last executing test programs: 5m7.259792225s ago: executing program 0 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') accept4$inet6(r4, 0x0, 0x0, 0x80800) fchdir(r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305829, &(0x7f0000000240)) 5m5.828651175s ago: executing program 0 (id=873): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)}, 0x20) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000000380)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d6f6666006e6f726f636b2c736573736934003d3078383030303030303030303030303033662c636865636b3d72656c619265642c636865636b3d72656c61786564416e6f726f636b2c6e6f726f636b2c756e686964652c6d61703d61636f726e2c6f76657272696465726f636b7065726d2c756e686964652c00"], 0x0, 0x687, &(0x7f0000001000)="$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") chdir(&(0x7f0000004340)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000040000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000048f7e31784db7e99708fc33f71b7c5ae47ccf9c64dd438a5612e61ad945638205036"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x3) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001000000000000000000020000000000000004000400080001"], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5m5.635478772s ago: executing program 0 (id=875): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) shutdown(r1, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, 0x0, 0x0) 5m5.475510054s ago: executing program 0 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') accept4$inet6(r4, 0x0, 0x0, 0x80800) fchdir(r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305829, &(0x7f0000000240)) 5m3.956096022s ago: executing program 0 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000003e00010000"], 0x1c}}, 0x0) 5m3.235044122s ago: executing program 0 (id=883): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket(0x28, 0x5, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) openat$tcp_mem(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) 1m48.916370571s ago: executing program 1 (id=1165): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r1, 0x0, 0x0, 'syz0\x00', 0x0}) 1m48.735602976s ago: executing program 1 (id=1166): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 1m48.45100281s ago: executing program 1 (id=1169): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000000a80)=ANY=[], 0x1, 0x24a, &(0x7f0000001140)="$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") syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fce7fae33878c0e57398a4cc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d"], 0x1, 0x14fe, &(0x7f0000001580)="$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") chdir(&(0x7f0000000180)='./file0\x00') creat(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r5}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14) mknod(0x0, 0x0, 0x0) 1m46.611534274s ago: executing program 1 (id=1174): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r1, 0x0, 0x0, 'syz0\x00', 0x0}) 1m45.09939992s ago: executing program 1 (id=1175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "ae1c67aed12dbee5449a9aaf25bf00ad105caa181f2652012feaec0580bd596b", "0b0596580966e7648969bbb4af0b88398518d8871167e2f15bd8c4948d8b2894", "b6465100ddac82c2b151ddd646e13dacdc68d48c1c639bb227952e71f609fca4", "abca511733439eb1a02c8fac981fa47140fa62c07c7a70dcb0719f77a6d59cc2", "e4f848c0c0aac5c1ab7cdbb1258ab227bd798cc87a485cfbd02f8a32829e10fb", "fd14bf4ebcb68a91ebedd0a4"}}) 1m44.714447783s ago: executing program 1 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') accept4$inet6(r4, 0x0, 0x0, 0x80800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40305829, &(0x7f0000000240)) 1.158071933s ago: executing program 3 (id=1339): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) 1.084530659s ago: executing program 3 (id=1340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 702.552072ms ago: executing program 2 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 659.002985ms ago: executing program 2 (id=1345): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8982, 0x2000fcc6) 567.553623ms ago: executing program 4 (id=1346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0ec000000005d11b9090000d31c", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 567.193873ms ago: executing program 2 (id=1347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x25001200, 0x0, 0x0, 0x0, 0x0, 0x0) 547.577944ms ago: executing program 3 (id=1348): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000580), 0x0}, 0x20) 512.842277ms ago: executing program 4 (id=1349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000001580)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @printk={@d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 415.406455ms ago: executing program 3 (id=1350): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d7507000000000000005bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 394.013917ms ago: executing program 4 (id=1351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 349.768661ms ago: executing program 2 (id=1352): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 276.421997ms ago: executing program 3 (id=1353): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 274.927967ms ago: executing program 4 (id=1354): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 255.844408ms ago: executing program 2 (id=1355): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 185.044495ms ago: executing program 2 (id=1356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 132.432599ms ago: executing program 4 (id=1357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 57.463685ms ago: executing program 4 (id=1358): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 3 (id=1359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): 6002][ T2988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.762649][ T21] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 335.772341][ T2988] usb 4-1: config 0 descriptor?? [ 335.806925][ T6129] loop3: detected capacity change from 0 to 256 [ 335.842864][ T2988] usb 4-1: can't set config #0, error -71 [ 335.860011][ T2988] usb 4-1: USB disconnect, device number 15 [ 336.106908][ T6133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.308820][ T6124] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 337.649918][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 338.125163][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.174003][ T6140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.195809][ T21] usb 3-1: config 0 descriptor?? [ 338.223744][ T21] usb 3-1: can't set config #0, error -71 [ 338.242264][ T21] usb 3-1: USB disconnect, device number 13 [ 338.274637][ T6144] loop3: detected capacity change from 0 to 256 [ 340.386776][ T6157] loop4: detected capacity change from 0 to 256 [ 344.298612][ T6184] loop4: detected capacity change from 0 to 256 [ 344.453012][ T6188] overlayfs: failed to resolve './file1': -2 [ 345.169304][ T6193] netlink: 'syz.3.609': attribute type 12 has an invalid length. [ 345.179599][ T6193] netlink: 'syz.3.609': attribute type 29 has an invalid length. [ 345.251333][ T6193] netlink: 'syz.3.609': attribute type 29 has an invalid length. [ 345.276653][ T6193] netlink: 'syz.3.609': attribute type 29 has an invalid length. [ 345.349585][ T3615] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 346.017944][ T5925] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 346.131489][ T6197] loop3: detected capacity change from 0 to 164 [ 346.165492][ T6203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.234994][ T6197] attempt to access beyond end of device [ 346.234994][ T6197] loop3: rw=524288, want=263332, limit=164 [ 346.238002][ T3615] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 346.248559][ T6197] attempt to access beyond end of device [ 346.248559][ T6197] loop3: rw=0, want=263332, limit=164 [ 346.265303][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.267449][ T26] audit: type=1800 audit(1729136211.224:20): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.612" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 346.318590][ T6197] attempt to access beyond end of device [ 346.318590][ T6197] loop3: rw=0, want=263332, limit=164 [ 346.330265][ T6197] attempt to access beyond end of device [ 346.330265][ T6197] loop3: rw=0, want=263332, limit=164 [ 346.333574][ T3615] usb 1-1: config 0 descriptor?? [ 346.341387][ T6197] attempt to access beyond end of device [ 346.341387][ T6197] loop3: rw=0, want=263332, limit=164 [ 346.357325][ T6197] attempt to access beyond end of device [ 346.357325][ T6197] loop3: rw=0, want=263332, limit=164 [ 346.368688][ T6197] attempt to access beyond end of device [ 346.368688][ T6197] loop3: rw=0, want=263332, limit=164 [ 346.379721][ T6197] attempt to access beyond end of device [ 346.379721][ T6197] loop3: rw=0, want=263332, limit=164 [ 346.390909][ T6197] attempt to access beyond end of device [ 346.390909][ T6197] loop3: rw=0, want=263332, limit=164 [ 346.401981][ T6197] attempt to access beyond end of device [ 346.401981][ T6197] loop3: rw=0, want=263332, limit=164 [ 346.426953][ T6205] overlayfs: failed to resolve './file1': -2 [ 346.443837][ T5925] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 346.465114][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.521454][ T5925] usb 3-1: config 0 descriptor?? [ 346.606307][ T6210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.756881][ T3615] ath6kl: Failed to submit usb control message: -71 [ 346.767854][ T3615] ath6kl: unable to send the bmi data to the device: -71 [ 346.802413][ T3615] ath6kl: Unable to send get target info: -71 [ 346.833042][ T5925] ath6kl: Failed to submit usb control message: -71 [ 346.842729][ T5925] ath6kl: unable to send the bmi data to the device: -71 [ 346.877974][ T5925] ath6kl: Unable to send get target info: -71 [ 347.235473][ T6215] overlayfs: missing 'workdir' [ 347.431861][ T6219] loop4: detected capacity change from 0 to 164 [ 347.498798][ T26] audit: type=1800 audit(1729136212.454:21): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.619" name="file0" dev="loop4" ino=1862 res=0 errno=0 [ 348.924812][ T3615] ath6kl: Failed to init ath6kl core: -71 [ 348.943967][ T5925] ath6kl: Failed to init ath6kl core: -71 [ 349.441402][ T6221] netlink: 'syz.2.621': attribute type 4 has an invalid length. [ 349.582804][ T6224] netlink: 'syz.1.622': attribute type 4 has an invalid length. [ 349.737910][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.774869][ T3615] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 349.783048][ T5925] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 349.797715][ T3615] usb 1-1: USB disconnect, device number 11 [ 349.805446][ T5925] usb 3-1: USB disconnect, device number 14 [ 349.883313][ T6234] loop3: detected capacity change from 0 to 164 [ 349.906430][ T26] audit: type=1800 audit(1729136214.864:22): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.627" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 350.028874][ T6237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.665205][ T6244] overlayfs: failed to resolve './file0': -2 [ 350.688723][ T2988] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 351.053667][ T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 351.073136][ T2988] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 351.088027][ T2988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.127849][ T2988] usb 2-1: config 0 descriptor?? [ 351.242607][ T6234] handle_bad_sector: 93448 callbacks suppressed [ 351.242629][ T6234] attempt to access beyond end of device [ 351.242629][ T6234] loop3: rw=0, want=263332, limit=164 [ 351.259933][ T6234] attempt to access beyond end of device [ 351.259933][ T6234] loop3: rw=0, want=263332, limit=164 [ 351.271530][ T6234] attempt to access beyond end of device [ 351.271530][ T6234] loop3: rw=0, want=263332, limit=164 [ 351.412437][ T2988] ath6kl: Failed to submit usb control message: -71 [ 351.422400][ T2988] ath6kl: unable to send the bmi data to the device: -71 [ 351.426536][ T6251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.430334][ T21] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 351.449312][ T2988] ath6kl: Unable to send get target info: -71 [ 351.455782][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.466860][ T21] usb 5-1: config 0 descriptor?? [ 351.474212][ T2988] ath6kl: Failed to init ath6kl core: -71 [ 351.482862][ T5925] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 351.493277][ T2988] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 351.502429][ T2988] usb 2-1: USB disconnect, device number 11 [ 351.724154][ T6246] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 351.742601][ T3615] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 351.757517][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 351.772893][ T21] ath6kl: Failed to submit usb control message: -71 [ 351.779845][ T21] ath6kl: unable to send the bmi data to the device: -71 [ 351.787174][ T21] ath6kl: Unable to send get target info: -71 [ 351.796552][ T21] ath6kl: Failed to init ath6kl core: -71 [ 351.815686][ T21] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 351.829217][ T21] usb 5-1: USB disconnect, device number 11 [ 351.852901][ T5925] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 351.862140][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.880160][ T5925] usb 3-1: config 0 descriptor?? [ 351.936213][ T6255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.009496][ T6257] overlayfs: failed to resolve './file0': -2 [ 352.052357][ T6259] loop3: detected capacity change from 0 to 164 [ 352.070277][ T6259] attempt to access beyond end of device [ 352.070277][ T6259] loop3: rw=524288, want=263332, limit=164 [ 352.082894][ T6259] attempt to access beyond end of device [ 352.082894][ T6259] loop3: rw=0, want=263332, limit=164 [ 352.094312][ T26] audit: type=1800 audit(1729136217.054:23): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.637" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 352.099557][ T6259] attempt to access beyond end of device [ 352.099557][ T6259] loop3: rw=0, want=263332, limit=164 [ 352.125664][ T6259] attempt to access beyond end of device [ 352.125664][ T6259] loop3: rw=0, want=263332, limit=164 [ 352.136920][ T6259] attempt to access beyond end of device [ 352.136920][ T6259] loop3: rw=0, want=263332, limit=164 [ 352.148046][ T6259] attempt to access beyond end of device [ 352.148046][ T6259] loop3: rw=0, want=263332, limit=164 [ 352.159173][ T6259] attempt to access beyond end of device [ 352.159173][ T6259] loop3: rw=0, want=263332, limit=164 [ 352.173979][ T3615] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 