last executing test programs: 8.428283809s ago: executing program 4 (id=1956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.432105484s ago: executing program 4 (id=1960): bpf$MAP_CREATE(0x0, 0x0, 0x48) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB='\x00\x00']) 6.290301842s ago: executing program 4 (id=1965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x6, 0xffd, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}}) 6.090363969s ago: executing program 4 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xfffffffd}, 0x54) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000", 0x19) recvmmsg(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.089955759s ago: executing program 3 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 5.912359314s ago: executing program 3 (id=1971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7a6, &(0x7f00000016c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x80) 5.526023828s ago: executing program 3 (id=1973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$unix(0x1, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000003040)=ANY=[@ANYBLOB="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"], 0xd98}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r8 = fanotify_init(0x0, 0x0) readv(r8, &(0x7f00000001c0), 0x0) fanotify_mark(r8, 0x1, 0x40001019, r7, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) 5.239789222s ago: executing program 4 (id=1976): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) 3.645721438s ago: executing program 4 (id=1979): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x6}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x2}, @fwd={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x5f, 0x0]}}, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3.592425763s ago: executing program 1 (id=1980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.591235893s ago: executing program 1 (id=1981): gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000009e00000095"], &(0x7f00000015c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) 2.646176994s ago: executing program 2 (id=1986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x600, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x3, 0xd43e, 'netbios-ns\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 2.642540264s ago: executing program 0 (id=1987): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000340)={0x1, [0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000006", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x2000) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x85) write$cgroup_devices(r2, &(0x7f0000000280)={'a', ' *:* ', 'r\x00'}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e80000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) keyctl$chown(0x4, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.606133397s ago: executing program 2 (id=1988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xfffffffd}, 0x54) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000", 0x19) recvmmsg(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.46180717s ago: executing program 1 (id=1989): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x3, 0x4) 1.360907174s ago: executing program 2 (id=1990): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, &(0x7f0000000840)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendfile(r1, r0, 0x0, 0x3a) 1.357289474s ago: executing program 0 (id=1991): r0 = socket$inet(0x2, 0x6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 1.250236983s ago: executing program 0 (id=1992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.249917103s ago: executing program 2 (id=1993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\t'], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000689a000000000200020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/97], 0xb8}}, 0x0) 1.210013897s ago: executing program 0 (id=1994): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x3}}, 0x10, 0x0}, 0x0) 1.177665649s ago: executing program 2 (id=1995): bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11, 0x2000000, 0xffffffffffffffff, @void, @value}, 0x11) 1.074256958s ago: executing program 0 (id=1996): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pselect6(0x2a, 0x0, 0x0, 0x0, 0x0, 0x0) 1.073707318s ago: executing program 2 (id=1997): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\'\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x80000) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}, {@resuid}, {@noload}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@bh}, {}, {@bsdgroups}, {@errors_remount}]}, 0x6, 0x641, &(0x7f0000000d80)="$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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000001d80)={r8, "6e5083a2ef9e1fde15507045d5d0e5f0"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESOCT=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r10, 0x0, 0x20000000}, 0x20) 512.934116ms ago: executing program 3 (id=1998): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "978e8e76a8cfd89c"}, 0x10}}, 0x0) 369.836619ms ago: executing program 3 (id=1999): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000600)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000001080)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000800)=""/113, 0x71, 0x0, &(0x7f0000000880)=""/104, 0x68}}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 175.447725ms ago: executing program 0 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033007665746830"], 0x38}}, 0x0) 174.378445ms ago: executing program 1 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000b00000000030014"], 0x30}}, 0x0) 66.344644ms ago: executing program 1 (id=2002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), 0x0}, 0x20) 3.12462ms ago: executing program 3 (id=2003): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 0s ago: executing program 1 (id=2004): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5953000000b30000000805"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a0001"], 0xe0}}, 0x0) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 582.714724][ T8771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.729979][ T8771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.738729][ T8771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.347516][ T8928] hub 6-0:1.0: USB hub found [ 583.350156][ T8928] hub 6-0:1.0: 8 ports detected [ 583.957429][ T8933] netlink: 'syz.4.1235': attribute type 29 has an invalid length. [ 584.100801][ T8933] netlink: 'syz.4.1235': attribute type 29 has an invalid length. [ 584.150357][ T8934] netlink: 'syz.4.1235': attribute type 29 has an invalid length. [ 584.306695][ T8822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 584.425207][ T8822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 584.478229][ T8822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 584.655761][ T8822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 584.791961][ T4149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.794249][ T4149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.807450][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 584.823190][ T8949] dccp_xmit_packet: Payload too large (65475) for featneg. [ 584.951043][ T4109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.954437][ T4109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.982640][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 585.055924][ T8950] loop2: detected capacity change from 0 to 128 [ 585.077778][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.102799][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 585.134670][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.228851][ T8822] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.123575][ T8950] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 586.200180][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.212326][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.379596][ T4149] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.381381][ T4149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.383744][ T4149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 586.395036][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 586.398300][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.406572][ T4109] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.408352][ T4109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.462739][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 586.466414][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 586.491818][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 586.499365][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 586.510948][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 586.516398][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 586.564227][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 586.729093][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 586.731612][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 586.738756][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 586.766718][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.988579][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.173599][ T8975] hub 6-0:1.0: USB hub found [ 587.176457][ T8975] hub 6-0:1.0: 8 ports detected [ 588.081670][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.083749][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 588.200544][ T8822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.285726][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 588.288495][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 588.349886][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 588.379672][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 588.399275][ T8822] device veth0_vlan entered promiscuous mode [ 588.411259][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 588.416511][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 588.963541][ T8822] device veth1_vlan entered promiscuous mode [ 589.017963][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 589.020671][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 589.023524][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 589.033497][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 589.043297][ T8822] device veth0_macvtap entered promiscuous mode [ 589.058918][ T8822] device veth1_macvtap entered promiscuous mode [ 589.101962][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.114867][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.124433][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.130947][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.170625][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.186385][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.188996][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.285584][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.288119][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.290846][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.293309][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.314513][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.328741][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.346639][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.363413][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.412457][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.415214][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.417847][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.420542][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.422877][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.425576][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.428014][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.430617][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.436802][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.439549][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.442044][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.444730][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.447964][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.450629][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.454387][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.457142][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 589.459785][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 589.462682][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 589.494636][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.514934][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.673625][ T8822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.675910][ T8822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.677982][ T8822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.680360][ T8822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.776207][ T9008] loop4: detected capacity change from 0 to 128 [ 589.843938][ T4109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.899586][ T4109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.922729][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 589.942608][ T4109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.952916][ T4109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.987499][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 589.998172][ T9008] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 590.475863][ T9017] hub 6-0:1.0: USB hub found [ 590.479668][ T9017] hub 6-0:1.0: 8 ports detected [ 591.740836][ T9025] syzkaller0: create flow: hash 3690463288 index 1 [ 591.758565][ T8454] syzkaller0: tun_net_xmit 76 [ 591.760334][ T8454] syzkaller0: tun_net_xmit 48 [ 591.785894][ T4064] syzkaller0: tun_net_xmit 76 [ 