHgPaz4fj/YHfKAQDsiteuX0+2+kLj+6+ff1P3ubFSbbJYuTtaHK1OTxXHq9Xxcqk4Wq9v9HjlanVq8MJisjY7d7NSvXtn5uZEZWS8dLNU2MnKAACbcuzEo6+SQX/+8sF0i6a1HIzVsL/lW10AoGU6Wl0AoGV8ngfa1yau8U0DwD63yhK9L1jzX4QeWvwV9qozfzX/D+1qK/P/5g5gb/t98/8vbXs5gN1nDIf2Va/nrPkPAG3GHD+wpb//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJvqTbdcvpiuBT6f3OaLxYjDEXE0CrnbE+XSQEQciYgvuwpdSXqw1YUGALYo/20uW//rTN/p3uVnD+R+7kr3EfH2BzfevzcyMzM9mOT/sJg/8zDLHzrQigoAAM2urMxqjNPZvulC/tnT+6PPt90s4pOrjcVFk7gL2dY40xmd6b47ChHR82MuSzck71c6tiH+/IOI+MtS/e81RehN50AaK58uj5/EPrwD8Zee/+Xx8y/Ez6fnkn0hfS7+vA1lgXbz6Gqjn8zaXtLEsvaXj5PpfvX23532UFuX9H9JX7Kwov/LL/Z/HSvi59I2f3IxvX5Jnlz47NUVmfW+xrkHEX/rXC1+bjF+bvX+t3B6k3X8+u//PLXWufqHEWdWrf/zFakraTfbP1OZ6q/Nzp2bqIyMl8ZLd4aGhgeHBy6dvzjUn85RN24/Xy3Gd5fPHlkrflL/njXid69f//jPJuv/0S+33vzXOvH/9+/VX//j68RPxsT/bjL+SM+VNZfvTuKPrVH/DV7/OLvJ+I+/mRvb5F0BgF1Qm52bHCmXS9MbHCTvNTe6j4O9eRDzEdv1gOmkRET8EerlYCsHre6ZgJ221OhbXRIAAAAAAAAAAAAAAGAttdm5ya4d/rRWq+sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/vVrAAAA//8V0MkO") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) capset(0x0, &(0x7f0000000040)) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 60.105904ms ago: executing program 1 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000030703000000000000000000000000050c00024000000000000000070c00034000000080000000"], 0x70}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000000) 12.588788ms ago: executing program 2 (id=1037): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r0, 0x1, 0x1070bd2a, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) 0s ago: executing program 5 (id=1038): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x9}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) kernel console output (not intermixed with test programs): cc 0x0c25 length: 249 > 3 [ 69.985519][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.395759][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 70.505997][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 70.541784][ T4261] chnl_net:caif_netlink_parms(): no params data found [ 70.584101][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 70.640045][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.648012][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.656046][ T4251] device bridge_slave_0 entered promiscuous mode [ 70.670743][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 70.688165][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.695270][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.703460][ T4251] device bridge_slave_1 entered promiscuous mode [ 70.789589][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.796698][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.804963][ T4249] device bridge_slave_0 entered promiscuous mode [ 70.823633][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.841993][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.849678][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.857930][ T4249] device bridge_slave_1 entered promiscuous mode [ 70.873235][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.880608][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.888645][ T4261] device bridge_slave_0 entered promiscuous mode [ 70.897708][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.907041][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.914180][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.922371][ T4261] device bridge_slave_1 entered promiscuous mode [ 70.978390][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.985558][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.993783][ T4259] device bridge_slave_0 entered promiscuous mode [ 71.008469][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.032980][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.040206][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.048579][ T4259] device bridge_slave_1 entered promiscuous mode [ 71.064166][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.076105][ T4251] team0: Port device team_slave_0 added [ 71.084877][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.127854][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.138287][ T4251] team0: Port device team_slave_1 added [ 71.159278][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.166384][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.175539][ T4250] device bridge_slave_0 entered promiscuous mode [ 71.185916][ T4249] team0: Port device team_slave_0 added [ 71.210793][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.220429][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.227768][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.235654][ T4250] device bridge_slave_1 entered promiscuous mode [ 71.243741][ T4249] team0: Port device team_slave_1 added [ 71.259145][ T4261] team0: Port device team_slave_0 added [ 71.265804][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.271705][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.272952][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.279201][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.313570][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.327754][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.337524][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.344474][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.370597][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.398012][ T4261] team0: Port device team_slave_1 added [ 71.456507][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.463573][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.489610][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.519120][ T4259] team0: Port device team_slave_0 added [ 71.527797][ T4259] team0: Port device team_slave_1 added [ 71.536253][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.545981][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.553377][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.579622][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.591625][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.598679][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.624669][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.653704][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.663377][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.670860][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.697450][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.764754][ T4251] device hsr_slave_0 entered promiscuous mode [ 71.771711][ T4251] device hsr_slave_1 entered promiscuous mode [ 71.779412][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.786378][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.812529][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.827863][ T4250] team0: Port device team_slave_0 added [ 71.853719][ T4249] device hsr_slave_0 entered promiscuous mode [ 71.860630][ T4249] device hsr_slave_1 entered promiscuous mode [ 71.868191][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.876070][ T4249] Cannot create hsr debugfs directory [ 71.882221][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.889402][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.915566][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.928308][ T4250] team0: Port device team_slave_1 added [ 71.987758][ T4255] Bluetooth: hci2: command tx timeout [ 71.993479][ T4255] Bluetooth: hci0: command tx timeout [ 71.995728][ T4261] device hsr_slave_0 entered promiscuous mode [ 72.005893][ T4261] device hsr_slave_1 entered promiscuous mode [ 72.012921][ T4261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.020587][ T4261] Cannot create hsr debugfs directory [ 72.051130][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.058247][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.084466][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.095880][ T4255] Bluetooth: hci1: command tx timeout [ 72.101538][ T4255] Bluetooth: hci3: command tx timeout [ 72.107215][ T4260] Bluetooth: hci4: command tx timeout [ 72.132634][ T4259] device hsr_slave_0 entered promiscuous mode [ 72.139621][ T4259] device hsr_slave_1 entered promiscuous mode [ 72.146294][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.154996][ T4259] Cannot create hsr debugfs directory [ 72.165785][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.172988][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.199191][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.324651][ T4250] device hsr_slave_0 entered promiscuous mode [ 72.331466][ T4250] device hsr_slave_1 entered promiscuous mode [ 72.338656][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.346222][ T4250] Cannot create hsr debugfs directory [ 72.609836][ T4251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.625866][ T4251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.640822][ T4251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.660538][ T4251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.675846][ T4261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.686148][ T4261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.701728][ T4261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.718576][ T4261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.806046][ T4259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.816310][ T4259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.832611][ T4259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.865131][ T4259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.909240][ T4249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.919019][ T4249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.955232][ T4249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.966203][ T4249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.980764][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.031967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.043338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.053459][ T4250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.083690][ T4250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.098854][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.123115][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.131807][ T4250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.144907][ T4250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.175915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.185541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.196265][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.203548][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.213863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.223059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.231750][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.238915][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.247271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.270504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.279226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.290885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.317894][ T4261] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.335006][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.345736][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.355448][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.365190][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.372344][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.381886][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.402303][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.419679][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.429757][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.438630][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.448999][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.458322][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.466098][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.474251][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.493032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.502474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.511861][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.519009][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.543345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.551963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.560902][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.573794][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.582355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.591361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.607634][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.629684][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.645163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.661507][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.675960][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.683165][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.699046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.713831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.724421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.734734][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.744824][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.753662][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.760923][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.769805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.778455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.808621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.819549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.828690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.838389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.846309][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.863879][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.901928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.915786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.925440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.935108][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.951569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.963190][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.972101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.981265][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.991466][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.000773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.014870][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.024127][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.033289][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.040447][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.052436][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.067732][ T4255] Bluetooth: hci0: command tx timeout [ 74.073187][ T4255] Bluetooth: hci2: command tx timeout [ 74.092174][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.100919][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.109648][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.120751][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.128535][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.135989][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.145149][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.154025][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.157224][ T4255] Bluetooth: hci3: command tx timeout [ 74.161170][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.166436][ T4255] Bluetooth: hci4: command tx timeout [ 74.174481][ T48] Bluetooth: hci1: command tx timeout [ 74.181280][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.195743][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.219473][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.232717][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.256430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.266229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.281651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.294785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.326808][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.350306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.362411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.371715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.382667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.394925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.428502][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.445704][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.464384][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.474191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.489836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.511351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.528225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.562289][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.593356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.609205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.662126][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.693961][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.715654][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.722837][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.760070][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.770278][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.781026][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.808160][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.815726][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.825065][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.833934][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.841099][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.863452][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.876134][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.892720][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.905693][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.922767][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.933611][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.960881][ T4251] device veth0_vlan entered promiscuous mode [ 74.978925][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.994675][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.004053][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.014666][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.024412][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.032405][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.051488][ T4251] device veth1_vlan entered promiscuous mode [ 75.075971][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.090587][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.105236][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.114768][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.125606][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.133385][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.150157][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.179475][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.194960][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.206804][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.215762][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.239059][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.264962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.275713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.286170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.301396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.320015][ T4251] device veth0_macvtap entered promiscuous mode [ 75.360837][ T4251] device veth1_macvtap entered promiscuous mode [ 75.371859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.385923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.395751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.407949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.440502][ T4259] device veth0_vlan entered promiscuous mode [ 75.452295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.461949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.471151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.480824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.505558][ T4249] device veth0_vlan entered promiscuous mode [ 75.528607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.537969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.552500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.562008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.578074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.585971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.601371][ T4249] device veth1_vlan entered promiscuous mode [ 75.630412][ T4259] device veth1_vlan entered promiscuous mode [ 75.647820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.655957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.664795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.675287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.685032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.693695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.709816][ T4261] device veth0_vlan entered promiscuous mode [ 75.726759][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.752246][ T4261] device veth1_vlan entered promiscuous mode [ 75.764759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.774600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.783878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.791915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.813042][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.823194][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.835584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.845105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.854794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.864136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.884861][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.895193][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.904127][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.913833][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.931683][ T4249] device veth0_macvtap entered promiscuous mode [ 75.947325][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.956229][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.965476][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.992239][ T4249] device veth1_macvtap entered promiscuous mode [ 76.006143][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.014817][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.024221][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.049941][ T4259] device veth0_macvtap entered promiscuous mode [ 76.076651][ T4261] device veth0_macvtap entered promiscuous mode [ 76.098628][ T4259] device veth1_macvtap entered promiscuous mode [ 76.110815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.122260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.132741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.142287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.152125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.157326][ T4255] Bluetooth: hci2: command tx timeout [ 76.160377][ T48] Bluetooth: hci0: command tx timeout [ 76.173704][ T4261] device veth1_macvtap entered promiscuous mode [ 76.193911][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.204806][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.227943][ T48] Bluetooth: hci4: command tx timeout [ 76.228046][ T4255] Bluetooth: hci3: command tx timeout [ 76.233371][ T48] Bluetooth: hci1: command tx timeout [ 76.246622][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.256724][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.267538][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.279118][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.290493][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.301216][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.313044][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.323539][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.334893][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.349365][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.361020][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.370002][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.379269][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.388593][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.397730][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.406417][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.418631][ T4259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.429335][ T4259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.439464][ T4259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.450049][ T4259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.478836][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.489921][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.500809][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.511582][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.524049][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.570872][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.580411][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.589865][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.598457][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.611285][ T4249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.620341][ T4249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.631125][ T4249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.639927][ T4249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.660674][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.671337][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.683154][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.696321][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.707964][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.720099][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.729991][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.741089][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.752373][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.761639][ T4250] device veth0_vlan entered promiscuous mode [ 76.769552][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.777698][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.785481][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.794100][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.803063][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.835456][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.847457][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.855699][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.860992][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.875233][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.885988][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.896060][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.906792][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.918487][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.948949][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.961320][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.971057][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.986728][ T4261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.995766][ T4261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.004883][ T4261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.013977][ T4261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.041895][ T4250] device veth1_vlan entered promiscuous mode [ 77.151722][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.196754][ T4250] device veth0_macvtap entered promiscuous mode [ 77.206451][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.234427][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.246090][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.260814][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.287765][ T4250] device veth1_macvtap entered promiscuous mode [ 77.295938][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.304567][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.316614][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.330084][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.339783][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.362152][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.375035][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.380998][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.396062][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.407815][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.417805][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.429348][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.440749][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.451473][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.463460][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.496528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.505235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.513759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.524298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.535329][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.546025][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.556333][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.567238][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.579321][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.590239][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.600916][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.612586][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.623975][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.656124][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.662237][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.666642][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.681917][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.694574][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.705501][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.714741][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.724076][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.741603][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.752705][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.783677][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.792168][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.830364][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.841828][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.851585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.947127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.108645][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.136801][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.201276][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.227544][ T48] Bluetooth: hci0: command tx timeout [ 78.227895][ T4255] Bluetooth: hci2: command tx timeout [ 78.273591][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.309088][ T48] Bluetooth: hci1: command tx timeout [ 78.309112][ T4255] Bluetooth: hci3: command tx timeout [ 78.314512][ T48] Bluetooth: hci4: command tx timeout [ 78.332819][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.395329][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.761920][ T4356] Zero length message leads to an empty skb [ 79.061249][ T4361] block device autoloading is deprecated and will be removed. [ 79.300437][ T4369] usb usb8: usbfs: process 4369 (syz.2.15) did not claim interface 0 before use [ 79.312691][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 79.331082][ T4374] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'. [ 80.525857][ T4384] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 81.032427][ T26] audit: type=1326 audit(1730661169.124:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.2.24" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x0 [ 81.169673][ T4404] loop2: detected capacity change from 0 to 736 [ 81.714444][ T4417] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 81.905454][ T4416] netlink: 'syz.1.27': attribute type 3 has an invalid length. [ 82.165283][ T4424] loop2: detected capacity change from 0 to 512 [ 82.234048][ T4424] EXT4-fs: Ignoring removed i_version option [ 82.307696][ T4424] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.332180][ T4426] loop4: detected capacity change from 0 to 1024 [ 82.439985][ T4424] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.489265][ T4426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.881476][ T4424] EXT4-fs (loop2): 1 truncate cleaned up [ 82.901150][ T4424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.377924][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 83.773746][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 85.802038][ T26] audit: type=1326 audit(1730661173.894:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 85.937108][ T26] audit: type=1326 audit(1730661173.894:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 86.036605][ T26] audit: type=1326 audit(1730661173.894:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 86.340147][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 86.385271][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 86.414694][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 86.458374][ T4522] xt_hashlimit: max too large, truncated to 1048576 [ 86.490430][ T4519] loop1: detected capacity change from 0 to 1024 [ 86.524698][ T4519] EXT4-fs: Ignoring removed bh option [ 86.614707][ T4519] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.631154][ T125] cfg80211: failed to load regulatory.db [ 86.705422][ T26] audit: type=1326 audit(1730661174.794:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 86.754057][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 86.783507][ T26] audit: type=1326 audit(1730661174.794:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 86.880632][ T26] audit: type=1326 audit(1730661174.794:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 87.037344][ T26] audit: type=1326 audit(1730661174.824:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 87.172468][ T26] audit: type=1326 audit(1730661175.264:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.0.70" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x0 [ 87.292670][ T26] audit: type=1326 audit(1730661175.384:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 87.329909][ T4549] loop0: detected capacity change from 0 to 736 [ 87.373036][ T26] audit: type=1326 audit(1730661175.384:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 87.430077][ T4474] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.470492][ T26] audit: type=1326 audit(1730661175.434:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 87.539496][ T4560] loop2: detected capacity change from 0 to 128 [ 87.570876][ T26] audit: type=1326 audit(1730661175.434:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 87.595535][ T4561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.75'. [ 87.669400][ T26] audit: type=1326 audit(1730661175.434:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 87.944327][ T4571] loop3: detected capacity change from 0 to 512 [ 87.997919][ T4571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.071187][ T4575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.80'. [ 88.088813][ T4571] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 88.107733][ T4571] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.153142][ T4571] EXT4-fs (loop3): 1 truncate cleaned up [ 88.159252][ T4571] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.198172][ T4580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.82'. [ 88.207870][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 88.215209][ T4578] netlink: 'syz.2.81': attribute type 15 has an invalid length. [ 88.576339][ T4591] loop2: detected capacity change from 0 to 2048 [ 88.671567][ T4591] EXT4-fs (loop2): can't mount with commit=32769, fs mounted w/o journal [ 88.684296][ T4580] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 89.079436][ T4614] loop2: detected capacity change from 0 to 128 [ 89.086410][ T4614] ======================================================= [ 89.086410][ T4614] WARNING: The mand mount option has been deprecated and [ 89.086410][ T4614] and is ignored by this kernel. Remove the mand [ 89.086410][ T4614] option from the mount to silence this warning. [ 89.086410][ T4614] ======================================================= [ 89.313808][ T4620] IPv6: sit1: Disabled Multicast RS [ 89.390834][ T4614] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 89.563625][ T4614] loop2: detected capacity change from 0 to 1024 [ 89.686407][ T4474] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.182385][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 91.237808][ T4673] bridge0: port 3(macvlan2) entered blocking state [ 91.264020][ T4673] bridge0: port 3(macvlan2) entered disabled