352.845256][ T6266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.078546][ T6262] loop4: detected capacity change from 0 to 164 [ 353.169644][ T26] audit: type=1800 audit(1729136218.124:24): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.638" name="file0" dev="loop4" ino=1862 res=0 errno=0 [ 353.426410][ T5925] ath6kl: Failed to submit usb control message: -71 [ 353.433144][ T5925] ath6kl: unable to send the bmi data to the device: -71 [ 353.440226][ T5925] ath6kl: Unable to send get target info: -71 [ 353.446580][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.459308][ T3615] usb 1-1: config 0 descriptor?? [ 353.465250][ T5925] ath6kl: Failed to init ath6kl core: -71 [ 353.485922][ T5925] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 353.495866][ T5925] usb 3-1: USB disconnect, device number 15 [ 353.752704][ T3615] ath6kl: Failed to submit usb control message: -71 [ 353.769953][ T3615] ath6kl: unable to send the bmi data to the device: -71 [ 353.778865][ T3615] ath6kl: Unable to send get target info: -71 [ 353.788382][ T3615] ath6kl: Failed to init ath6kl core: -71 [ 353.823677][ T3615] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 353.843589][ T3615] usb 1-1: USB disconnect, device number 12 [ 353.892798][ T5925] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 354.102698][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 354.272722][ T5925] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 354.285517][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.306686][ T5925] usb 3-1: config 0 descriptor?? [ 354.543012][ T21] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 354.556730][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.580694][ T21] usb 2-1: config 0 descriptor?? [ 354.592705][ T5925] ath6kl: Failed to submit usb control message: -71 [ 354.599528][ T5925] ath6kl: unable to send the bmi data to the device: -71 [ 354.606819][ T3615] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 354.623394][ T5925] ath6kl: Unable to send get target info: -71 [ 354.634538][ T5925] ath6kl: Failed to init ath6kl core: -71 [ 354.675633][ T5925] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 354.686042][ T5925] usb 3-1: USB disconnect, device number 16 [ 354.710932][ T6286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.905722][ T21] ath6kl: Failed to submit usb control message: -71 [ 354.912446][ T21] ath6kl: unable to send the bmi data to the device: -71 [ 354.932719][ T21] ath6kl: Unable to send get target info: -71 [ 354.952658][ T21] ath6kl: Failed to init ath6kl core: -71 [ 354.969557][ T21] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 354.972942][ T3615] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 354.985520][ T21] usb 2-1: USB disconnect, device number 12 [ 354.992043][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.005681][ T3615] usb 1-1: config 0 descriptor?? [ 355.282684][ T3615] ath6kl: Failed to submit usb control message: -71 [ 355.289803][ T3615] ath6kl: unable to send the bmi data to the device: -71 [ 355.337089][ T3615] ath6kl: Unable to send get target info: -71 [ 355.355232][ T3615] ath6kl: Failed to init ath6kl core: -71 [ 355.405220][ T3615] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 355.431336][ T3615] usb 1-1: USB disconnect, device number 13 [ 355.652782][ T21] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 356.412776][ T21] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 356.424852][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.442223][ T21] usb 4-1: config 0 descriptor?? [ 356.462035][ T6302] delete_channel: no stack [ 356.521148][ T6308] overlayfs: missing 'workdir' [ 356.792801][ T21] ath6kl: Failed to submit usb control message: -71 [ 356.799469][ T21] ath6kl: unable to send the bmi data to the device: -71 [ 356.817748][ T6319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.818864][ T21] ath6kl: Unable to send get target info: -71 [ 356.836822][ T21] ath6kl: Failed to init ath6kl core: -71 [ 356.842781][ T5925] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 356.858032][ T21] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 356.868827][ T21] usb 4-1: USB disconnect, device number 16 [ 356.898027][ T6320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.202926][ T5925] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 357.212104][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.226000][ T5925] usb 2-1: config 0 descriptor?? [ 357.512910][ T5925] ath6kl: Failed to submit usb control message: -71 [ 357.530195][ T5925] ath6kl: unable to send the bmi data to the device: -71 [ 357.538408][ T5925] ath6kl: Unable to send get target info: -71 [ 357.580779][ T5925] ath6kl: Failed to init ath6kl core: -71 [ 357.583852][ T6330] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 357.587067][ T1074] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 357.594848][ T3614] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 357.619213][ T5925] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 357.652910][ T5925] usb 2-1: USB disconnect, device number 13 [ 357.699086][ T6336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.002784][ T1074] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 358.011902][ T1074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.025092][ T1074] usb 3-1: config 0 descriptor?? [ 358.043303][ T3614] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 358.057960][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.095904][ T3614] usb 4-1: config 0 descriptor?? [ 358.783153][ T1074] ath6kl: Failed to submit usb control message: -71 [ 358.807310][ T1074] ath6kl: unable to send the bmi data to the device: -71 [ 358.941846][ T1074] ath6kl: Unable to send get target info: -71 [ 358.993743][ T3614] ath6kl: Failed to submit usb control message: -71 [ 359.000394][ T3614] ath6kl: unable to send the bmi data to the device: -71 [ 359.009459][ T3614] ath6kl: Unable to send get target info: -71 [ 359.022859][ T1074] ath6kl: Failed to init ath6kl core: -71 [ 359.033555][ T3614] ath6kl: Failed to init ath6kl core: -71 [ 359.073736][ T1074] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 359.098497][ T1074] usb 3-1: USB disconnect, device number 17 [ 359.211142][ T3614] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 359.231087][ T3614] usb 4-1: USB disconnect, device number 17 [ 359.243205][ T6350] delete_channel: no stack [ 359.332860][ T6354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.362725][ T3678] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 359.521836][ T6358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.692863][ T3614] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 359.732949][ T3678] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 359.742252][ T3678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.755882][ T3678] usb 2-1: config 0 descriptor?? [ 359.882413][ T6361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.011447][ T6349] netlink: 'syz.1.671': attribute type 72 has an invalid length. [ 360.021619][ T6349] netlink: 'syz.1.671': attribute type 3 has an invalid length. [ 360.033796][ T3678] ath6kl: Failed to submit usb control message: -71 [ 360.041255][ T3678] ath6kl: unable to send the bmi data to the device: -71 [ 360.056870][ T3678] ath6kl: Unable to send get target info: -71 [ 360.073798][ T3678] ath6kl: Failed to init ath6kl core: -71 [ 360.099861][ T3678] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 360.110309][ T3678] usb 2-1: USB disconnect, device number 14 [ 360.116949][ T3614] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 360.126582][ T3614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.254948][ T3614] usb 3-1: config 0 descriptor?? [ 360.302867][ T2988] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 360.733939][ T2988] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 360.798927][ T2988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.941613][ T2988] usb 1-1: config 0 descriptor?? [ 360.982814][ T3614] ath6kl: Failed to submit usb control message: -71 [ 360.989587][ T3614] ath6kl: unable to send the bmi data to the device: -71 [ 361.028525][ T3614] ath6kl: Unable to send get target info: -71 [ 361.049313][ T6375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.061482][ T6371] delete_channel: no stack [ 361.065181][ T3614] ath6kl: Failed to init ath6kl core: -71 [ 361.144826][ T3614] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 361.157964][ T3614] usb 3-1: USB disconnect, device number 18 [ 361.243825][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 361.272844][ T2988] ath6kl: Failed to submit usb control message: -71 [ 361.279539][ T2988] ath6kl: unable to send the bmi data to the device: -71 [ 361.290109][ T2988] ath6kl: Unable to send get target info: -71 [ 361.297705][ T2988] ath6kl: Failed to init ath6kl core: -71 [ 361.315315][ T2988] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 361.325685][ T2988] usb 1-1: USB disconnect, device number 14 [ 361.392691][ T1074] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 361.599583][ T6384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.673069][ T6386] loop3: detected capacity change from 0 to 164 [ 361.753220][ T1074] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 361.762293][ T1074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.791381][ T1074] usb 2-1: config 0 descriptor?? [ 361.909186][ T6386] netlink: 'syz.3.687': attribute type 4 has an invalid length. [ 361.980886][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.023292][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.062794][ T1074] ath6kl: Failed to submit usb control message: -71 [ 362.069460][ T1074] ath6kl: unable to send the bmi data to the device: -71 [ 362.077146][ T1074] ath6kl: Unable to send get target info: -71 [ 362.084019][ T1074] ath6kl: Failed to init ath6kl core: -71 [ 362.102007][ T1074] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 362.111835][ T1074] usb 2-1: USB disconnect, device number 15 [ 362.151064][ T6399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.621405][ T6401] delete_channel: no stack [ 362.648034][ T6400] delete_channel: no stack [ 362.675453][ T6405] delete_channel: no stack [ 362.751597][ T6413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.837389][ T6417] loop4: detected capacity change from 0 to 512 [ 362.844842][ T6409] delete_channel: no stack [ 362.862213][ T6419] loop3: detected capacity change from 0 to 512 [ 362.873980][ T6417] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 362.889031][ T6417] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 362.897407][ T6417] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 362.916616][ T6417] EXT4-fs (loop4): 1 truncate cleaned up [ 362.921846][ T6419] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 362.963741][ T6417] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 362.973797][ T6424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.986321][ T6419] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 363.003756][ T6419] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 363.031187][ T6419] EXT4-fs (loop3): 1 truncate cleaned up [ 363.037556][ T6419] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 363.209045][ T6425] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.702: lblock 0 mapped to illegal pblock 4 (length 1) [ 363.235530][ T6425] EXT4-fs (loop4): Remounting filesystem read-only [ 363.250600][ T6426] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.703: lblock 0 mapped to illegal pblock 4 (length 1) [ 363.263569][ T1074] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 363.273661][ T6426] EXT4-fs (loop3): Remounting filesystem read-only [ 363.830444][ T6417] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.702: lblock 0 mapped to illegal pblock 4 (length 1) [ 363.903634][ T6419] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.703: lblock 0 mapped to illegal pblock 4 (length 1) [ 364.171564][ T6429] delete_channel: no stack [ 364.260829][ T6436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.351059][ T6440] loop4: detected capacity change from 0 to 512 [ 364.642677][ T6440] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 365.076172][ T6440] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 365.084608][ T6440] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 365.095906][ T6440] EXT4-fs (loop4): 1 truncate cleaned up [ 365.101583][ T6440] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 365.313490][ T6445] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.709: lblock 0 mapped to illegal pblock 4 (length 1) [ 365.352653][ T1074] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 365.375307][ T6445] EXT4-fs (loop4): Remounting filesystem read-only [ 365.898574][ T1074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.908781][ T1074] usb 1-1: config 0 descriptor?? [ 366.182735][ T1074] ath6kl: Failed to submit usb control message: -71 [ 366.189437][ T1074] ath6kl: unable to send the bmi data to the device: -71 [ 366.252759][ T1074] ath6kl: Unable to send get target info: -71 [ 367.735118][ T6455] delete_channel: no stack [ 368.064908][ T1074] ath6kl: Failed to init ath6kl core: -71 [ 368.083263][ T2988] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 368.096577][ T1074] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 368.125730][ T1074] usb 1-1: USB disconnect, device number 15 [ 368.212643][ T3615] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 368.234459][ T6475] loop4: detected capacity change from 0 to 512 [ 368.257583][ T6475] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 368.292061][ T6475] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 368.300818][ T6475] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 368.313917][ T6475] EXT4-fs (loop4): 1 truncate cleaned up [ 368.319583][ T6475] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 368.493818][ T6480] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.719: lblock 0 mapped to illegal pblock 4 (length 1) [ 368.508689][ T6480] EXT4-fs (loop4): Remounting filesystem read-only [ 368.573564][ T2988] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 368.573686][ T3615] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 368.619365][ T6479] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.719: lblock 0 mapped to illegal pblock 4 (length 1) [ 368.634094][ T2988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.674610][ T2988] usb 2-1: config 0 descriptor?? [ 368.706054][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.128268][ T3615] usb 4-1: config 0 descriptor?? [ 369.171346][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.717'. [ 369.262777][ T2988] ath6kl: Failed to