last executing test programs: 1m40.998602942s ago: executing program 4 (id=98): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000001780)="0bcdf5", 0x3}], 0x1, 0x20000002, 0x100000) 1m38.043300317s ago: executing program 2 (id=107): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) pwritev2(r5, 0x0, 0x0, 0xdf, 0x7, 0x1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1m36.734690918s ago: executing program 2 (id=113): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 1m36.516385661s ago: executing program 2 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) finit_module(r2, &(0x7f0000000080)='GPL\x00', 0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r3, 0x0) 1m36.270086315s ago: executing program 2 (id=117): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r1 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./file0\x00', 0x20, &(0x7f0000001140)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB="4315cc13ac94e9c3f0e2a8fafa5c9e4056273145be0c4331799b7e8df2ae24e73ba617968a52ecc15024f5995d84c2fde4920b700c711be5c87dcf179ee64e91619613a7f80dc5732438031843cf24457cbf5c844745d13eaa9248fba73776f8284069ffa18933269237037b352c1e236db691ab072d0fce5a9c7e6d9bb27ff13028d9d36f68d92a0a313b6d635419baeaebd57a394952846ccda1a950f90995fe13c4e506a4241a4ebb201ab59e3f9c86e074e13cef696364b07e94eaf2912bb4abfe", @ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="c0dd326b825326b4ead2e2c4133006cadd65190444b37dc11727acecbeb870445fb008be08a9a03546f0274146164ceae57313603528e464e93c959cb3455beecde1077dc9c4e05748d800479c46041dfb246401b58b4a80ed7d5c10630a6fff5177c188d6c3c5bd8952dc1e37abd7683208f58ec53b66fa7ac8f54fd65739ebc634da17da39e8b0ca4ada", @ANYBLOB="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", @ANYRESOCT=r1, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$eJzsVb/uEkEQ/uZu4UAtqG0lQqPA2fgG8gA+gAROJB7+4S5RCMVpQ2NhfAkSn8LCRHsLY0xssNBECyxJDGZ359YlasDkyO/3S/ZLyHzzzc7sDpedvZM8TAIAP9fzPmpQIFzARyIIAA3S2qas7Q+2W8YXof0O6y/ZfmabTGfvnmk6u9uL42iSTPcQImDfmh1y0KLDydunuwqhqMpFk9TX/+yfoec7SvC3NZyLE++iOOL/s52vRe9VwrHbAYxCB2R9eKE/52n5Fkci3n9lJeDxldx44uG7ct6v531JbvEUk9pA//IrodZI57W15qIAMoB8bE0doaYl0ADQSscPWsl0dmU07g2jYXQvDJG135znKxq1W7dHcdQm6xieJAIG8p5WrXgJwKff8QwWyDqaxDmA7Fw5f/Ph3LxkJVYBz8q1a+i6r0yNgDX5V9zEZVQAPMpkOGS1DllNQLXWBcFnpyOscwIbeKiowNX+/XiwAIHytCWEqdFZoSQdyoAoZEdFrl037S/Y1tl22S7Zrtjmb1f+JglV4Rt7zQwo43EvTSfq8dLMaKHRwprZ2eNd89eQ8pMEcHBwcHBwcHA4I/gVAAD//7B1VIM=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1m35.612501285s ago: executing program 2 (id=121): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) creat(0x0, 0x0) unshare(0x20400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x1, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") pipe2$9p(&(0x7f0000000100), 0x80000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x40008) 1m34.242623906s ago: executing program 2 (id=125): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x407, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 1m34.060027459s ago: executing program 32 (id=125): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x407, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 1m21.736953199s ago: executing program 4 (id=98): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000001780)="0bcdf5", 0x3}], 0x1, 0x20000002, 0x100000) 1m6.488116434s ago: executing program 4 (id=98): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000001780)="0bcdf5", 0x3}], 0x1, 0x20000002, 0x100000) 50.425135502s ago: executing program 4 (id=98): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000001780)="0bcdf5", 0x3}], 0x1, 0x20000002, 0x100000) 32.002631207s ago: executing program 4 (id=98): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000001780)="0bcdf5", 0x3}], 0x1, 0x20000002, 0x100000) 15.645989569s ago: executing program 4 (id=98): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000001780)="0bcdf5", 0x3}], 0x1, 0x20000002, 0x100000) 7.824067099s ago: executing program 1 (id=480): socket$kcm(0xa, 0x922000000003, 0x11) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 7.686055221s ago: executing program 1 (id=482): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000005c0)={r4, 0x11, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.18362793s ago: executing program 5 (id=485): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x8900003) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socket(0x10, 0x3, 0x0) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$eventfd(r1, &(0x7f0000000000), 0x8) 7.002885202s ago: executing program 1 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) setfsuid(0x0) 6.291333034s ago: executing program 5 (id=491): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000c80), 0x0, 0x0, 0x0}) pipe(0x0) syz_open_procfs$namespace(0x0, 0x0) socket(0x10, 0x3, 0x0) userfaultfd(0x80800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setfsuid(0x0) 5.685380752s ago: executing program 1 (id=493): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="60100000010501"], 0x1060}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x40000000000, 0xffffffffffffffff}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 4.505419531s ago: executing program 5 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 3.22863843s ago: executing program 3 (id=498): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x15}, {0x0, 0x8}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 3.000854724s ago: executing program 0 (id=500): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000002100)=ANY=[], 0x0) 2.970690944s ago: executing program 5 (id=501): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x80}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2f2}]}, &(0x7f0000000280)=0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000300)={0x2, {{0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd43}}, {{0xa, 0x4e20, 0x2, @mcast2, 0x6}}}, 0x108) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x7, @empty, 0x1}}, 0x6, 0x2}, &(0x7f00000002c0)=0x90) 2.917364595s ago: executing program 1 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) 2.698416079s ago: executing program 3 (id=503): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) shutdown(r1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.656332869s ago: executing program 1 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000080) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.62044908s ago: executing program 3 (id=505): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) getuid() syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x0, 0xf, 0x41, "1ed1df73476e504e82c2116a729d135822ba4e079bfc863d8d213739391057caffac0c9a751779c25f772e661d88c2664390c81867cd7477c7ed9416c0ed664b42"}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x80784081590c34a3}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 2.562380111s ago: executing program 0 (id=506): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680), 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f4b", 0xa7}], 0x1}}], 0x2, 0x4008) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) 2.562006021s ago: executing program 5 (id=507): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xe0ff, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 2.319615994s ago: executing program 0 (id=508): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x8000000, 0x0, 0x2, 0x9, 0x4}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) 1.542433727s ago: executing program 3 (id=509): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 1.446491248s ago: executing program 5 (id=510): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCGIDLE(r3, 0x8010743f, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x1405, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 1.278312s ago: executing program 0 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x5c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfe61, 0x0, 0x0, 0x20}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x200041, 0x8) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140dffffffff0000000038000000000000000000000007"], 0x58}, 0x0) 310.870685ms ago: executing program 3 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r2, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x40, 0x3, 0x4, '\x00', 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 214.547867ms ago: executing program 0 (id=513): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r5, r2, 0x0, 0x9) 64.717489ms ago: executing program 3 (id=514): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r3 = syz_open_dev$loop(0x0, 0x47ffff9, 0x122c43) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, 0x0) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x2, 0x6}, 0x10) 0s ago: executing program 0 (id=515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) kernel console output (not intermixed with test programs): : error, failed to bmap (inode : ffff88805e7c94e0 iblock : 0, err : -5) [ 78.324596][ T4378] exFAT-fs (loop0): Filesystem has been set read-only [ 78.687894][ T4391] capability: warning: `syz.3.36' uses deprecated v2 capabilities in a way that may be insecure [ 78.781125][ T4393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 78.845730][ T4393] HTB: quantum of class 8001000A is small. Consider r2q change. [ 79.304500][ T4409] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 79.590168][ T4418] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.601258][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.676291][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.697624][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.710676][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.784059][ T4424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.48'. [ 80.144222][ T4435] device sit0 entered promiscuous mode [ 80.220165][ T4260] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.517469][ T4260] usb 5-1: Using ep0 maxpacket: 16 [ 80.533978][ T4444] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 80.650382][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 80.675361][ T4444] device veth0_vlan left promiscuous mode [ 80.739221][ T4444] device veth0_vlan entered promiscuous mode [ 80.805480][ T4444] team0: Device veth0_vlan failed to register rx_handler [ 80.872202][ T4260] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 80.914369][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.962789][ T4260] usb 5-1: Product: syz [ 80.978631][ T4260] usb 5-1: Manufacturer: syz [ 80.997798][ T4260] usb 5-1: SerialNumber: syz [ 81.032821][ T4260] usb 5-1: config 0 descriptor?? [ 81.087675][ T4260] hub 5-1:0.0: bad descriptor, ignoring hub [ 81.107294][ T4260] hub: probe of 5-1:0.0 failed with error -5 [ 81.164194][ T4260] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 81.227545][ T4451] overlayfs: failed to clone upperpath [ 81.456259][ T4456] loop4: detected capacity change from 0 to 4096 [ 81.472421][ T7] cfg80211: failed to load regulatory.db [ 81.848436][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 81.876121][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 81.885482][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!! [ 82.201935][ T4429] usb 5-1: USB disconnect, device number 2 [ 82.925773][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.101686][ T4479] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 83.395226][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 83.425814][ T4487] HTB: quantum of class 80020010 is big. Consider r2q change. [ 83.536544][ T4489] input: syz1 as /devices/virtual/input/input6 [ 83.568509][ T4474] loop1: detected capacity change from 0 to 32768 [ 83.595141][ T4481] loop4: detected capacity change from 0 to 32768 [ 83.662252][ T4481] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.66 (4481) [ 83.730896][ T4481] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 83.745644][ T4481] BTRFS info (device loop4): using free space tree [ 83.752921][ T4481] BTRFS info (device loop4): has skinny extents [ 83.917975][ T4481] BTRFS info (device loop4): enabling ssd optimizations [ 84.104593][ T4515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.72'. [ 86.311104][ T4562] device veth0 entered promiscuous mode [ 86.339321][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 86.477047][ T4565] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 86.568476][ T4565] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.620610][ T4565] bond0: (slave team0): Enslaving as an active interface with an up link [ 86.844362][ T4566] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.928430][ T4571] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.952165][ T4566] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.261392][ T4579] netlink: 'syz.2.93': attribute type 12 has an invalid length. [ 87.269075][ T4579] netlink: 'syz.2.93': attribute type 29 has an invalid length. [ 87.380305][ T4579] netlink: 'syz.2.93': attribute type 2 has an invalid length. [ 87.399316][ T4579] netlink: 'syz.2.93': attribute type 2 has an invalid length. [ 87.407263][ T4579] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 87.442967][ T4579] netlink: 'syz.2.93': attribute type 37 has an invalid length. [ 87.462871][ T4579] netlink: 'syz.2.93': attribute type 2 has an invalid length. [ 87.505331][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.069247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 90.192240][ T4592] chnl_net:caif_netlink_parms(): no params data found [ 90.421922][ T4239] Bluetooth: hci1: command 0x0409 tx timeout [ 90.474562][ T4622] netlink: 'syz.3.106': attribute type 10 has an invalid length. [ 90.523293][ T4622] netlink: 40 bytes leftover after parsing attributes in process `syz.3.106'. [ 90.647358][ T4622] team0: Port device geneve0 added [ 90.741910][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.787285][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.817526][ T4592] device bridge_slave_0 entered promiscuous mode [ 90.902873][ T4592] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.922305][ T4592] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.936968][ T4592] device bridge_slave_1 entered promiscuous mode [ 90.954406][ T4629] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 91.087006][ T4629] device veth0_vlan left promiscuous mode [ 91.131283][ T4629] device veth0_vlan entered promiscuous mode [ 91.191738][ T4629] team0: Device veth0_vlan failed to register rx_handler [ 91.655681][ T4592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.705291][ T4592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.063000][ T4592] team0: Port device team_slave_0 added [ 92.084890][ T4592] team0: Port device team_slave_1 added [ 92.174482][ T4592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.195494][ T4592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.270326][ T4592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.306646][ T4592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.327525][ T4592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.423090][ T4651] loop0: detected capacity change from 0 to 512 [ 92.426795][ T4592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.496150][ T4651] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 92.506344][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 92.619513][ T4657] loop2: detected capacity change from 0 to 128 [ 92.658638][ T4657] EXT4-fs (loop2): Ignoring removed nobh option [ 92.662964][ T4592] device hsr_slave_0 entered promiscuous mode [ 92.682913][ T4651] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.114: iget: bogus i_mode (5) [ 92.709571][ T4651] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.114: couldn't read orphan inode 15 (err -117) [ 92.725382][ T4657] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 92.741549][ T4592] device hsr_slave_1 entered promiscuous mode [ 92.749188][ T4657] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.760390][ T4651] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 92.790068][ T4592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.795755][ T4651] ext2 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.833050][ T4592] Cannot create hsr debugfs directory [ 92.985175][ T4657] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:427: inode #2: comm syz.2.117: No space for directory leaf checksum. Please run e2fsck -D. [ 93.013997][ T4657] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.117: bg 0: bad block bitmap checksum [ 93.033827][ T4383] udevd[4383]: incorrect jbd checksum on /dev/loop2 [ 93.191601][ T4184] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /21/mnt: bad entry in directory: directory entry overrun - offset=1012, inode=3245822463, rec_len=54920, size=1024 fake=0 [ 93.289819][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /21/mnt/lost+found: directory fails checksum at offset 0 [ 93.291970][ T4592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.339680][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /21/mnt/lost+found: directory fails checksum at offset 1024 [ 93.419716][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 93.457056][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /21/mnt/lost+found: directory fails checksum at offset 0 [ 93.496474][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /21/mnt/lost+found: directory fails checksum at offset 1024 [ 93.519861][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 93.523665][ T4592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.553915][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /21/mnt/lost+found: directory fails checksum at offset 0 [ 93.590041][ T4184] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /21/mnt/lost+found: directory fails checksum at offset 1024 [ 93.666008][ T4592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.753300][ T4592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.357990][ T4592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.399437][ T4592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.475698][ T4592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.526481][ T4592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.580193][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 95.302773][ T858] device hsr_slave_0 left promiscuous mode [ 95.351036][ T858] device hsr_slave_1 left promiscuous mode [ 95.371898][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.379404][ T858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.411617][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.436101][ T858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.459436][ T858] device bridge_slave_1 left promiscuous mode [ 95.484635][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.543009][ T4704] process 'syz.0.136' launched './file1' with NULL argv: empty string added [ 95.548148][ T858] device bridge_slave_0 left promiscuous mode [ 95.596504][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.675749][ T858] device veth1_macvtap left promiscuous mode [ 95.698365][ T858] device veth0_macvtap left promiscuous mode [ 95.718166][ T858] device veth1_vlan left promiscuous mode [ 95.726292][ T858] device veth0_vlan left promiscuous mode [ 96.390822][ T858] team0 (unregistering): Port device team_slave_1 removed [ 96.412309][ T858] team0 (unregistering): Port device team_slave_0 removed [ 96.441685][ T858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.476302][ T858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.670184][ T4239] Bluetooth: hci1: command 0x0419 tx timeout [ 96.679788][ T858] bond0 (unregistering): Released all slaves [ 96.947910][ T4592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.070943][ T4592] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.083552][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.111448][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.161086][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.176000][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.189244][ T26] audit: type=1326 audit(1752180172.098:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b14f0929 code=0x7ffc0000 [ 97.197316][ T4713] loop0: detected capacity change from 0 to 512 [ 97.216716][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.225651][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.234630][ T26] audit: type=1326 audit(1752180172.098:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f95b14f0929 code=0x7ffc0000 [ 97.257834][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.285307][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.294269][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.301401][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.309631][ T26] audit: type=1326 audit(1752180172.108:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f95b14f0963 code=0x7ffc0000 [ 97.333911][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.344709][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.353176][ T26] audit: type=1326 audit(1752180172.108:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f95b14ef3df code=0x7ffc0000 [ 97.447355][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 97.483648][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.749878][ T26] audit: type=1326 audit(1752180172.108:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f95b14f09b7 code=0x7ffc0000 [ 97.814884][ T4713] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 97.870153][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.963295][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.159011][ T26] audit: type=1326 audit(1752180172.108:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95b14ef290 code=0x7ffc0000 [ 98.244423][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.258204][ T4713] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.333829][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.334930][ T26] audit: type=1326 audit(1752180172.108:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f95b14f052b code=0x7ffc0000 [ 98.364973][ T26] audit: type=1326 audit(1752180172.278:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f95b14ef58a code=0x7ffc0000 [ 98.387529][ T26] audit: type=1326 audit(1752180172.288:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f95b14ef58a code=0x7ffc0000 [ 98.390431][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.410037][ T26] audit: type=1326 audit(1752180172.288:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f95b14ef197 code=0x7ffc0000 [ 98.528022][ T4713] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.620539][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.662285][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.689814][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.710831][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.741439][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.750890][ T4713] EXT4-fs (loop0): 1 truncate cleaned up [ 98.804932][ T4713] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,nouid32,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,block_validity,,errors=continue. Quota mode: none. [ 99.037138][ T4699] chnl_net:caif_netlink_parms(): no params data found [ 99.205439][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.229062][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.290595][ T4592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.442244][ T4699] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.465865][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.499675][ T4699] device bridge_slave_0 entered promiscuous mode [ 99.542052][ T4699] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.570159][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.594578][ T4699] device bridge_slave_1 entered promiscuous mode [ 100.262587][ T4699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.340411][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 100.487906][ T4699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.847424][ T4699] team0: Port device team_slave_0 added [ 100.899317][ T4699] team0: Port device team_slave_1 added [ 100.954520][ T4759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.041917][ T4761] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 101.082163][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.089143][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.271851][ T4699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.316575][ T4765] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 101.335995][ T4765] EXT4-fs (loop1): unable to read superblock [ 101.353757][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.376934][ T4766] bond0: (slave team0): Releasing backup interface [ 102.182132][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.292247][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.312426][ T4766] device bridge_slave_0 left promiscuous mode [ 102.320085][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.354114][ T4766] device bridge_slave_1 left promiscuous mode [ 102.369565][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.393092][ T4766] bond0: (slave bond_slave_0): Releasing backup interface [ 102.482059][ T4766] bond0: (slave bond_slave_1): Releasing backup interface [ 102.560895][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 102.632148][ T4766] team0: Port device team_slave_0 removed [ 102.639812][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d09a800: rx timeout, send abort [ 102.676474][ T4766] team0: Port device team_slave_1 removed [ 102.691397][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.698851][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.708274][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.717567][ T4766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.755763][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.767428][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.815507][ T4699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.841981][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 102.907649][ T4296] bond0 speed is unknown, defaulting to 1000 [ 102.918053][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.943236][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.016283][ T4699] device hsr_slave_0 entered promiscuous mode [ 103.052647][ T4699] device hsr_slave_1 entered promiscuous mode [ 103.070020][ T4699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.077679][ T4699] Cannot create hsr debugfs directory [ 103.092974][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.110866][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.125296][ T4592] device veth0_vlan entered promiscuous mode [ 103.149414][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.167791][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.227391][ T4592] device veth1_vlan entered promiscuous mode [ 103.375894][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.394670][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.418274][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.437595][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.453723][ T4592] device veth0_macvtap entered promiscuous mode [ 103.475748][ T4592] device veth1_macvtap entered promiscuous mode [ 103.585460][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.641813][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.658089][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.669047][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.937037][ T4592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.978758][ T4699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.277790][ T4795] tipc: Started in network mode [ 104.283608][ T4795] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 104.293831][ T4795] tipc: Enabled bearer , priority 0 [ 104.304043][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.342740][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.386459][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.408341][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.420120][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.433546][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.444015][ T4592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.454703][ T4592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.466468][ T4592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.493098][ T858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.543556][ T4699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.555284][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.583776][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.603376][ T4592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.622717][ T4592] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.647230][ T4592] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.694904][ T4592] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.749815][ T4239] Bluetooth: hci0: command 0x0419 tx timeout [ 104.799573][ T4699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.007684][ T858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.337375][ T4699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.619915][ T4296] tipc: Node number set to 11578026 [ 105.677982][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.717751][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.768394][ T858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.799515][ T4815] loop0: detected capacity change from 0 to 256 [ 105.847448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.871856][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.892253][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.899936][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.943009][ T4824] netlink: 'syz.1.157': attribute type 10 has an invalid length. [ 105.995465][ T4824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.017831][ T4824] team0: Port device bond0 added [ 106.047618][ T858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.080688][ T4239] bond0 speed is unknown, defaulting to 1000 [ 106.087603][ T4232] bond0 speed is unknown, defaulting to 1000 [ 106.106407][ T4830] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 106.115043][ T4830] device syz_tun entered promiscuous mode [ 106.152015][ T4830] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 106.202735][ T4830] bridge0: port 3(vlan2) entered blocking state [ 106.209091][ T4830] bridge0: port 3(vlan2) entered disabled state [ 106.217552][ T4830] device vlan2 entered promiscuous mode [ 106.223626][ T4830] device bond0 entered promiscuous mode [ 106.229270][ T4830] device bond_slave_0 entered promiscuous mode [ 106.237515][ T4830] device bond_slave_1 entered promiscuous mode [ 106.245697][ T4830] bridge0: port 3(vlan2) entered blocking state [ 106.252052][ T4830] bridge0: port 3(vlan2) entered forwarding state [ 106.261108][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.283146][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.287187][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.307426][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.347320][ T4834] loop0: detected capacity change from 0 to 4096 [ 106.358041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.408061][ T4834] ntfs3: Unknown parameter 'windows_names' [ 106.545768][ T4699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.887982][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.907372][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.985474][ T4699] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.058160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.100418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.118260][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.125402][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.155954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.178038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.196962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.216530][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.223805][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.251592][ T4861] netlink: 'syz.1.165': attribute type 4 has an invalid length. [ 108.560615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.600634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.621051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.651310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.724397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.792053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.896548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.905796][ T144] Bluetooth: hci1: Frame reassembly failed (-84) [ 108.936965][ T144] Bluetooth: hci1: Frame reassembly failed (-84) [ 108.972379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.981906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.997417][ T4699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.063544][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.105556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.122042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.269791][ T4876] bond0 speed is unknown, defaulting to 1000 [ 109.723078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.741454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.797886][ T4699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.908919][ T4876] chnl_net:caif_netlink_parms(): no params data found [ 110.224859][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.253940][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.272583][ T4876] device bridge_slave_0 entered promiscuous mode [ 110.284931][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.292581][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.301270][ T4876] device bridge_slave_1 entered promiscuous mode [ 110.393296][ T4876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.442856][ T4876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.670753][ T4876] team0: Port device team_slave_0 added [ 110.698401][ T4876] team0: Port device team_slave_1 added [ 110.749229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.761572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.778723][ T858] device hsr_slave_0 left promiscuous mode [ 110.792778][ T858] device hsr_slave_1 left promiscuous mode [ 110.799486][ T858] device bridge_slave_1 left promiscuous mode [ 110.806604][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.816154][ T858] device bridge_slave_0 left promiscuous mode [ 110.825096][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.842598][ T858] device veth1_macvtap left promiscuous mode [ 110.848693][ T858] device veth0_macvtap left promiscuous mode [ 110.855367][ T858] device veth1_vlan left promiscuous mode [ 110.900258][ T4535] Bluetooth: hci0: command 0x0401 tx timeout [ 110.906324][ T4535] Bluetooth: hci1: command 0x1003 tx timeout [ 110.914254][ T4191] Bluetooth: hci1: sending frame failed (-49) [ 110.990347][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 111.076837][ T858] team0 (unregistering): Port device team_slave_1 removed [ 111.095817][ T858] team0 (unregistering): Port device team_slave_0 removed [ 111.111317][ T858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.128694][ T858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.206604][ T858] bond0 (unregistering): Released all slaves [ 111.280887][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.287868][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.314832][ T4876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.329757][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 111.538245][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.553658][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.594078][ T4876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.663645][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.688531][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.751549][ T4699] device veth0_vlan entered promiscuous mode [ 111.767193][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.776124][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.846675][ T4876] device hsr_slave_0 entered promiscuous mode [ 111.891190][ T4876] device hsr_slave_1 entered promiscuous mode [ 111.912872][ T4876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.934591][ T4876] Cannot create hsr debugfs directory [ 111.956812][ T4699] device veth1_vlan entered promiscuous mode [ 112.123288][ T4959] capability: warning: `syz.3.182' uses 32-bit capabilities (legacy support in use) [ 112.180978][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.204827][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.271042][ T4699] device veth0_macvtap entered promiscuous mode [ 112.349315][ T4699] device veth1_macvtap entered promiscuous mode [ 112.898026][ T4876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.130907][ T1108] Bluetooth: hci1: command 0x1001 tx timeout [ 113.255471][ T4535] Bluetooth: hci5: command 0x041b tx timeout [ 113.262911][ T4191] Bluetooth: hci1: sending frame failed (-49) [ 113.351429][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.385014][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.415901][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.595014][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.725364][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.912739][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.219144][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.308406][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.323897][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.332289][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.343199][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.357621][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.429340][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.452569][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.483501][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.512368][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.543433][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.565529][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.601964][ T4876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.649895][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 114.667912][ T4976] netlink: 'syz.3.187': attribute type 20 has an invalid length. [ 114.680035][ T4976] netlink: 'syz.3.187': attribute type 21 has an invalid length. [ 114.698931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.708222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.728022][ T4699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.737966][ T4699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.757411][ T4699] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.777867][ T4699] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.805501][ T4876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.913066][ T4876] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.026328][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.049021][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.076125][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.088117][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.095287][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.137916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.246906][ T4876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.273758][ T4876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.299086][ T4876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.300263][ T4260] Bluetooth: hci5: command 0x040f tx timeout [ 115.322929][ T4876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.327959][ T4260] Bluetooth: hci1: command 0x1009 tx timeout [ 115.341820][ T5001] device veth0 entered promiscuous mode [ 115.406697][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.126'. [ 115.647003][ T4876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.701363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.714654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.747834][ T4876] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.760053][ T5014] loop5: detected capacity change from 0 to 256 [ 115.780102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.793882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.810477][ T5014] exfat: Deprecated parameter 'namecase' [ 115.822345][ T5014] exfat: Deprecated parameter 'namecase' [ 115.828377][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.835518][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.871213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.899094][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.907405][ T5014] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 115.926176][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.961734][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.968898][ T4749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.044177][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.079040][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.095485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.115602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.136724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.166612][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.187985][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.255578][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.284879][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.315277][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.340583][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.422323][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.737971][ T5040] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 116.825579][ T5042] loop5: detected capacity change from 0 to 512 [ 116.879086][ T5045] loop1: detected capacity change from 0 to 512 [ 116.894921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.906464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.925328][ T4876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.946684][ T5042] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.000754][ T5045] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 117.027119][ T5042] [EXT4 FS bs=4096, gc=1, bpg=64, ipg=32, mo=804ec018, mo2=0000] [ 117.091874][ T5042] EXT4-fs (loop5): orphan cleanup on readonly fs [ 117.100352][ T5045] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.107344][ T5045] EXT4-fs warning (device loop1): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 117.126416][ T5042] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.195: Allocating blocks 41-42 which overlap fs metadata [ 117.131051][ T5045] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 117.147490][ T5045] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #16: comm syz.1.196: iget: immutable or append flags not allowed on symlinks [ 117.173061][ T5045] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.196: couldn't read orphan inode 16 (err -117) [ 117.210511][ T5042] __quota_error: 11 callbacks suppressed [ 117.210529][ T5042] Quota error (device loop5): write_blk: dquota write failed [ 117.261492][ T5045] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.267751][ T5042] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 117.353199][ T5042] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.195: Failed to acquire dquot type 0 [ 117.380181][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 117.421180][ T5042] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 117.495351][ T5042] EXT4-fs (loop5): 1 truncate cleaned up [ 117.530754][ T5042] EXT4-fs (loop5): pa ffff8880298a8540: logic 1, phys. 41, len 23 [ 117.539388][ T5042] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 22, pa_free 23 [ 117.599591][ T5042] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,usrquota,nolazytime,nogrpid,errors=continue,debug,i_version,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 117.930210][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.986922][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.942894][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.992769][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.023964][ T4876] device veth0_vlan entered promiscuous mode [ 119.048999][ T5076] netlink: 24 bytes leftover after parsing attributes in process `syz.5.199'. [ 119.088251][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.096917][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.127086][ T4876] device veth1_vlan entered promiscuous mode [ 119.342349][ T4876] device veth0_macvtap entered promiscuous mode [ 119.353225][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.375756][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.446910][ T4876] device veth1_macvtap entered promiscuous mode [ 119.509770][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.525412][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.579671][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.628783][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.688604][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.732145][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.751608][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.768770][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.779867][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.803435][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.825351][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.839140][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.853690][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.879430][ T5093] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 119.934329][ T5093] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 119.989428][ T21] bond0 speed is unknown, defaulting to 1000 [ 119.990005][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.034247][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.062497][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.097312][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.133203][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.161425][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.174906][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.209226][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.239167][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.260259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.280720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.342078][ T4876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.363044][ T4876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.374326][ T4876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.384402][ T4876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.396873][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 120.473807][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 120.582782][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.604652][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.672733][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.731772][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.748414][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.776297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.009666][ T5126] device vlan2 entered promiscuous mode [ 122.020239][ T5126] device bridge0 entered promiscuous mode [ 122.039026][ T5129] bond0 speed is unknown, defaulting to 1000 [ 122.053466][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 122.079328][ T5128] loop1: detected capacity change from 0 to 512 [ 122.099429][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.112416][ T5128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.143751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 122.161661][ T5128] EXT4-fs (loop1): 1 truncate cleaned up [ 122.167359][ T5128] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 122.326378][ T5145] bond0 speed is unknown, defaulting to 1000 [ 122.553650][ T5151] bridge: RTM_NEWNEIGH with invalid ether address [ 122.601664][ T858] device hsr_slave_0 left promiscuous mode [ 122.628626][ T858] device hsr_slave_1 left promiscuous mode [ 122.649762][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.675187][ T858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.763636][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.783723][ T858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.825084][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 122.868098][ T858] device bridge_slave_1 left promiscuous mode [ 122.886312][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.895623][ T858] device bridge_slave_0 left promiscuous mode [ 122.912846][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.970894][ T5165] xt_SECMARK: invalid mode: 2 [ 123.070103][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 123.201079][ T21] usb 6-1: config 0 has no interfaces? [ 123.441350][ T21] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 123.691070][ T858] device veth1_macvtap left promiscuous mode [ 123.697236][ T858] device veth0_macvtap left promiscuous mode [ 123.743627][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.752511][ T21] usb 6-1: Product: syz [ 123.756975][ T21] usb 6-1: Manufacturer: syz [ 123.762051][ T21] usb 6-1: SerialNumber: syz [ 123.773173][ T858] device veth1_vlan left promiscuous mode [ 123.776963][ T21] usb 6-1: config 0 descriptor?? [ 123.814594][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 123.832030][ T858] device veth0_vlan left promiscuous mode [ 124.668950][ T858] team0 (unregistering): Port device team_slave_1 removed [ 124.686073][ T858] team0 (unregistering): Port device team_slave_0 removed [ 124.698810][ T858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.715485][ T858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.794256][ T858] bond0 (unregistering): Released all slaves [ 124.891339][ T5164] bond0 speed is unknown, defaulting to 1000 [ 124.901768][ T4296] usb 6-1: USB disconnect, device number 2 [ 125.213801][ T5164] chnl_net:caif_netlink_parms(): no params data found [ 125.297338][ T5212] netlink: 112 bytes leftover after parsing attributes in process `syz.0.227'. [ 125.426680][ T5218] Process accounting resumed [ 125.439412][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.460081][ T5164] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.493561][ T26] audit: type=1326 audit(1752180200.408:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 125.507839][ T5164] device bridge_slave_0 entered promiscuous mode [ 125.536733][ T26] audit: type=1326 audit(1752180200.438:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 125.610942][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.618056][ T5164] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.641216][ T26] audit: type=1326 audit(1752180200.438:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 125.681450][ T5164] device bridge_slave_1 entered promiscuous mode [ 125.710789][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 125.737664][ T26] audit: type=1326 audit(1752180200.438:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 125.775595][ T26] audit: type=1326 audit(1752180200.438:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 125.811384][ T26] audit: type=1326 audit(1752180200.438:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 125.811435][ T5238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.234'. [ 125.845370][ T26] audit: type=1326 audit(1752180200.438:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 125.895782][ T26] audit: type=1326 audit(1752180200.438:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 125.940619][ T5164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.961854][ T26] audit: type=1326 audit(1752180200.438:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 125.978674][ T5164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.027505][ T26] audit: type=1326 audit(1752180200.438:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5224 comm="syz.5.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b79641929 code=0x7ffc0000 [ 126.069372][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 126.176782][ T5164] team0: Port device team_slave_0 added [ 126.209608][ T5164] team0: Port device team_slave_1 added [ 126.288820][ T5164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.296839][ T5164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.446314][ T5164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.497182][ T5164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.524585][ T5164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.562206][ T5164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.562340][ T5263] tipc: Started in network mode [ 127.576503][ T5263] tipc: Node identity ac1414aa, cluster identity 4711 [ 127.591593][ T5263] tipc: Enabled bearer , priority 10 [ 127.597833][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 127.611421][ T4296] Process accounting resumed [ 127.626196][ T5257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.647040][ T5257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.658088][ T5268] Process accounting resumed [ 127.669547][ T5257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.679260][ T5257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.773298][ T5164] device hsr_slave_0 entered promiscuous mode [ 127.790277][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 127.808556][ T5164] device hsr_slave_1 entered promiscuous mode [ 127.832044][ T5164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.852702][ T5164] Cannot create hsr debugfs directory [ 127.870583][ T5266] tipc: Enabled bearer , priority 0 [ 127.978485][ T5271] bond0 speed is unknown, defaulting to 1000 [ 128.897032][ T1108] tipc: Node number set to 2886997162 [ 129.239470][ T5164] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.601092][ T5164] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.860254][ T4239] Bluetooth: hci1: command 0x040f tx timeout [ 130.187386][ T5295] netlink: 'syz.1.248': attribute type 12 has an invalid length. [ 130.292997][ T5164] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.403940][ T5164] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.514951][ T5300] loop5: detected capacity change from 0 to 8192 [ 130.702583][ T5164] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.757118][ T5164] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.802972][ T5164] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.852591][ T5164] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.969205][ T5316] device veth1_to_bond entered promiscuous mode [ 131.027056][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 131.312025][ T5315] device veth1_to_bond left promiscuous mode [ 131.397956][ T5164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.479759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.502186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.534204][ T5164] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.556757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.640802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.671171][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.678320][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.695166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.729274][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.767849][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.803553][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.810775][ T4749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.850104][ T4296] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.874469][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.910533][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.940866][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 131.987689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.999315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.028902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.042200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.051204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.059593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.073322][ T5164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.085348][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.095068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.102511][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 132.109542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.118125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.234959][ T4296] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 132.261171][ T4296] usb 2-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.285320][ T4296] usb 2-1: config 1 interface 0 has no altsetting 0 [ 132.346912][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.360558][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.373345][ T5352] bond0: (slave syz_tun): Releasing backup interface [ 132.381318][ T4296] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.391262][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.399300][ T4296] usb 2-1: SerialNumber: syz [ 132.429118][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.437845][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.448478][ T5352] device bridge_slave_0 left promiscuous mode [ 132.455958][ T5331] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.466110][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.481145][ T5352] device bridge_slave_1 left promiscuous mode [ 132.488038][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.498590][ T5352] bond0: (slave bond_slave_0): Releasing backup interface [ 132.506662][ T5352] device bond_slave_0 left promiscuous mode [ 132.525909][ T5352] bond0: (slave bond_slave_1): Releasing backup interface [ 132.537181][ T5352] device bond_slave_1 left promiscuous mode [ 132.557523][ T5352] team0: Port device team_slave_0 removed [ 132.590470][ T5352] team0: Port device team_slave_1 removed [ 132.597020][ T5352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.605158][ T5352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.614465][ T5352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.622755][ T5352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.649002][ T5352] team0: Port device geneve0 removed [ 132.662752][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.669151][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.671646][ T5352] device vlan2 left promiscuous mode [ 132.693967][ T5352] device bond0 left promiscuous mode [ 132.699519][ T5352] bridge0: port 3(vlan2) entered disabled state [ 132.708408][ T5331] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.741939][ T5353] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 132.783644][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.828119][ T5353] team0: Port device bond0 added [ 132.845350][ T4525] tipc: Resetting bearer [ 132.856017][ T5164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.167465][ T4296] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 133.177838][ T4296] usb 2-1: USB disconnect, device number 2 [ 134.225270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.243011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.269236][ T5371] bond0 speed is unknown, defaulting to 1000 [ 134.390734][ T5164] device veth0_vlan entered promiscuous mode [ 134.416113][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.438016][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.503177][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.519913][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.535673][ T5164] device veth1_vlan entered promiscuous mode [ 134.564351][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 134.564366][ T26] audit: type=1800 audit(1752180209.478:44): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.265" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 134.765835][ T5164] device veth0_macvtap entered promiscuous mode [ 134.813777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.871963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.885343][ T5391] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.923670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.947966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.981002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.016153][ T858] device hsr_slave_0 left promiscuous mode [ 135.034473][ T858] device hsr_slave_1 left promiscuous mode [ 135.072512][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.097369][ T858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.130910][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.138626][ T858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.147550][ T858] device bridge_slave_1 left promiscuous mode [ 135.154787][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.164027][ T858] device bridge_slave_0 left promiscuous mode [ 135.170913][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.185997][ T858] device veth1_macvtap left promiscuous mode [ 135.204105][ T858] device veth0_macvtap left promiscuous mode [ 135.217483][ T858] device veth1_vlan left promiscuous mode [ 135.283867][ T858] device veth0_vlan left promiscuous mode [ 135.927590][ T858] team0 (unregistering): Port device team_slave_1 removed [ 136.006212][ T858] team0 (unregistering): Port device team_slave_0 removed [ 136.072970][ T858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.114296][ T858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.390380][ T858] bond0 (unregistering): Released all slaves [ 136.478452][ T5164] device veth1_macvtap entered promiscuous mode [ 136.498376][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.512054][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 136.588280][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.625706][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.681200][ T5164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.708688][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.728453][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.738108][ T5407] cgroup: fork rejected by pids controller in /syz1 [ 136.770154][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 136.777325][ T5164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.808881][ T5164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.836300][ T5164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.870235][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.895783][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.904706][ T21] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 136.930130][ T21] usb 6-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.964830][ T5164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.994071][ T5164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.015813][ T21] usb 6-1: config 1 interface 0 has no altsetting 0 [ 137.046339][ T5164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.065566][ T5164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.130544][ T21] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.150772][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.158818][ T21] usb 6-1: SerialNumber: syz [ 137.241964][ T5411] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.327665][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.347139][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.392594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.486629][ T5411] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.520720][ T4749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.535221][ T4749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.578490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.878496][ T5433] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 137.891011][ T5433] netlink: 'syz.0.280': attribute type 4 has an invalid length. [ 137.899530][ T5433] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.280'. [ 137.916496][ T5438] dccp_close: ABORT with 64 bytes unread [ 137.930234][ T21] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 137.942136][ T5437] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 137.949829][ T5437] netlink: 'syz.0.280': attribute type 4 has an invalid length. [ 137.977933][ T21] usb 6-1: USB disconnect, device number 3 [ 138.005214][ T5437] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.280'. [ 138.104466][ T5440] tipc: Enabled bearer , priority 10 [ 138.169810][ T5440] tipc: Enabled bearer , priority 10 [ 138.802668][ T5462] bond0 speed is unknown, defaulting to 1000 [ 139.356745][ T5462] chnl_net:caif_netlink_parms(): no params data found [ 139.453404][ T5485] bond0 speed is unknown, defaulting to 1000 [ 139.714847][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.738854][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.781400][ T5462] device bridge_slave_0 entered promiscuous mode [ 139.823961][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.839347][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.868316][ T5462] device bridge_slave_1 entered promiscuous mode [ 139.924053][ T5489] loop0: detected capacity change from 0 to 40427 [ 139.970939][ T5489] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 139.992489][ T5489] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 140.096984][ T5462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.109660][ T5489] F2FS-fs (loop0): invalid crc value [ 140.143091][ T5485] chnl_net:caif_netlink_parms(): no params data found [ 140.169550][ T5489] F2FS-fs (loop0): Found nat_bits in checkpoint [ 140.224894][ T5462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.373627][ T5489] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 140.387354][ T5489] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 140.399200][ T5462] team0: Port device team_slave_0 added [ 140.491817][ T5462] team0: Port device team_slave_1 added [ 140.579751][ T5522] netlink: 'syz.3.293': attribute type 4 has an invalid length. [ 140.675108][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.689171][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.722456][ T5462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.741834][ T5485] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.749798][ T5485] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.768711][ T5485] device bridge_slave_0 entered promiscuous mode [ 140.779534][ T5529] netlink: 'syz.3.293': attribute type 4 has an invalid length. [ 140.810655][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.830432][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 140.838039][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.876211][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.890059][ T4232] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 140.896526][ T5485] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.907640][ T5485] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.923020][ T5485] device bridge_slave_1 entered promiscuous mode [ 140.983532][ T5485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.026287][ T5462] device hsr_slave_0 entered promiscuous mode [ 141.057721][ T5462] device hsr_slave_1 entered promiscuous mode [ 141.067156][ T5462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.087058][ T5462] Cannot create hsr debugfs directory [ 141.111403][ T5485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.199226][ T5485] team0: Port device team_slave_0 added [ 141.243207][ T5485] team0: Port device team_slave_1 added [ 141.280429][ T4232] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 141.296900][ T4232] usb 6-1: config 0 has no interface number 0 [ 141.318386][ T4297] Bluetooth: hci2: command 0x0409 tx timeout [ 141.397875][ T5485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.410442][ T5485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.452479][ T5485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.493668][ T5485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.501806][ T4232] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 141.521556][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.530269][ T5485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.556899][ T4232] usb 6-1: Product: syz [ 141.561332][ T4232] usb 6-1: Manufacturer: syz [ 141.566173][ T4232] usb 6-1: SerialNumber: syz [ 141.576091][ T4232] usb 6-1: config 0 descriptor?? [ 141.588631][ T5485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.649393][ T5462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.747194][ T5462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.792428][ T858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.816047][ T5485] device hsr_slave_0 entered promiscuous mode [ 141.831802][ T5485] device hsr_slave_1 entered promiscuous mode [ 141.839238][ T5485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.855511][ T5485] Cannot create hsr debugfs directory [ 141.902202][ T5462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.000227][ T858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.058766][ T5462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.155477][ T858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.223831][ T4232] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 142.262045][ T4232] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 142.278235][ T4232] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 142.291222][ T4232] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 142.308567][ T5570] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 142.325612][ T4232] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 142.367680][ T5570] kvm: pic: level sensitive irq not supported [ 142.368125][ T5570] kvm: pic: non byte read [ 142.389196][ T5570] kvm: pic: level sensitive irq not supported [ 142.389323][ T5570] kvm: pic: non byte read [ 142.415231][ T5570] kvm: pic: level sensitive irq not supported [ 142.415390][ T5570] kvm: pic: non byte read [ 142.432328][ T858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.442404][ T5570] kvm: pic: level sensitive irq not supported [ 142.442773][ T5570] kvm: pic: non byte read [ 142.462457][ T5570] kvm: pic: level sensitive irq not supported [ 142.462617][ T5570] kvm: pic: non byte read [ 142.482781][ T5570] kvm: pic: level sensitive irq not supported [ 142.482861][ T5570] kvm: pic: non byte read [ 142.513795][ T5570] kvm: pic: level sensitive irq not supported [ 142.514316][ T5570] kvm: pic: non byte read [ 142.572195][ T5570] kvm: pic: level sensitive irq not supported [ 142.572925][ T5570] kvm: pic: non byte read [ 142.608966][ T5570] kvm: pic: level sensitive irq not supported [ 142.609038][ T5570] kvm: pic: non byte read [ 142.614469][ T4297] usb 6-1: USB disconnect, device number 4 [ 142.619607][ T5570] kvm: pic: level sensitive irq not supported [ 142.648448][ T5570] kvm: pic: non byte read [ 142.689062][ T4297] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 142.733009][ T4297] keyspan 6-1:0.133: device disconnected [ 142.941486][ T4838] Bluetooth: hci1: command 0x041b tx timeout [ 143.329066][ T5599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.302'. [ 143.389322][ T4297] Bluetooth: hci2: command 0x041b tx timeout [ 143.759866][ T5618] ptrace attach of "./syz-executor exec"[4699] was attempted by "  %-5鎢D|VTy\x22͚KN/)/HM&CsnVkת{Jv1%_)$n:,\x5c]n+]2yrrL˕-6^%D\x5c~zw'Mc\x22o٫`ˤ=sN8|?