state [ 91.632736][ T4691] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 91.787260][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 91.807017][ T4694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'. [ 91.880580][ T4694] device gtp0 entered promiscuous mode [ 92.213295][ T4712] device pim6reg1 entered promiscuous mode [ 92.297642][ T26] kauditd_printk_skb: 185 callbacks suppressed [ 92.297658][ T26] audit: type=1326 audit(1730661180.394:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.3.130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x0 [ 92.419881][ T4717] loop3: detected capacity change from 0 to 736 [ 92.442705][ T26] audit: type=1326 audit(1730661180.534:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 92.531804][ T26] audit: type=1326 audit(1730661180.564:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 92.629815][ T26] audit: type=1326 audit(1730661180.564:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 92.693221][ T4474] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.772473][ T26] audit: type=1326 audit(1730661180.564:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 92.832533][ T26] audit: type=1326 audit(1730661180.564:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 92.902371][ T26] audit: type=1326 audit(1730661180.564:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 92.967063][ T26] audit: type=1326 audit(1730661180.564:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 93.000389][ T26] audit: type=1326 audit(1730661180.574:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 93.042624][ T26] audit: type=1326 audit(1730661180.574:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 93.431263][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 93.463770][ T950] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 93.482644][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.497033][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.521613][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.542608][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.559940][ T4753] syz.1.146 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.563825][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.603339][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.621287][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.636823][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.654702][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.677989][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.700110][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.721351][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.745745][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.769537][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.785095][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.803020][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.826990][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.843885][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.856757][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.865023][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.872974][ T950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.887582][ T950] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 93.944082][ T4768] loop2: detected capacity change from 0 to 736 [ 94.001071][ T4474] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.073376][ T4773] loop3: detected capacity change from 0 to 512 [ 94.108601][ T4773] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 94.116745][ T4773] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 94.151548][ T4773] EXT4-fs (loop3): 1 truncate cleaned up [ 94.162461][ T4773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.213597][ T4773] EXT4-fs: Ignoring removed orlov option [ 94.231093][ T4773] EXT4-fs (loop3): can't enable nombcache during remount [ 94.288106][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 94.578469][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 94.640518][ T4792] loop3: detected capacity change from 0 to 1024 [ 94.714052][ T4792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.822299][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.834212][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.973289][ T4802] serio: Serial port ptm0 [ 95.141685][ T4812] loop2: detected capacity change from 0 to 512 [ 95.173452][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 95.225083][ T4812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.239919][ T4812] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.319175][ T4824] loop3: detected capacity change from 0 to 764 [ 95.395413][ T4826] tipc: Started in network mode [ 95.436275][ T4826] tipc: Node identity ac1414aa, cluster identity 4711 [ 95.489511][ T4831] loop3: detected capacity change from 0 to 512 [ 95.497255][ T4831] EXT4-fs: Ignoring removed oldalloc option [ 95.503600][ T4831] ext4: Unknown parameter 'fsname' [ 95.505845][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 95.509143][ T4826] tipc: Enabled bearer , priority 10 [ 95.724013][ T4836] 9pnet_fd: Insufficient options for proto=fd [ 95.819556][ T4839] loop1: detected capacity change from 0 to 1024 [ 95.847650][ T4839] EXT4-fs: Ignoring removed nobh option [ 95.853266][ T4839] EXT4-fs: Ignoring removed orlov option [ 95.929734][ T4842] netlink: 'syz.3.182': attribute type 27 has an invalid length. [ 95.955562][ T4839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.043807][ T4851] sctp: [Deprecated]: syz.3.182 (pid 4851) Use of int in max_burst socket option. [ 96.043807][ T4851] Use struct sctp_assoc_value instead [ 96.120172][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 96.336023][ T4864] tipc: Started in network mode [ 96.357403][ T4864] tipc: Node identity 4, cluster identity 4711 [ 96.364200][ T4864] tipc: Node number set to 4 [ 96.425701][ T4863] device pim6reg1 entered promiscuous mode [ 96.617796][ T4299] tipc: Node number set to 2886997162 [ 96.672186][ T4873] devtmpfs: Unknown parameter 'posixacl' [ 97.199767][ T4894] device hsr_slave_0 left promiscuous mode [ 97.224458][ T4894] device hsr_slave_1 left promiscuous mode [ 97.580158][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 97.580174][ T26] audit: type=1326 audit(1730661185.674:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 97.696375][ T26] audit: type=1326 audit(1730661185.724:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 97.790037][ T26] audit: type=1326 audit(1730661185.724:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 97.840238][ T4913] loop3: detected capacity change from 0 to 2048 [ 97.883343][ T4913] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 97.888831][ T26] audit: type=1326 audit(1730661185.724:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 97.918983][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 97.987405][ T4913] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 97.994401][ T4913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 98.007477][ T26] audit: type=1326 audit(1730661185.724:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 98.048973][ T4913] vhci_hcd vhci_hcd.0: Device attached [ 98.091253][ T26] audit: type=1326 audit(1730661185.724:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 98.096493][ T4922] vhci_hcd: connection closed [ 98.128155][ T26] audit: type=1326 audit(1730661185.724:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 98.155873][ T4438] vhci_hcd: stop threads [ 98.168618][ T4438] vhci_hcd: release socket [ 98.181726][ T4438] vhci_hcd: disconnect device [ 98.237765][ T4331] vhci_hcd: vhci_device speed not set [ 98.258248][ T26] audit: type=1326 audit(1730661185.724:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 98.337529][ T26] audit: type=1326 audit(1730661185.724:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 98.386396][ T26] audit: type=1326 audit(1730661185.724:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 98.606532][ T4947] syz.4.224 uses obsolete (PF_INET,SOCK_PACKET) [ 98.824688][ T4953] device pim6reg1 entered promiscuous mode [ 98.871961][ T4958] loop0: detected capacity change from 0 to 2048 [ 99.248774][ T4968] loop0: detected capacity change from 0 to 512 [ 99.285408][ T4968] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.394342][ T4968] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.232: iget: bad i_size value: -6917529027641081756 [ 99.492401][ T4968] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.232: couldn't read orphan inode 17 (err -117) [ 99.597536][ T4968] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.624869][ T4986] loop3: detected capacity change from 0 to 512 [ 99.633064][ T4984] syz.1.239 (4984) used greatest stack depth: 18872 bytes left [ 99.694297][ T4991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.242'. [ 99.694929][ T4986] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.728879][ T4986] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.872601][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 99.921913][ T4997] loop1: detected capacity change from 0 to 512 [ 99.966686][ T4997] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.244: casefold flag without casefold feature [ 100.149691][ T4997] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.244: couldn't read orphan inode 15 (err -117) [ 100.170826][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 100.171977][ T4997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.257735][ T4997] program syz.1.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.304342][ T4997] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 100.384624][ T5015] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 100.423833][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 101.941930][ T5071] tmpfs: Bad value for 'mpol' [ 102.004772][ T5074] netlink: 324 bytes leftover after parsing attributes in process `\'. [ 102.440547][ T5090] loop4: detected capacity change from 0 to 256 [ 102.702261][ T5100] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 102.801341][ T5103] 8ûÅ: renamed from syzkaller0 [ 102.825342][ T5105] loop0: detected capacity change from 0 to 1024 [ 102.916995][ T5105] __quota_error: 72 callbacks suppressed [ 102.917013][ T5105] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 102.951345][ T5105] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 102.962318][ T5105] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.291: Failed to acquire dquot type 0 [ 102.996765][ T5105] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 103.015603][ T5105] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #13: comm syz.0.291: corrupted inode contents [ 103.034541][ T5105] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #13: comm syz.0.291: mark_inode_dirty error [ 103.057952][ T5105] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #13: comm syz.0.291: corrupted inode contents [ 103.087614][ T5105] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.291: mark_inode_dirty error [ 103.099473][ T5105] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #13: comm syz.0.291: corrupted inode contents [ 103.134522][ T5105] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 103.150578][ T5105] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #13: comm syz.0.291: corrupted inode contents [ 103.239248][ T5105] EXT4-fs error (device loop0): ext4_truncate:4311: inode #13: comm syz.0.291: mark_inode_dirty error [ 103.273001][ T5105] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 103.349181][ T5105] EXT4-fs (loop0): 1 truncate cleaned up [ 103.376133][ T5105] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.388595][ T5120] loop3: detected capacity change from 0 to 1764 [ 103.422131][ T5105] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 103.490079][ T5105] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 103.508499][ T4474] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.544074][ T5105] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.291: Failed to acquire dquot type 0 [ 103.718154][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 104.298356][ T26] audit: type=1326 audit(1730661192.394:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 104.339162][ T26] audit: type=1326 audit(1730661192.394:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 104.403675][ T26] audit: type=1326 audit(1730661192.394:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 