submit usb control message: -71 [ 369.286338][ T2988] ath6kl: unable to send the bmi data to the device: -71 [ 369.339764][ T2988] ath6kl: Unable to send get target info: -71 [ 369.384001][ T3615] ath6kl: Failed to submit usb control message: -71 [ 369.391104][ T3615] ath6kl: unable to send the bmi data to the device: -71 [ 369.398370][ T3615] ath6kl: Unable to send get target info: -71 [ 369.805760][ T6490] loop4: detected capacity change from 0 to 512 [ 370.051427][ T6490] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 371.397149][ T6493] loop3: detected capacity change from 0 to 164 [ 371.404839][ T3615] ath6kl: Failed to init ath6kl core: -71 [ 371.510113][ T6490] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 371.545775][ T6493] handle_bad_sector: 48611 callbacks suppressed [ 371.545794][ T6493] attempt to access beyond end of device [ 371.545794][ T6493] loop3: rw=524288, want=263332, limit=164 [ 371.564024][ T6493] attempt to access beyond end of device [ 371.564024][ T6493] loop3: rw=0, want=263332, limit=164 [ 371.575808][ T26] audit: type=1800 audit(1729136236.544:25): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.723" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 371.599492][ T6493] attempt to access beyond end of device [ 371.599492][ T6493] loop3: rw=0, want=263332, limit=164 [ 371.610673][ T6493] attempt to access beyond end of device [ 371.610673][ T6493] loop3: rw=0, want=263332, limit=164 [ 371.621765][ T6493] attempt to access beyond end of device [ 371.621765][ T6493] loop3: rw=0, want=263332, limit=164 [ 371.632835][ T6493] attempt to access beyond end of device [ 371.632835][ T6493] loop3: rw=0, want=263332, limit=164 [ 371.643966][ T6493] attempt to access beyond end of device [ 371.643966][ T6493] loop3: rw=0, want=263332, limit=164 [ 371.655003][ T6493] attempt to access beyond end of device [ 371.655003][ T6493] loop3: rw=0, want=263332, limit=164 [ 371.666376][ T6493] attempt to access beyond end of device [ 371.666376][ T6493] loop3: rw=0, want=263332, limit=164 [ 371.677834][ T6493] attempt to access beyond end of device [ 371.677834][ T6493] loop3: rw=0, want=263332, limit=164 [ 371.773732][ T6490] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 371.806385][ T2988] ath6kl: Failed to init ath6kl core: -71 [ 372.855060][ T3615] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 372.885267][ T3615] usb 4-1: USB disconnect, device number 18 [ 372.888056][ T6490] EXT4-fs (loop4): 1 truncate cleaned up [ 372.897183][ T6490] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 373.067088][ T2988] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 373.092896][ T2988] usb 2-1: USB disconnect, device number 16 [ 373.312341][ T6510] loop4: detected capacity change from 0 to 512 [ 373.398629][ T6510] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 373.478354][ T6510] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 373.543445][ T6510] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 373.596192][ T6510] EXT4-fs (loop4): 1 truncate cleaned up [ 373.644496][ T6510] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 373.670510][ T6519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.747264][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.937327][ T6523] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.730: lblock 0 mapped to illegal pblock 4 (length 1) [ 373.962826][ T6523] EXT4-fs (loop4): Remounting filesystem read-only [ 375.654317][ T6532] loop4: detected capacity change from 0 to 164 [ 375.671458][ T26] audit: type=1800 audit(1729136240.624:26): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.736" name="file0" dev="loop4" ino=1862 res=0 errno=0 [ 376.552602][ T6532] handle_bad_sector: 32384 callbacks suppressed [ 376.552625][ T6532] attempt to access beyond end of device [ 376.552625][ T6532] loop4: rw=0, want=263332, limit=164 [ 376.569941][ T6532] attempt to access beyond end of device [ 376.569941][ T6532] loop4: rw=0, want=263332, limit=164 [ 376.581003][ T6532] attempt to access beyond end of device [ 376.581003][ T6532] loop4: rw=0, want=263332, limit=164 [ 376.592037][ T6532] attempt to access beyond end of device [ 376.592037][ T6532] loop4: rw=0, want=263332, limit=164 [ 376.603439][ T6532] attempt to access beyond end of device [ 376.603439][ T6532] loop4: rw=0, want=263332, limit=164 [ 376.614460][ T6532] attempt to access beyond end of device [ 376.614460][ T6532] loop4: rw=0, want=263332, limit=164 [ 376.625501][ T6532] attempt to access beyond end of device [ 376.625501][ T6532] loop4: rw=0, want=263332, limit=164 [ 376.636530][ T6532] attempt to access beyond end of device [ 376.636530][ T6532] loop4: rw=0, want=263332, limit=164 [ 376.647575][ T6532] attempt to access beyond end of device [ 376.647575][ T6532] loop4: rw=0, want=263332, limit=164 [ 376.658715][ T6532] attempt to access beyond end of device [ 376.658715][ T6532] loop4: rw=0, want=263332, limit=164 [ 378.655052][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.678325][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.420788][ T6549] loop3: detected capacity change from 0 to 256 [ 380.057791][ T6554] loop4: detected capacity change from 0 to 512 [ 380.322294][ T6554] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 380.336599][ T6549] exfat: Deprecated parameter 'utf8' [ 380.385153][ T6547] delete_channel: no stack [ 380.390310][ T6554] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 380.497091][ T6554] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 380.512713][ T6549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 380.570999][ T6554] EXT4-fs (loop4): 1 truncate cleaned up [ 380.597443][ T6554] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 380.931003][ T6559] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.741: lblock 0 mapped to illegal pblock 4 (length 1) [ 381.180774][ T6559] EXT4-fs (loop4): Remounting filesystem read-only [ 381.200934][ T6560] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.741: lblock 0 mapped to illegal pblock 4 (length 1) [ 381.847631][ T6566] loop4: detected capacity change from 0 to 512 [ 381.901191][ T6566] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 381.901768][ T6564] delete_channel: no stack [ 381.931848][ T6566] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 381.951568][ T6566] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 381.991067][ T6566] EXT4-fs (loop4): 1 truncate cleaned up [ 382.006691][ T6566] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 382.235706][ T6572] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.744: lblock 0 mapped to illegal pblock 4 (length 1) [ 382.703139][ T6572] EXT4-fs (loop4): Remounting filesystem read-only [ 382.710786][ T6573] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.744: lblock 0 mapped to illegal pblock 4 (length 1) [ 385.164759][ T6582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.291999][ T6584] loop3: detected capacity change from 0 to 512 [ 385.373060][ T6584] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 385.432392][ T6584] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 385.446219][ T6584] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 385.499449][ T6584] EXT4-fs (loop3): 1 truncate cleaned up [ 385.522609][ T6584] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 385.860279][ T6588] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.752: lblock 0 mapped to illegal pblock 4 (length 1) [ 385.882433][ T6588] EXT4-fs (loop3): Remounting filesystem read-only [ 386.246712][ T6587] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.752: lblock 0 mapped to illegal pblock 4 (length 1) [ 386.452829][ T6590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.658174][ T6598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.206515][ T6609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.635688][ T6618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.458209][ T6636] loop3: detected capacity change from 0 to 512 [ 392.437025][ T6636] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 392.520956][ T6636] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 392.523156][ T6642] netlink: 'syz.1.770': attribute type 4 has an invalid length. [ 392.624206][ T6636] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 392.691411][ T6636] EXT4-fs (loop3): 1 truncate cleaned up [ 392.824586][ T6636] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 392.833551][ T6653] netlink: 32 bytes leftover after parsing attributes in process `syz.4.772'. [ 393.067759][ T6658] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.767: lblock 0 mapped to illegal pblock 4 (length 1) [ 393.265630][ T6655] netlink: 32 bytes leftover after parsing attributes in process `syz.4.772'. [ 393.299601][ T6658] EXT4-fs (loop3): Remounting filesystem read-only [ 393.319772][ T6659] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.767: lblock 0 mapped to illegal pblock 4 (length 1) [ 393.698081][ T6653] netlink: 32 bytes leftover after parsing attributes in process `syz.4.772'. [ 395.768684][ T6672] loop3: detected capacity change from 0 to 512 [ 395.780288][ T6677] loop4: detected capacity change from 0 to 512 [ 396.822421][ T6672] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 396.840935][ T6677] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 396.870713][ T6672] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 396.894036][ T6672] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 396.905043][ T6677] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 396.952621][ T6677] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 396.988694][ T6677] EXT4-fs (loop4): 1 truncate cleaned up [ 397.001743][ T6672] EXT4-fs (loop3): 1 truncate cleaned up [ 397.022749][ T6677] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 397.063927][ T6672] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 397.310388][ T6686] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.778: lblock 0 mapped to illegal pblock 4 (length 1) [ 397.987389][ T6689] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.779: lblock 0 mapped to illegal pblock 4 (length 1) [ 398.043705][ T6686] EXT4-fs (loop4): Remounting filesystem read-only [ 398.043777][ T6689] EXT4-fs (loop3): Remounting filesystem read-only [ 398.196577][ T6687] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.778: lblock 0 mapped to illegal pblock 4 (length 1) [ 398.265397][ T6672] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.779: lblock 0 mapped to illegal pblock 4 (length 1) [ 401.869350][ T6712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.963849][ T6715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.000681][ T6710] netlink: 32 bytes leftover after parsing attributes in process `syz.1.781'. [ 402.021546][ T6708] delete_channel: no stack [ 402.060833][ T6713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.781'. [ 402.142216][ T6719] loop4: detected capacity change from 0 to 512 [ 402.156513][ T6713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.781'. [ 402.180491][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.238438][ T6719] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 402.303928][ T6719] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 402.332396][ T6719] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 402.360503][ T6719] EXT4-fs (loop4): 1 truncate cleaned up [ 402.939069][ T6719] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 403.251604][ T6730] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.789: lblock 0 mapped to illegal pblock 4 (length 1) [ 403.474317][ T6730] EXT4-fs (loop4): Remounting filesystem read-only [ 403.713259][ T6731] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 4: comm syz.4.789: lblock 0 mapped to illegal pblock 4 (length 1) [ 403.872056][ T6735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.795'. [ 404.118578][ T6737] loop4: detected capacity change from 0 to 164 [ 404.180759][ T6737] handle_bad_sector: 31579 callbacks suppressed [ 404.180773][ T6737] attempt to access beyond end of device [ 404.180773][ T6737] loop4: rw=524288, want=263332, limit=164 [ 404.202722][ T6737] attempt to access beyond end of device [ 404.202722][ T6737] loop4: rw=0, want=263332, limit=164 [ 404.397847][ T6737] attempt to access beyond end of device [ 404.397847][ T6737] loop4: rw=0, want=263332, limit=164 [ 404.408982][ T6737] attempt to access beyond end of device [ 404.408982][ T6737] loop4: rw=0, want=263332, limit=164 [ 404.420522][ T6737] attempt to access beyond end of device [ 404.420522][ T6737] loop4: rw=0, want=263332, limit=164 [ 404.431773][ T6737] attempt to access beyond end of device [ 404.431773][ T6737] loop4: rw=0, want=263332, limit=164 [ 404.442785][ T6737] attempt to access beyond end of device [ 404.442785][ T6737] loop4: rw=0, want=263332, limit=164 [ 404.453832][ T6737] attempt to access beyond end of device [ 404.453832][ T6737] loop4: rw=0, want=263332, limit=164 [ 404.464959][ T6737] attempt to access beyond end of device [ 404.464959][ T6737] loop4: rw=0, want=263332, limit=164 [ 404.476078][ T6737] attempt to access beyond end of device [ 404.476078][ T6737] loop4: rw=0, want=263332, limit=164 [ 405.432587][ T26] audit: type=1800 audit(1729136269.174:27): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.794" name="file0" dev="loop4" ino=1862 res=0 errno=0 [ 409.078396][ T6760] loop3: detected capacity change from 0 to 512 [ 409.481384][ T6760] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 409.514010][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.802'. [ 409.573670][ T6760] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 409.582869][ T6764] netlink: 32 bytes leftover after parsing attributes in process `syz.4.802'. [ 409.605228][ T6760] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 409.632372][ T6760] EXT4-fs (loop3): 1 truncate cleaned up [ 409.671800][ T6761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.802'. [ 409.691904][ T6760] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 409.726512][ T6765] delete_channel: no stack [ 409.756274][ T6764] netlink: 32 bytes leftover after parsing attributes in process `syz.4.802'. [ 410.003042][ T6770] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.803: lblock 0 mapped to illegal pblock 4 (length 1) [ 410.038659][ T6770] EXT4-fs (loop3): Remounting filesystem read-only [ 410.077970][ T6770] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.803: lblock 0 mapped to illegal pblock 4 (length 1) [ 410.794615][ T6779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.202481][ T6789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'. [ 413.263462][ T6790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.810'. [ 