ޔBr9ɳbF{i$]끕 [ 145.663954][ T5334] Bluetooth: hci1: command 0x040f tx timeout [ 145.817980][ T5462] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.940300][ T4297] Bluetooth: hci2: command 0x040f tx timeout [ 146.030498][ T5462] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.073094][ T5462] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.116141][ T5633] device batadv_slave_0 entered promiscuous mode [ 146.128177][ T5485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.151570][ T5462] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.254212][ T5485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.368271][ T5632] device batadv_slave_0 left promiscuous mode [ 146.387699][ T5485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.486931][ T5485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.794871][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.888765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.902193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.958938][ T5462] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.973695][ T5658] overlayfs: failed to clone upperpath [ 147.076666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.105790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.173745][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.180896][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.197927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.275935][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.294100][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.313140][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.320421][ T4749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.374879][ T5485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.385080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.394102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.404691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.415114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.430917][ T5670] netlink: 'syz.5.316': attribute type 10 has an invalid length. [ 147.441289][ T5670] tipc: Resetting bearer [ 147.471873][ T5670] tipc: Resetting bearer [ 147.489421][ T5670] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.522249][ T5670] bond0: (slave team0): Enslaving as an active interface with an up link [ 147.552320][ T5485] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.566603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.576769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.593827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.615544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.653637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.664496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.685722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.821468][ T5462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.839181][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.867901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.892451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.913898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.923814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.932757][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.939868][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.969881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.004622][ T5684] netlink: 'syz.3.320': attribute type 39 has an invalid length. [ 148.022926][ T4838] Bluetooth: hci2: command 0x0419 tx timeout [ 148.034633][ T4838] Bluetooth: hci1: command 0x0419 tx timeout [ 148.109244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.136379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.167806][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.174984][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.221722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.359902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.391604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.467581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.516514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.596364][ T5485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.678980][ T5485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.723323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.767322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.807966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.840522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.891231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.919527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.954905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.032506][ T5704] netlink: 168 bytes leftover after parsing attributes in process `syz.5.328'. [ 149.287081][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.306596][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.336844][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.402435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.429174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.497665][ T5717] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 149.504699][ T5717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 149.515080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.551512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.566819][ T5717] vhci_hcd vhci_hcd.0: Device attached [ 149.602375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.635926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.636724][ T5718] vhci_hcd: connection closed [ 149.659375][ T154] vhci_hcd: stop threads [ 149.692273][ T154] vhci_hcd: release socket [ 149.705984][ T5462] device veth0_vlan entered promiscuous mode [ 149.749440][ T154] vhci_hcd: disconnect device [ 149.756660][ T4192] vhci_hcd: vhci_device speed not set [ 149.769510][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.790714][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.814895][ T5462] device veth1_vlan entered promiscuous mode [ 149.894927][ T5485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.917344][ T858] device hsr_slave_0 left promiscuous mode [ 149.925046][ T858] device hsr_slave_1 left promiscuous mode [ 149.943914][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.959213][ T858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.986447][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.005699][ T858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.025513][ T858] device bridge_slave_1 left promiscuous mode [ 150.034016][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.091522][ T858] device bridge_slave_0 left promiscuous mode [ 150.111562][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.142252][ T858] device hsr_slave_0 left promiscuous mode [ 150.154096][ T858] device hsr_slave_1 left promiscuous mode [ 150.169507][ T858] device veth1_macvtap left promiscuous mode [ 150.190262][ T858] device veth0_macvtap left promiscuous mode [ 150.212589][ T858] device veth1_vlan left promiscuous mode [ 150.263222][ T858] device veth0_vlan left promiscuous mode [ 150.294815][ T858] device veth1_vlan left promiscuous mode [ 150.313376][ T858] device veth0_vlan left promiscuous mode [ 151.195463][ T858] team0 (unregistering): Port device team_slave_1 removed [ 151.244190][ T858] team0 (unregistering): Port device team_slave_0 removed [ 151.295467][ T858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.315821][ T858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.581388][ T858] bond0 (unregistering): Released all slaves [ 151.988867][ T858] team0 (unregistering): Port device bond0 removed [ 152.069023][ T858] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 152.112527][ T858] bond0 (unregistering): Released all slaves [ 152.189686][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.208121][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.220768][ T4838] bond0 speed is unknown, defaulting to 1000 [ 152.220791][ T5750] netlink: 'syz.5.342': attribute type 4 has an invalid length. [ 152.277237][ T5752] netlink: 'syz.5.342': attribute type 4 has an invalid length. [ 152.310634][ T5754] device netdevsim0 entered promiscuous mode [ 152.337160][ T5462] device veth0_macvtap entered promiscuous mode [ 152.351781][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.392955][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.432872][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.472343][ T5462] device veth1_macvtap entered promiscuous mode [ 152.534977][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.546813][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.574203][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.598556][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.640463][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.649457][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.668125][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.686928][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.932235][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.548953][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.584299][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.595029][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.605861][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.636882][ T5462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.653612][ T5462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.663044][ T5462] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.676664][ T5462] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.185937][ T5790] loop0: detected capacity change from 0 to 1024 [ 154.376318][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.409195][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.453658][ T5793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 154.471121][ T5793] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.487375][ T5793] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.496539][ T5793] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.505811][ T5793] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.535978][ T5793] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.545178][ T5793] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.554268][ T5793] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.563156][ T5793] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.624713][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.636904][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.649326][ T5485] device veth0_vlan entered promiscuous mode [ 154.670792][ T5793] Zero length message leads to an empty skb [ 154.677582][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.720517][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.795015][ T5485] device veth1_vlan entered promiscuous mode [ 154.820883][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.825499][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.846405][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.891255][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.920767][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.954483][ T5485] device veth0_macvtap entered promiscuous mode [ 154.970734][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.993317][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.014362][ T5485] device veth1_macvtap entered promiscuous mode [ 155.177889][ T5485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.194026][ T5809] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 155.198822][ T5485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.247314][ T5485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.281176][ T5485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.302956][ T5485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.314486][ T5485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.325390][ T5485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.335279][ T5485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.345828][ T5485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.357166][ T5485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.406254][ T5485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.434713][ T5485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.458268][ T5485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.485675][ T5485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.530804][ T5813] loop1: detected capacity change from 0 to 32768 [ 155.555020][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.570966][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.589984][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.598861][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.615183][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.734236][ T5813] JBD2: Ignoring recovery information on journal [ 155.790497][ T5813] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.862241][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.924531][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.948171][ T4749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.964135][ T5813] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #74: signature = [ 155.979431][ T5813] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 155.979520][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.989316][ T5813] OCFS2: File system is now read-only. [ 155.989375][ T5813] (syz.1.362,5813,1):ocfs2_assign_bh:2414 ERROR: status = -30 [ 156.010105][ T5813] (syz.1.362,5813,1):ocfs2_inode_lock_full_nested:2509 ERROR: status = -30 [ 156.017051][ T4749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.018723][ T5813] (syz.1.362,5813,1):ocfs2_reserve_suballoc_bits:789 ERROR: status = -30 [ 156.035767][ T5813] (syz.1.362,5813,1):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 156.044666][ T5813] (syz.1.362,5813,1):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 156.052904][ T5813] (syz.1.362,5813,1):ocfs2_mknod:306 ERROR: status = -30 [ 156.060021][ T5813] (syz.1.362,5813,1):ocfs2_mknod:502 ERROR: status = -30 [ 156.067072][ T5813] (syz.1.362,5813,1):ocfs2_mkdir:659 ERROR: status = -30 [ 156.117646][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.355798][ T5462] ocfs2: Unmounting device (7,1) on (node local) [ 156.496702][ T5828] tipc: Started in network mode [ 156.502903][ T5828] tipc: Node identity b6f7ca8be57a, cluster identity 4711 [ 156.539297][ T5828] tipc: Enabled bearer , priority 0 [ 156.575743][ T5827] syzkaller0: MTU too low for tipc bearer [ 156.581774][ T5827] tipc: Disabling bearer [ 157.987355][ T5860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'. [ 158.654242][ T4192] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 158.777728][ T5860] syz.3.378 (5860) used greatest stack depth: 19488 bytes left [ 159.157570][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 159.202992][ T858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.260211][ T4192] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 159.279558][ T4192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.297247][ T4192] usb 6-1: Product: syz [ 159.301786][ T4192] usb 6-1: Manufacturer: syz [ 159.306451][ T4192] usb 6-1: SerialNumber: syz [ 159.357942][ T4192] usb 6-1: config 0 descriptor?? [ 159.365394][ T858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.419134][ T4192] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 159.430981][ T858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.506670][ T858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.525568][ T26] audit: type=1326 audit(1752180234.438:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.1.