last executing test programs: 57.338909723s ago: executing program 2 (id=375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 55.157440036s ago: executing program 2 (id=379): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 54.263685974s ago: executing program 2 (id=381): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000000)=0x1c, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 44.554692775s ago: executing program 4 (id=413): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000400)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@uni_xlate}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@utf8}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$eJzs3c9qK1UcB/DfpGkSdZEsXInigC5cXW7vE6RIL1zMSslCXah4b0GaILRQ8A/GrgRXblz6BILQnS/hxjfwAQR3dlE4MslMk9Q07UDT+ufz2fT0nPOd8zuTaUsXOfnw5fHB0zz2T778LTqdLBr96MdZFr1oROXrWNL/LgCAf7OzlOKPNFMnl0VEZ3NlAQAbVPvv/+nGSwIANuydd997a3cw2Hs7zzvxePzN8bD4z774Ohvf3Y9PYhTP4mF04zwiXZi1H6eUJs280IvXx5PjYZEcf/BLef3d3yOm+Z3oRm/atZx/MtjbyWcW8pOijufL9ftF/lF048UV6z8Z7D1akY9hK954baH+B9GNXz+OT2MUT6dFzPNf7eT5m+n7P794vyivyGeT42F7Om8ubd3xSwMAAAAAAAAAAAAAAAAAAAAAwH/Yg/LsnHZMz+8pusrzd7bOi2+2I6/0ls/nmeWz6kKXzgeapPihOl/nYZ7nqZw4zzfjpWY072fXAAAAAAAAAAAAAAAAAAAA8M9y9NnnBx+NRs8Ob6VRnQZQva2//nVOp6n+Qs+rsT7Vnq/VKJtrloitak4WsbaeYhO3dFuuazx3Vc0//lT3gp3r52wXa3VucRfVy73QE1VPtvoeti8md6qH5OeqJ6WUWnHD1VtXDaVaj19r5VC39t1ovTBtTNbMieyqwr59Zf5zWQ5ll3fRWrrPS43tsrEQv/Rs1Hqe//67InNaBwAAAAAAAAAAAAAAAAAAbNT8Tb8rBk/WRhupvbGyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBOzT//v0ZjUoZvMLkVh0f3vEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//+KpXP8=") mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 43.205318171s ago: executing program 4 (id=419): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) socket(0x80000000000000a, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000000)=0x1c, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 40.804225828s ago: executing program 4 (id=425): writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0) 40.401323086s ago: executing program 2 (id=426): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x80000000000725) 39.317625618s ago: executing program 2 (id=429): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 37.66531001s ago: executing program 4 (id=431): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) dup3(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 37.060330772s ago: executing program 4 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 36.604438621s ago: executing program 2 (id=435): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0x1c, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 35.65808374s ago: executing program 4 (id=437): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000000)=0x1c, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 20.559363136s ago: executing program 32 (id=435): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0x1c, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 20.498976477s ago: executing program 33 (id=437): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getitimer(0x0, &(0x7f0000000000)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000000)=0x1c, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 11.834148398s ago: executing program 3 (id=480): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 11.305191668s ago: executing program 3 (id=482): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r5 = dup2(r3, r3) sendmmsg$unix(r5, &(0x7f000001cb40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)="ec103a6c349e71f3005b76e3d0d89df6bea4e2b75b25e4fb00"/40, 0x28}, {0x0, 0x2c}], 0x2, 0x0, 0x0, 0x80001}}], 0x1, 0x40844) 10.017528453s ago: executing program 3 (id=484): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000001480)=ANY=[], 0x0) 9.764598318s ago: executing program 0 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.756431848s ago: executing program 3 (id=487): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60941, 0x20) fcntl$setlease(r1, 0x400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)={0x4, 0x0, [{0x1000, 0x83, &(0x7f0000000580)=""/131}, {0x0, 0xad, &(0x7f0000000640)=""/173}, {0x1000, 0xb0, &(0x7f0000000700)=""/176}, {0x10000, 0x35, &(0x7f0000000080)=""/53}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000200)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005500)={0x2020}, 0x2020) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 6.494625822s ago: executing program 0 (id=489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 6.281302957s ago: executing program 0 (id=490): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x2073f, 0x4) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000001140)={[{@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@fat=@gid}, {@utf8no}, {@fat=@check_strict}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x89, 0x29b, &(0x7f0000000580)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6.280955227s ago: executing program 1 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfff, 0x40080) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000040)={0xe346, 0x12, [{0x4}, {0xa, 0x1}, {0xd, 0x1}, {0x9, 0x1}, {}, {0x1, 0x1}, {0xe, 0x1}, {0x6}, {0x8, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xd, 0x1}, {0xf}, {0x8, 0x1}, {0xf, 0x1}, {0x1}, {0x4}, {0x2}]}) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)) creat(&(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r7, r6, 0x4, r6}, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000180), 0x4) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d6d697865642c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235352c636865636b3d7374726963742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c004c21fbd23364597e61bd9e6c47bce24b3f93d831eaa8688deebdbf10d10f509bad0fabd2253225b10ce42f4dc8b613d3585bcb3b5892369a7a4e0325cb6510"], 0x25, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") 5.942799733s ago: executing program 0 (id=492): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.837676225s ago: executing program 3 (id=493): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000001}, 0x4840) r3 = dup(r0) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}], 0x1}, 0x0) 3.06579005s ago: executing program 1 (id=494): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x8004) 2.805282455s ago: executing program 1 (id=495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 2.660997018s ago: executing program 1 (id=496): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 2.184536498s ago: executing program 0 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd63"], 0x66) 1.953204012s ago: executing program 1 (id=498): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x2240802, &(0x7f00000003c0)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@minixdf}, {@dax}]}, 0x1, 0x513, &(0x7f0000000440)="$eJzs3c9vI1cdAPCvnThxfrRJSw+AoF3awoJW6yTeNqp6oOWEEKqE6BGkbUi8URQ7jmKnNGEP6RmJExKVOMGRP4DznrhzQXDjshyQ+BGBNkgcjGY8znoTexM2GzuKPx9pNPPmzc73vfX6vcw3a78ARtaNiDiIiImI+Cgi5rLzuWyL99tbct2jw/urR4f3V3PRan34j1xan5yLrj+TmMnuWYyI73874ke503Ebe/ubK9VqZScrLzRr2wuNvf3bG7WV9cp6ZatcXl5aXnznztvlJ+59Ea/VJrKjLz/8/cE3fpLcczY7092P56nd7sJxnMR4RHz3MoINwVjWn4lhN4Rnko+IlyPi9fT9Pxdj6asJAFxnrdZctOa6ywDAdZdPc2C5fCnLBcxGPl8qtXN4r8R0vlpvNG/dq+9urbVzZfNRyN/bqFYWs1zhfBRySXkpPX5cLp8o34mIlyLi55NTabm0Wq+uDfMHHwAYYTMn5v9/T7bnfwDgmisOuwEAwMCZ/wFg9Jj/AWD0mP8BYPS05/+pYTcDABggz/8AMHrM/wAwUr73wQfJ1jrKvv967eO93c36x7fXKo3NUm13tbRa39kurdfr6+l39tTOul+1Xt9eeit2P5n/5najudDY279bq+9uNe+m3+t9t1JIrzoYQM8AgH5eeu3Bn3LJjPzuVLpF11oOhaG2DLhs+WE3ABiasWE3ABiaHqt9TQ6jHcDgXeAZX3oAromz1tctnv6A0HuX2R7g8t38gvw/jKqu/L//BQwjRv4fRleP/D8wIlqt3HnX/I/zXggAXG1y/ECf3/+/nO1/k/1y4IdrJ6/47DJbBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFdbZ/3fUrYW+Gzk86VSxAsRMR+F3L2NamUxIl6MiD9OFiaT8tKQ2wwAXFT+r7ls/a+bc2/OPlH16szx4URE/PiXH/7ik5Vmc+cPERO5f052zjc/y86XB996AOBsnXk63Xc9yD86vL/a2QbZnr99KyKK7fhHhxNxdBx/PMbTfTEKETH9r1xWbst15S4u4uDTiPh8r/7nYjbNgbRXPj0ZP4n9wkDj55+In0/r2vvk7+Jzz6EtMGoeJOPP+73ef/m4ke57v/+L6Qh1cdn4l9xq9SgdAx/H74x/Y33GvxvnjfHW777TPpo6XfdpxBfHIzqxj7rGn078XJ/4b54z/p+/9Orr/epav4q4Gb3jd8daaNa2Fxp7+7c3aivrlfXKVrm8vLS8+M6dt8sLaY56of9s8Pd3b73Yry7p/3Sf+MUz+v/Vc/b/1//96AdfeUr8r7/RK34+XnlK/GRO/No5469M/7Z46uTM4/hrffp/1ut/65zxH/5l/9Sy4QDA8DT29jdXqtXKzigcJM/agwza+XH7KvT9ehzEgF/B/+fgvUHFmojeVT99o/3P7URVq/VMsfqNGM8j6wZcBcdv+oj4z1Ov/NmjVmtgzQIAAAAAAAAAAAAAALoM4hNLw+4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA19f/AgAA//9prcps") r1 = open(&(0x7f00000000c0)='.\x00', 0xc8000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) unshare(0x64000600) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.847418994s ago: executing program 3 (id=499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.252312696s ago: executing program 1 (id=500): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x44) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 0 (id=501): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 47.881364][ T4171] cgroup: Unknown subsys name 'net' [ 48.009392][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.480089][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.343317][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.389359][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 51.442088][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.515487][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 51.532901][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.579416][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.587327][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.595821][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.623727][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.631203][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.639067][ T4192] device bridge_slave_0 entered promiscuous mode [ 51.647684][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.654837][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.662576][ T4192] device bridge_slave_1 entered promiscuous mode [ 