591.845587][ T4064] syzkaller0: tun_net_xmit 76 [ 591.931135][ T9023] syzkaller0: delete flow: hash 3690463288 index 1 [ 593.500963][ T9053] netlink: 'syz.3.1267': attribute type 10 has an invalid length. [ 593.502969][ T9053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1267'. [ 593.572260][ T9053] batman_adv: batadv0: Adding interface: virt_wifi0 [ 593.574068][ T9053] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.581843][ T9053] batman_adv: batadv0: Interface activated: virt_wifi0 [ 595.359024][ T9066] loop2: detected capacity change from 0 to 128 [ 595.856074][ T9066] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 598.036895][ T4577] device hsr_slave_0 left promiscuous mode [ 598.115792][ T4577] device hsr_slave_1 left promiscuous mode [ 598.197475][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.227884][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.373989][ T9116] hub 6-0:1.0: USB hub found [ 598.376963][ T9116] hub 6-0:1.0: 8 ports detected [ 598.586347][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.588333][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.590787][ T4577] device bridge_slave_1 left promiscuous mode [ 598.592502][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.676795][ T4577] device bridge_slave_0 left promiscuous mode [ 598.678546][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.740950][ T4577] device hsr_slave_0 left promiscuous mode [ 598.830608][ T4577] device hsr_slave_1 left promiscuous mode [ 598.925795][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.927681][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.930462][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.935956][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.944419][ T4577] device bridge_slave_1 left promiscuous mode [ 598.946202][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.986824][ T4577] device bridge_slave_0 left promiscuous mode [ 598.989337][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.040504][ T4577] device hsr_slave_0 left promiscuous mode [ 599.075696][ T4577] device hsr_slave_1 left promiscuous mode [ 599.195608][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.197643][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.201222][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.203141][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.206782][ T4577] device bridge_slave_1 left promiscuous mode [ 599.208404][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.376689][ T4577] device bridge_slave_0 left promiscuous mode [ 599.378354][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.275782][ T4577] device veth1_macvtap left promiscuous mode [ 601.277427][ T4577] device veth0_macvtap left promiscuous mode [ 601.279010][ T4577] device veth1_vlan left promiscuous mode [ 601.280478][ T4577] device veth0_vlan left promiscuous mode [ 601.435936][ T4577] device veth1_macvtap left promiscuous mode [ 601.437527][ T4577] device veth0_macvtap left promiscuous mode [ 601.439008][ T4577] device veth1_vlan left promiscuous mode [ 601.440456][ T4577] device veth0_vlan left promiscuous mode [ 602.035633][ T4577] device veth1_macvtap left promiscuous mode [ 602.037357][ T4577] device veth0_macvtap left promiscuous mode [ 602.039018][ T4577] device veth1_vlan left promiscuous mode [ 602.040560][ T4577] device veth0_vlan left promiscuous mode [ 602.545763][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 602.555134][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 602.567638][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.604373][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.745335][ T4577] bond0 (unregistering): Released all slaves [ 602.825750][ T4064] Bluetooth: hci1: command 0x1003 tx timeout [ 602.828259][ T4032] Bluetooth: hci1: sending frame failed (-49) [ 602.961631][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 602.976853][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 602.987539][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.043278][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.212230][ T4577] bond0 (unregistering): Released all slaves [ 603.413302][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 603.423448][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 603.437758][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.474281][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.642832][ T4577] bond0 (unregistering): Released all slaves [ 603.748169][ T9114] IPv6: Can't replace route, no match found [ 604.054465][ T9136] loop4: detected capacity change from 0 to 128 [ 604.441980][ T9136] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 604.662151][ T7680] Bluetooth: hci3: command 0x0406 tx timeout [ 604.912563][ T7680] Bluetooth: hci1: command 0x1001 tx timeout [ 604.914340][ T4032] Bluetooth: hci1: sending frame failed (-49) [ 605.109738][ T9159] dccp_xmit_packet: Payload too large (65475) for featneg. [ 606.830255][ T9173] hub 6-0:1.0: USB hub found [ 606.833601][ T9173] hub 6-0:1.0: 8 ports detected [ 607.498781][ T4337] Bluetooth: hci1: command 0x1009 tx timeout [ 607.639592][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 608.474220][ T9191] loop3: detected capacity change from 0 to 128 [ 608.543375][ T9191] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 609.826185][ T9211] chnl_net:caif_netlink_parms(): no params data found [ 610.110272][ T9230] dccp_xmit_packet: Payload too large (65475) for featneg. [ 610.554846][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.556904][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.560217][ T9211] device bridge_slave_0 entered promiscuous mode [ 610.605498][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.616394][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.636898][ T9211] device bridge_slave_1 entered promiscuous mode [ 610.743127][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.768041][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.159187][ T9211] team0: Port device team_slave_0 added [ 611.162815][ T9211] team0: Port device team_slave_1 added [ 611.225601][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.277945][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.299203][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.313288][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.321011][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.342877][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.780920][ T4337] Bluetooth: hci6: command 0x0409 tx timeout [ 611.798578][ T9211] device hsr_slave_0 entered promiscuous mode [ 611.935996][ T9211] device hsr_slave_1 entered promiscuous mode [ 612.140396][ T9211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.147806][ T9211] Cannot create hsr debugfs directory [ 612.285245][ T9250] loop4: detected capacity change from 0 to 128 [ 612.463300][ T9250] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 612.522303][ T9211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.626764][ T9211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.744087][ T9211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.855321][ T9211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.365787][ T9211] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 613.452139][ T9211] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 613.487907][ T9211] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 613.527756][ T9211] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 613.858972][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.913491][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 613.916146][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 613.921828][ T8458] Bluetooth: hci6: command 0x041b tx timeout [ 613.937320][ T9211] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.952316][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 613.955089][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 613.958976][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.960876][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.175495][ T4064] Bluetooth: hci1: command 0x1003 tx timeout [ 614.183841][ T4021] Bluetooth: hci1: sending frame failed (-49) [ 614.889585][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 614.892596][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 614.911972][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 614.953145][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.955202][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.980769][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 615.011718][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 615.018720][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 615.031223][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 615.042547][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 615.052146][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 615.066174][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 615.068807][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 615.076385][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 615.081556][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 615.086872][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 615.093978][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 615.318195][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.320315][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.322390][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 616.007472][ T4064] Bluetooth: hci6: command 0x040f tx timeout [ 616.143669][ T9285] loop2: detected capacity change from 0 to 128 [ 616.176603][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.179316][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.255545][ T21] Bluetooth: hci1: command 0x1001 tx timeout [ 616.259443][ T4021] Bluetooth: hci1: sending frame failed (-49) [ 616.386026][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 616.388909][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.391919][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.398920][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.418366][ T9211] device veth0_vlan entered promiscuous mode [ 616.436714][ T9211] device veth1_vlan entered promiscuous mode [ 616.512695][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 616.515815][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 616.518411][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 616.536227][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 616.542165][ T9211] device veth0_macvtap entered promiscuous mode [ 616.558251][ T9211] device veth1_macvtap entered promiscuous mode [ 616.608484][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.611193][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.635542][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.638250][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.640704][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.672243][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.685151][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.695271][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.703975][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.709720][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.722007][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.725214][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.728240][ T9285] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 616.743628][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 616.752580][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.764794][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.819114][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.823117][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.837126][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.839823][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.842246][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.862205][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.864745][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.874740][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.877398][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.880166][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.894296][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.914511][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 616.917743][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 616.934918][ T9211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.948051][ T9211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.950398][ T9211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.952535][ T9211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.017347][ T9296] dccp_xmit_packet: Payload too large (65475) for featneg. [ 617.364629][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.367157][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.371853][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.459766][ T430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.475479][ T430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.515944][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 618.152705][ T8454] Bluetooth: hci6: command 0x0419 tx timeout [ 618.681293][ T4064] Bluetooth: hci1: command 0x1009 tx timeout [ 619.571953][ T4577] device hsr_slave_0 left promiscuous mode [ 619.605747][ T4577] device hsr_slave_1 left promiscuous mode [ 619.685937][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.688130][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.690782][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.694171][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.703264][ T4577] device bridge_slave_1 left