413.357893][ T6789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.810'. [ 413.411486][ T6790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.810'. [ 413.667350][ T6800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.814'. [ 413.699568][ T6803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.816'. [ 413.716787][ T6804] delete_channel: no stack [ 417.664236][ T3614] Bluetooth: hci2: command 0x0406 tx timeout [ 418.015700][ T6829] loop4: detected capacity change from 0 to 512 [ 418.988753][ T6829] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 420.460918][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.471776][ T6829] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 420.482739][ T6829] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 420.528395][ T6829] EXT4-fs (loop4): 1 truncate cleaned up [ 420.553063][ T6829] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 421.549493][ T6852] __nla_validate_parse: 7 callbacks suppressed [ 421.549510][ T6852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.832'. [ 421.574605][ T6855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.833'. [ 421.622134][ T6855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.833'. [ 421.708551][ T6858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.887302][ T6865] delete_channel: no stack [ 421.909882][ T6860] delete_channel: no stack [ 421.947087][ T6856] delete_channel: no stack [ 422.610624][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.464991][ T6880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.495172][ T6881] loop3: detected capacity change from 0 to 512 [ 423.617479][ T6882] delete_channel: no stack [ 424.091899][ T6881] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 424.112365][ T6885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.233494][ T6881] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 424.241524][ T6881] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 424.423747][ T6881] EXT4-fs (loop3): 1 truncate cleaned up [ 424.429441][ T6881] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 425.721414][ T6907] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.842: lblock 0 mapped to illegal pblock 4 (length 1) [ 425.736014][ T6907] EXT4-fs (loop3): Remounting filesystem read-only [ 426.881022][ T6881] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.842: lblock 0 mapped to illegal pblock 4 (length 1) [ 427.162087][ T6916] delete_channel: no stack [ 427.204571][ T6918] delete_channel: no stack [ 428.542138][ T6928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.857'. [ 428.616358][ T6928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.857'. [ 428.644177][ T6928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.857'. [ 428.659461][ T6928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.857'. [ 428.804990][ T6939] kAFS: No cell specified [ 428.915530][ T6936] delete_channel: no stack [ 428.975825][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.861'. [ 428.986323][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 429.024027][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 429.100762][ T6951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 429.880485][ T6953] delete_channel: no stack [ 431.523644][ T6983] netlink: 'syz.0.873': attribute type 4 has an invalid length. [ 431.677953][ T6986] loop4: detected capacity change from 0 to 4096 [ 431.791657][ T6991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.876'. [ 431.803744][ T6986] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 431.917493][ T6991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.876'. [ 432.114445][ T6986] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 436.408996][ T7024] netlink: 'syz.4.886': attribute type 4 has an invalid length. [ 436.824405][ T7036] loop3: detected capacity change from 0 to 128 [ 437.168750][ T144] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 438.513373][ T7037] delete_channel: no stack [ 438.594326][ T7044] loop3: detected capacity change from 0 to 128 [ 439.922279][ T7051] delete_channel: no stack [ 439.954238][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.960562][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.454872][ T7059] __nla_validate_parse: 2 callbacks suppressed [ 441.454893][ T7059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.897'. [ 441.519526][ T7064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.897'. [ 441.539998][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.898'. [ 441.566057][ T7059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.897'. [ 441.579788][ T7066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.898'. [ 441.603486][ T7059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.897'. [ 441.634140][ T7066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.898'. [ 441.657317][ T7066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.898'. [ 441.797592][ T7069] loop3: detected capacity change from 0 to 128 [ 443.073687][ T7073] netlink: 'syz.1.900': attribute type 4 has an invalid length. [ 443.863201][ T7081] loop3: detected capacity change from 0 to 128 [ 447.163025][ T7099] loop3: detected capacity change from 0 to 512 [ 447.514090][ T7099] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 447.748679][ T7012] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 447.763476][ T7099] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 447.771525][ T7099] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 447.935117][ T7099] EXT4-fs (loop3): 1 truncate cleaned up [ 447.972638][ T7099] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 448.286617][ T7117] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.909: lblock 0 mapped to illegal pblock 4 (length 1) [ 449.495583][ T7117] EXT4-fs (loop3): Remounting filesystem read-only [ 449.506588][ T7120] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.909: lblock 0 mapped to illegal pblock 4 (length 1) [ 449.952864][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 454.528716][ T1074] Bluetooth: hci5: command 0x041b tx timeout [ 454.908281][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 454.916387][ T7150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.924'. [ 454.930272][ T7150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.924'. [ 455.270274][ T7150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.924'. [ 455.801848][ T7153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.924'. [ 456.529750][ T7161] loop3: detected capacity change from 0 to 256 [ 456.685232][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 456.743382][ T7161] exfat: Deprecated parameter 'utf8' [ 456.749437][ T7161] exfat: Deprecated parameter 'namecase' [ 456.761613][ T4358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.814110][ T7161] exfat: Deprecated parameter 'namecase' [ 456.827447][ T7161] exfat: Deprecated parameter 'utf8' [ 456.977705][ T7161] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 458.328625][ T4358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.482928][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.496549][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.642888][ T7110] device bridge_slave_0 entered promiscuous mode [ 459.655975][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 459.817604][ T7191] loop3: detected capacity change from 0 to 256 [ 461.794934][ T7191] exfat: Deprecated parameter 'utf8' [ 461.800448][ T7191] exfat: Deprecated parameter 'namecase' [ 461.808165][ T7191] exfat: Deprecated parameter 'namecase' [ 461.814425][ T7191] exfat: Deprecated parameter 'utf8' [ 461.834692][ T4358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.862422][ T7191] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 461.884053][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.891424][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.312896][ T7110] device bridge_slave_1 entered promiscuous mode [ 463.711321][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.739198][ T4358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.937886][ T7221] loop3: detected capacity change from 0 to 256 [ 464.984932][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.013753][ T7221] exfat: Deprecated parameter 'utf8' [ 465.029961][ T7221] exfat: Deprecated parameter 'namecase' [ 465.070032][ T7221] exfat: Deprecated parameter 'namecase' [ 465.110184][ T7221] exfat: Deprecated parameter 'utf8' [ 467.577740][ T7110] team0: Port device team_slave_0 added [ 467.627582][ T7221] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 467.699562][ T7110] team0: Port device team_slave_1 added [ 469.309781][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.334894][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.559241][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.963000][ T7248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.952'. [ 471.441009][ T7262] loop3: detected capacity change from 0 to 128 [ 471.479780][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.505433][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.551900][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.664176][ T7248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.952'. [ 473.693987][ T7274] loop3: detected capacity change from 0 to 4096 [ 473.734957][ T7110] device hsr_slave_0 entered promiscuous mode [ 473.755468][ T7274] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 475.364864][ T7110] device hsr_slave_1 entered promiscuous mode [ 475.446751][ T7274] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 491.747281][ T4358] device hsr_slave_0 left promiscuous mode [ 491.763739][ T4358] device hsr_slave_1 left promiscuous mode [ 491.790444][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.285818][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.328596][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.340805][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.356956][ T4358] device bridge_slave_1 left promiscuous mode [ 494.464666][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.473386][ T4358] device bridge_slave_0 left promiscuous mode [ 494.479643][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.513734][ T4358] device veth1_macvtap left promiscuous mode [ 494.519816][ T4358] device veth0_macvtap left promiscuous mode [ 494.552722][ T4358] device veth1_vlan left promiscuous mode [ 494.573449][ T4358] device veth0_vlan left promiscuous mode [ 494.690597][ T7432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.994'. [ 497.458935][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 497.910200][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 498.109755][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.181067][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.205016][ T7453] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1000'. [ 498.316732][ T4358] bond0 (unregistering): Released all slaves [ 498.459889][ T7384] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 498.483788][ T7432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.994'. [ 498.504146][ T7453] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1000'. [ 500.223663][ T1074] Bluetooth: hci4: command 0x0409 tx timeout [ 501.319323][ T7110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 501.467628][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.474115][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.371624][ T7454] chnl_net:caif_netlink_parms(): no params data found [ 503.409124][ T3678] Bluetooth: hci4: command 0x041b tx timeout [ 503.500998][ T7110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 503.723051][ T7110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 504.007430][ T7110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.740408][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.806219][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.834122][ T3678] Bluetooth: hci4: command 0x040f tx timeout [ 505.903829][ T7454] device bridge_slave_0 entered promiscuous mode [ 506.951967][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.032728][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.040985][ T7454] device bridge_slave_1 entered promiscuous mode [ 507.971410][ T3678] Bluetooth: hci4: command 0x0419 tx timeout [ 508.422829][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.454836][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.312723][ T3615] Bluetooth: hci3: command 0x0409 tx timeout [ 511.465269][ T7454] team0: Port device team_slave_0 added [ 511.558722][ T7454] team0: Port device team_slave_1 added [ 513.036728][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.052645][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.113431][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.151483][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.173542][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.370421][ T7584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1020'. [ 513.417903][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.552797][ T2123] Bluetooth: hci3: command 0x041b tx timeout [ 513.688032][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1020'. [ 518.863343][ T2123] Bluetooth: hci3: command 0x040f tx timeout [ 519.037946][ T7454] device hsr_slave_0 entered promiscuous mode [ 519.268946][ T7454] device hsr_slave_1 entered promiscuous mode [ 520.303775][ T7454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.421903][ T7454] Cannot create hsr debugfs directory [ 520.672808][ T7617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1027'. [ 520.715477][ T7615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1027'. [ 520.841536][ T7623] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1030'. [ 520.859262][ T7542] chnl_net:caif_netlink_parms(): no params data found [ 520.885435][ T7615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1027'. [ 520.950301][ T7623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1030'. [ 520.993035][ T7622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1030'. [ 522.936652][ T2123] Bluetooth: hci3: command 0x0419 tx timeout [ 525.459916][ T7454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.642054][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1038'. [ 527.729124][ T7454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.525493][ T7542] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.573208][ T7542] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.631939][ T7542] device bridge_slave_0 entered promiscuous mode [ 528.647408][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.655126][ T7542] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.841310][ T7542] device bridge_slave_1 entered promiscuous mode [ 531.133648][ T7454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.971343][ T7542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.089494][ T7542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.475978][ T7454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.497017][ T7542] team0: Port device team_slave_0 added [ 535.505518][ T7542] team0: Port device team_slave_1 added [ 538.714916][ T7542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.755404][ T7542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.212395][ T7542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.233010][ T7542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.247717][ T7542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.595427][ T7707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1051'. [ 539.812379][ T7542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.848420][ T7707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1051'. [ 540.694869][ T7542] device hsr_slave_0 entered promiscuous mode [ 540.702010][ T7542] device hsr_slave_1 entered promiscuous mode [ 540.708921][ T7542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.717939][ T7542] Cannot create hsr debugfs directory [ 547.474707][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1061'. [ 547.536001][ T7741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1061'. [ 547.550175][ T4358] tipc: Left network mode [ 547.556638][ T7454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 547.593226][ T7742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1061'. [ 547.611992][ T7454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 547.623905][ T7454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 547.751626][ T7741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1061'. [ 550.432485][ T7454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 551.059997][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.205919][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 551.217770][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.470763][ T7454] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.483774][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.493627][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.502248][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.509597][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.527549][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.604545][ T7766] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1065'. [ 551.618880][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.725035][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.734168][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.741292][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.749607][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.532190][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.550426][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.567183][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.576794][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.595939][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.612249][ T7769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1065'. [ 553.742507][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 555.811745][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 555.830739][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.989885][ T7454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.462947][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 558.876417][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 566.383256][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.390267][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.632113][ T3615] Bluetooth: hci5: command 0x0409 tx timeout [ 572.159473][ T7852] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 572.293058][ T3615] Bluetooth: hci5: command 0x041b tx timeout [ 573.553354][ T7857] netlink: 'syz.4.1085': attribute type 4 has an invalid length. [ 574.449043][ T3615] Bluetooth: hci5: command 0x040f tx timeout [ 579.763636][ T7890] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 579.933498][ T3615] Bluetooth: hci5: command 0x0419 tx timeout [ 580.435882][ T7813] chnl_net:caif_netlink_parms(): no params data found [ 583.921497][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 584.183473][ T7916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1096'. [ 584.973149][ T7916] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1096'. [ 587.635255][ T3614] Bluetooth: hci4: command 0x041b tx timeout [ 587.908081][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.016437][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.171222][ T7813] device bridge_slave_0 entered promiscuous mode [ 590.050071][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.124506][ T3678] Bluetooth: hci4: command 0x040f tx timeout [ 590.152618][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.181309][ T7813] device bridge_slave_1 entered promiscuous mode [ 592.169550][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1105'. [ 592.404392][ T3678] Bluetooth: hci4: command 0x0419 tx timeout [ 592.540223][ T4358] device hsr_slave_0 left promiscuous mode [ 592.571790][ T4358] device hsr_slave_1 left promiscuous mode [ 593.021984][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.363826][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.372067][ T4358] device bridge_slave_1 left promiscuous mode [ 593.379599][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.388539][ T4358] device bridge_slave_0 left promiscuous mode [ 593.406696][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.457583][ T4358] device hsr_slave_0 left promiscuous mode [ 593.473380][ T4358] device hsr_slave_1 left promiscuous mode [ 593.488430][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.502120][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.604251][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.646054][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.860302][ T4358] device bridge_slave_1 left promiscuous mode [ 593.880418][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.907467][ T4358] device bridge_slave_0 left promiscuous mode [ 593.935012][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.981769][ T4358] device veth1_macvtap left promiscuous mode [ 594.001950][ T4358] device veth0_macvtap left promiscuous mode [ 595.844315][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 595.857316][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 595.877447][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.298854][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.802342][ T4358] bond0 (unregistering): Released all slaves [ 597.949071][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 597.980063][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 598.017521][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.048303][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.227575][ T4358] bond0 (unregistering): Released all slaves [ 599.008856][ T7813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.038228][ T7813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.058859][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1105'. [ 599.395110][ T7813] team0: Port device team_slave_0 added [ 599.580325][ T7894] chnl_net:caif_netlink_parms(): no params data found [ 599.975473][ T7813] team0: Port device team_slave_1 added [ 600.087085][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.109653][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.166630][ T7813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.209286][ T7813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.530009][ T7813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.662565][ T7813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.896338][ T7813] device hsr_slave_0 entered promiscuous mode [ 603.967493][ T7813] device hsr_slave_1 entered promiscuous mode [ 604.823442][ T8068] netlink: 'syz.3.1125': attribute type 4 has an invalid length. [ 604.992190][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.999570][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.018647][ T7894] device bridge_slave_0 entered promiscuous mode [ 605.122905][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.130003][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.166752][ T7894] device bridge_slave_1 entered promiscuous mode [ 608.832691][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.115396][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.924809][ T7894] team0: Port device team_slave_0 added [ 611.965684][ T7894] team0: Port device team_slave_1 added [ 612.089724][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.097062][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.123802][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.140796][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.148089][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.175452][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.328033][ T8139] netlink: 'syz.1.1136': attribute type 4 has an invalid length. [ 612.353174][ T7894] device hsr_slave_0 entered promiscuous mode [ 612.398362][ T7894] device hsr_slave_1 entered promiscuous mode [ 612.432111][ T7894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.444148][ T7894] Cannot create hsr debugfs directory [ 615.875697][ T7813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 615.916864][ T7813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 616.012138][ T7813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 616.103880][ T7813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 616.304097][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 617.050885][ T7813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.132929][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.141008][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.895758][ T7813] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.924754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.962316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.995606][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.002865][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.256214][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 619.493739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 620.277770][ T7894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 620.440217][ T7894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 620.464491][ T7894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 620.495398][ T8191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1150'. [ 620.520162][ T8193] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1150'. [ 620.549948][ T7894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 620.569576][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1150'. [ 620.928263][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 621.625837][ T7894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.645644][ T7894] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.661161][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 621.737185][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 621.826559][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 621.839079][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.723245][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.727981][ T3620] Bluetooth: hci3: command 0x0409 tx timeout [ 623.730453][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.810640][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.829965][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.849295][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.880978][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.888168][ T3723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.632740][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 624.867425][ T8187] chnl_net:caif_netlink_parms(): no params data found [ 625.140981][ T8212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1155'. [ 625.258479][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1155'. [ 625.323010][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 625.363520][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 626.002702][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 626.726159][ T3678] Bluetooth: hci3: command 0x041b tx timeout [ 626.985710][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 627.095300][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 627.321777][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 627.562557][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 627.712931][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 627.804187][ T8241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1162'. [ 627.953077][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 627.975148][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.001985][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.030045][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.051898][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 628.315282][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.373117][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.434430][ T8187] device bridge_slave_0 entered promiscuous mode [ 628.483280][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.490461][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.576270][ T8187] device bridge_slave_1 entered promiscuous mode [ 628.763606][ T2988] Bluetooth: hci3: command 0x040f tx timeout [ 629.396119][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.406653][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.430850][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.511987][ T8265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1168'. [ 629.544689][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.632668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 629.640237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 629.682284][ T7894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.725630][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1168'. [ 630.125319][ T8187] team0: Port device team_slave_0 added [ 630.416609][ T8187] team0: Port device team_slave_1 added [ 630.574783][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.636086][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.656056][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 631.735402][ T2988] Bluetooth: hci3: command 0x0419 tx timeout [ 