104.452623][ T26] audit: type=1326 audit(1730661192.394:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 104.497615][ T26] audit: type=1326 audit(1730661192.394:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 104.577399][ T26] audit: type=1326 audit(1730661192.404:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 104.797859][ T5157] capability: warning: `syz.2.313' uses 32-bit capabilities (legacy support in use) [ 104.908793][ T5161] loop3: detected capacity change from 0 to 2048 [ 105.294572][ T5176] netlink: 332 bytes leftover after parsing attributes in process `syz.2.321'. [ 105.382223][ T5178] loop3: detected capacity change from 0 to 512 [ 105.427121][ T5178] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.470087][ T5178] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 106.678540][ T5224] loop3: detected capacity change from 0 to 512 [ 106.712346][ T5224] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.763485][ T5224] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 106.792687][ T5224] EXT4-fs (loop3): 1 truncate cleaned up [ 106.802667][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.959416][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 107.712891][ T5252] loop2: detected capacity change from 0 to 2048 [ 107.743914][ T5253] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 107.750502][ T5253] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.765530][ T5253] vhci_hcd vhci_hcd.0: Device attached [ 107.795898][ T5252] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.830768][ T5255] vhci_hcd: connection closed [ 107.831816][ T11] vhci_hcd: stop threads [ 107.839966][ T5252] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.846566][ T11] vhci_hcd: release socket [ 107.864883][ T11] vhci_hcd: disconnect device [ 107.933445][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 108.075869][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 108.075886][ T26] audit: type=1326 audit(1730661196.164:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 108.146274][ T26] audit: type=1326 audit(1730661196.204:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 108.209376][ T26] audit: type=1326 audit(1730661196.204:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 108.226816][ T5277] syz.0.360[5277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.252531][ T5277] syz.0.360[5277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.262616][ T26] audit: type=1326 audit(1730661196.204:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 108.346907][ T26] audit: type=1326 audit(1730661196.204:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 108.408741][ T26] audit: type=1326 audit(1730661196.204:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 108.468889][ T26] audit: type=1326 audit(1730661196.204:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 108.519896][ T26] audit: type=1326 audit(1730661196.204:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 108.580722][ T26] audit: type=1326 audit(1730661196.204:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 108.653418][ T26] audit: type=1326 audit(1730661196.714:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 108.754108][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 108.970097][ T5299] process 'syz.3.370' launched '/dev/fd/4' with NULL argv: empty string added [ 109.194450][ T5311] usb usb1: usbfs: process 5311 (syz.2.376) did not claim interface 0 before use [ 109.304818][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 109.370656][ T5321] loop2: detected capacity change from 0 to 1024 [ 109.389656][ T5321] EXT4-fs: Ignoring removed oldalloc option [ 109.411492][ T5321] ext4: Unknown parameter 'smackfsdef' [ 109.774620][ T5336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.386'. [ 110.133471][ T5349] loop4: detected capacity change from 0 to 1024 [ 110.145816][ T5349] EXT4-fs: Ignoring removed orlov option [ 110.165993][ T5349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.234274][ T5349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.366670][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 111.254383][ T5388] loop4: detected capacity change from 0 to 2048 [ 111.268076][ T5388] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.323452][ T5388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.382646][ T5388] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.576200][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 111.692559][ T5411] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.845609][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 111.871370][ T5419] loop3: detected capacity change from 0 to 256 [ 112.170052][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 112.186981][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.266747][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.314778][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.352934][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.364783][ T5430] loop3: detected capacity change from 0 to 764 [ 112.418707][ T5434] loop4: detected capacity change from 0 to 512 [ 112.431711][ T5434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.475396][ T5434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 112.535499][ T5434] System zones: 1-12 [ 112.581683][ T5434] EXT4-fs (loop4): 1 truncate cleaned up [ 112.601794][ T5434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.662708][ T5441] loop3: detected capacity change from 0 to 128 [ 112.691054][ T5441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.700196][ T5441] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.776197][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 112.937920][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 113.218565][ T5467] loop4: detected capacity change from 0 to 512 [ 113.240463][ T5467] EXT4-fs: Ignoring removed oldalloc option [ 113.256733][ T5467] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.325176][ T5467] EXT4-fs (loop4): 1 truncate cleaned up [ 113.338380][ T5467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.383624][ T26] kauditd_printk_skb: 91 callbacks suppressed [ 113.383640][ T26] audit: type=1800 audit(1730661201.474:517): pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.437" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 113.696430][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 114.036114][ T5492] loop3: detected capacity change from 0 to 256 [ 114.084806][ T26] audit: type=1326 audit(1730661202.174:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 114.110087][ T4474] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.188937][ T26] audit: type=1326 audit(1730661202.184:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 114.327832][ T26] audit: type=1326 audit(1730661202.184:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 114.435415][ T26] audit: type=1326 audit(1730661202.184:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 114.531467][ T26] audit: type=1326 audit(1730661202.184:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 114.643495][ T26] audit: type=1326 audit(1730661202.184:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 114.748291][ T26] audit: type=1326 audit(1730661202.184:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 114.799067][ T26] audit: type=1326 audit(1730661202.734:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.2.450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x0 [ 114.935043][ T5519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.455'. [ 115.491703][ T5543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.697034][ T5554] loop3: detected capacity change from 0 to 512 [ 115.705000][ T5554] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.738380][ T5554] EXT4-fs (loop3): 1 truncate cleaned up [ 115.750676][ T5554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 115.906678][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 116.235229][ T26] audit: type=1326 audit(1730661204.324:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.3.479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x0 [ 116.323100][ T5548] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 116.501262][ T5553] smc: net device bond0 applied user defined pnetid SYZ0 [ 116.528272][ T5558] smc: net device bond0 erased user defined pnetid SYZ0 [ 116.760023][ T5586] device vlan2 entered promiscuous mode [ 116.777825][ T5590] program syz.4.485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.787670][ T5590] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 116.843547][ T5592] netlink: 'syz.0.486': attribute type 3 has an invalid length. [ 116.995164][ T5600] loop2: detected capacity change from 0 to 512 [ 117.032828][ T5600] EXT4-fs: Ignoring removed nobh option [ 117.095783][ T5600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.117163][ T5600] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.407506][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 117.417653][ T5621] capability: warning: `syz.0.495' uses deprecated v2 capabilities in a way that may be insecure [ 117.593941][ T5629] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 117.618013][ T5628] loop2: detected capacity change from 0 to 2048 [ 117.627532][ T5629] tipc: Enabled bearer , priority 10 [ 117.657820][ T5628] loop2: p1 < > p4 [ 117.668510][ T5628] loop2: p4 size 8388608 extends beyond EOD, truncated [ 118.221036][ T5657] netlink: 'syz.1.512': attribute type 11 has an invalid length. [ 118.420409][ T5666] Driver unsupported XDP return value 0 on prog (id 272) dev N/A, expect packet loss! [ 118.456808][ T5667] device pim6reg1 entered promiscuous mode [ 118.526236][ T5671] loop3: detected capacity change from 0 to 128 [ 118.566152][ T5671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 118.578868][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 118.620193][ T5671] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.726344][ T5671] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 118.740956][ T5679] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 118.742286][ T5680] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 118.761807][ T26] kauditd_printk_skb: 97 callbacks suppressed [ 118.761822][ T26] audit: type=1326 audit(1730661206.854:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 118.800390][ T26] audit: type=1326 audit(1730661206.874:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 118.802380][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 118.835940][ T26] audit: type=1326 audit(1730661206.874:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 118.888380][ T5681] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 118.956228][ T26] audit: type=1326 audit(1730661206.874:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 119.087953][ T26] audit: type=1326 audit(1730661206.874:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 119.114801][ T26] audit: type=1326 audit(1730661206.874:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 119.169891][ T26] audit: type=1326 audit(1730661206.874:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 119.194476][ T26] audit: type=1326 audit(1730661206.874:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 119.275181][ T26] audit: type=1326 audit(1730661206.874:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 119.343966][ T26] audit: type=1326 audit(1730661206.874:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5678 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bd7e719 code=0x7ffc0000 [ 119.565281][ T5711] 9pnet_virtio: no channels available for device 127.0.0.1 [ 119.640010][ T5713] netlink: 332 bytes leftover after parsing attributes in process `syz.3.537'. [ 119.767191][ T5718] Invalid ELF header magic: != ELF [ 119.925873][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 119.949823][ T5728] loop4: detected capacity change from 0 to 164 [ 119.975967][ T5728] Unable to read rock-ridge attributes [ 120.029710][ T5728] Unable to read rock-ridge attributes [ 120.390208][ T5747] loop4: detected capacity change from 0 to 512 [ 120.412211][ T5747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.461769][ T5747] EXT4-fs (loop4): too many log groups per flexible block group [ 120.470586][ T5747] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 120.478087][ T5747] EXT4-fs (loop4): mount failed [ 120.641019][ T5759] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 