promiscuous mode [ 619.709266][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.754328][ T4577] device bridge_slave_0 left promiscuous mode [ 619.756234][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.905581][ T4577] device veth1_macvtap left promiscuous mode [ 619.907125][ T4577] device veth0_macvtap left promiscuous mode [ 619.908699][ T4577] device veth1_vlan left promiscuous mode [ 619.910211][ T4577] device veth0_vlan left promiscuous mode [ 620.153645][ T9348] dccp_xmit_packet: Payload too large (65475) for featneg. [ 621.257414][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'. [ 621.495570][ T26] audit: type=1326 audit(622.382:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 621.508192][ T26] audit: type=1326 audit(622.402:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 621.556999][ T26] audit: type=1326 audit(622.402:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 621.562486][ T26] audit: type=1326 audit(622.402:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=11 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 621.568568][ T26] audit: type=1326 audit(622.402:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 621.578126][ T26] audit: type=1326 audit(622.412:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 621.583840][ T26] audit: type=1326 audit(622.412:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 621.589790][ T26] audit: type=1326 audit(622.412:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 621.595174][ T26] audit: type=1326 audit(622.412:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 621.600766][ T26] audit: type=1326 audit(622.412:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.1356" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 622.174371][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 622.252652][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 622.265246][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.316071][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.576597][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.578253][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.719111][ T4577] bond0 (unregistering): Released all slaves [ 622.776776][ T9384] loop2: detected capacity change from 0 to 512 [ 623.263244][ T9390] dccp_xmit_packet: Payload too large (65475) for featneg. [ 623.356696][ T9375] chnl_net:caif_netlink_parms(): no params data found [ 623.433720][ T9392] futex_wake_op: syz.0.1366 tries to shift op by 144; fix this program [ 623.544742][ T9375] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.546924][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.549440][ T9375] device bridge_slave_0 entered promiscuous mode [ 623.554203][ T9375] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.557093][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.559726][ T9375] device bridge_slave_1 entered promiscuous mode [ 623.601254][ T9375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.615633][ T9375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.697481][ T9375] team0: Port device team_slave_0 added [ 623.701432][ T9375] team0: Port device team_slave_1 added [ 623.793823][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.797150][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.803415][ T9375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.827096][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.827115][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.827136][ T9375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.938186][ T9375] device hsr_slave_0 entered promiscuous mode [ 623.955895][ T9375] device hsr_slave_1 entered promiscuous mode [ 624.002013][ T9375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.003905][ T9375] Cannot create hsr debugfs directory [ 624.128884][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1371'. [ 624.255534][ T8454] Bluetooth: hci5: command 0x0409 tx timeout [ 624.262615][ T9415] loop4: detected capacity change from 0 to 512 [ 624.314138][ T9375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.385574][ T9415] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1374: casefold flag without casefold feature [ 624.405695][ T9375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.436785][ T9415] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1374: couldn't read orphan inode 15 (err -117) [ 624.440499][ T9415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 624.502903][ T9375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.608912][ T9375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.652295][ T9428] loop2: detected capacity change from 0 to 2048 [ 624.655506][ T4337] Bluetooth: hci0: command 0x0406 tx timeout [ 624.659838][ T9431] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 624.662552][ T9430] IPVS: stopping master sync thread 9431 ... [ 624.795924][ T9428] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 624.803187][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1380'. [ 624.856128][ T9375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 625.086354][ T9375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 625.130209][ T9444] loop4: detected capacity change from 0 to 512 [ 625.149664][ T9375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 625.169421][ T9375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 625.170290][ T9444] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 625.196654][ T9444] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 625.218421][ T9444] EXT4-fs (loop4): 1 truncate cleaned up [ 625.219748][ T9444] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 625.236395][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'. [ 625.447776][ T9445] team0 (unregistering): Port device team_slave_0 removed [ 625.518914][ T9454] ALSA: seq fatal error: cannot create timer (-22) [ 626.043679][ T9445] team0 (unregistering): Port device team_slave_1 removed [ 626.335834][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 626.454577][ T9375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.493439][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 626.496279][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.506321][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 626.506332][ T26] audit: type=1326 audit(627.472:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9468 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 626.515869][ T9375] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.526178][ T26] audit: type=1326 audit(627.482:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9468 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffb97230e0 code=0x7ffc0000 [ 626.530379][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 626.531578][ T26] audit: type=1326 audit(627.482:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9468 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb97249a8 code=0x7ffc0000 [ 626.536486][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.575807][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.577582][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.602012][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 626.606082][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 626.625061][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.633702][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.635663][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.665782][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 626.846714][ T9480] loop2: detected capacity change from 0 to 128 [ 627.704968][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 627.717742][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 627.722177][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 627.768944][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 627.795925][ T9480] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 627.863135][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 627.867952][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 627.875570][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 627.878207][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 627.916138][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 627.918775][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 627.949600][ T9375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 627.984649][ T9489] dccp_xmit_packet: Payload too large (65475) for featneg. [ 628.107138][ T26] audit: type=1326 audit(629.072:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9495 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 628.114616][ T26] audit: type=1326 audit(629.072:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9495 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffada6af44 code=0x7ffc0000 [ 628.143887][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1402'. [ 628.154305][ T26] audit: type=1326 audit(629.072:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9495 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffada6e50c code=0x7ffc0000 [ 628.185564][ T26] audit: type=1326 audit(629.072:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9495 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 628.201583][ T26] audit: type=1326 audit(629.072:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9495 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffada6e50c code=0x7ffc0000 [ 628.232086][ T26] audit: type=1326 audit(629.072:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9495 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffada6b31c code=0x7ffc0000 [ 628.269542][ T26] audit: type=1326 audit(629.072:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9495 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 628.399833][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 628.402052][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 628.415854][ T8458] Bluetooth: hci5: command 0x040f tx timeout [ 628.456537][ T9375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.546469][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 628.549230][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 628.574743][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 628.578728][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 628.584009][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 628.587275][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 628.592653][ T9375] device veth0_vlan entered promiscuous mode [ 629.955767][ T9375] device veth1_vlan entered promiscuous mode [ 630.060114][ T9375] device veth0_macvtap entered promiscuous mode [ 630.062458][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 630.065134][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 630.096050][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 630.101041][ T9375] device veth1_macvtap entered promiscuous mode [ 630.143013][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.167741][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.170427][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.172963][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.193975][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.199228][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.201697][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.204306][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.225456][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.228089][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.243381][ T9375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.248434][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 630.251204][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 630.253906][ T7988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 630.273191][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.305458][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.307916][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.310472][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.343674][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.370815][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.373313][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.385546][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.388090][ T9375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.390604][ T9375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.394325][ T9375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.457891][ T9375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.460247][ T9375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.462377][ T9375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.464596][ T9375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.495641][ T8458] Bluetooth: hci5: command 0x0419 tx timeout [ 630.504142][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 630.507145][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 631.735164][ T7988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.741420][ T7988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.759394][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 631.897378][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.899567][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.905601][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.039166][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 632.039180][ T26] audit: type=1326 audit(633.002:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.049326][ T26] audit: type=1326 audit(633.012:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.060254][ T9568] hub 6-0:1.0: USB hub found [ 632.061724][ T9568] hub 6-0:1.0: 8 ports detected [ 632.074362][ T26] audit: type=1326 audit(633.012:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.103791][ T26] audit: type=1326 audit(633.022:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.136465][ T26] audit: type=1326 audit(633.022:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.150627][ T9579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1433'. [ 632.155811][ T26] audit: type=1326 audit(633.022:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.180469][ T26] audit: type=1326 audit(633.032:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.202571][ T26] audit: type=1326 audit(633.032:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.236907][ T26] audit: type=1326 audit(633.032:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.256177][ T9586] loop2: detected capacity change from 0 to 512 [ 632.263735][ T26] audit: type=1326 audit(633.032:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 632.266467][ T9587] loop3: detected capacity change from 0 to 128 [ 632.373234][ T9586] EXT4-fs (loop2): Ignoring removed orlov option [ 633.347323][ T9586] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,grpjquota=,errors=remount-ro,. Quota mode: writeback. [ 633.911569][ T9618] IPv6: Can't replace route, no match found [ 633.947880][ T9624] dccp_xmit_packet: Payload too large (65475) for featneg. [ 633.986191][ T9625] loop2: detected capacity change from 0 to 128 [ 634.182121][ T9625] usb usb1: usbfs: process 9625 (syz.2.1446) did not claim interface 0 before use [ 634.309142][ T9633] hub 6-0:1.0: USB hub found [ 634.310769][ T9633] hub 6-0:1.0: 8 ports detected [ 635.668904][ T9641] x_tables: duplicate underflow at hook 1 [ 636.006556][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 636.311638][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 636.320801][ T9662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.324251][ T9662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.414027][ T9662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.417481][ T9662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.414802][ T4577] device hsr_slave_0 left promiscuous mode [ 637.516688][ T4577] device hsr_slave_1 left promiscuous mode [ 637.605521][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.608442][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.611056][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.612950][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.620534][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 637.620547][ T26] audit: type=1326 audit(638.562:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9668 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 637.625877][ T4577] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 637.631022][ T26] audit: type=1326 audit(638.582:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9668 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 637.636837][ T4577] batman_adv: batadv0: Removing interface: virt_wifi0 [ 637.656698][ T26] audit: type=1326 audit(638.582:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9668 comm="syz.4.1465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 637.658391][ T4577] device bridge_slave_1 left promiscuous mode [ 637.668789][ T9672] loop4: detected capacity change from 0 to 128 [ 637.677010][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.716759][ T4577] device bridge_slave_0 left promiscuous mode [ 637.718332][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.732682][ T9672] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 637.906096][ T4577] device veth1_macvtap left promiscuous mode [ 637.907613][ T4577] device veth0_macvtap left promiscuous mode [ 637.910499][ T4577] device veth1_vlan left promiscuous mode [ 637.912043][ T4577] device veth0_vlan left promiscuous mode [ 638.450696][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 638.464185][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 638.479986][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.510496][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.742420][ T4577] bond0 (unregistering): Released all slaves [ 638.860866][ T9687] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 638.929533][ T9690] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1472'. [ 638.939845][ T9690] 0ªX¹¦À: renamed from caif0 [ 638.989618][ T26] audit: type=1326 audit(639.952:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 639.001125][ T26] audit: type=1326 audit(639.952:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 639.006772][ T9690] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 639.015684][ T9691] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1473'. [ 639.055614][ T26] audit: type=1326 audit(639.952:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 639.060809][ T26] audit: type=1326 audit(639.952:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 639.105448][ T26] audit: type=1326 audit(639.952:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 639.110880][ T26] audit: type=1326 audit(639.952:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 639.162439][ T26] audit: type=1326 audit(639.952:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9688 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 640.146105][ T9708] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 640.464574][ T9711] dccp_xmit_packet: Payload too large (65475) for featneg. [ 640.602150][ T9725] loop2: detected capacity change from 0 to 512 [ 640.604146][ T9724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1487'. [ 640.829704][ T9725] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 640.834342][ T9725] EXT4-fs (loop2): 1 truncate cleaned up [ 640.854472][ T9725] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,discard,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 641.102203][ T9725] EXT4-fs (loop2): re-mounted. Opts: bsdgroups,nodiscard,usrjquota=,grpjquota=,grpjquota=,noquota,grpid,noload,noload,. Quota mode: none. [ 641.261923][ T9742] loop2: detected capacity change from 0 to 128 [ 641.327137][ T9742] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 642.956950][ T9756] dccp_xmit_packet: Payload too large (65475) for featneg. [ 643.071894][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 643.071907][ T26] audit: type=1326 audit(644.032:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.1.1496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff994919a8 code=0x7ffc0000 [ 643.137213][ T26] audit: type=1326 audit(644.032:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.1.1496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff994919a8 code=0x7ffc0000 [ 643.142751][ T26] audit: type=1326 audit(644.052:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.1.1496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=101 compat=0 ip=0xffff994919a8 code=0x7ffc0000 [ 643.175474][ T26] audit: type=1326 audit(644.062:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.1.1496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff994919a8 code=0x7ffc0000 [ 643.186437][ T9764] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 643.216220][ T26] audit: type=1326 audit(644.062:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.1.1496" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff994919a8 code=0x7ffc0000 [ 643.354732][ T9775] loop2: detected capacity change from 0 to 128 [ 643.506057][ T9775] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 643.795190][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 643.849369][ T9793] loop3: detected capacity change from 0 to 512 [ 643.977989][ T9793] EXT4-fs (loop3): too many log groups per flexible block group [ 643.980219][ T9793] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 643.982095][ T9793] EXT4-fs (loop3): mount failed [ 644.105944][ T26] audit: type=1326 audit(645.072:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.3.1513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 644.127513][ T26] audit: type=1326 audit(645.092:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.3.1513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 644.155481][ T26] audit: type=1326 audit(645.102:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.3.1513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 644.160750][ T26] audit: type=1326 audit(645.102:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.3.1513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 644.204530][ T26] audit: type=1326 audit(645.102:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.3.1513" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 644.398102][ T9795] chnl_net:caif_netlink_parms(): no params data found [ 644.473743][ T9816] loop3: detected capacity change from 0 to 512 [ 644.545481][ T9816] EXT4-fs (loop3): orphan cleanup on readonly fs [ 644.547470][ T9816] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1519: iget: bad extended attribute block 1 [ 644.562755][ T9816] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1519: couldn't read orphan inode 15 (err -117) [ 644.575628][ T9816] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 644.755780][ T9795] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.779792][ T9795] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.825106][ T9795] device bridge_slave_0 entered promiscuous mode [ 644.867411][ T9795] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.869601][ T9795] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.873099][ T9795] device bridge_slave_1 entered promiscuous mode [ 644.951314][ T9831] loop3: detected capacity change from 0 to 2048 [ 645.258844][ T9795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.336744][ T9795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.534860][ T9795] team0: Port device team_slave_0 added [ 645.546600][ T9795] team0: Port device team_slave_1 added [ 645.576711][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.588059][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.600017][ T9795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.605324][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.607534][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.614073][ T9795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.752626][ T9795] device hsr_slave_0 entered promiscuous mode [ 645.778422][ T9795] device hsr_slave_1 entered promiscuous mode [ 645.825889][ T9795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.827910][ T9795] Cannot create hsr debugfs directory [ 646.015671][ T8456] Bluetooth: hci1: command 0x0409 tx timeout [ 646.160117][ T9795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.257815][ T9795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.337458][ T9795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.462892][ T9795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.649444][ T9795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 646.724310][ T9795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 646.782914][ T9795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 646.893258][ T9795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 646.950606][ T9882] udc-core: couldn't find an available UDC or it's busy [ 646.952143][ T9882] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 647.131564][ T9795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.142787][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 647.145939][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 647.151759][ T9795] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.164132][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 647.166841][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 647.169711][ T8356] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.171390][ T8356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.185613][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 647.188970][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 647.191629][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 647.194023][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.195931][ T8356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.200823][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 647.225649][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 647.228565][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 647.233112][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 647.239355][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 647.242308][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 647.253196][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 647.256581][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 647.258929][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 647.261475][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 647.264098][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 647.268949][ T9795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 647.603149][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.610905][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 647.640515][ T9795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.701697][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 647.732391][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 647.753999][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 647.756763][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 647.761531][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 647.764397][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 648.680586][ T9795] device veth0_vlan entered promiscuous mode [ 648.688670][ T9897] hub 6-0:1.0: USB hub found [ 648.690192][ T9897] hub 6-0:1.0: 8 ports detected [ 648.709666][ T8456] Bluetooth: hci1: command 0x041b tx timeout [ 648.738089][ T9795] device veth1_vlan entered promiscuous mode [ 