631.765591][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.275958][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.297741][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.397204][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.442685][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.697834][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.385737][ T8187] device hsr_slave_0 entered promiscuous mode [ 635.423156][ T8187] device hsr_slave_1 entered promiscuous mode [ 635.470133][ T8187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.504762][ T8187] Cannot create hsr debugfs directory [ 638.294868][ T3678] Bluetooth: hci5: command 0x0409 tx timeout [ 638.972769][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 642.125570][ T2988] Bluetooth: hci5: command 0x041b tx timeout [ 642.656034][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 643.481409][ T3814] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 643.734770][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 644.241647][ T8303] chnl_net:caif_netlink_parms(): no params data found [ 644.410524][ T3620] Bluetooth: hci5: command 0x040f tx timeout [ 645.852587][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 646.176491][ T3620] Bluetooth: hci4: command 0x0409 tx timeout [ 646.484631][ T3620] Bluetooth: hci5: command 0x0419 tx timeout [ 646.510667][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.518955][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.529618][ T8303] device bridge_slave_0 entered promiscuous mode [ 647.456268][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.465842][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.476943][ T8303] device bridge_slave_1 entered promiscuous mode [ 648.074971][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 648.450305][ T3620] Bluetooth: hci4: command 0x041b tx timeout [ 648.544895][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 648.591244][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.891699][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.921823][ T3620] Bluetooth: hci4: command 0x040f tx timeout [ 651.994196][ T8303] team0: Port device team_slave_0 added [ 652.184901][ T8303] team0: Port device team_slave_1 added [ 652.190921][ T8419] netlink: 'syz.4.1208': attribute type 4 has an invalid length. [ 652.976010][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.012907][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.033065][ T8353] device bridge_slave_0 entered promiscuous mode [ 653.035916][ T3620] Bluetooth: hci4: command 0x0419 tx timeout [ 653.122345][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.180412][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.203960][ T8353] device bridge_slave_1 entered promiscuous mode [ 653.239533][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.248977][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.306394][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.386433][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 653.408051][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.491926][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 653.662958][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.168677][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.192699][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.427035][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.740527][ T8353] team0: Port device team_slave_0 added [ 656.893631][ T8353] team0: Port device team_slave_1 added [ 658.011063][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 658.874994][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.881963][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.979930][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.034635][ T8303] device hsr_slave_0 entered promiscuous mode [ 659.054604][ T8303] device hsr_slave_1 entered promiscuous mode [ 659.080978][ T8303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.088954][ T8303] Cannot create hsr debugfs directory [ 659.318796][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.332266][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.368660][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.437022][ T8353] device hsr_slave_0 entered promiscuous mode [ 660.463270][ T8353] device hsr_slave_1 entered promiscuous mode [ 660.483339][ T8353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.490925][ T8353] Cannot create hsr debugfs directory [ 660.954927][ T8187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 660.989443][ T8187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 661.105453][ T8187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 661.250527][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 662.031666][ T8187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 662.313158][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 663.166267][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.269122][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 663.287699][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 663.326967][ T8187] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.395195][ T8353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.083331][ T8303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 664.105410][ T8303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 664.114750][ T8303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 664.124431][ T8303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 664.223782][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 664.253764][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 664.331335][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.338462][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.346459][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 664.442184][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 666.605525][ T8353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.663376][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.672162][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.722178][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.729355][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.849082][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.868631][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.889719][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.150049][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.182346][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.243911][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.439681][ T8353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.624893][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.633708][ T8526] netlink: 'syz.3.1227': attribute type 4 has an invalid length. [ 667.747452][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 668.604097][ T8353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.637409][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 668.663636][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 668.679512][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 668.696055][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.440611][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.486271][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 669.669378][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.710224][ T8303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 669.721778][ T8303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.917576][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 670.743072][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 670.751021][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 670.785703][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 670.833658][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 670.903308][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.910461][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.979755][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 671.064237][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 671.202413][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 671.313798][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.321217][ T3723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.695002][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 671.734810][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 671.795370][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 671.844696][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 671.874088][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 671.916611][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 671.937895][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.959926][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.970256][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.983063][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.991613][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 672.000924][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 672.009353][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 672.557058][ T4358] device hsr_slave_0 left promiscuous mode [ 672.738780][ T4358] device hsr_slave_1 left promiscuous mode [ 672.754390][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.803837][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.822231][ T4358] device bridge_slave_1 left promiscuous mode [ 672.896644][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'. [ 673.127819][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.340419][ T4358] device bridge_slave_0 left promiscuous mode [ 673.507148][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.638093][ T4358] device hsr_slave_0 left promiscuous mode [ 673.649001][ T4358] device hsr_slave_1 left promiscuous mode [ 673.733435][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.743004][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.761777][ T4358] device bridge_slave_1 left promiscuous mode [ 673.778341][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.797352][ T4358] device bridge_slave_0 left promiscuous mode [ 673.834228][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.857520][ T4358] device hsr_slave_0 left promiscuous mode [ 673.873345][ T4358] device hsr_slave_1 left promiscuous mode [ 674.370638][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.457261][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.663365][ T4358] device bridge_slave_1 left promiscuous mode [ 674.675214][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.694452][ T4358] device bridge_slave_0 left promiscuous mode [ 674.700660][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.713855][ T4358] device hsr_slave_0 left promiscuous mode [ 674.720341][ T4358] device hsr_slave_1 left promiscuous mode [ 674.731837][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.740106][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.748366][ T4358] device bridge_slave_1 left promiscuous mode [ 674.757600][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.766732][ T4358] device bridge_slave_0 left promiscuous mode [ 674.773567][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.103866][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 676.016956][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 676.052275][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 676.065983][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.080616][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.868055][ T4358] bond0 (unregistering): Released all slaves [ 677.122212][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 677.139051][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 677.195127][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.308717][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.903932][ T4358] bond0 (unregistering): Released all slaves [ 678.017519][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 678.032034][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 678.050579][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.067573][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.130408][ T4358] bond0 (unregistering): Released all slaves [ 678.256896][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 678.271422][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 678.283811][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.300102][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.366336][ T4358] bond0 (unregistering): Released all slaves [ 678.542645][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 678.550284][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 678.593630][ T8353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 678.845733][ T8353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 680.648463][ T8353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 680.770504][ T8353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 680.782730][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 680.790318][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.058142][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.121883][ T8303] device veth0_vlan entered promiscuous mode [ 683.340836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 683.350933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 683.360520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 683.369069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 683.388589][ T8303] device veth1_vlan entered promiscuous mode [ 683.404775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 683.416115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 683.475777][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 684.243559][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.289824][ T8303] device veth0_macvtap entered promiscuous mode [ 684.421747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 685.606013][ T2988] Bluetooth: hci1: command 0x0409 tx timeout [ 685.617661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.642294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 685.668216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.693532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 686.114975][ T8353] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.805584][ T8303] device veth1_macvtap entered promiscuous mode [ 686.909767][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 686.938023][ T8689] netlink: 'syz.3.1252': attribute type 4 has an invalid length. [ 686.973522][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 686.983152][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 686.991642][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.998760][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.343568][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 