51.670020][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.677192][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.685700][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.729879][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.737035][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.745450][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.756709][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.763834][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.772152][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.816332][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.827305][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.857399][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.875154][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.884698][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.891766][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.899810][ T4194] device bridge_slave_0 entered promiscuous mode [ 51.908464][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.915602][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.923335][ T4194] device bridge_slave_1 entered promiscuous mode [ 51.930763][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.937927][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.946109][ T4186] device bridge_slave_0 entered promiscuous mode [ 51.955182][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.966745][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.996340][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.003417][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.011766][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.028249][ T4192] team0: Port device team_slave_0 added [ 52.036407][ T4192] team0: Port device team_slave_1 added [ 52.077721][ T4190] team0: Port device team_slave_0 added [ 52.093777][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.110699][ T4183] team0: Port device team_slave_0 added [ 52.118182][ T4190] team0: Port device team_slave_1 added [ 52.125069][ T4183] team0: Port device team_slave_1 added [ 52.131451][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.138850][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.165164][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.178859][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.189937][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.213946][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.221146][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.247369][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.275001][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.304341][ T4194] team0: Port device team_slave_0 added [ 52.319723][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.326922][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.353068][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.370398][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.377535][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.403606][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.417208][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.424312][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.451097][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.463591][ T4194] team0: Port device team_slave_1 added [ 52.488233][ T4186] team0: Port device team_slave_0 added [ 52.495024][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.501986][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.528070][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.560670][ T4186] team0: Port device team_slave_1 added [ 52.596634][ T4192] device hsr_slave_0 entered promiscuous mode [ 52.603282][ T4192] device hsr_slave_1 entered promiscuous mode [ 52.634832][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.641804][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.667864][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.681737][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.689219][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.696058][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.703803][ T4183] Cannot create hsr debugfs directory [ 52.709885][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.716940][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.743143][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.758992][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.766302][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.792454][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.803954][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.811130][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.837080][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.903265][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.911553][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.918286][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.926026][ T4190] Cannot create hsr debugfs directory [ 52.953520][ T4186] device hsr_slave_0 entered promiscuous mode [ 52.960443][ T4186] device hsr_slave_1 entered promiscuous mode [ 52.967062][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.975015][ T4186] Cannot create hsr debugfs directory [ 53.015036][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 53.024622][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 53.062634][ T4194] device hsr_slave_0 entered promiscuous mode [ 53.069513][ T4194] device hsr_slave_1 entered promiscuous mode [ 53.076190][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.083745][ T4194] Cannot create hsr debugfs directory [ 53.094259][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 53.100473][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.107092][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 53.306089][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.320913][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.330751][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.341062][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.409716][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.435184][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.452945][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.477716][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.491568][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.501819][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.511512][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.521087][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.535581][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.542889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.552108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.563417][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.587128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.596402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.605806][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.612945][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.622022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.630670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.639685][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.646780][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.654683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.677729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.701026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.710215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.719980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.729265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.766678][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.776089][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.794863][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.804925][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.813431][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.822735][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.832891][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.841739][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.858369][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.869092][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.897296][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.920258][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.980146][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.996932][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.005567][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.024400][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.037056][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.049226][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.071315][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.086341][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.123840][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.133881][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.143844][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.150978][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.159472][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.169598][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.179341][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.186425][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.194876][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.203368][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.212545][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.240518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.250018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.259695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.268802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.277992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.293028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.302683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.313333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.322526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.336753][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.347110][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.359553][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.375409][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.392864][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.410645][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.419348][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.429656][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.467392][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.479932][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.491772][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.498925][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.512442][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.521167][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.529971][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.537309][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.546683][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.555682][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.564245][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.572803][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.587852][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.596467][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.605006][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.612682][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.621225][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.640014][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.649311][ T4192] device veth0_vlan entered promiscuous mode [ 54.675822][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.685271][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.693205][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.710668][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.721326][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.730775][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.739389][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.750525][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.759055][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.769006][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.777804][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.794913][ T4192] device veth1_vlan entered promiscuous mode [ 54.805987][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.815626][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.827701][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.836547][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.845500][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.852554][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.860418][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.870149][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.878728][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.885800][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.893328][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.926246][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.939631][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.948562][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.958826][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.966629][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.976061][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.991820][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.015896][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.027530][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.037189][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.048681][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.057639][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.066584][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.094431][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 55.101894][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 55.109880][ T4192] device veth0_macvtap entered promiscuous mode [ 55.122455][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.130404][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.139643][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.149013][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.157321][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.167559][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.175735][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 55.176358][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.181807][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 55.196510][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.196583][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 55.210761][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.219123][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.227156][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.235139][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.250071][ T4192] device veth1_macvtap entered promiscuous mode [ 55.260498][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.270940][ T4183] device veth0_vlan entered promiscuous mode [ 55.279791][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.288917][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.297640][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.308763][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.333160][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.353751][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.371554][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.403361][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.418858][ T4183] device veth1_vlan entered promiscuous mode [ 55.429069][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.438414][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.446643][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.455460][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.463973][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.472858][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.479948][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.499719][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.519464][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.534006][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.543155][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.558958][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.568909][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.576095][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.585150][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.593702][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.602583][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.627044][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.638299][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.647529][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.658347][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.668442][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.695479][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.703058][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.710700][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.721124][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.745406][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.776833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.793702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.803351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.813093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.822671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.831737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.840696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.854956][ T4183] device veth0_macvtap entered promiscuous mode [ 55.861950][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.870460][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.879504][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.907750][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.919155][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.932327][ T4183] device veth1_macvtap entered promiscuous mode [ 55.943172][ T4186] device veth0_vlan entered promiscuous mode [ 55.958304][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.967355][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.976731][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.985702][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.993956][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.002620][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.011638][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.042582][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.065425][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.077669][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.090902][ T4186] device veth1_vlan entered promiscuous mode [ 56.105388][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.113693][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.129377][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.142700][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.153543][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.171827][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.185701][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.204491][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.221886][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.232664][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.242788][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.251904][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.299194][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.307526][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.316570][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.340831][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.364921][ T4190] device veth0_vlan entered promiscuous mode [ 