120.679364][ T5760] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 120.868272][ T5766] loop3: detected capacity change from 0 to 1024 [ 120.888174][ T5766] EXT4-fs: Ignoring removed orlov option [ 120.910627][ T5766] EXT4-fs: Ignoring removed oldalloc option [ 120.930787][ T5766] EXT4-fs: Ignoring removed orlov option [ 120.942271][ T5766] EXT4-fs: Ignoring removed bh option [ 120.997826][ T5766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.210442][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 121.521828][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 121.558453][ T5788] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.569342][ T5788] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.131812][ T5813] netlink: 'syz.1.577': attribute type 3 has an invalid length. [ 122.803015][ T5835] mmap: syz.0.588 (5835) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.838892][ T5837] netlink: 'syz.3.589': attribute type 3 has an invalid length. [ 123.032922][ T5849] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.486391][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 123.792898][ T26] kauditd_printk_skb: 90 callbacks suppressed [ 123.792915][ T26] audit: type=1326 audit(1730661211.884:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 123.864608][ T26] audit: type=1326 audit(1730661211.884:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 123.927941][ T26] audit: type=1326 audit(1730661211.884:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 124.013542][ T26] audit: type=1326 audit(1730661211.884:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 124.040330][ T26] audit: type=1326 audit(1730661211.884:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5891 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 124.916913][ T26] audit: type=1326 audit(1730661212.994:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 125.035151][ T26] audit: type=1326 audit(1730661213.004:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 125.065902][ T26] audit: type=1326 audit(1730661213.004:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 125.161866][ T5926] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 125.192067][ T26] audit: type=1326 audit(1730661213.284:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.3.627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x0 [ 125.592527][ T5947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.633'. [ 125.601581][ T5941] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 125.608132][ T5941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.642478][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 125.652666][ T5941] vhci_hcd vhci_hcd.0: Device attached [ 125.682916][ T5945] vhci_hcd: connection closed [ 125.690607][ T4438] vhci_hcd: stop threads [ 125.719959][ T4438] vhci_hcd: release socket [ 125.734153][ T5954] loop4: detected capacity change from 0 to 256 [ 125.735035][ T4438] vhci_hcd: disconnect device [ 126.023003][ T5958] loop4: detected capacity change from 0 to 2048 [ 126.032545][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 126.149949][ T5969] usb usb8: usbfs: process 5969 (syz.1.639) did not claim interface 0 before use [ 126.172903][ T5958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.184369][ T5970] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 126.318779][ T26] audit: type=1804 audit(1730661214.414:733): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.636" name="/newroot/132/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 126.406397][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 126.695750][ T5990] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 126.736805][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.752664][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.763721][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.779832][ T5994] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 127.071041][ T6005] netlink: 56 bytes leftover after parsing attributes in process `syz.2.656'. [ 127.582289][ T5996] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 128.003032][ T6040] netlink: 'syz.4.670': attribute type 10 has an invalid length. [ 128.055941][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.064941][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.109335][ T6045] tmpfs: Bad value for 'mpol' [ 128.177733][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.185029][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.190010][ T6049] netlink: 'syz.3.673': attribute type 1 has an invalid length. [ 128.192498][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.207081][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.724369][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.731759][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.770676][ T6043] device bond1 entered promiscuous mode [ 128.776573][ T6043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.839744][ T6057] 9pnet_fd: Insufficient options for proto=fd [ 128.977418][ T6043] bond1 (unregistering): Released all slaves [ 129.011576][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 129.027900][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.035356][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.066196][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.095298][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.292829][ T6073] loop4: detected capacity change from 0 to 512 [ 129.310418][ T6073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.380656][ T6073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 129.383579][ T6075] IPv6: sit1: Disabled Multicast RS [ 129.445219][ T6073] System zones: 1-12 [ 129.466074][ T6080] loop3: detected capacity change from 0 to 256 [ 129.522334][ T6073] EXT4-fs (loop4): 1 truncate cleaned up [ 129.557052][ T6073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.614003][ T6083] 9pnet_fd: Insufficient options for proto=fd [ 129.719401][ T6085] tmpfs: Bad value for 'mpol' [ 129.860626][ T6091] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 130.302678][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 130.548969][ T6109] 9pnet_fd: Insufficient options for proto=fd [ 130.630074][ T6112] netlink: 56 bytes leftover after parsing attributes in process `syz.0.700'. [ 130.812723][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 130.812740][ T26] audit: type=1326 audit(1730661218.904:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 130.855804][ T26] audit: type=1326 audit(1730661218.904:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 130.881903][ T26] audit: type=1326 audit(1730661218.914:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 130.955342][ T26] audit: type=1326 audit(1730661218.914:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 131.029538][ T26] audit: type=1326 audit(1730661218.914:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 131.102815][ T26] audit: type=1326 audit(1730661218.914:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 131.174180][ T26] audit: type=1326 audit(1730661218.914:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 131.239241][ T26] audit: type=1326 audit(1730661218.914:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 131.294271][ T26] audit: type=1326 audit(1730661218.914:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 131.396860][ T26] audit: type=1326 audit(1730661218.914:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c837e719 code=0x7ffc0000 [ 131.495079][ T6107] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 131.519766][ T6137] random: crng reseeded on system resumption [ 131.928759][ T6146] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 132.278036][ T6154] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 132.713113][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.719493][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.532024][ T6195] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 134.283113][ T6218] loop4: detected capacity change from 0 to 512 [ 134.312359][ T6218] EXT4-fs: Ignoring removed nobh option [ 134.380311][ T6218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.407081][ T6218] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.946288][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 135.367318][ T6236] nfs4: Bad value for 'source' [ 135.753468][ T6248] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 136.079680][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.128529][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.977084][ T6226] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.986040][ T6226] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.006880][ T6226] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.015798][ T6226] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.169740][ T6252] device syzkaller0 entered promiscuous mode [ 137.448272][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 137.448288][ T26] audit: type=1326 audit(1730661225.544:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 137.502907][ T26] audit: type=1326 audit(1730661225.574:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 137.616929][ T26] audit: type=1326 audit(1730661225.614:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 137.676959][ T26] audit: type=1326 audit(1730661225.614:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 137.726926][ T26] audit: type=1326 audit(1730661225.614:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 137.778332][ T26] audit: type=1326 audit(1730661225.624:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 137.800617][ T6281] loop4: detected capacity change from 0 to 512 [ 137.801406][ T6281] ext4: Unknown parameter 'seclabel' [ 137.875019][ T26] audit: type=1326 audit(1730661225.624:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 137.935486][ T26] audit: type=1326 audit(1730661225.624:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 137.962413][ T6281] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 137.981822][ T26] audit: type=1326 audit(1730661225.624:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 138.038602][ T26] audit: type=1326 audit(1730661225.624:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8562d7e719 code=0x7ffc0000 [ 138.178066][ T6281] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 138.407119][ T6281] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 138.960899][ T6307] delete_channel: no stack [ 139.072249][ T4255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.082615][ T4255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.111854][ T4255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.121110][ T4255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.131942][ T4255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.139284][ T4255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.159675][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.168614][ T4260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.176175][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.184065][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.194689][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.202751][ T4260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.612513][ T6323] loop3: detected capacity change from 0 to 2048 [ 139.663644][ T6323] loop3: p1 < > p4 [ 139.669970][ T6323] loop3: p4 size 8388608 extends beyond EOD, truncated [ 139.738308][ T6326] loop4: detected capacity change from 0 to 512 [ 139.766069][ T6326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.804268][ T6326] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.836520][ T6310] chnl_net:caif_netlink_parms(): no params data found [ 139.848343][ T6326] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 139.878446][ T6326] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 139.896326][ T6326] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 139.908509][ T6326] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 139.940757][ T6326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.053343][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 140.281503][ T6345] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 140.293665][ T6345] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 140.307037][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.315799][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.361515][ T6345] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 