687.415342][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 688.418791][ T8468] Bluetooth: hci1: command 0x041b tx timeout [ 688.487125][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.647906][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.667500][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.674631][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.682376][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 688.691333][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 688.887220][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.903302][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.413246][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.464678][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.492649][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.503162][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.514769][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.600374][ T8468] Bluetooth: hci1: command 0x040f tx timeout [ 691.064629][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 692.067336][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.083163][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.576286][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 692.593513][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 692.604361][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 692.620292][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 692.630741][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 692.640138][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 692.649194][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 692.662441][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 692.682698][ T8468] Bluetooth: hci1: command 0x0419 tx timeout [ 692.882312][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 692.972317][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 693.182668][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 693.368676][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 693.484126][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.491214][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.686659][ T8657] device bridge_slave_0 entered promiscuous mode [ 693.714159][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.061376][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.227195][ T8657] device bridge_slave_1 entered promiscuous mode [ 695.485489][ T8761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1266'. [ 695.505321][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.523898][ T8761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1266'. [ 695.544552][ T8761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1266'. [ 695.581404][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 695.589696][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 695.731589][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.879699][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.738262][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 697.044627][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 697.064024][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 697.943290][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 698.449120][ T8353] device veth0_vlan entered promiscuous mode [ 698.952086][ T8468] Bluetooth: hci3: command 0x0409 tx timeout [ 699.156659][ T8657] team0: Port device team_slave_0 added [ 699.195703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 699.213441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 699.247264][ T8353] device veth1_vlan entered promiscuous mode [ 699.293684][ T8657] team0: Port device team_slave_1 added [ 700.927086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 700.936996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 701.250519][ T8469] Bluetooth: hci3: command 0x041b tx timeout [ 702.122899][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 703.515385][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 703.584133][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.591105][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.733276][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.849463][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.869968][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.243925][ T8466] Bluetooth: hci3: command 0x040f tx timeout [ 706.417087][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.563528][ T8657] device hsr_slave_0 entered promiscuous mode [ 707.735645][ T8657] device hsr_slave_1 entered promiscuous mode [ 708.223142][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 709.033403][ T8466] Bluetooth: hci3: command 0x0419 tx timeout [ 709.046455][ T8466] Bluetooth: hci5: command 0x0409 tx timeout [ 709.360213][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 710.187923][ T8828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1282'. [ 710.350146][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.358030][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.371328][ T8752] device bridge_slave_0 entered promiscuous mode [ 710.400024][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.407541][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.476282][ T8466] Bluetooth: hci5: command 0x041b tx timeout [ 711.771264][ T8752] device bridge_slave_1 entered promiscuous mode [ 711.990874][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 712.212670][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.235475][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.753529][ T8466] Bluetooth: hci5: command 0x040f tx timeout [ 714.136276][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 714.422278][ T8752] team0: Port device team_slave_0 added [ 714.979621][ T8805] chnl_net:caif_netlink_parms(): no params data found [ 715.001035][ T8752] team0: Port device team_slave_1 added [ 715.959140][ T8466] Bluetooth: hci5: command 0x0419 tx timeout [ 716.156739][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.175500][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.221207][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.511494][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.518689][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.577648][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.780391][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 716.870464][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.936775][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.993970][ T8805] device bridge_slave_0 entered promiscuous mode [ 717.024912][ T8752] device hsr_slave_0 entered promiscuous mode [ 717.032061][ T8752] device hsr_slave_1 entered promiscuous mode [ 717.142918][ T8752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.150733][ T8752] Cannot create hsr debugfs directory [ 717.225805][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.242717][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.250937][ T8805] device bridge_slave_1 entered promiscuous mode [ 718.059308][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.084537][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.147793][ T8657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 718.593480][ T8657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 718.611860][ T8657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 718.749293][ T8805] team0: Port device team_slave_0 added [ 718.767560][ T8657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 718.805689][ T8805] team0: Port device team_slave_1 added [ 719.054381][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.081852][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.131221][ T8805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.161422][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.172614][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.383242][ T8805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.080039][ T8805] device hsr_slave_0 entered promiscuous mode [ 720.112796][ T8805] device hsr_slave_1 entered promiscuous mode [ 720.132590][ T8805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.140181][ T8805] Cannot create hsr debugfs directory [ 722.563026][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.691097][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.699786][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.444846][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.534316][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 724.620575][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 724.634386][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 724.673604][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.680696][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.709176][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 724.729882][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.739768][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.746914][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.806338][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 724.815943][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 724.832803][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 724.842017][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 724.922747][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 725.242076][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 725.582789][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 725.851521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 725.942135][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 726.068810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 726.654286][ T8752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 726.704902][ T8752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 726.772826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 726.781357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 726.830234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 726.853604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 726.937568][ T8657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 726.956258][ T8752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 727.010445][ T8752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 728.994263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 729.001799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 729.193588][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.244683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 729.322609][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'. [ 729.497123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 730.114489][ T8657] device veth0_vlan entered promiscuous mode [ 730.213493][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.308337][ T8805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 730.333449][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 730.347707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 730.363230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 730.383837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 730.417394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 730.787167][ T8657] device veth1_vlan entered promiscuous mode [ 731.244489][ T8805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 731.288561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 731.299203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 731.372981][ T8805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 731.389955][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.419311][ T8657] device veth0_macvtap entered promiscuous mode [ 731.446856][ T8805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 731.480655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 731.491308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 731.631513][ T8657] device veth1_macvtap entered promiscuous mode [ 731.696747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 731.795702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 731.884238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 731.999420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 732.194623][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.201743][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.386154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 732.396939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 732.417231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 732.436198][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.443369][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.480304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 732.499689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 732.568997][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 732.584336][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 732.618699][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 732.640506][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 732.662010][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.684104][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.702233][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.731944][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.764515][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.775136][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.785671][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.796371][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.807912][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.819280][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.830203][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.840627][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.852731][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.868773][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.899473][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 733.008038][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.026547][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.070072][ T8657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.080443][ T8657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.092480][ T8657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.104253][ T8657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.410417][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 733.419428][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 733.429051][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 733.439699][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 733.503672][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 733.574699][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 