56.375266][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.383073][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.383330][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.395850][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.406181][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.415634][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.423824][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.431976][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.440653][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.456308][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.465311][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.477026][ T4186] device veth0_macvtap entered promiscuous mode [ 56.510399][ T4190] device veth1_vlan entered promiscuous mode [ 56.521529][ T4186] device veth1_macvtap entered promiscuous mode [ 56.535246][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.551375][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.563114][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.571966][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.584438][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.592282][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.647403][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.663131][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.682835][ T4190] device veth0_macvtap entered promiscuous mode [ 56.706179][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.719039][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.734253][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.749762][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.759965][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.770678][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.786398][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.794007][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.802747][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.812522][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.820877][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.829910][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.844789][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.857364][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.866330][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.892000][ T4190] device veth1_macvtap entered promiscuous mode [ 56.903862][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.921970][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.930399][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.954403][ T4194] device veth0_vlan entered promiscuous mode [ 56.969182][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.987221][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.001663][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.020983][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.033888][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.057361][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.075956][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.091131][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.103983][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.118768][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.129838][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.141396][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.157488][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.169183][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.174420][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 57.179743][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.190792][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 57.196271][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.211535][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.223492][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.253823][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.341607][ T4289] usb usb8: usbfs: process 4289 (syz.2.3) did not claim interface 0 before use [ 57.916455][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 57.923401][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.931956][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 57.941479][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.954252][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 57.962845][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.979773][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.990334][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.999064][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.013338][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.029546][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.038702][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.053934][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.062848][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.079900][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.102457][ T4194] device veth1_vlan entered promiscuous mode [ 58.156261][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.171851][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.181720][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.197797][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.219404][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.078493][ T4194] device veth0_macvtap entered promiscuous mode [ 59.180126][ T4194] device veth1_macvtap entered promiscuous mode [ 59.216323][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.235220][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.243877][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.254833][ T4238] Bluetooth: hci1: command 0x0419 tx timeout [ 59.264382][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 59.328511][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.339129][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.353663][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.371657][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.384461][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.408907][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.421486][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.446097][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.456830][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.466812][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.477929][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.487911][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.498830][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.514671][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.329964][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 60.344500][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 60.363095][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 60.390953][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.414694][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.429688][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.434144][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.447648][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.459522][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.472599][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.482216][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.491503][ T26] audit: type=1326 audit(1758381727.414:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50544d4c29 code=0x7ffc0000 [ 60.508712][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.727342][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.778943][ T26] audit: type=1326 audit(1758381727.414:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50544d4c29 code=0x7ffc0000 [ 61.004642][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.204459][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.216910][ T26] audit: type=1326 audit(1758381727.434:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50544d4c29 code=0x7ffc0000 [ 61.247325][ T26] audit: type=1326 audit(1758381727.504:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50544d4c29 code=0x7ffc0000 [ 61.250235][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.269690][ T26] audit: type=1326 audit(1758381727.514:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50544d4c29 code=0x7ffc0000 [ 61.269727][ T26] audit: type=1326 audit(1758381727.674:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f50544d4c29 code=0x7ffc0000 [ 61.269761][ T26] audit: type=1326 audit(1758381727.674:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50544d4c29 code=0x7ffc0000 [ 61.269791][ T26] audit: type=1326 audit(1758381727.674:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50544d4c29 code=0x7ffc0000 [ 61.374568][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.389911][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.400057][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.410609][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.424878][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.512418][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.528428][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.540921][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.556330][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.570248][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.579768][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.588748][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.887202][ T4326] syz.0.12[4326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.887699][ T4326] syz.0.12[4326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.904040][ C0] sched: RT throttling activated [ 64.139957][ T4338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.443531][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.483641][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.513854][ T4346] loop1: detected capacity change from 0 to 512 [ 64.526204][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.532637][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.572578][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.586588][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.596490][ T4346] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 64.642765][ T4346] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 3: comm syz.1.17: lblock 0 mapped to illegal pblock 3 (length 1) [ 64.666547][ T4346] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.17: error -117 reading directory block [ 64.735681][ T4346] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 64.779427][ T4346] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,resgid=0x0000000000000000,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.dioread_nolock,nomblk_io_submit,jqfmt=vfsv1,nouid32,auto_da_alloc,init_itable=0x0000000000000004,,,errors=continue. Quota mode: writeback. [ 65.277854][ T4356] loop3: detected capacity change from 0 to 512 [ 67.055515][ T4356] ======================================================= [ 67.055515][ T4356] WARNING: The mand mount option has been deprecated and [ 67.055515][ T4356] and is ignored by this kernel. Remove the mand [ 67.055515][ T4356] option from the mount to silence this warning. [ 67.055515][ T4356] ======================================================= [ 67.153042][ T4356] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 67.899007][ T4366] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 68.893610][ T4371] loop3: detected capacity change from 0 to 256 [ 68.980575][ T4371] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.341280][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.341423][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.125358][ T4389] fuse: Unknown parameter '0x0000000000000003' [ 72.377817][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!! [ 72.379019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #31a!!! [ 72.383082][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #31a!!! [ 72.384069][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #31a!!! [ 72.385572][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #31a!!! [ 72.387958][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #31a!!! [ 72.394077][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #31a!!! [ 72.398119][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #31a!!! [ 72.404069][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #31a!!! [ 72.404424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.512604][ T4394] netlink: 56 bytes leftover after parsing attributes in process `syz.3.27'. [ 72.931004][ T4394] loop3: detected capacity change from 0 to 16 [ 73.937794][ T4394] erofs: (device loop3): mounted with root inode @ nid 36. [ 73.940223][ T4394] 9pnet: p9_fd_create_tcp (4394): problem connecting socket to 127.0.0.1 [ 75.873603][ T4412] Zero length message leads to an empty skb [ 76.456371][ T7] cfg80211: failed to load regulatory.db [ 78.889465][ T4433] Cannot find add_set index 2 as target [ 81.145349][ T4452] loop0: detected capacity change from 0 to 512 [ 81.730953][ T4452] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.45: casefold flag without casefold feature [ 81.844168][ T4452] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.45: couldn't read orphan inode 15 (err -117) [ 82.027889][ T4452] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.534777][ T4478] netlink: 'syz.4.51': attribute type 12 has an invalid length. [ 85.912892][ T4483] loop3: detected capacity change from 0 to 1024 [ 86.259674][ T4483] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.903795][ T4483] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none. [ 89.284573][ T4483] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.827744][ T4505] overlayfs: failed to resolve './file0': -2 [ 90.469099][ T4520] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.539396][ T4520] FAT-fs (loop1): unable to read boot sector [ 91.154096][ T4533] Cannot find add_set index 2 as target [ 91.764891][ T4400] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.465397][ T4400] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 92.904144][ T4400] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.075191][ T4400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.095470][ T4400] usb 3-1: config 0 descriptor?? [ 93.121040][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 93.177348][ T4400] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 93.590871][ T4553] loop3: detected capacity change from 0 to 512 [ 93.735138][ T4553] EXT4-fs (loop3): Ignoring removed bh option [ 93.810480][ T4553] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 93.962545][ T4553] EXT4-fs (loop3): 1 truncate cleaned up [ 93.971963][ T4553] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,abort,,errors=continue. Quota mode: writeback. [ 94.050139][ T4580] loop4: detected capacity change from 0 to 128 [ 94.223997][ T4177] udevd[4177]: incorrect ext4 checksum on /dev/loop4 [ 95.180036][ T21] usb 3-1: USB disconnect, device number 2 [ 95.416935][ T4653] loop2: detected capacity change from 0 to 256 [ 95.584093][ T4655] loop4: detected capacity change from 0 to 512 [ 97.815405][ T4662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.79'. [ 97.909487][ T4655] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 97.938280][ T4664] loop1: detected capacity change from 0 to 256 [ 98.326404][ T4671] syz.0.84 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.120106][ T4664] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 99.154351][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.606693][ T4664] FAT-fs (loop1): Filesystem has been set read-only [ 99.687561][ T4683] loop2: detected capacity change from 0 to 1024 [ 99.790362][ T4685] xt_hashlimit: max too large, truncated to 1048576 [ 99.854242][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 99.860523][ T4683] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 99.889247][ T4683] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.994907][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.002951][ T23] usb 4-1: config 0 has no interface number 0 [ 100.024428][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 100.084616][ T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.143802][ T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.343646][ T23] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 100.352866][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.369483][ T23] usb 4-1: config 0 descriptor?? [ 100.394427][ T7] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.414248][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.478772][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 100.724398][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 100.875588][ T4230] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 101.119951][ T4230] usb 5-1: config 0 has no interface number 0 [ 101.150922][ T23] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0001/input/input6 [ 101.184220][ T4230] usb 5-1: config 0 interface 184 has no altsetting 0 [ 101.189284][ T7] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.200866][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.207561][ T7] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 101.221292][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.241763][ T7] usb 2-1: config 0 descriptor?? [ 101.286658][ T7] usb 2-1: can't set config #0, error -71 [ 101.326394][ T7] usb 2-1: USB disconnect, device number 2 [ 101.378608][ T23] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0001/input/input7 [ 101.581339][ T4230] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.592969][ T23] uclogic 0003:28BD:0071.0001: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 101.614079][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.622101][ T4230] usb 5-1: Product: syz [ 101.638330][ T4230] usb 5-1: Manufacturer: syz [ 101.643730][ T23] usb 4-1: USB disconnect, device number 2 [ 101.649778][ T4230] usb 5-1: SerialNumber: syz [ 101.801066][ T4230] usb 5-1: config 0 descriptor?? [ 102.206786][ T4230] smsc75xx v1.0.0 [ 102.535349][ T4715] loop1: detected capacity change from 0 to 256 [ 102.662439][ T4713] fido_id[4713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.726164][ T4720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.96'. [ 102.782308][ T4717] loop2: detected capacity change from 0 to 8192 [ 102.831607][ T4703] syz.0.94[4703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.831709][ T4703] syz.0.94[4703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.862555][ T4230] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 102.966579][ T4230] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 103.116322][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.908271][ T4230] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 104.934341][ T4230] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 104.961830][ T4728] loop2: detected capacity change from 0 to 4096 [ 105.099645][ T4732] loop4: detected capacity change from 0 to 512 [ 105.924121][ T4230] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 105.944863][ T4230] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 105.957480][ T4728] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 106.014512][ T4732] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 106.024294][ T4728] fscrypt: Error allocating hmac(sha512): -2 [ 106.030327][ T4728] EXT4-fs (loop2): Error processing option "test_dummy_encryption" [-2] [ 106.090040][ T4732] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.284568][ T4732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.499749][ T4741] syz.0.103[4741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.499853][ T4741] syz.0.103[4741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.719888][ T4230] usb 5-1: USB disconnect, device number 2 [ 106.740384][ T4732] EXT4-fs (loop4): 1 truncate cleaned up [ 106.764421][ T4732] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,min_batch_time=0x0000000000000ffd,nolazytime,jqfmt=vfsold,errors=remount-ro,minixdf,errors=remount-ro,. Quota mode: none. [ 108.139589][ T4761] loop3: detected capacity change from 0 to 256 [ 108.184633][ T4190] EXT4-fs error (device loop4): mb_free_blocks:1860: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 108.217174][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 108.306388][ T4764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.110'. [ 108.401849][ T4767] loop4: detected capacity change from 0 to 256 [ 108.484269][ T4767] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.500719][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 111.754874][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.859047][ T4796] loop0: detected capacity change from 0 to 512 [ 111.939901][ T4796] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 111.978533][ T4796] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 112.004265][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 112.009213][ T4796] System zones: 0-1, 15-15, 18-18, 34-34 [ 112.028235][ T4796] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.046910][ T4796] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 112.073259][ T4796] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 112.121375][ T4796] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 112.150158][ T4796] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.119: bg 0: block 40: padding at end of block bitmap is not set [ 112.215999][ T7] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.227722][ T7] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.263940][ T4796] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 112.283676][ T4796] EXT4-fs (loop0): 1 truncate cleaned up [ 112.314532][ T4796] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 112.374486][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 112.396180][ T7] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 112.468905][ T7] usb 4-1: Product: syz [ 112.497634][ T7] usb 4-1: Manufacturer: syz [ 113.595367][ T7] hub 4-1:4.0: USB hub found [ 113.791283][ T4809] loop2: detected capacity change from 0 to 256 [ 113.814303][ T7] hub 4-1:4.0: 2 ports detected [ 114.913581][ T4816] loop4: detected capacity change from 0 to 256 [ 114.937200][ T4812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.121'. [ 114.998448][ T4816] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.224157][ T7] hub 4-1:4.0: set hub depth failed [ 116.020825][ T7] usb 4-1: USB disconnect, device number 4 [ 116.211873][ T4827] loop2: detected capacity change from 0 to 256 [ 116.696033][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 116.863073][ T4827] exfat: Unknown parameter 'vlan0' [ 118.365317][ T4835] syz.4.129[4835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.365435][ T4835] syz.4.129[4835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.868316][ T26] audit: type=1326 audit(1758381786.794:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 120.056548][ T4846] loop4: detected capacity change from 0 to 1024 [ 120.183848][ T26] audit: type=1326 audit(1758381786.904:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 120.236223][ T4846] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 120.328893][ T26] audit: type=1326 audit(1758381786.904:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 120.524990][ T26] audit: type=1326 audit(1758381786.904:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 120.556278][ T26] audit: type=1326 audit(1758381786.904:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 121.391785][ T26] audit: type=1326 audit(1758381786.904:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 121.413966][ T26] audit: type=1326 audit(1758381786.904:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 121.436740][ T26] audit: type=1326 audit(1758381786.904:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 121.458881][ T26] audit: type=1326 audit(1758381786.904:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 121.494777][ T26] audit: type=1326 audit(1758381786.904:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4843 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facb62f6c29 code=0x7ffc0000 [ 121.539699][ T4846] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 123.169179][ T4861] syz.0.135 (4861) used greatest stack depth: 17224 bytes left [ 123.301262][ T4867] loop1: detected capacity change from 0 to 256 [ 123.339271][ T4866] loop0: detected capacity change from 0 to 256 [ 123.373748][ T4863] loop2: detected capacity change from 0 to 4096 [ 123.443577][ T4866] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.485522][ T4863] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.746497][ T4873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.136'. [ 123.885504][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 124.627393][ T4681] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.024380][ T4681] usb 5-1: Using ep0 maxpacket: 32 [ 125.255054][ T4681] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 125.708010][ T4681] usb 5-1: config 0 has no interface number 0 [ 125.714547][ T4681] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 125.725920][ T4681] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 125.740721][ T4681] usb 5-1: config 0 interface 255 has no altsetting 0 [ 125.811152][ T4885] syz.0.142[4885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.811251][ T4885] syz.0.142[4885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.507856][ T4681] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 126.530860][ T4681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.539578][ T4681] usb 5-1: Product: syz [ 126.543771][ T4681] usb 5-1: Manufacturer: syz [ 126.549323][ T4681] usb 5-1: SerialNumber: syz [ 126.556411][ T4681] usb 5-1: config 0 descriptor?? [ 127.076614][ T4681] ftdi_sio 5-1:0.255: FTDI USB Serial Device converter detected [ 127.440773][ T4681] usb 5-1: Detected SIO [ 127.452804][ T4681] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 127.529447][ T4681] usb 5-1: USB disconnect, device number 3 [ 127.550637][ T4681] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 127.585553][ T4681] ftdi_sio 5-1:0.255: device disconnected [ 129.210393][ T4916] loop2: detected capacity change from 0 to 256 [ 129.453878][ T4919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.151'. [ 129.480215][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 129.653742][ T4905] xt_nfacct: accounting object `syz1' does not exist [ 130.274335][ T4923] loop2: detected capacity change from 0 to 256 [ 130.344793][ T4923] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.522440][ T4936] syz.2.156[4936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.522546][ T4936] syz.2.156[4936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.488347][ T4946] device bridge0 entered promiscuous mode [ 132.505867][ T4946] device macsec1 entered promiscuous mode [ 132.516028][ T4946] bridge0: port 3(macsec1) entered blocking state [ 132.522649][ T4946] bridge0: port 3(macsec1) entered disabled state [ 132.601574][ T4946] device bridge0 left promiscuous mode [ 132.786202][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.793224][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.424437][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.805360][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.850003][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.880098][ T4230] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 133.894119][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.942194][ T4230] usb 3-1: config 0 descriptor?? [ 134.055457][ T4954] loop3: detected capacity change from 0 to 256 [ 135.171726][ T4963] loop3: detected capacity change from 0 to 512 [ 135.367188][ T4963] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 135.414765][ T4230] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 135.507155][ T4230] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 135.804363][ T4230] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 135.863457][ T4230] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 135.914332][ T4230] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 135.995109][ T4230] usb 3-1: USB disconnect, device number 3 [ 136.207906][ T4965] loop2: detected capacity change from 0 to 256 [ 136.406426][ T4966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.165'. [ 137.600427][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 138.524389][ T4978] syz.2.169[4978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.524492][ T4978] syz.2.169[4978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.679622][ T4980] loop0: detected capacity change from 0 to 256 [ 139.068125][ T4980] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.893827][ T5005] loop4: detected capacity change from 0 to 256 [ 142.216688][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 142.875997][ T5005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.177'. [ 144.379936][ T5022] loop1: detected capacity change from 0 to 512 [ 144.564116][ T5022] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 145.076364][ T5024] syz.2.182[5024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.076467][ T5024] syz.2.182[5024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.989895][ T5035] loop0: detected capacity change from 0 to 256 [ 147.127417][ T5035] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.349239][ T5037] loop2: detected capacity change from 0 to 40427 [ 149.412257][ T5037] F2FS-fs (loop2): invalid crc value [ 149.467401][ T5037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.674920][ T5037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 150.531510][ T5047] loop0: detected capacity change from 0 to 40427 [ 150.635609][ T5047] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 150.664528][ T5047] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.710806][ T5047] F2FS-fs (loop0): invalid crc value [ 150.752706][ T5047] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.950840][ T5047] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 150.964046][ T5047] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.199385][ T5047] bridge: RTM_NEWNEIGH with invalid ether address [ 153.129293][ T5082] xt_nfacct: accounting