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd04647929 code=0x0 [ 159.604999][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.621764][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.640787][ T5856] device bridge_slave_0 entered promiscuous mode [ 159.656069][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.663478][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.677717][ T5856] device bridge_slave_1 entered promiscuous mode [ 159.775126][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.819860][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.946239][ T5856] team0: Port device team_slave_0 added [ 159.959350][ T5856] team0: Port device team_slave_1 added [ 160.010589][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.017749][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.046231][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 160.062043][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.070162][ T4192] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 160.080871][ T4192] sq905c: probe of 6-1:0.0 failed with error -71 [ 160.107914][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.113850][ T4192] usb 6-1: USB disconnect, device number 5 [ 160.121388][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.184390][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.291340][ T5856] device hsr_slave_0 entered promiscuous mode [ 160.306332][ T5856] device hsr_slave_1 entered promiscuous mode [ 160.314257][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.339068][ T5856] Cannot create hsr debugfs directory [ 160.424150][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 160.451340][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 160.718318][ T5923] loop1: detected capacity change from 0 to 256 [ 160.782412][ T5923] exfat: Bad value for 'uid' [ 160.866018][ T5927] netlink: 'syz.5.392': attribute type 4 has an invalid length. [ 161.040306][ T5928] netlink: 'syz.5.392': attribute type 4 has an invalid length. [ 161.285351][ T4192] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.305272][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.396'. [ 161.534317][ T5951] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 161.542742][ T4192] usb 2-1: Using ep0 maxpacket: 8 [ 161.613094][ T858] device hsr_slave_0 left promiscuous mode [ 161.624172][ T858] device hsr_slave_1 left promiscuous mode [ 161.642007][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.651754][ T858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.660371][ T4192] usb 2-1: config 162 has an invalid interface number: 208 but max is 0 [ 161.669025][ T4192] usb 2-1: config 162 has no interface number 0 [ 161.686259][ T4192] usb 2-1: config 162 interface 208 has no altsetting 0 [ 161.705348][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.720378][ T858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.728824][ T858] device bridge_slave_1 left promiscuous mode [ 161.749642][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.758749][ T858] device bridge_slave_0 left promiscuous mode [ 161.766332][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.800403][ T858] device veth1_macvtap left promiscuous mode [ 161.806573][ T858] device veth0_macvtap left promiscuous mode [ 161.831175][ T858] device veth1_vlan left promiscuous mode [ 161.837042][ T858] device veth0_vlan left promiscuous mode [ 161.868438][ T4192] usb 2-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=61.a7 [ 161.890050][ T4192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.898179][ T4192] usb 2-1: Product: syz [ 161.920029][ T4192] usb 2-1: Manufacturer: syz [ 161.924684][ T4192] usb 2-1: SerialNumber: syz [ 161.992466][ T26] audit: type=1326 audit(1752180236.908:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96e3e929 code=0x7fc00000 [ 162.024531][ T26] audit: type=1326 audit(1752180236.928:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb96e3e929 code=0x7fc00000 [ 162.106295][ T5334] Bluetooth: hci2: command 0x041b tx timeout [ 163.073118][ T858] team0 (unregistering): Port device team_slave_1 removed [ 163.096895][ T858] team0 (unregistering): Port device team_slave_0 removed [ 163.118860][ T858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.135940][ T858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.213935][ T858] bond0 (unregistering): Released all slaves [ 163.260043][ T5982] syz.0.405 uses obsolete (PF_INET,SOCK_PACKET) [ 163.287128][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.401'. [ 163.306590][ T5958] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 163.527081][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.565512][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.627791][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.716246][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.190339][ T5334] Bluetooth: hci2: command 0x040f tx timeout [ 164.472336][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 164.486505][ T4192] pl2303 2-1:162.208: required endpoints missing [ 164.518932][ T4192] usb 2-1: USB disconnect, device number 3 [ 164.655734][ T6016] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.783370][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.835947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.849824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.880825][ T26] audit: type=1326 audit(1752180239.788:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96e3e929 code=0x7fc00000 [ 164.897288][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.039870][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.055682][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.080620][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.087752][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.106129][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.115373][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.129074][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.136211][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.155581][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.287047][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.392454][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.423439][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.939934][ C0] sched: RT throttling activated [ 166.949327][ T5583] Bluetooth: hci2: command 0x0419 tx timeout [ 166.994120][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.222964][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.235432][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.281814][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.397794][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.513662][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.632233][ T6071] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 167.847500][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.390807][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.451531][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.561788][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.423'. [ 168.625618][ T6081] bridge1: port 1(vlan2) entered blocking state [ 168.672013][ T6081] bridge1: port 1(vlan2) entered disabled state [ 168.741031][ T6072] ipt_CLUSTERIP: Please specify destination IP [ 169.084446][ T6100] loop1: detected capacity change from 0 to 1024 [ 169.241553][ T6100] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.337881][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.383623][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.447626][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.667343][ T6118] loop5: detected capacity change from 0 to 2048 [ 170.717031][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.735719][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.829226][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.839603][ T6118] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.878374][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.968658][ T6118] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 170.971320][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.020778][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.047582][ T5856] device veth0_vlan entered promiscuous mode [ 171.093068][ T5856] device veth1_vlan entered promiscuous mode [ 171.182675][ T6118] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 171.230071][ T6118] EXT4-fs (loop5): This should not happen!! Data will be lost [ 171.230071][ T6118] [ 171.242138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.260813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.290780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.330833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.342725][ T6118] EXT4-fs (loop5): Total free blocks count 0 [ 171.371057][ T5856] device veth0_macvtap entered promiscuous mode [ 171.410137][ T6118] EXT4-fs (loop5): Free/Dirty block details [ 171.421093][ T5856] device veth1_macvtap entered promiscuous mode [ 171.428707][ T6118] EXT4-fs (loop5): free_blocks=2415919104 [ 171.474809][ T6118] EXT4-fs (loop5): dirty_blocks=32 [ 171.490121][ T6118] EXT4-fs (loop5): Block reservation details [ 171.496158][ T6118] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 171.522264][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.552600][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.580058][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.608192][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.670994][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.705139][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.748809][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.799150][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.841324][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.887423][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.934313][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.988333][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.030704][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.081516][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.088921][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.112427][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.166529][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.210989][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.239967][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.248724][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.492812][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.531157][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.580509][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.588888][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.603868][ T26] audit: type=1326 audit(1752180247.518:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.5.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b79641929 code=0x0 [ 172.638939][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.682392][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.484090][ T858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.622783][ T858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.731133][ T858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.813508][ T858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.066168][ T6204] netlink: 'syz.5.444': attribute type 5 has an invalid length. [ 174.525470][ T6230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.525624][ T6223] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 174.533378][ T6230] IPv6: NLM_F_CREATE should be set when creating new route [ 174.989536][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 175.027171][ T6225] chnl_net:caif_netlink_parms(): no params data found [ 175.254169][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.294008][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.303261][ T6225] device bridge_slave_0 entered promiscuous mode [ 175.327203][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.334884][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.343929][ T6225] device bridge_slave_1 entered promiscuous mode [ 175.382605][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.423297][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.484633][ T858] device hsr_slave_0 left promiscuous mode [ 175.516290][ T858] device hsr_slave_1 left promiscuous mode [ 175.534599][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.562480][ T858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.585674][ T858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.596502][ T858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.607840][ T858] device bridge_slave_1 left promiscuous mode [ 175.616503][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.627180][ T858] device bridge_slave_0 left promiscuous mode [ 175.643334][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.679670][ T858] device veth1_macvtap left promiscuous mode [ 175.686145][ T858] device veth0_macvtap left promiscuous mode [ 175.703920][ T858] device veth1_vlan left promiscuous mode [ 175.709974][ T858] device veth0_vlan left promiscuous mode [ 175.793853][ T6278] loop5: detected capacity change from 0 to 512 [ 175.855307][ T6278] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.903649][ T6278] EXT4-fs (loop5): 1 truncate cleaned up [ 175.928349][ T6278] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 176.175682][ T858] team0 (unregistering): Port device team_slave_1 removed [ 176.213720][ T858] team0 (unregistering): Port device team_slave_0 removed [ 176.234522][ T858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.259122][ T858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.395021][ T858] bond0 (unregistering): Released all slaves [ 176.410329][ T26] audit: type=1800 audit(1752180251.318:50): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.460" name="/" dev="fuse" ino=1 res=0 errno=0 [ 176.506734][ T6225] team0: Port device team_slave_0 added [ 176.531269][ T6225] team0: Port device team_slave_1 added [ 176.610568][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.620495][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.668653][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.684985][ T4192] Bluetooth: hci2: command 0x0409 tx timeout [ 176.702135][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.710682][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.759039][ T6299] ptrace attach of "./syz-executor exec"[4188] was attempted by "  %-5鎢D|VTy\x22͚KN/)/HM&CsnVkת{Jv1%_)$n:,\x5c]n+]2yrrL˕-6^%D\x5c~zw'Mc\x22o٫`ˤ=sN8|?