733.599293][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 733.627331][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.647314][ T8752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.655054][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.707788][ T8752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 733.752404][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 733.773404][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 733.793232][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 733.849553][ T3723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.903117][ T3723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.945091][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.973798][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 734.108745][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 734.127563][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 734.161536][ T8805] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.219738][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 734.231966][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 734.249117][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.256286][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.283734][ T9029] syz.3.1330[9029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 735.283837][ T9029] syz.3.1330[9029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 735.306150][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 735.387766][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 735.415108][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 735.437299][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.444520][ T3723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.453512][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 735.463337][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 735.494542][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 735.537792][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 735.565288][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 735.597152][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 735.683252][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 735.717128][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 735.738458][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 735.805912][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.827234][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 735.841288][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 735.892382][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 735.913382][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 735.935327][ T8805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 736.066953][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 736.095290][ T8013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 736.218074][ T8752] device veth0_vlan entered promiscuous mode [ 736.315055][ T9059] syz.2.1341[9059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 736.315148][ T9059] syz.2.1341[9059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 736.327935][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 736.359203][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 736.456953][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 736.468411][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 736.479587][ T8752] device veth1_vlan entered promiscuous mode [ 736.585768][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.613130][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 736.628534][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 736.686196][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 736.733970][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 736.833242][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 736.857791][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 736.876293][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 736.906412][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 736.957835][ T8752] device veth0_macvtap entered promiscuous mode [ 737.016501][ T8805] device veth0_vlan entered promiscuous mode [ 737.038384][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 737.051940][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 737.069618][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 737.114375][ T9089] device wg2 entered promiscuous mode [ 737.185355][ T8752] device veth1_macvtap entered promiscuous mode [ 737.240776][ C1] ------------[ cut here ]------------ [ 737.246691][ C1] WARNING: CPU: 1 PID: 4260 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 737.256201][ C1] Modules linked in: [ 737.260122][ C1] CPU: 1 PID: 4260 Comm: kworker/u4:12 Not tainted 5.15.167-syzkaller #0 [ 737.268624][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 737.278733][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 737.286614][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 737.292814][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 eb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 737.312490][ C1] RSP: 0018:ffffc90000dd0608 EFLAGS: 00010246 [ 737.318603][ C1] RAX: ffffffff81aa939c RBX: 0000000000000000 RCX: ffff8880241d1dc0 [ 737.326640][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 737.334652][ C1] RBP: dffffc0000000000 R08: ffffffff81aa92ad R09: fffffbfff20e2419 [ 737.342687][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 737.350681][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd0668 [ 737.358719][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 737.367701][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.374326][ C1] CR2: 0000000000000000 CR3: 0000000076a30000 CR4: 00000000003506e0 [ 737.382314][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 737.390320][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 737.398324][ C1] Call Trace: [ 737.401614][ C1] [ 737.404479][ C1] ? __warn+0x15b/0x300 [ 737.408657][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 737.414350][ C1] ? report_bug+0x1b7/0x2e0 [ 737.418894][ C1] ? handle_bug+0x3d/0x70 [ 737.423264][ C1] ? exc_invalid_op+0x16/0x40 [ 737.427963][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 737.433051][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 737.438541][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 737.444196][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 737.449772][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 737.455371][ C1] bpf_probe_read_user+0x26/0x70 [ 737.460334][ C1] ? bpf_trace_run2+0x19e/0x340 [ 737.465252][ C1] ? bpf_trace_run1+0x2f0/0x2f0 [ 737.470127][ C1] ? skb_release_data+0x73a/0x8a0 [ 737.475215][ C1] ? skb_release_data+0x73a/0x8a0 [ 737.480275][ C1] ? __bpf_trace_kfree+0x6e/0x90 [ 737.485283][ C1] ? skb_release_data+0x73a/0x8a0 [ 737.490345][ C1] ? kfree+0x22f/0x270 [ 737.494470][ C1] ? skb_release_data+0x73a/0x8a0 [ 737.499612][ C1] ? rcu_is_watching+0x11/0xa0 [ 737.504502][ C1] ? kfree_skb_reason+0xb3/0x170 [ 737.509459][ C1] ? __netif_receive_skb_core+0x3881/0x3df0 [ 737.515401][ C1] ? set_rps_cpu+0x670/0x670 [ 737.519996][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 737.525083][ C1] ? __netif_receive_skb+0x11c/0x530 [ 737.530392][ C1] ? read_lock_is_recursive+0x10/0x10 [ 737.535820][ C1] ? deliver_ptype_list_skb+0x3a0/0x3a0 [ 737.541391][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 737.547421][ C1] ? print_irqtrace_events+0x210/0x210 [ 737.552946][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 737.558251][ C1] ? process_backlog+0x363/0x7f0 [ 737.563251][ C1] ? rps_trigger_softirq+0x230/0x230 [ 737.568555][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 737.574573][ C1] ? print_irqtrace_events+0x210/0x210 [ 737.580058][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 737.585123][ C1] ? __napi_poll+0xc7/0x440 [ 737.589643][ C1] ? net_rx_action+0x617/0xda0 [ 737.594446][ C1] ? net_tx_action+0x8e0/0x8e0 [ 737.599232][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 737.605343][ C1] ? handle_softirqs+0x3a7/0x930 [ 737.610292][ C1] ? do_softirq+0x162/0x240 [ 737.614823][ C1] ? do_softirq+0x240/0x240 [ 737.619339][ C1] ? do_softirq+0x162/0x240 [ 737.623889][ C1] [ 737.626823][ C1] [ 737.629745][ C1] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 737.635136][ C1] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 737.641128][ C1] ? __local_bh_enable_ip+0x102/0x1f0 [ 737.646536][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 737.651840][ C1] ? __local_bh_enable_ip+0x1b1/0x1f0 [ 737.657356][ C1] ? local_bh_enable+0x5/0x20 [ 737.662046][ C1] ? _local_bh_enable+0xa0/0xa0 [ 737.666943][ C1] ? __dev_queue_xmit+0x1c56/0x3230 [ 737.672158][ C1] ? dev_queue_xmit+0x20/0x20 [ 737.676898][ C1] ? pskb_expand_head+0xb9a/0x1130 [ 737.682026][ C1] ? skb_push+0x93/0x100 [ 737.686312][ C1] ? batadv_nc_skb_store_for_decoding+0x41a/0x650 [ 737.692756][ C1] ? batadv_send_skb_packet+0x3ae/0x5f0 [ 737.698302][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x66f/0x800 [ 737.705557][ C1] ? process_one_work+0x8a1/0x10c0 [ 737.710689][ C1] ? worker_detach_from_pool+0x260/0x260 [ 737.716357][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 737.721937][ C1] ? kthread_data+0x4e/0xc0 [ 737.726473][ C1] ? wq_worker_running+0x97/0x170 [ 737.731515][ C1] ? worker_thread+0xaca/0x1280 [ 737.736405][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 737.742324][ C1] ? kthread+0x3f6/0x4f0 [ 737.746630][ C1] ? rcu_lock_release+0x20/0x20 [ 737.751504][ C1] ? kthread_blkcg+0xd0/0xd0 [ 737.756133][ C1] ? ret_from_fork+0x1f/0x30 [ 737.760736][ C1] [ 737.763796][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 737.771096][ C1] CPU: 1 PID: 4260 Comm: kworker/u4:12 Not tainted 5.15.167-syzkaller #0 [ 737.779580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 737.789624][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 737.797425][ C1] Call Trace: [ 737.800697][ C1] [ 737.803527][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 737.808219][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 737.813926][ C1] ? panic+0x860/0x860 [ 737.817995][ C1] ? copy_from_user_nofault+0xc0/0x1c0 [ 737.823545][ C1] ? copy_from_user_nofault+0xc0/0x1c0 [ 737.829012][ C1] panic+0x318/0x860 [ 737.832903][ C1] ? __warn+0x16a/0x300 [ 737.837044][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 737.842236][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 737.847774][ C1] __warn+0x2b2/0x300 [ 737.851754][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 737.857292][ C1] report_bug+0x1b7/0x2e0 [ 737.861620][ C1] handle_bug+0x3d/0x70 [ 737.865766][ C1] exc_invalid_op+0x16/0x40 [ 737.870262][ C1] asm_exc_invalid_op+0x16/0x20 [ 737.875133][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 737.881282][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 eb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 737.900886][ C1] RSP: 0018:ffffc90000dd0608 EFLAGS: 00010246 [ 737.907159][ C1] RAX: ffffffff81aa939c RBX: 0000000000000000 RCX: ffff8880241d1dc0 [ 737.915221][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 737.923219][ C1] RBP: dffffc0000000000 R08: ffffffff81aa92ad R09: fffffbfff20e2419 [ 737.931177][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 737.939140][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd0668 [ 737.947113][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 737.952655][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 737.958213][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 737.963762][ C1] bpf_probe_read_user+0x26/0x70 [ 737.968693][ C1] ? bpf_trace_run2+0x19e/0x340 [ 737.973532][ C1] ? bpf_trace_run1+0x2f0/0x2f0 [ 737.978372][ C1] ? skb_release_data+0x73a/0x8a0 [ 737.983384][ C1] ? skb_release_data+0x73a/0x8a0 [ 737.988413][ C1] ? __bpf_trace_kfree+0x6e/0x90 [ 737.993339][ C1] ? skb_release_data+0x73a/0x8a0 [ 737.998370][ C1] ? kfree+0x22f/0x270 [ 738.002439][ C1] ? skb_release_data+0x73a/0x8a0 [ 738.007457][ C1] ? rcu_is_watching+0x11/0xa0 [ 738.012214][ C1] ? kfree_skb_reason+0xb3/0x170 [ 738.017150][ C1] ? __netif_receive_skb_core+0x3881/0x3df0 [ 738.023040][ C1] ? set_rps_cpu+0x670/0x670 [ 738.027614][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 738.032646][ C1] ? __netif_receive_skb+0x11c/0x530 [ 738.037936][ C1] ? read_lock_is_recursive+0x10/0x10 [ 738.043314][ C1] ? deliver_ptype_list_skb+0x3a0/0x3a0 [ 738.048872][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 738.054846][ C1] ? print_irqtrace_events+0x210/0x210 [ 738.060309][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 738.065505][ C1] ? process_backlog+0x363/0x7f0 [ 738.070440][ C1] ? rps_trigger_softirq+0x230/0x230 [ 738.075746][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 738.081719][ C1] ? print_irqtrace_events+0x210/0x210 [ 738.087191][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 738.092211][ C1] ? __napi_poll+0xc7/0x440 [ 738.096817][ C1] ? net_rx_action+0x617/0xda0 [ 738.101579][ C1] ? net_tx_action+0x8e0/0x8e0 [ 738.106338][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 738.112318][ C1] ? handle_softirqs+0x3a7/0x930 [ 738.117252][ C1] ? do_softirq+0x162/0x240 [ 738.121860][ C1] ? do_softirq+0x240/0x240 [ 738.126353][ C1] ? do_softirq+0x162/0x240 [ 738.130882][ C1] [ 738.133802][ C1] [ 738.136726][ C1] ? __local_bh_enable_ip+0x1f0/0x1f0 [ 738.142083][ C1] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 738.148049][ C1] ? __local_bh_enable_ip+0x102/0x1f0 [ 738.153418][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 738.158713][ C1] ? __local_bh_enable_ip+0x1b1/0x1f0 [ 738.164077][ C1] ? local_bh_enable+0x5/0x20 [ 738.168748][ C1] ? _local_bh_enable+0xa0/0xa0 [ 738.173588][ C1] ? __dev_queue_xmit+0x1c56/0x3230 [ 738.178781][ C1] ? dev_queue_xmit+0x20/0x20 [ 738.183467][ C1] ? pskb_expand_head+0xb9a/0x1130 [ 738.188576][ C1] ? skb_push+0x93/0x100 [ 738.193615][ C1] ? batadv_nc_skb_store_for_decoding+0x41a/0x650 [ 738.200048][ C1] ? batadv_send_skb_packet+0x3ae/0x5f0 [ 738.205588][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x66f/0x800 [ 738.212781][ C1] ? process_one_work+0x8a1/0x10c0 [ 738.217884][ C1] ? worker_detach_from_pool+0x260/0x260 [ 738.223509][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 738.229042][ C1] ? kthread_data+0x4e/0xc0 [ 738.233530][ C1] ? wq_worker_running+0x97/0x170 [ 738.238543][ C1] ? worker_thread+0xaca/0x1280 [ 738.243380][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 738.249279][ C1] ? kthread+0x3f6/0x4f0 [ 738.253504][ C1] ? rcu_lock_release+0x20/0x20 [ 738.258342][ C1] ? kthread_blkcg+0xd0/0xd0 [ 738.262926][ C1] ? ret_from_fork+0x1f/0x30 [ 738.267531][ C1] [ 738.273783][ C1] Kernel Offset: disabled [ 738.278324][ C1] Rebooting in 86400 seconds..