648.887775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 648.890490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 648.910838][ T9795] device veth0_macvtap entered promiscuous mode [ 648.925702][ T9795] device veth1_macvtap entered promiscuous mode [ 648.947241][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.965965][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.974085][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.985265][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.057047][ T9913] loop4: detected capacity change from 0 to 256 [ 649.075554][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.078204][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.096073][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.098907][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.113994][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.143321][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.158732][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.161404][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.164083][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.197772][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.206200][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.215324][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.218323][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.240240][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.248838][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 650.251829][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 650.258019][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 650.267987][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 650.278131][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 650.293877][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 650.383177][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 650.467610][ T9795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.469828][ T9795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.471899][ T9795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.484359][ T9795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.636184][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.638496][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.672034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 650.698138][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.701179][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.706365][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 650.735633][ T4064] Bluetooth: hci1: command 0x040f tx timeout [ 650.929250][ T9938] netlink: 'syz.2.1561': attribute type 10 has an invalid length. [ 651.683461][ T9940] hub 6-0:1.0: USB hub found [ 651.687432][ T9940] hub 6-0:1.0: 8 ports detected [ 652.175526][ T7917] Bluetooth: hci3: command 0x1003 tx timeout [ 652.177204][ T144] Bluetooth: hci3: sending frame failed (-49) [ 652.264157][ T9947] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 652.297908][ T9947] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 652.301331][ T9947] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 652.552352][ T9951] loop4: detected capacity change from 0 to 256 [ 653.420745][ T7917] Bluetooth: hci1: command 0x0419 tx timeout [ 654.259977][ T9970] loop3: detected capacity change from 0 to 512 [ 654.293337][ T7917] Bluetooth: hci3: command 0x1001 tx timeout [ 654.297764][ T144] Bluetooth: hci3: sending frame failed (-49) [ 654.397595][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 654.397610][ T26] audit: type=1326 audit(655.362:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 654.411187][ T9970] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 654.419417][ T26] audit: type=1326 audit(655.362:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 654.456735][ T26] audit: type=1326 audit(655.412:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 654.495054][ T26] audit: type=1326 audit(655.412:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 654.528213][ T26] audit: type=1326 audit(655.412:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 654.533891][ T26] audit: type=1326 audit(655.412:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 654.548832][ T26] audit: type=1326 audit(655.412:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 654.553981][ T26] audit: type=1326 audit(655.412:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 654.566425][ T26] audit: type=1326 audit(655.412:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 654.571986][ T26] audit: type=1326 audit(655.412:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.4.1572" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 655.208415][ T9982] hub 6-0:1.0: USB hub found [ 655.211902][ T9982] hub 6-0:1.0: 8 ports detected [ 655.950882][ T9997] loop3: detected capacity change from 0 to 512 [ 655.983051][ T9997] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 655.986756][T10000] loop2: detected capacity change from 0 to 256 [ 656.003139][ T9997] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 656.014900][ T9993] attempt to access beyond end of device [ 656.014900][ T9993] loop3: rw=0, want=1022040, limit=512 [ 656.037282][T10003] mmap: syz.4.1583 (10003) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 656.345839][ T7917] Bluetooth: hci3: command 0x1009 tx timeout [ 657.379206][T10023] hub 6-0:1.0: USB hub found [ 657.382805][T10023] hub 6-0:1.0: 8 ports detected [ 658.141322][T10037] IPv6: Can't replace route, no match found [ 658.212985][T10043] loop4: detected capacity change from 0 to 256 [ 658.421797][T10051] netlink: 'syz.0.1600': attribute type 4 has an invalid length. [ 658.998444][T10065] loop3: detected capacity change from 0 to 256 [ 659.113818][T10065] FAT-fs (loop3): Directory bread(block 64) failed [ 659.132680][T10065] FAT-fs (loop3): Directory bread(block 65) failed [ 659.157525][T10065] FAT-fs (loop3): Directory bread(block 66) failed [ 659.168143][T10065] FAT-fs (loop3): Directory bread(block 67) failed [ 659.176633][T10065] FAT-fs (loop3): Directory bread(block 68) failed [ 659.183011][T10065] FAT-fs (loop3): Directory bread(block 69) failed [ 659.192897][T10065] FAT-fs (loop3): Directory bread(block 70) failed [ 659.194733][T10065] FAT-fs (loop3): Directory bread(block 71) failed [ 659.201957][T10065] FAT-fs (loop3): Directory bread(block 72) failed [ 659.204370][T10065] FAT-fs (loop3): Directory bread(block 73) failed [ 659.278288][T10065] attempt to access beyond end of device [ 659.278288][T10065] loop3: rw=2049, want=1228, limit=256 [ 659.494814][T10079] loop4: detected capacity change from 0 to 512 [ 659.630115][T10079] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1613: bg 0: block 5: invalid block bitmap [ 659.648082][T10079] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 659.653302][T10074] chnl_net:caif_netlink_parms(): no params data found [ 659.666716][T10079] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1613: invalid indirect mapped block 3 (level 2) [ 659.670724][T10079] EXT4-fs (loop4): 1 orphan inode deleted [ 659.674664][T10079] EXT4-fs (loop4): 1 truncate cleaned up [ 659.679537][T10079] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 659.806341][ T4577] device hsr_slave_0 left promiscuous mode [ 659.847660][ T26] kauditd_printk_skb: 91 callbacks suppressed [ 659.847673][ T26] audit: type=1326 audit(660.812:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 659.857097][ T26] audit: type=1326 audit(660.812:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 659.872785][T10101] loop2: detected capacity change from 0 to 256 [ 659.874463][ T26] audit: type=1326 audit(660.822:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 659.888341][ T4577] device hsr_slave_1 left promiscuous mode [ 659.894121][ T26] audit: type=1326 audit(660.822:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 659.901673][ T26] audit: type=1326 audit(660.832:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 659.907188][ T26] audit: type=1326 audit(660.832:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=429 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 659.912274][ T26] audit: type=1326 audit(660.832:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 660.121446][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.123421][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.131688][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.133660][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.152033][ T4577] device bridge_slave_1 left promiscuous mode [ 661.065171][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.151125][ T4577] device bridge_slave_0 left promiscuous mode [ 661.152858][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.278610][ T4577] device veth1_macvtap left promiscuous mode [ 661.280295][ T4577] device veth1_vlan left promiscuous mode [ 661.281853][ T4577] device veth0_vlan left promiscuous mode [ 661.385610][ T7680] Bluetooth: hci4: command 0x0409 tx timeout [ 661.568671][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 661.579895][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 661.591918][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.643727][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.823313][ T4577] bond0 (unregistering): Released all slaves [ 662.032682][T10123] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1624'. [ 662.133725][T10177] loop2: detected capacity change from 0 to 128 [ 662.166673][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1627'. [ 662.170482][T10177] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 662.184232][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.186448][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.197171][T10074] device bridge_slave_0 entered promiscuous mode [ 662.214342][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.220711][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.224652][T10177] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 662.224705][T10074] device bridge_slave_1 entered promiscuous mode [ 662.229135][T10177] FAT-fs (loop2): Filesystem has been set read-only [ 662.323635][T10074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.333028][T10074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.452701][T10074] team0: Port device team_slave_0 added [ 662.466916][T10074] team0: Port device team_slave_1 added [ 662.497321][T10187] loop4: detected capacity change from 0 to 1024 [ 662.526040][T10074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.527897][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.544927][T10074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.577045][T10074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.579880][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.659771][T10074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.695876][T10187] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,nombcache,,errors=continue. Quota mode: none. [ 662.740762][ T26] audit: type=1326 audit(663.692:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 662.753910][ T26] audit: type=1326 audit(663.712:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 662.769715][ T26] audit: type=1326 audit(663.712:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1632" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 662.860807][T10074] device hsr_slave_0 entered promiscuous mode [ 662.906402][T10074] device hsr_slave_1 entered promiscuous mode [ 662.955671][T10074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.957643][T10074] Cannot create hsr debugfs directory [ 663.092214][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'. [ 663.190554][T10074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.276803][T10074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.362764][T10074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.455491][ T4011] Bluetooth: hci4: command 0x041b tx timeout [ 663.465332][T10074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.674582][T10239] netlink: 'syz.2.1651': attribute type 4 has an invalid length. [ 663.724787][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 663.896185][T10074] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 663.958530][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 664.010761][T10074] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 664.029591][T10259] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 664.048332][T10074] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 664.120475][T10074] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 664.391788][T10273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.572615][T10273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.688336][T10074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.745257][T10273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.782458][T10074] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.784582][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 664.787561][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 664.809978][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 664.812700][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 664.815102][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.816978][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.841051][T10273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.865161][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 664.870999][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 664.873706][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 664.884014][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.885983][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.906211][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 