ޔBr9ɳbF{i$]끕 [ 176.855755][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.421798][ T6225] device hsr_slave_0 entered promiscuous mode [ 178.446072][ T6225] device hsr_slave_1 entered promiscuous mode [ 178.492029][ T6225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.530778][ T6225] Cannot create hsr debugfs directory [ 178.921821][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 179.141504][ T6323] loop5: detected capacity change from 0 to 128 [ 179.380155][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 180.978942][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.990081][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 180.999847][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.050357][ T6346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.069268][ T6355] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 181.207796][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.481'. [ 181.259398][ T6360] device bond_slave_1 entered promiscuous mode [ 181.292684][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 181.488540][ T6360] bond0: (slave bond_slave_1): Releasing backup interface [ 181.509062][ T6360] device bond_slave_1 left promiscuous mode [ 181.649360][ T6377] loop5: detected capacity change from 0 to 1024 [ 181.673527][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 181.705672][ T6225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.748028][ T6225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.801071][ T6377] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.888250][ T6225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.988422][ T6225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.069657][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 183.259526][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.117346][ T6414] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 184.142442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.169849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.218990][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.300436][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.344399][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.379508][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.386689][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.478350][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.507510][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.543219][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.552095][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.559178][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.567093][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.747120][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.482544][ T4260] Bluetooth: hci2: command 0x0411 tx timeout [ 185.560264][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.646897][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.715379][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.772135][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.885792][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.927690][ T6437] device batadv_slave_0 entered promiscuous mode [ 185.985990][ T6225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.022887][ T6225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.047474][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.061222][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.078306][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.087301][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.106855][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.995767][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.064827][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.242683][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.377908][ T6473] sit0 speed is unknown, defaulting to 1000 [ 187.416263][ T6473] sit0 speed is unknown, defaulting to 1000 [ 187.433257][ T6473] sit0 speed is unknown, defaulting to 1000 [ 187.647948][ T6484] tipc: New replicast peer: 255.255.255.255 [ 187.886410][ T6484] tipc: Enabled bearer , priority 10 [ 188.701268][ T26] audit: type=1804 audit(1752180263.608:51): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.513" name="/newroot/111/file1" dev="fuse" ino=1 res=1 errno=0 [ 188.776348][ T26] audit: type=1800 audit(1752180263.618:52): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.513" name="/" dev="fuse" ino=1 res=0 errno=0 [ 188.806928][ T6505] general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] PREEMPT SMP KASAN [ 188.818794][ T6505] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 188.826442][ T21] sit0 speed is unknown, defaulting to 1000 [ 188.827309][ T6505] CPU: 0 PID: 6505 Comm: syz.3.514 Not tainted 5.15.187-syzkaller #0 [ 188.827332][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.826405][ T6473] infiniband syz0: set active [ 188.851363][ T6505] RIP: 0010:fib_lookup_good_nhc+0x81/0x3d0 [ 188.851406][ T6505] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1f b8 51 f9 41 bc 58 03 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 00 b8 51 f9 4d 8b 24 24 e8 07 0f [ 188.875429][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.881590][ T6505] RSP: 0018:ffffc9000352f438 EFLAGS: 00010202 [ 188.881614][ T6505] RAX: 000000000000006b RBX: ffff888024b12a20 RCX: ffff8880216d8000 [ 188.881631][ T6505] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.881644][ T6505] RBP: ffff888024b12a2f R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 188.881659][ T6505] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: 0000000000000358 [ 188.881675][ T6505] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11004962545 [ 188.906729][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.911767][ T6505] FS: 00007ffb94ca66c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 188.911790][ T6505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.911803][ T6505] CR2: 0000200000004ff0 CR3: 000000002b825000 CR4: 00000000003506f0 [ 188.911821][ T6505] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.911833][ T6505] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.911845][ T6505] Call Trace: [ 188.911852][ T6505] [ 188.911863][ T6505] nexthop_get_nhc_lookup+0x1a8/0x400 [ 188.911897][ T6505] fib_table_lookup+0xe76/0x15e0 [ 188.911929][ T6505] fib_lookup+0x192/0x400 [ 188.911952][ T6505] ip_route_output_key_hash_rcu+0x305/0x2460 [ 188.911979][ T6505] ? lock_chain_count+0x20/0x20 [ 188.912001][ T6505] ? chacha_block_generic+0x5b/0xd20 [ 188.912026][ T6505] ip_route_output_key_hash+0x1b1/0x2e0 [ 188.912053][ T6505] ? ip_route_input_rcu+0x3100/0x3100 [ 188.912075][ T6505] ? crng_make_state+0x4cf/0x630 [ 188.912097][ T6505] ? proc_do_uuid+0x260/0x260 [ 188.912115][ T6505] ? __kasan_kmalloc+0xcc/0xf0 [ 188.912141][ T6505] ip_route_output_flow+0x26/0x150 [ 188.912165][ T6505] sctp_v4_get_dst+0x34d/0x10d0 [ 188.912189][ T6505] ? memset+0x1e/0x40 [ 188.912207][ T6505] ? _get_random_bytes+0x1ba/0x210 [ 188.912233][ T6505] ? sctp_v4_xmit+0xd90/0xd90 [ 188.912262][ T6505] sctp_transport_route+0x107/0x2b0 [ 188.921319][ T6473] infiniband syz0: added sit0 [ 188.928506][ T6505] sctp_assoc_add_peer+0x615/0x15a0 [ 188.928549][ T6505] sctp_connect_new_asoc+0x300/0x690 [ 188.956582][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.960188][ T6505] ? __sctp_connect+0xd20/0xd20 [ 188.960218][ T6505] ? __local_bh_enable_ip+0x12a/0x1b0 [ 188.960240][ T6505] ? lock_sock_nested+0x68/0x100 [ 188.960261][ T6505] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 188.960280][ T6505] ? security_sctp_bind_connect+0x85/0xb0 [ 188.960302][ T6505] sctp_sendmsg+0x15e0/0x2950 [ 188.960332][ T6505] ? aa_sk_perm+0x7b4/0x8f0 [ 188.970935][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.976282][ T6505] ? sctp_getsockopt+0x8a0/0x8a0 [ 188.992966][ T6473] infiniband syz0: Couldn't open port 1 [ 188.995940][ T6505] ? aa_af_perm+0x2b0/0x2b0 [ 188.995965][ T6505] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 189.020632][ T6225] device veth0_vlan entered promiscuous mode [ 189.021335][ T6505] ? sock_rps_record_flow+0x17/0x3b0 [ 189.032130][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.032273][ T6505] ? inet_sendmsg+0xe5/0x2f0 [ 189.042232][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.046637][ T6505] __sys_sendto+0x423/0x580 [ 189.083956][ T6225] device veth1_vlan entered promiscuous mode [ 189.085428][ T6505] ? __ia32_sys_getpeername+0x80/0x80 [ 189.102701][ T6473] RDS/IB: syz0: added [ 189.103198][ T6505] ? __lock_acquire+0x7c60/0x7c60 [ 189.131798][ T6473] smc: adding ib device syz0 with port count 1 [ 189.133931][ T6505] ? lock_chain_count+0x20/0x20 [ 189.181312][ T6473] smc: ib device syz0 port 1 has pnetid [ 189.181487][ T6505] ? vtime_user_exit+0x2dc/0x400 [ 189.191769][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.193279][ T6505] __x64_sys_sendto+0xda/0xf0 [ 189.200629][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.203779][ T6505] do_syscall_64+0x4c/0xa0 [ 189.232162][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.235081][ T6505] ? clear_bhb_loop+0x30/0x80 [ 189.261131][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.264044][ T6505] ? clear_bhb_loop+0x30/0x80 [ 189.264079][ T6505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.295132][ T6505] RIP: 0033:0x7ffb96e3e929 [ 189.299171][ T6225] device veth0_macvtap entered promiscuous mode [ 189.299656][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.320172][ T4296] sit0 speed is unknown, defaulting to 1000 [ 189.325489][ T6505] RSP: 002b:00007ffb94ca6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 189.339684][ T6225] device veth1_macvtap entered promiscuous mode [ 189.339795][ T6505] RAX: ffffffffffffffda RBX: 00007ffb97065fa0 RCX: 00007ffb96e3e929 [ 189.354000][ T6505] RDX: 0000000000034000 RSI: 0000200000000140 RDI: 0000000000000003 [ 189.361995][ T6505] RBP: 00007ffb96ec0b39 R08: 0000200000004ff0 R09: 0000000000000010 [ 189.364775][ T6473] sit0 speed is unknown, defaulting to 1000 [ 189.369992][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.370010][ T6505] R13: 0000000000000000 R14: 00007ffb97065fa0 R15: 00007ffe19ff1618 [ 189.370033][ T6505] [ 189.370052][ T6505] Modules linked in: [ 189.402074][ T4297] tipc: Node number set to 1401801355 [ 189.426755][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.427483][ T6505] ---[ end trace e77273149db18e12 ]--- [ 189.463477][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.467555][ T6505] RIP: 0010:fib_lookup_good_nhc+0x81/0x3d0 [ 189.486212][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.497023][ T6505] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1f b8 51 f9 41 bc 58 03 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 00 b8 51 f9 4d 8b 24 24 e8 07 0f [ 189.521907][ T6505] RSP: 0018:ffffc9000352f438 EFLAGS: 00010202 [ 189.528343][ T6505] RAX: 000000000000006b RBX: ffff888024b12a20 RCX: ffff8880216d8000 [ 189.534819][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.555661][ T6505] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.577226][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.601926][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.623263][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.651065][ T6505] RBP: ffff888024b12a2f R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 189.659185][ T6505] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: 0000000000000358 [ 189.668053][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.690994][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.701847][ T6505] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11004962545 [ 189.712518][ T6505] FS: 00007ffb94ca66c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 189.723641][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.736552][ T6505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.743365][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.752223][ T6505] CR2: 0000562176e86950 CR3: 000000002b825000 CR4: 00000000003506e0 [ 189.762251][ T6505] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.768743][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.772671][ T6505] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.786895][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.802548][ T6505] Kernel panic - not syncing: Fatal exception [ 189.808782][ T6505] Kernel Offset: disabled [ 189.813114][ T6505] Rebooting in 86400 seconds..