140.374928][ T6310] device bridge_slave_0 entered promiscuous mode [ 140.394514][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.418770][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.439860][ T6310] device bridge_slave_1 entered promiscuous mode [ 140.516686][ T6310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.532004][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.570859][ T6358] netlink: 2024 bytes leftover after parsing attributes in process `syz.2.801'. [ 140.580626][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.801'. [ 140.595367][ T6310] team0: Port device team_slave_0 added [ 140.617744][ T6310] team0: Port device team_slave_1 added [ 140.666607][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.674023][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.701495][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.716281][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.723610][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.750309][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.815527][ T6310] device hsr_slave_0 entered promiscuous mode [ 140.827088][ T6310] device hsr_slave_1 entered promiscuous mode [ 140.834298][ T6310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.842209][ T6310] Cannot create hsr debugfs directory [ 141.032587][ T6310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.045003][ T6310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.061235][ T6310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.074648][ T6310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.267180][ T4260] Bluetooth: hci3: command tx timeout [ 141.432120][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.463647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.474253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.494525][ T6310] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.530469][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.543652][ T6375] loop3: detected capacity change from 0 to 128 [ 141.568078][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.594665][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.601865][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.638667][ T6375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.645370][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.671392][ T6375] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.735646][ T6382] netlink: 'syz.1.809': attribute type 10 has an invalid length. [ 141.773299][ T6382] device geneve0 entered promiscuous mode [ 141.803512][ T6382] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 141.833082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.857666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.860047][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 141.866298][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.878610][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.921912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.950216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.990600][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.014224][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.044186][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.054742][ T6387] loop3: detected capacity change from 0 to 512 [ 142.063805][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.084371][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.093947][ T6387] EXT4-fs: Ignoring removed nobh option [ 142.094036][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.137864][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.141494][ T6387] EXT4-fs: Ignoring removed nobh option [ 142.170834][ T6387] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.173605][ T6310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.220705][ T6387] EXT4-fs (loop3): failed to initialize system zone (-117) [ 142.227868][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.252428][ T6387] EXT4-fs (loop3): mount failed [ 142.272381][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.285757][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.689734][ T6406] rdma_op ffff8880589731f0 conn xmit_rdma 0000000000000000 [ 142.951195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.960008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.003946][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.174151][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 143.174167][ T26] audit: type=1326 audit(1730661231.264:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 143.287356][ T26] audit: type=1326 audit(1730661231.264:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 143.347002][ T4260] Bluetooth: hci3: command tx timeout [ 143.386536][ T26] audit: type=1326 audit(1730661231.294:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 143.431012][ T26] audit: type=1326 audit(1730661231.294:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 143.535902][ T26] audit: type=1326 audit(1730661231.294:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 143.609881][ T26] audit: type=1326 audit(1730661231.294:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 143.734095][ T26] audit: type=1326 audit(1730661231.294:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 143.809189][ T26] audit: type=1326 audit(1730661231.294:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 143.922800][ T26] audit: type=1326 audit(1730661231.304:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 144.034847][ T26] audit: type=1326 audit(1730661231.304:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.1.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 144.119971][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.144574][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.190832][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.206472][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.226680][ T6310] device veth0_vlan entered promiscuous mode [ 144.235482][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.251549][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.279227][ T6310] device veth1_vlan entered promiscuous mode [ 144.402651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.417799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.436611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.470654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.499758][ T6310] device veth0_macvtap entered promiscuous mode [ 144.567692][ T6310] device veth1_macvtap entered promiscuous mode [ 144.592094][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 144.601138][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 144.642191][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.662441][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.673255][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.723829][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.764943][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.787277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.795654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.842050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.894788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.934668][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.966074][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.003166][ T6310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.037008][ T6310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.079552][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.099361][ T6459] netlink: 2024 bytes leftover after parsing attributes in process `syz.2.837'. [ 145.117029][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.837'. [ 145.138348][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.157991][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.175515][ T6310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.190079][ T6310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.200117][ T6310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.208955][ T6310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.404187][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.420721][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.427057][ T4260] Bluetooth: hci3: command tx timeout [ 145.466124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.576172][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.595593][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.617552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.861963][ T6471] syz.5.779 (6471) used obsolete PPPIOCDETACH ioctl [ 146.082785][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.848'. [ 146.507609][ T6502] loop3: detected capacity change from 0 to 512 [ 146.530369][ T6502] EXT4-fs: Ignoring removed nobh option [ 146.622382][ T6502] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.648384][ T6502] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.783767][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 146.957944][ T6519] loop3: detected capacity change from 0 to 128 [ 147.132401][ T4261] block device autoloading is deprecated and will be removed. [ 147.142787][ T6524] syz.3.861: attempt to access beyond end of device [ 147.142787][ T6524] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 147.507037][ T4260] Bluetooth: hci3: command tx timeout [ 147.516506][ T9] kworker/u4:0: attempt to access beyond end of device [ 147.516506][ T9] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 147.957182][ T41] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 147.974496][ T41] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 148.002870][ T41] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 148.031010][ T41] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 148.041438][ T6549] rdma_op ffff8880576939f0 conn xmit_rdma 0000000000000000 [ 148.391891][ T6566] loop4: detected capacity change from 0 to 512 [ 148.422595][ T6566] EXT4-fs: Ignoring removed nobh option [ 148.501321][ T6566] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.513892][ T6566] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.662587][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 149.062900][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.893'. [ 149.080164][ T6590] rdma_op ffff88807a8119f0 conn xmit_rdma 0000000000000000 [ 149.421909][ T6600] tipc: Failed to remove unknown binding: 66,1,1/0:21779024/21779026 [ 149.444265][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 149.444281][ T26] audit: type=1326 audit(1730661237.534:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.3.902" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8c837e719 code=0x0 [ 149.609783][ T26] audit: type=1326 audit(1730661237.704:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.5.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091597e719 code=0x7ffc0000 [ 149.687674][ T6614] rdma_op ffff8880768e71f0 conn xmit_rdma 0000000000000000 [ 149.691989][ T26] audit: type=1326 audit(1730661237.734:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.5.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091597e719 code=0x7ffc0000 [ 149.781675][ T26] audit: type=1326 audit(1730661237.734:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.5.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f091597e719 code=0x7ffc0000 [ 149.835137][ T6617] loop5: detected capacity change from 0 to 512 [ 149.863342][ T26] audit: type=1326 audit(1730661237.734:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.5.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091597e719 code=0x7ffc0000 [ 149.908566][ T6617] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.907: bg 0: block 35: padding at end of block bitmap is not set [ 149.924967][ T26] audit: type=1326 audit(1730661237.734:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.5.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091597e719 code=0x7ffc0000 [ 149.957822][ T6617] EXT4-fs (loop5): Remounting filesystem read-only [ 149.965690][ T6617] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 149.982288][ T6617] EXT4-fs (loop5): Remounting filesystem read-only [ 149.993814][ T6617] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.907: invalid indirect mapped block 4294967295 (level 1) [ 149.995943][ T26] audit: type=1326 audit(1730661237.734:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.5.