664.909174][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 664.929108][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 664.942139][ T26] kauditd_printk_skb: 76 callbacks suppressed [ 664.942151][ T26] audit: type=1326 audit(665.902:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 664.967565][ T26] audit: type=1326 audit(665.922:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 664.975525][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 664.989980][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 664.993753][ T26] audit: type=1326 audit(665.922:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 665.020242][ T26] audit: type=1326 audit(665.922:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 665.026988][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 665.030694][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 665.079656][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 665.088425][ T26] audit: type=1326 audit(665.922:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 665.095037][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 665.106240][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 665.126054][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 665.128237][ T26] audit: type=1326 audit(665.922:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=21 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 665.133432][ T26] audit: type=1326 audit(665.922:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 665.143498][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 665.145610][ T26] audit: type=1326 audit(665.922:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 665.162359][ T26] audit: type=1326 audit(665.922:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 665.170285][ T26] audit: type=1326 audit(665.922:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.4.1675" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 665.187630][T10273] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.204944][T10273] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.263933][T10273] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.296554][T10273] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.546046][ T7917] Bluetooth: hci4: command 0x040f tx timeout [ 665.643751][T10341] loop4: detected capacity change from 0 to 512 [ 665.653784][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 665.667514][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.693614][T10074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.746314][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 665.748922][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 665.772920][T10341] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 665.829485][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 665.832276][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 665.853363][T10074] device veth0_vlan entered promiscuous mode [ 665.878680][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 665.881398][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 665.910918][T10074] device veth1_vlan entered promiscuous mode [ 665.954054][T10351] loop2: detected capacity change from 0 to 764 [ 665.973707][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 665.976811][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 665.982126][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 666.003236][T10354] loop4: detected capacity change from 0 to 512 [ 666.010550][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 666.020522][T10074] device veth0_macvtap entered promiscuous mode [ 666.032346][T10074] device veth1_macvtap entered promiscuous mode [ 666.063390][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.067342][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.069903][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.073184][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.076237][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.079605][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.082224][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.085027][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.089312][T10074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.100844][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 666.103671][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 666.116182][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 666.130528][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 666.167124][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.169700][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.172251][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.193162][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.196015][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.198600][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.200991][T10074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.203533][T10074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.217581][T10074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.219921][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 666.222621][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 666.228423][T10361] vhci_hcd: default hub control req: 800e v1303 i0000 l0 [ 666.238515][T10074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.240874][T10074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.243065][T10074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.245255][T10074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.249647][T10354] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 666.251589][T10354] System zones: 0-2, 18-18, 34-34 [ 666.281462][T10354] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1690: bg 0: block 248: padding at end of block bitmap is not set [ 666.361120][ T1613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.361136][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.363363][ T1613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.380519][T10354] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1690: Failed to acquire dquot type 1 [ 666.382316][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.395781][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 666.398634][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 666.410261][T10354] EXT4-fs (loop4): 1 truncate cleaned up [ 666.411725][T10354] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 666.515121][T10378] IPv6: Can't replace route, no match found [ 667.615902][ T4065] Bluetooth: hci4: command 0x0419 tx timeout [ 667.830442][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 668.378356][T10426] loop2: detected capacity change from 0 to 512 [ 669.317405][T10426] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 669.319417][T10426] System zones: 0-2, 18-18, 34-34 [ 669.357632][T10426] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1716: bg 0: block 248: padding at end of block bitmap is not set [ 669.377495][T10426] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.1716: Failed to acquire dquot type 1 [ 669.399992][T10426] EXT4-fs (loop2): 1 truncate cleaned up [ 669.401480][T10426] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,noload,,errors=continue. Quota mode: writeback. [ 669.855159][T10447] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1723'. [ 669.901690][T10447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1723'. [ 669.953779][ T26] kauditd_printk_skb: 125 callbacks suppressed [ 669.953791][ T26] audit: type=1326 audit(670.912:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 669.960802][ T26] audit: type=1326 audit(670.912:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 669.985509][ T26] audit: type=1326 audit(670.912:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 669.992449][ T26] audit: type=1326 audit(670.932:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=438 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 670.004112][ T26] audit: type=1326 audit(670.932:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 670.023645][ T26] audit: type=1326 audit(670.932:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 670.043923][ T26] audit: type=1326 audit(670.932:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 670.064593][ T26] audit: type=1326 audit(670.932:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 670.075490][ T26] audit: type=1326 audit(670.932:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 670.091407][ T26] audit: type=1326 audit(670.932:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 670.628526][T10469] loop3: detected capacity change from 0 to 256 [ 671.035170][T10483] netlink: 'syz.1.1738': attribute type 3 has an invalid length. [ 671.229460][T10489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1741'. [ 671.332654][T10496] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 671.463476][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 671.472322][T10504] device dummy0 entered promiscuous mode [ 671.473858][T10504] device macvtap1 entered promiscuous mode [ 671.506431][T10508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.584914][T10504] device dummy0 left promiscuous mode [ 671.743399][T10519] loop3: detected capacity change from 0 to 512 [ 671.831395][T10519] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1754: casefold flag without casefold feature [ 671.842190][T10519] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1754: couldn't read orphan inode 15 (err -117) [ 671.849836][T10519] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 671.956267][T10498] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1745'. [ 671.959482][T10498] 0ªX¹¦À: renamed from caif0 [ 672.035545][T10498] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 672.214274][T10546] loop3: detected capacity change from 0 to 164 [ 672.337544][T10546] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 672.358863][T10546] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 672.618340][T10567] loop3: detected capacity change from 0 to 512 [ 672.622263][T10564] loop4: detected capacity change from 0 to 512 [ 672.663843][T10567] EXT4-fs (loop3): Ignoring removed nobh option [ 672.671387][T10567] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 672.681434][T10564] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 672.683619][T10564] System zones: 0-2, 18-18, 34-34 [ 672.687637][T10564] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1774: bg 0: block 248: padding at end of block bitmap is not set [ 672.692335][T10564] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1774: Failed to acquire dquot type 1 [ 672.702395][T10564] EXT4-fs (loop4): 1 truncate cleaned up [ 672.703845][T10564] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,noload,,errors=continue. Quota mode: writeback. [ 672.707756][ T4577] device hsr_slave_0 left promiscuous mode [ 672.720691][T10567] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 672.756299][ T4577] device hsr_slave_1 left promiscuous mode [ 672.801686][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1781'. [ 672.816070][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.818556][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.821366][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.823430][ T4577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.826496][ T4577] device bridge_slave_1 left promiscuous mode [ 672.828221][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.848928][T10567] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1776: bg 0: block 224: padding at end of block bitmap is not set [ 672.864006][T10567] EXT4-fs (loop3): Remounting filesystem read-only [ 672.876927][ T4577] device bridge_slave_0 left promiscuous mode [ 672.878820][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.883312][T10583] loop2: detected capacity change from 0 to 128 [ 672.948015][T10583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 672.998123][ T4577] device veth1_macvtap left promiscuous mode [ 672.999712][ T4577] device veth0_macvtap left promiscuous mode [ 673.001346][ T4577] device veth1_vlan left promiscuous mode [ 673.004609][ T4577] device veth0_vlan left promiscuous mode [ 673.064645][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x1 [ 673.084029][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.095454][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.108881][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.118417][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x2 [ 673.138106][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.150589][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.162654][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.172659][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.180270][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x4 [ 673.188442][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.194376][T10598] loop3: detected capacity change from 0 to 512 [ 673.194925][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.204798][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x2 [ 673.210380][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.212741][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.214585][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.220787][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.231271][T10598] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 673.232605][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.241668][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.243933][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.248660][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.251110][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.253168][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.255247][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.255935][T10598] EXT4-fs (loop3): 1 orphan inode deleted [ 673.257440][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.260669][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.262659][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.263105][T10598] EXT4-fs (loop3): 1 truncate cleaned up [ 673.264733][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.268190][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.270226][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.272335][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.274360][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.275748][T10598] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000001,debug_want_extra_isize=0x000000000000002e,jqfmt=vfsv1,block_validity,noload,. Quota mode: none. [ 673.276510][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.283180][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.285286][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.287540][ T8456] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 673.290843][ T8456] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 673.313589][T10598] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 673.320929][T10598] EXT4-fs (loop3): Remounting filesystem read-only [ 673.473374][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 673.496843][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 673.511810][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.681092][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.820412][T10607] hub 6-0:1.0: USB hub found [ 673.822648][T10607] hub 6-0:1.0: 8 ports detected [ 674.683001][ T4577] bond0 (unregistering): Released all slaves [ 674.972293][ T26] kauditd_printk_skb: 171 callbacks suppressed [ 674.972305][ T26] audit: type=1326 audit(675.932:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 675.006300][ T26] audit: type=1326 audit(675.972:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 675.030974][ T26] audit: type=1326 audit(675.972:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 675.053653][ T26] audit: type=1326 audit(675.972:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 675.057601][T10625] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1798'. [ 675.074803][T10625] nbd: must specify a device to reconfigure [ 675.088294][ T26] audit: type=1326 audit(675.972:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 675.109374][ T26] audit: type=1326 audit(675.972:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=286 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 675.137973][ T26] audit: type=1326 audit(675.972:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 676.496567][T10641] loop2: detected capacity change from 0 to 764 [ 677.412194][T10648] loop4: detected capacity change from 0 to 512 [ 677.532978][T10648] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 677.976807][T10655] loop2: detected capacity change from 0 to 1024 [ 678.601679][T10666] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1806: Directory hole found for htree leaf block 0 [ 678.648043][T10655] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 678.729342][ T26] audit: type=1326 audit(679.692:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 678.746929][ T26] audit: type=1326 audit(679.712:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 678.775513][ T26] audit: type=1326 audit(679.722:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.3.1813" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa497a9a8 code=0x7ffc0000 [ 679.440710][T10691] hub 6-0:1.0: USB hub found [ 679.443251][T10691] hub 6-0:1.0: 8 ports detected [ 680.592525][T10708] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 680.594498][T10708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 680.612919][T10708] vhci_hcd vhci_hcd.0: Device attached [ 680.635130][T10710] vhci_hcd: connection closed [ 680.639157][ T8578] vhci_hcd: stop threads [ 680.642353][ T8578] vhci_hcd: release socket [ 680.644066][ T8578] vhci_hcd: disconnect device [ 680.704452][T10713] loop4: detected capacity change from 0 to 764 [ 680.832426][T10715] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 262144 blocks [ 680.923514][T10717] loop4: detected capacity change from 0 to 256 [ 683.070832][T10754] EXT4-fs (nvme0n1p2): resizing filesystem from 262144 to 2 blocks [ 683.072948][T10754] EXT4-fs warning (device nvme0n1p2): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 683.501007][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 683.501020][ T26] audit: type=1326 audit(684.462:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.516390][ T26] audit: type=1326 audit(684.462:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.548499][ T26] audit: type=1326 audit(684.462:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.553979][ T26] audit: type=1326 audit(684.462:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.579769][T10766] loop2: detected capacity change from 0 to 512 [ 683.605626][ T26] audit: type=1326 audit(684.462:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.613001][ T26] audit: type=1326 audit(684.462:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.629066][ T26] audit: type=1326 audit(684.462:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.639190][ T26] audit: type=1326 audit(684.462:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.644495][ T26] audit: type=1326 audit(684.472:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.681893][ T26] audit: type=1326 audit(684.472:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1843" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 683.761791][T10766] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 683.763788][T10766] System zones: 0-2, 18-18, 34-34 [ 684.188550][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1848'. [ 684.191174][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1848'. [ 684.193370][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1848'. [ 684.202912][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.204543][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.292506][T10766] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1843: bg 0: block 248: padding at end of block bitmap is not set [ 684.308353][T10766] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.1843: Failed to acquire dquot type 1 [ 684.338872][T10766] EXT4-fs (loop2): 1 truncate cleaned up [ 684.340340][T10766] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,noload,,errors=continue. Quota mode: writeback. [ 685.647862][T10807] loop2: detected capacity change from 0 to 512 [ 686.463059][T10807] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 687.292649][T10846] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 687.420086][T10851] loop3: detected capacity change from 0 to 512 [ 687.440558][T10853] hub 6-0:1.0: USB hub found [ 687.442125][T10853] hub 6-0:1.0: 8 ports detected [ 687.554861][T10851] EXT4-fs (loop3): orphan cleanup on readonly fs [ 687.562943][T10851] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1877: bg 0: block 248: padding at end of block bitmap is not set [ 687.579028][T10851] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1877: Failed to acquire dquot type 1 [ 687.590674][T10851] EXT4-fs (loop3): 1 truncate cleaned up [ 687.614671][T10851] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 689.712519][T10892] Cannot find add_set index 0 as target [ 689.860609][ T26] kauditd_printk_skb: 78 callbacks suppressed [ 689.860623][ T26] audit: type=1326 audit(690.822:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 689.873664][ T26] audit: type=1326 audit(690.832:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffaee53f44 code=0x7ffc0000 [ 689.904847][ T26] audit: type=1326 audit(690.832:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffaee5750c code=0x7ffc0000 [ 690.048374][ T26] audit: type=1326 audit(690.832:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 690.068055][ T26] audit: type=1326 audit(690.832:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffaee5750c code=0x7ffc0000 [ 690.073397][ T26] audit: type=1326 audit(690.832:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffaee5431c code=0x7ffc0000 [ 690.081173][ T26] audit: type=1326 audit(690.832:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 690.098031][ T26] audit: type=1326 audit(690.852:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.1.1892" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f1229a8 code=0x0 [ 690.102896][ T26] audit: type=1326 audit(690.862:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 690.117433][ T26] audit: type=1326 audit(690.862:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 690.415922][T10905] hub 6-0:1.0: USB hub found [ 690.419885][T10905] hub 6-0:1.0: 8 ports detected [ 691.286761][T10913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1899'. [ 691.307141][T10913] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 691.338583][T10913] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 692.500067][T10930] x_tables: unsorted underflow at hook 3 [ 693.200981][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'. [ 693.413162][T10954] device bond1 entered promiscuous mode [ 693.430429][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1914'. [ 693.643599][T10960] bond1 (unregistering): Released all slaves [ 694.015673][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 694.973008][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 694.973022][ T26] audit: type=1326 audit(695.932:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 694.999285][ T26] audit: type=1326 audit(695.962:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 695.053080][ T26] audit: type=1326 audit(695.972:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 695.137134][ T26] audit: type=1326 audit(695.972:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 695.142945][ T26] audit: type=1326 audit(695.992:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 695.179158][ T26] audit: type=1326 audit(695.992:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 695.199410][ T26] audit: type=1326 audit(695.992:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 695.204567][ T26] audit: type=1326 audit(696.002:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 695.282536][ T26] audit: type=1326 audit(696.002:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 695.386458][ T26] audit: type=1326 audit(696.002:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10990 comm="syz.4.1926" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaee559a8 code=0x7ffc0000 [ 698.441467][T11037] loop2: detected capacity change from 0 to 764 [ 698.464180][T11040] loop3: detected capacity change from 0 to 512 [ 698.550280][T11040] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 698.554086][T11040] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 698.678239][T11040] attempt to access beyond end of device [ 698.678239][T11040] loop3: rw=0, want=1022040, limit=512 [ 699.673002][T11057] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1951'. [ 699.691830][T11057] netlink: 'syz.0.1951': attribute type 9 has an invalid length. [ 699.693824][T11057] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1951'. [ 699.709739][T11058] loop2: detected capacity change from 0 to 512 [ 699.719521][T11057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1951'. [ 699.821071][T11058] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 699.837079][T11058] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.1950: corrupted inode contents [ 699.872441][T11058] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #2: comm syz.2.1950: mark_inode_dirty error [ 699.897023][T11058] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.1950: corrupted inode contents [ 699.950515][T11058] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1950: mark_inode_dirty error [ 700.796916][T11083] hub 6-0:1.0: USB hub found [ 700.798302][T11083] hub 6-0:1.0: 8 ports detected [ 702.494365][T11119] loop3: detected capacity change from 0 to 764 [ 702.751454][T11119] Symlink component flag not implemented [ 702.753861][T11119] Symlink component flag not implemented (101) [ 703.088041][T11127] loop2: detected capacity change from 0 to 1024 [ 703.190299][T11127] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 704.895596][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 704.895609][ T26] audit: type=1326 audit(705.862:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.0.1983" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 704.929878][ T26] audit: type=1326 audit(705.882:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.0.1983" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffbb7479a8 code=0x7ffc0000 [ 704.958783][ T26] audit: type=1326 audit(705.892:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.0.1983" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb7479a8 code=0x0 [ 704.966698][T11155] hub 6-0:1.0: USB hub found [ 704.968170][T11155] hub 6-0:1.0: 8 ports detected [ 705.157768][T11159] loop2: detected capacity change from 0 to 1024 [ 705.227725][T11159] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,nombcache,,errors=continue. Quota mode: none. [ 705.263441][ T26] audit: type=1326 audit(706.222:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 705.283346][ T26] audit: type=1326 audit(706.232:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 705.310489][ T26] audit: type=1326 audit(706.232:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 705.337547][ T26] audit: type=1326 audit(706.232:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 705.374039][ T26] audit: type=1326 audit(706.232:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 705.420020][ T26] audit: type=1326 audit(706.242:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 705.450307][ T26] audit: type=1326 audit(706.242:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffada6c9a8 code=0x7ffc0000 [ 705.740605][T11170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.137076][T11177] hub 6-0:1.0: USB hub found [ 706.139106][T11177] hub 6-0:1.0: 8 ports detected [ 708.181656][T11206] loop3: detected capacity change from 0 to 1024 [ 708.243611][T11206] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 708.309711][T11206] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,grpquota,nogrpid,. Quota mode: writeback. [ 708.325214][T11214] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 708.428080][T11214] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 708.465134][T11218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'. [ 708.472573][T11218] ------------[ cut here ]------------ [ 708.473896][T11218] WARNING: CPU: 1 PID: 11218 at net/wireless/core.h:220 wdev_lock+0xd0/0xe8 [ 708.475934][T11218] Modules linked in: [ 708.476957][T11218] CPU: 1 PID: 11218 Comm: syz.1.2004 Not tainted 5.15.167-syzkaller #0 [ 708.479094][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 708.481553][T11218] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 708.483379][T11218] pc : wdev_lock+0xd0/0xe8 [ 708.484532][T11218] lr : wdev_lock+0xd0/0xe8 [ 708.485649][T11218] sp : ffff8000209b6ca0 [ 708.486773][T11218] x29: ffff8000209b6ca0 x28: dfff800000000000 x27: dfff800000000000 [ 708.488770][T11218] x26: 1fffe0001c582000 x25: ffff0000e8e04c90 x24: 0000000000000000 [ 708.490893][T11218] x23: 1fffe0001d1c0993 x22: ffff700004136d9c x21: 00000000000007d0 [ 708.492899][T11218] x20: 0000000000000000 x19: ffff0000e8e04c90 x18: 0000000000000000 [ 708.494925][T11218] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000002 [ 708.496883][T11218] x14: ffff0000c6653680 x13: 0000000000ff0100 x12: 0000000000040000 [ 708.498877][T11218] x11: 000000000000222b x10: ffff8000214c9000 x9 : 000000000000222c [ 708.500940][T11218] x8 : ffff80001131bdc0 x7 : 0000000000000000 x6 : 00000000000007d0 [ 708.502999][T11218] x5 : ffff0000ecbc4090 x4 : ffff8000209b6d04 x3 : ffff80000ab195c0 [ 708.505028][T11218] x2 : 0000000000000004 x1 : 0000000000000000 x0 : 0000000000000000 [ 708.507212][T11218] Call trace: [ 708.508032][T11218] wdev_lock+0xd0/0xe8 [ 708.509095][T11218] nl80211_send_iface+0x68c/0xccc [ 708.510422][T11218] nl80211_dump_interface+0x38c/0x5cc [ 708.511774][T11218] netlink_dump+0x4a8/0xad0 [ 708.512962][T11218] __netlink_dump_start+0x474/0x6d4 [ 708.514357][T11218] genl_rcv_msg+0xa80/0x1018 [ 708.515501][T11218] netlink_rcv_skb+0x20c/0x3b8 [ 708.516743][T11218] genl_rcv+0x38/0x50 [ 708.517685][T11218] netlink_unicast+0x664/0x938 [ 708.518857][T11218] netlink_sendmsg+0x844/0xb38 [ 708.520059][T11218] ____sys_sendmsg+0x584/0x870 [ 708.521218][T11218] ___sys_sendmsg+0x214/0x294 [ 708.522379][T11218] __arm64_sys_sendmsg+0x1ac/0x25c [ 708.523653][T11218] invoke_syscall+0x98/0x2b8 [ 708.524882][T11218] el0_svc_common+0x138/0x258 [ 708.525963][T11218] do_el0_svc+0x58/0x14c [ 708.526990][T11218] el0_svc+0x7c/0x1f0 [ 708.527973][T11218] el0t_64_sync_handler+0x84/0xe4 [ 708.529277][T11218] el0t_64_sync+0x1a0/0x1a4 [ 708.530350][T11218] irq event stamp: 994 [ 708.531333][T11218] hardirqs last enabled at (993): [] kasan_quarantine_put+0xdc/0x204 [ 708.533739][T11218] hardirqs last disabled at (994): [] el1_dbg+0x24/0x80 [ 708.535953][T11218] softirqs last enabled at (982): [] handle_softirqs+0xb88/0xdbc [ 708.538302][T11218] softirqs last disabled at (961): [] __irq_exit_rcu+0x268/0x4d8 [ 708.540586][T11218] ---[ end trace 0572c9bdf07de746 ]--- [ 708.576309][T11218] ------------[ cut here ]------------ [ 708.578058][T11218] WARNING: CPU: 1 PID: 11218 at net/wireless/core.h:228 wdev_unlock+0xcc/0xe4 [ 708.580312][T11218] Modules linked in: [ 708.581310][T11218] CPU: 1 PID: 11218 Comm: syz.1.2004 Tainted: G W 5.15.167-syzkaller #0 [ 708.583626][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 708.586208][T11218] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 708.588163][T11218] pc : wdev_unlock+0xcc/0xe4 [ 708.589323][T11218] lr : wdev_unlock+0xcc/0xe4 [ 708.590431][T11218] sp : ffff8000209b6ca0 [ 708.591418][T11218] x29: ffff8000209b6ca0 x28: dfff800000000000 x27: dfff800000000000 [ 708.593562][T11218] x26: 1fffe0001c582000 x25: ffff0000e8e04c90 x24: 0000000000000001 [ 708.595504][T11218] x23: 0000000000000000 x22: ffff700004136d9c x21: 1fffe0001d1c09ca [ 708.597596][T11218] x20: 0000000000000000 x19: ffff0000e8e04c90 x18: 0000000000000000 [ 708.599640][T11218] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000009 [ 708.601591][T11218] x14: 1ffff0000295806a x13: dfff800000000000 x12: 0000000000040000 [ 708.603437][T11218] x11: 000000000002304e x10: ffff8000214c9000 x9 : 000000000002304f [ 708.605411][T11218] x8 : ffff80001131bea4 x7 : 0000000000000000 x6 : 0000000010101010 [ 708.607421][T11218] x5 : ffff0000ecbc409a x4 : ffff0000dd31b725 x3 : ffff80000ab195c0 [ 708.609348][T11218] x2 : 0000000000000006 x1 : 0000000000000000 x0 : 0000000000000000 [ 708.611327][T11218] Call trace: [ 708.612165][T11218] wdev_unlock+0xcc/0xe4 [ 708.613270][T11218] nl80211_send_iface+0x984/0xccc [ 708.614507][T11218] nl80211_dump_interface+0x38c/0x5cc [ 708.615798][T11218] netlink_dump+0x4a8/0xad0 [ 708.616933][T11218] __netlink_dump_start+0x474/0x6d4 [ 708.618231][T11218] genl_rcv_msg+0xa80/0x1018 [ 708.619348][T11218] netlink_rcv_skb+0x20c/0x3b8 [ 708.620480][T11218] genl_rcv+0x38/0x50 [ 708.621475][T11218] netlink_unicast+0x664/0x938 [ 708.622674][T11218] netlink_sendmsg+0x844/0xb38 [ 708.623812][T11218] ____sys_sendmsg+0x584/0x870 [ 708.625041][T11218] ___sys_sendmsg+0x214/0x294 [ 708.626320][T11218] __arm64_sys_sendmsg+0x1ac/0x25c [ 708.627594][T11218] invoke_syscall+0x98/0x2b8 [ 708.628742][T11218] el0_svc_common+0x138/0x258 [ 708.629957][T11218] do_el0_svc+0x58/0x14c [ 708.630914][T11218] el0_svc+0x7c/0x1f0 [ 708.631971][T11218] el0t_64_sync_handler+0x84/0xe4 [ 708.633300][T11218] el0t_64_sync+0x1a0/0x1a4 [ 708.634376][T11218] irq event stamp: 1068 [ 708.635424][T11218] hardirqs last enabled at (1067): [] finish_lock_switch+0xbc/0x1e8 [ 708.637790][T11218] hardirqs last disabled at (1068): [] el1_dbg+0x24/0x80 [ 708.639886][T11218] softirqs last enabled at (1058): [] handle_softirqs+0xb88/0xdbc [ 708.642300][T11218] softirqs last disabled at (997): [] __irq_exit_rcu+0x268/0x4d8 [ 708.644662][T11218] ---[ end trace 0572c9bdf07de747 ]--- [ 708.655184][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'. [ 708.662036][T11218] ------------[ cut here ]------------ [ 708.663422][T11218] WARNING: CPU: 1 PID: 11218 at net/wireless/core.h:220 wdev_lock+0xd0/0xe8 [ 708.665624][T11218] Modules linked in: [ 708.666534][T11218] CPU: 1 PID: 11218 Comm: syz.1.2004 Tainted: G W 5.15.167-syzkaller #0 [ 708.668905][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 708.671426][T11218] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 708.673392][T11218] pc : wdev_lock+0xd0/0xe8 [ 708.674477][T11218] lr : wdev_lock+0xd0/0xe8 [ 708.675462][T11218] sp : ffff8000209b6ca0 [ 708.676521][T11218] x29: ffff8000209b6ca0 x28: dfff800000000000 x27: dfff800000000000 [ 708.678519][T11218] x26: 1fffe00019e07000 x25: ffff0000e5694c90 x24: 0000000000000000 [ 708.680527][T11218] x23: 1fffe0001cad2993 x22: ffff700004136d9c x21: 00000000000007d0 [ 708.682567][T11218] x20: 0000000000000000 x19: ffff0000e5694c90 x18: 0000000000000000 [ 708.684454][T11218] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000002 [ 708.686559][T11218] x14: ffff0000c6653680 x13: 0000000000ff0100 x12: 0000000000040000 [ 708.688574][T11218] x11: 000000000003ffff x10: ffff8000214c9000 x9 : 0000000000040000 [ 708.690536][T11218] x8 : ffff80001131bdc0 x7 : 0000000000000000 x6 : 00000000000007d0 [ 708.692569][T11218] x5 : ffff0000ecbc412c x4 : ffff8000209b6d04 x3 : ffff80000ab195c0 [ 708.694488][T11218] x2 : 0000000000000004 x1 : 0000000000000000 x0 : 0000000000000000 [ 708.696479][T11218] Call trace: [ 708.697321][T11218] wdev_lock+0xd0/0xe8 [ 708.698380][T11218] nl80211_send_iface+0x68c/0xccc [ 708.699726][T11218] nl80211_dump_interface+0x38c/0x5cc [ 708.701114][T11218] netlink_dump+0x4a8/0xad0 [ 708.702247][T11218] __netlink_dump_start+0x474/0x6d4 [ 708.703482][T11218] genl_rcv_msg+0xa80/0x1018 [ 708.704584][T11218] netlink_rcv_skb+0x20c/0x3b8 [ 708.705758][T11218] genl_rcv+0x38/0x50 [ 708.706752][T11218] netlink_unicast+0x664/0x938 [ 708.707935][T11218] netlink_sendmsg+0x844/0xb38 [ 708.709072][T11218] ____sys_sendmsg+0x584/0x870 [ 708.710243][T11218] ___sys_sendmsg+0x214/0x294 [ 708.711376][T11218] __arm64_sys_sendmsg+0x1ac/0x25c [ 708.712663][T11218] invoke_syscall+0x98/0x2b8 [ 708.713792][T11218] el0_svc_common+0x138/0x258 [ 708.714965][T11218] do_el0_svc+0x58/0x14c [ 708.716008][T11218] el0_svc+0x7c/0x1f0 [ 708.717005][T11218] el0t_64_sync_handler+0x84/0xe4 [ 708.718325][T11218] el0t_64_sync+0x1a0/0x1a4 [ 708.719505][T11218] irq event stamp: 1132 [ 708.720519][T11218] hardirqs last enabled at (1131): [] finish_lock_switch+0xbc/0x1e8 [ 708.723033][T11218] hardirqs last disabled at (1132): [] el1_dbg+0x24/0x80 [ 708.725253][T11218] softirqs last enabled at (1120): [] handle_softirqs+0xb88/0xdbc [ 708.727678][T11218] softirqs last disabled at (1071): [] __irq_exit_rcu+0x268/0x4d8 [ 708.730064][T11218] ---[ end trace 0572c9bdf07de748 ]--- [ 708.737368][T11218] ------------[ cut here ]------------ [ 708.738774][T11218] WARNING: CPU: 1 PID: 11218 at net/wireless/core.h:228 wdev_unlock+0xcc/0xe4 [ 708.741042][T11218] Modules linked in: [ 708.742032][T11218] CPU: 1 PID: 11218 Comm: syz.1.2004 Tainted: G W 5.15.167-syzkaller #0 [ 708.744505][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 708.747136][T11218] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 708.749141][T11218] pc : wdev_unlock+0xcc/0xe4 [ 708.750278][T11218] lr : wdev_unlock+0xcc/0xe4 [ 708.751377][T11218] sp : ffff8000209b6ca0 [ 708.752426][T11218] x29: ffff8000209b6ca0 x28: dfff800000000000 x27: dfff800000000000 [ 708.754660][T11218] x26: 1fffe00019e07000 x25: ffff0000e5694c90 x24: 0000000000000001 [ 708.756726][T11218] x23: 0000000000000000 x22: ffff700004136d9c x21: 1fffe0001cad29ca [ 708.758768][T11218] x20: 0000000000000000 x19: ffff0000e5694c90 x18: 0000000000000000 [ 708.760841][T11218] x17: 0000000000000002 x16: ffff8000084c5eb8 x15: 0000000000000009 [ 708.763040][T11218] x14: 1ffff0000295806a x13: dfff800000000000 x12: 0000000000040000 [ 708.765028][T11218] x11: 000000000003ffff x10: ffff8000214c9000 x9 : 0000000000040000 [ 708.766917][T11218] x8 : ffff80001131bea4 x7 : 0000000000000000 x6 : 0000000010101010 [ 708.768944][T11218] x5 : ffff0000ecbc4136 x4 : ffff0000ca591625 x3 : ffff80000ab195c0 [ 708.770933][T11218] x2 : 0000000000000006 x1 : 0000000000000000 x0 : 0000000000000000 [ 708.772938][T11218] Call trace: [ 708.773766][T11218] wdev_unlock+0xcc/0xe4 [ 708.774854][T11218] nl80211_send_iface+0x984/0xccc [ 708.776124][T11218] nl80211_dump_interface+0x38c/0x5cc [ 708.777415][T11218] netlink_dump+0x4a8/0xad0 [ 708.778598][T11218] __netlink_dump_start+0x474/0x6d4 [ 708.779954][T11218] genl_rcv_msg+0xa80/0x1018 [ 708.781131][T11218] netlink_rcv_skb+0x20c/0x3b8 [ 708.782320][T11218] genl_rcv+0x38/0x50 [ 708.783318][T11218] netlink_unicast+0x664/0x938 [ 708.784470][T11218] netlink_sendmsg+0x844/0xb38 [ 708.785713][T11218] ____sys_sendmsg+0x584/0x870 [ 708.786799][T11218] ___sys_sendmsg+0x214/0x294 [ 708.787964][T11218] __arm64_sys_sendmsg+0x1ac/0x25c [ 708.789260][T11218] invoke_syscall+0x98/0x2b8 [ 708.790396][T11218] el0_svc_common+0x138/0x258 [ 708.791565][T11218] do_el0_svc+0x58/0x14c [ 708.792624][T11218] el0_svc+0x7c/0x1f0 [ 708.793671][T11218] el0t_64_sync_handler+0x84/0xe4 [ 708.794973][T11218] el0t_64_sync+0x1a0/0x1a4 [ 708.796138][T11218] irq event stamp: 1178 [ 708.797157][T11218] hardirqs last enabled at (1177): [] exit_to_kernel_mode+0x100/0x178 [ 708.799639][T11218] hardirqs last disabled at (1178): [] el1_dbg+0x24/0x80 [ 708.801756][T11218] softirqs last enabled at (1172): [] handle_softirqs+0xb88/0xdbc [ 708.804232][T11218] softirqs last disabled at (1135): [] __irq_exit_rcu+0x268/0x4d8 [ 708.806600][T11218] ---[ end trace 0572c9bdf07de749 ]--- [ 708.870457][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'. [ 708.993529][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'. [ 712.247861][ T4577] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.307297][ T4577] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.364502][ T4577] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.413558][ T4577] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.168085][ T4577] device hsr_slave_0 left promiscuous mode [ 714.217780][ T4577] device hsr_slave_1 left promiscuous mode [ 714.296305][ T4577] device bridge_slave_1 left promiscuous mode [ 714.297956][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.347984][ T4577] device bridge_slave_0 left promiscuous mode [ 714.349699][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.475753][ T4577] device veth1_macvtap left promiscuous mode [ 714.477360][ T4577] device veth0_macvtap left promiscuous mode [ 714.478836][ T4577] device veth1_vlan left promiscuous mode [ 714.480369][ T4577] device veth0_vlan left promiscuous mode [ 714.798237][ T4577] team0 (unregistering): Port device team_slave_1 removed [ 714.813982][ T4577] team0 (unregistering): Port device team_slave_0 removed [ 714.824067][ T4577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.879032][ T4577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.050629][ T4577] bond0 (unregistering): Released all slaves