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f091597e719 code=0x7ffc0000 [ 150.036931][ T6617] EXT4-fs (loop5): Remounting filesystem read-only [ 150.045987][ T6617] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.907: invalid indirect mapped block 4294967295 (level 2) [ 150.076021][ T26] audit: type=1326 audit(1730661237.734:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.5.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091597e719 code=0x7ffc0000 [ 150.085085][ T6617] EXT4-fs (loop5): Remounting filesystem read-only [ 150.117303][ T6617] EXT4-fs (loop5): 1 truncate cleaned up [ 150.123026][ T6617] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 150.143258][ T26] audit: type=1326 audit(1730661237.734:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.5.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091597e719 code=0x7ffc0000 [ 150.169986][ T6617] netlink: 100 bytes leftover after parsing attributes in process `syz.5.907'. [ 150.252331][ T6310] EXT4-fs (loop5): unmounting filesystem. [ 150.556705][ T6639] netlink: 'syz.3.915': attribute type 12 has an invalid length. [ 151.749523][ T6686] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.765598][ T6686] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 151.842082][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 151.993111][ T26] audit: type=1326 audit(1730661240.084:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.1.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983d97e719 code=0x7ffc0000 [ 152.257509][ T6705] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 152.272222][ T6704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.941'. [ 152.718051][ T6726] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 152.728942][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.736796][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.781095][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.788389][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.796142][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.803305][ T6726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.819332][ T6726] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 153.932839][ T6766] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 154.304989][ T6778] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 154.449092][ T26] kauditd_printk_skb: 137 callbacks suppressed [ 154.449109][ T26] audit: type=1326 audit(1730661242.544:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 154.510940][ T26] audit: type=1326 audit(1730661242.574:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3e757d0b0 code=0x7ffc0000 [ 154.577763][ T26] audit: type=1326 audit(1730661242.584:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 154.626259][ T26] audit: type=1326 audit(1730661242.584:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3e757d0b0 code=0x7ffc0000 [ 154.649064][ T26] audit: type=1326 audit(1730661242.584:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 154.702977][ T26] audit: type=1326 audit(1730661242.584:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 154.727763][ T26] audit: type=1326 audit(1730661242.584:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 154.751389][ T26] audit: type=1326 audit(1730661242.584:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 154.796892][ T26] audit: type=1326 audit(1730661242.584:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 154.850816][ T26] audit: type=1326 audit(1730661242.584:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e757e719 code=0x7ffc0000 [ 155.079907][ T6804] netlink: 936 bytes leftover after parsing attributes in process `syz.4.983'. [ 155.325014][ T6810] netlink: 'syz.4.986': attribute type 3 has an invalid length. [ 155.371267][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057bb4800: rx timeout, send abort [ 155.525341][ T6823] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 155.881167][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057bb4800: abort rx timeout. Force session deactivation [ 155.989553][ T6843] netlink: 'syz.2.999': attribute type 3 has an invalid length. [ 156.709766][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1005'. [ 156.726893][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1005'. [ 156.874261][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1012'. [ 156.902057][ T6872] netlink: 'syz.2.1011': attribute type 3 has an invalid length. [ 157.233011][ T6887] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 157.305100][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1021'. [ 157.325904][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1021'. [ 157.514336][ T6898] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1024'. [ 157.605215][ T6900] netlink: 'syz.4.1025': attribute type 3 has an invalid length. [ 157.853841][ T6906] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 158.144421][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 158.195594][ T6918] [ 158.197982][ T6918] ====================================================== [ 158.199056][ T6922] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1036'. [ 158.204998][ T6918] WARNING: possible circular locking dependency detected [ 158.205008][ T6918] 6.1.115-syzkaller #0 Not tainted [ 158.205019][ T6918] ------------------------------------------------------ [ 158.205026][ T6918] syz.3.1033/6918 is trying to acquire lock: [ 158.205037][ T6918] ffff888055f69450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xe5/0xad0 [ 158.251047][ T6918] [ 158.251047][ T6918] but task is already holding lock: [ 158.257725][ T6926] netlink: 'syz.5.1038': attribute type 3 has an invalid length. [ 158.258414][ T6918] ffff888055f68130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 158.275157][ T6918] [ 158.275157][ T6918] which lock already depends on the new lock. [ 158.275157][ T6918] [ 158.285582][ T6918] [ 158.285582][ T6918] the existing dependency chain (in reverse order) is: [ 158.294621][ T6918] [ 158.294621][ T6918] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 158.302404][ T6918] lock_acquire+0x1f8/0x5a0 [ 158.307477][ T6918] lock_sock_nested+0x44/0x100 [ 158.312804][ T6918] smc_listen_out+0x113/0x3d0 [ 158.318032][ T6918] process_one_work+0x8a9/0x11d0 [ 158.323510][ T6918] worker_thread+0xa47/0x1200 [ 158.328722][ T6918] kthread+0x28d/0x320 [ 158.333386][ T6918] ret_from_fork+0x1f/0x30 [ 158.338389][ T6918] [ 158.338389][ T6918] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 158.348572][ T6918] validate_chain+0x1661/0x5950 [ 158.353945][ T6918] __lock_acquire+0x125b/0x1f80 [ 158.359323][ T6918] lock_acquire+0x1f8/0x5a0 [ 158.364356][ T6918] __flush_work+0xfe/0xad0 [ 158.369298][ T6918] __cancel_work_timer+0x519/0x6a0 [ 158.374940][ T6918] smc_clcsock_release+0x5e/0xe0 [ 158.380408][ T6918] __smc_release+0x678/0x7f0 [ 158.385537][ T6918] smc_close_non_accepted+0xd4/0x1e0 [ 158.391370][ T6918] smc_close_active+0xa75/0xe20 [ 158.396744][ T6918] __smc_release+0xa0/0x7f0 [ 158.401764][ T6918] smc_release+0x2d5/0x530 [ 158.406700][ T6918] sock_close+0xcd/0x230 [ 158.411463][ T6918] __fput+0x3f6/0x8d0 [ 158.415990][ T6918] task_work_run+0x246/0x300 [ 158.421104][ T6918] exit_to_user_mode_loop+0xde/0x100 [ 158.426914][ T6918] exit_to_user_mode_prepare+0xb1/0x140 [ 158.432994][ T6918] syscall_exit_to_user_mode+0x60/0x270 [ 158.439099][ T6918] do_syscall_64+0x47/0xb0 [ 158.444058][ T6918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.450520][ T6918] [ 158.450520][ T6918] other info that might help us debug this: [ 158.450520][ T6918] [ 158.460790][ T6918] Possible unsafe locking scenario: [ 158.460790][ T6918] [ 158.468236][ T6918] CPU0 CPU1 [ 158.473596][ T6918] ---- ---- [ 158.478957][ T6918] lock(sk_lock-AF_SMC/1); [ 158.483468][ T6918] lock((work_completion)(&new_smc->smc_listen_work)); [ 158.492921][ T6918] lock(sk_lock-AF_SMC/1); [ 158.499950][ T6918] lock((work_completion)(&new_smc->smc_listen_work)); [ 158.506896][ T6918] [ 158.506896][ T6918] *** DEADLOCK *** [ 158.506896][ T6918] [ 158.515055][ T6918] 2 locks held by syz.3.1033/6918: [ 158.520158][ T6918] #0: ffff888057efb210 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 158.530374][ T6918] #1: ffff888055f68130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 158.539873][ T6918] [ 158.539873][ T6918] stack backtrace: [ 158.545767][ T6918] CPU: 1 PID: 6918 Comm: syz.3.1033 Not tainted 6.1.115-syzkaller #0 [ 158.553834][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.563905][ T6918] Call Trace: [ 158.567184][ T6918] [ 158.570118][ T6918] dump_stack_lvl+0x1e3/0x2cb [ 158.574814][ T6918] ? nf_tcp_handle_invalid+0x642/0x642 [ 158.580302][ T6918] ? print_circular_bug+0x12b/0x1a0 [ 158.585503][ T6918] check_noncircular+0x2fa/0x3b0 [ 158.590446][ T6918] ? add_chain_block+0x850/0x850 [ 158.595381][ T6918] ? lockdep_lock+0x11f/0x2a0 [ 158.600072][ T6918] ? rcu_is_watching+0x11/0xb0 [ 158.604836][ T6918] ? _find_first_zero_bit+0xd0/0x100 [ 158.610125][ T6918] validate_chain+0x1661/0x5950 [ 158.614986][ T6918] ? deref_stack_reg+0x17c/0x210 [ 158.619925][ T6918] ? is_bpf_text_address+0x22/0x2a0 [ 158.625136][ T6918] ? __bfs+0x359/0x6e0 [ 158.629232][ T6918] ? reacquire_held_locks+0x660/0x660 [ 158.634603][ T6918] ? check_path+0x40/0x40 [ 158.638944][ T6918] ? noop_count+0x30/0x30 [ 158.643277][ T6918] ? __bfs+0x359/0x6e0 [ 158.647352][ T6918] ? look_up_lock_class+0x77/0x140 [ 158.652482][ T6918] ? register_lock_class+0x100/0x990 [ 158.657796][ T6918] ? check_path+0x21/0x40 [ 158.662174][ T6918] ? check_noncircular+0x1e3/0x3b0 [ 158.667313][ T6918] ? is_dynamic_key+0x260/0x260 [ 158.672186][ T6918] ? mark_lock+0x9a/0x340 [ 158.676530][ T6918] __lock_acquire+0x125b/0x1f80 [ 158.681401][ T6918] lock_acquire+0x1f8/0x5a0 [ 158.685923][ T6918] ? __flush_work+0xe5/0xad0 [ 158.690518][ T6918] ? read_lock_is_recursive+0x10/0x10 [ 158.695910][ T6918] ? reacquire_held_locks+0x660/0x660 [ 158.701297][ T6918] ? reacquire_held_locks+0x660/0x660 [ 158.706681][ T6918] ? reacquire_held_locks+0x660/0x660 [ 158.712073][ T6918] ? __flush_work+0xe5/0xad0 [ 158.716678][ T6918] __flush_work+0xfe/0xad0 [ 158.721099][ T6918] ? __flush_work+0xe5/0xad0 [ 158.725692][ T6918] ? flush_work+0x20/0x20 [ 158.730022][ T6918] ? print_irqtrace_events+0x210/0x210 [ 158.735488][ T6918] ? __cancel_work_timer+0x467/0x6a0 [ 158.740772][ T6918] __cancel_work_timer+0x519/0x6a0 [ 158.745912][ T6918] ? mark_lock+0x9a/0x340 [ 158.750253][ T6918] ? cancel_work_sync+0x20/0x20 [ 158.755098][ T6918] ? __smc_release+0x670/0x7f0 [ 158.759862][ T6918] ? __local_bh_enable_ip+0x164/0x1f0 [ 158.765283][ T6918] ? lockdep_hardirqs_on+0x94/0x130 [ 158.770496][ T6918] ? __local_bh_enable_ip+0x164/0x1f0 [ 158.775897][ T6918] ? __smc_release+0x670/0x7f0 [ 158.780683][ T6918] ? _local_bh_enable+0xa0/0xa0 [ 158.785553][ T6918] ? do_raw_spin_unlock+0x137/0x8a0 [ 158.790763][ T6918] smc_clcsock_release+0x5e/0xe0 [ 158.795709][ T6918] __smc_release+0x678/0x7f0 [ 158.800308][ T6918] smc_close_non_accepted+0xd4/0x1e0 [ 158.805594][ T6918] smc_close_active+0xa75/0xe20 [ 158.810449][ T6918] ? sock_no_sendpage_locked+0x1e0/0x1e0 [ 158.816087][ T6918] __smc_release+0xa0/0x7f0 [ 158.820642][ T6918] smc_release+0x2d5/0x530 [ 158.825067][ T6918] sock_close+0xcd/0x230 [ 158.829342][ T6918] ? sock_mmap+0x90/0x90 [ 158.833585][ T6918] __fput+0x3f6/0x8d0 [ 158.837575][ T6918] task_work_run+0x246/0x300 [ 158.842193][ T6918] ? task_work_cancel+0x2e0/0x2e0 [ 158.847242][ T6918] ? exit_to_user_mode_loop+0x39/0x100 [ 158.852701][ T6918] exit_to_user_mode_loop+0xde/0x100 [ 158.857984][ T6918] exit_to_user_mode_prepare+0xb1/0x140 [ 158.863621][ T6918] syscall_exit_to_user_mode+0x60/0x270 [ 158.869203][ T6918] do_syscall_64+0x47/0xb0 [ 158.873643][ T6918] ? clear_bhb_loop+0x45/0xa0 [ 158.878323][ T6918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.884226][ T6918] RIP: 0033:0x7fd8c837e719 [ 158.888670][ T6918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.908377][ T6918] RSP: 002b:00007fd8c91b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 158.916793][ T6918] RAX: 0000000000000000 RBX: 00007fd8c8535f80 RCX: 00007fd8c837e719 [ 158.924798][ T6918] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 158.932764][ T6918] RBP: 00007fd8c83f132e R08: 0000000000000000 R09: 0000000000000000 [ 158.940736][ T6918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.948706][ T6918] R13: 0000000000000000 R14: 00007fd8c8535f80 R15: 00007ffefbad2b38 [ 158.956685][ T6918]