object `syz1' does not exist [ 155.264271][ T5098] xt_nfacct: accounting object `syz1' does not exist [ 155.883502][ T5107] loop1: detected capacity change from 0 to 256 [ 157.315772][ T5113] loop1: detected capacity change from 0 to 40427 [ 157.411171][ T5113] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 157.438618][ T5113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 157.488873][ T5113] F2FS-fs (loop1): invalid crc value [ 157.573963][ T5113] F2FS-fs (loop1): Found nat_bits in checkpoint [ 157.736841][ T5113] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 157.751576][ T5113] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.146764][ T5128] bridge: RTM_NEWNEIGH with invalid ether address [ 159.395286][ T5142] xt_nfacct: accounting object `syz1' does not exist [ 160.190835][ T5153] loop4: detected capacity change from 0 to 256 [ 160.511706][ T5159] xt_nfacct: accounting object `syz1' does not exist [ 163.563280][ T5165] loop3: detected capacity change from 0 to 40427 [ 163.621812][ T5165] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 163.668905][ T5165] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 163.739041][ T5165] F2FS-fs (loop3): invalid crc value [ 163.807508][ T5188] xt_nfacct: accounting object `syz1' does not exist [ 163.980346][ T5165] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.205173][ T5165] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 164.236135][ T5165] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.550169][ T5201] loop2: detected capacity change from 0 to 256 [ 168.487241][ T5233] xt_nfacct: accounting object `syz1' does not exist [ 168.670424][ T5234] xt_nfacct: accounting object `syz1' does not exist [ 170.097988][ T5243] loop2: detected capacity change from 0 to 256 [ 171.566059][ T5237] loop3: detected capacity change from 0 to 40427 [ 171.614968][ T5237] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 171.661651][ T5237] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 171.725397][ T5237] F2FS-fs (loop3): invalid crc value [ 171.788720][ T5237] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.983389][ T5237] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 172.007589][ T5237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 172.784223][ T5261] bridge: RTM_NEWNEIGH with invalid ether address [ 173.760227][ T5267] Cannot find add_set index 2 as target [ 174.899874][ T5283] xt_nfacct: accounting object `syz1' does not exist [ 175.489031][ T5286] xt_nfacct: accounting object `syz1' does not exist [ 175.579476][ T5288] loop3: detected capacity change from 0 to 256 [ 176.749755][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 176.755916][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 176.761937][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 176.768159][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 176.778991][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 179.122846][ T5305] loop3: detected capacity change from 0 to 40427 [ 179.192557][ T5305] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 179.264197][ T5305] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 179.355130][ T5305] F2FS-fs (loop3): invalid crc value [ 179.431483][ T5305] F2FS-fs (loop3): Found nat_bits in checkpoint [ 179.664787][ T5305] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 179.688921][ T5305] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 180.066610][ T5323] bridge: RTM_NEWNEIGH with invalid ether address [ 180.371004][ T5326] Cannot find add_set index 2 as target [ 181.420330][ T5337] xt_nfacct: accounting object `syz1' does not exist [ 182.381914][ T5343] loop4: detected capacity change from 0 to 256 [ 185.294977][ T5362] xt_nfacct: accounting object `syz1' does not exist [ 187.087399][ T5376] Cannot find add_set index 2 as target [ 187.270603][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 188.082666][ T5365] loop4: detected capacity change from 0 to 40427 [ 188.154228][ T5365] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 188.204266][ T5365] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 188.359075][ T5365] F2FS-fs (loop4): invalid crc value [ 188.578344][ T5365] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 188.733456][ T5387] xt_nfacct: accounting object `syz1' does not exist [ 189.185983][ T5391] loop4: detected capacity change from 0 to 256 [ 189.983295][ T5399] xt_nfacct: accounting object `syz1' does not exist [ 193.534328][ T5422] Cannot find add_set index 2 as target [ 193.788064][ T5426] loop1: detected capacity change from 0 to 256 [ 194.093943][ T5421] loop0: detected capacity change from 0 to 40427 [ 194.125151][ T5421] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 194.135208][ T5421] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 194.147377][ T5421] F2FS-fs (loop0): invalid crc value [ 194.178710][ T5421] F2FS-fs (loop0): Found nat_bits in checkpoint [ 194.222545][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.228903][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.399418][ T5421] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 194.420012][ T5421] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 194.725361][ T5442] xt_nfacct: accounting object `syz1' does not exist [ 194.735906][ T5444] bridge: RTM_NEWNEIGH with invalid ether address [ 195.877595][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 197.903516][ T5467] xt_nfacct: accounting object `syz1' does not exist [ 198.954209][ T5472] loop0: detected capacity change from 0 to 256 [ 199.765885][ T5480] Cannot find add_set index 2 as target [ 202.954021][ T5496] xt_nfacct: accounting object `syz1' does not exist [ 203.368293][ T5488] loop0: detected capacity change from 0 to 40427 [ 203.438680][ T5488] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 203.504135][ T5488] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 203.629782][ T5488] F2FS-fs (loop0): invalid crc value [ 203.664315][ T5488] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 204.631589][ T5510] loop0: detected capacity change from 0 to 256 [ 206.683757][ T5530] Cannot find add_set index 2 as target [ 206.879901][ T5536] xt_nfacct: accounting object `syz1' does not exist [ 208.236425][ T5546] loop1: detected capacity change from 0 to 256 [ 208.354612][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 210.454507][ T5542] loop2: detected capacity change from 0 to 40427 [ 210.900722][ T5563] xt_nfacct: accounting object `syz1' does not exist [ 211.425890][ T5542] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 211.475930][ T5542] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 211.596669][ T5542] F2FS-fs (loop2): invalid crc value [ 211.624880][ T5542] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 213.052355][ T5583] loop2: detected capacity change from 0 to 256 [ 213.341192][ T5588] Cannot find add_set index 2 as target [ 214.500252][ T5603] xt_nfacct: accounting object `syz1' does not exist [ 215.989449][ T5614] xt_nfacct: accounting object `syz1' does not exist [ 217.291953][ T5612] loop0: detected capacity change from 0 to 40427 [ 217.326668][ T5612] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 217.366496][ T5612] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 217.411553][ T5612] F2FS-fs (loop0): invalid crc value [ 217.458492][ T5612] F2FS-fs (loop0): Found nat_bits in checkpoint [ 217.519706][ T5612] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 217.535272][ T5612] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 217.817270][ T5632] loop4: detected capacity change from 0 to 256 [ 217.827659][ T5630] bridge: RTM_NEWNEIGH with invalid ether address [ 218.427195][ T5638] Cannot find add_set index 2 as target [ 218.703582][ T5642] loop0: detected capacity change from 0 to 256 [ 218.776737][ T5642] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.182862][ T5654] xt_nfacct: accounting object `syz1' does not exist [ 220.635637][ T5656] xt_nfacct: accounting object `syz1' does not exist [ 222.187995][ T5673] loop3: detected capacity change from 0 to 256 [ 223.143717][ T5675] loop0: detected capacity change from 0 to 40427 [ 223.362744][ T5675] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 223.394529][ T5675] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 223.845583][ T5675] F2FS-fs (loop0): invalid crc value [ 223.923383][ T5675] F2FS-fs (loop0): Found nat_bits in checkpoint [ 224.226296][ T5702] xt_nfacct: accounting object `syz1' does not exist [ 224.298953][ T5675] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 224.332684][ T5675] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 224.675103][ T5706] xt_nfacct: accounting object `syz1' does not exist [ 224.817240][ T5713] bridge: RTM_NEWNEIGH with invalid ether address [ 226.624165][ T4238] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 226.667778][ T5729] loop0: detected capacity change from 0 to 256 [ 226.864192][ T4238] usb 4-1: Using ep0 maxpacket: 16 [ 226.986619][ T4238] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.007266][ T4238] usb 4-1: config 0 has no interface number 0 [ 227.033509][ T4238] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.061041][ T4238] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.091750][ T4238] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 227.140397][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.166701][ T5733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.176138][ T4238] usb 4-1: config 0 descriptor?? [ 227.194355][ T5733] device batadv_slave_0 entered promiscuous mode [ 227.448352][ T5722] syz.3.374[5722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.448458][ T5722] syz.3.374[5722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.760740][ T5722] syz.3.374[5722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.991082][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 228.223780][ T5722] syz.3.374[5722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.414413][ T4238] usbhid 4-1:0.1: can't add hid device: -71 [ 228.444543][ T4238] usbhid: probe of 4-1:0.1 failed with error -71 [ 228.626319][ T4238] usb 4-1: USB disconnect, device number 5 [ 229.226231][ T5751] xt_nfacct: accounting object `syz1' does not exist [ 230.310843][ T5768] loop0: detected capacity change from 0 to 256 [ 231.421378][ T5773] input: syz1 as /devices/virtual/input/input8 [ 232.845809][ T5761] loop3: detected capacity change from 0 to 40427 [ 232.970128][ T5761] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 233.002767][ T5761] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 233.014496][ T5792] xt_nfacct: accounting object `syz1' does not exist [ 233.031445][ T5761] F2FS-fs (loop3): invalid crc value [ 233.051635][ T5761] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 233.502017][ T5806] loop1: detected capacity change from 0 to 256 [ 233.886117][ T5804] xt_nfacct: accounting object `syz1' does not exist [ 235.919166][ T5827] loop3: detected capacity change from 0 to 256 [ 236.052819][ T5827] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.876242][ T5843] xt_nfacct: accounting object `syz1' does not exist [ 237.993270][ T5828] loop4: detected capacity change from 0 to 40427 [ 238.018711][ T5828] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 238.054007][ T5828] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 238.073838][ T5828] F2FS-fs (loop4): invalid crc value [ 238.148263][ T5828] F2FS-fs (loop4): Found nat_bits in checkpoint [ 238.272853][ T5828] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 238.290601][ T5828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 238.754329][ T5854] bridge: RTM_NEWNEIGH with invalid ether address [ 238.771953][ T5851] xt_nfacct: accounting object `syz1' does not exist [ 239.288853][ T5858] loop0: detected capacity change from 0 to 256 [ 240.437572][ T5868] loop4: detected capacity change from 0 to 256 [ 240.484217][ T1108] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 240.509691][ T5871] loop3: detected capacity change from 0 to 256 [ 240.556071][ T1108] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 240.648791][ T5871] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.120094][ T5885] xt_nfacct: accounting object `syz1' does not exist [ 241.684538][ T5876] fido_id[5876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.179144][ T5888] xt_nfacct: accounting object `syz1' does not exist [ 243.404091][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 244.614100][ T4229] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 244.629141][ T4229] usb 5-1: config 0 has no interface number 1 [ 244.645910][ T4229] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 244.693893][ T5896] loop1: detected capacity change from 0 to 40427 [ 244.707915][ T4229] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 244.735122][ T5896] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 244.790896][ T5896] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 244.873840][ T5912] syz.2.429[5912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.874533][ T5912] syz.2.429[5912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.964079][ T4229] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 245.945832][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.949230][ T5896] F2FS-fs (loop1): invalid crc value [ 246.027976][ T5896] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 246.282364][ T5916] loop4: detected capacity change from 0 to 1024 [ 246.551976][ T5916] EXT4-fs (loop4): Test dummy encryption mode enabled [ 246.566514][ T5916] EXT4-fs (loop4): inline encryption not supported [ 246.604625][ T5916] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 246.904778][ T4229] usb 5-1: SerialNumber: syz [ 246.910850][ T4229] usb 5-1: config 0 descriptor?? [ 246.934219][ T4229] usb 5-1: can't set config #0, error -71 [ 246.941156][ T4229] usb 5-1: USB disconnect, device number 4 [ 247.321849][ T5927] xt_nfacct: accounting object `syz1' does not exist [ 247.637983][ T5934] loop0: detected capacity change from 0 to 256 [ 249.347950][ T5934] netlink: 132 bytes leftover after parsing attributes in process `syz.0.436'. [ 251.707469][ T5965] loop0: detected capacity change from 0 to 256 [ 252.167497][ T5965] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.437485][ T5969] loop1: detected capacity change from 0 to 16 [ 252.521195][ T5969] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 252.818663][ T5959] loop3: detected capacity change from 0 to 40427 [ 252.890078][ T5959] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 252.976460][ T5959] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 253.092726][ T5959] F2FS-fs (loop3): invalid crc value [ 253.154748][ T5959] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.349999][ T5959] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 253.367469][ T5959] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 253.710188][ T5983] bridge: RTM_NEWNEIGH with invalid ether address [ 254.340141][ T5987] xt_nfacct: accounting object `syz1' does not exist [ 254.563399][ T5989] loop1: detected capacity change from 0 to 256 [ 254.712974][ T5990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.449'. [ 255.132687][ T5997] loop0: detected capacity change from 0 to 512 [ 255.818666][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.825081][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.941001][ T5997] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.379713][ T6019] device bridge0 entered promiscuous mode [ 259.385721][ T6019] device macsec1 entered promiscuous mode [ 259.395494][ T6019] bridge0: port 3(macsec1) entered blocking state [ 259.402113][ T6019] bridge0: port 3(macsec1) entered disabled state [ 259.424859][ T6019] device bridge0 left promiscuous mode [ 260.201874][ T6021] loop3: detected capacity change from 0 to 256 [ 260.298238][ T6021] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.814131][ T6014] usb usb6: usbfs: process 6014 (syz.1.454) did not claim interface 0 before use [ 262.335678][ T6031] process 'syz.3.457' launched '/dev/fd/4' with NULL argv: empty string added [ 265.176038][ T4627] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.188848][ T4284] Bluetooth: hci6: command 0x0409 tx timeout [ 266.301295][ T4627] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.350088][ T6064] loop1: detected capacity change from 0 to 256 [ 266.375998][ T4238] Bluetooth: hci5: command 0x0409 tx timeout [ 266.478557][ T6067] loop3: detected capacity change from 0 to 4096 [ 266.779213][ T6041] chnl_net:caif_netlink_parms(): no params data found [ 266.879054][ T6042] chnl_net:caif_netlink_parms(): no params data found [ 266.975906][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.983402][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.000540][ T6041] device bridge_slave_0 entered promiscuous mode [ 267.023160][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.039186][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.051713][ T6041] device bridge_slave_1 entered promiscuous mode [ 267.123322][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.141762][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.153564][ T6042] device bridge_slave_0 entered promiscuous mode [ 267.172027][ T6041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.187291][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.200489][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.212913][ T6042] device bridge_slave_1 entered promiscuous mode [ 267.227177][ T6041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.303152][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.326786][ T6041] team0: Port device team_slave_0 added [ 267.336862][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.364605][ T6041] team0: Port device team_slave_1 added [ 267.430206][ T6064] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.450364][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.466726][ T6067] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 267.474291][ T6067] EXT4-fs (loop3): Test dummy encryption mode enabled [ 267.499610][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.545634][ T6067] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 267.567175][ T6041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.745180][ T6042] team0: Port device team_slave_0 added [ 267.789877][ T6084] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 267.803472][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.818189][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.882332][ T6094] loop0: detected capacity change from 0 to 1024 [ 267.953126][ T6041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.973445][ T6094] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2130706437)! [ 268.005877][ T6042] team0: Port device team_slave_1 added [ 268.018047][ T4627] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.072955][ T6094] EXT4-fs (loop0): group descriptors corrupted! [ 268.294245][ T4284] Bluetooth: hci6: command 0x041b tx timeout [ 268.892703][ T6041] device hsr_slave_0 entered promiscuous mode [ 269.097606][ T6041] device hsr_slave_1 entered promiscuous mode [ 269.137678][ T6041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.153989][ T6041] Cannot create hsr debugfs directory [ 269.182116][ T4627] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.187338][ T4306] Bluetooth: hci5: command 0x041b tx timeout [ 269.274976][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.285878][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.342830][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.394606][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.401978][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.481881][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.709954][ T6104] loop0: detected capacity change from 0 to 40427 [ 269.756417][ T6104] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 269.826073][ T6111] loop3: detected capacity change from 0 to 512 [ 269.908017][ T6111] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 270.285597][ T6104] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 270.465226][ T6104] F2FS-fs (loop0): invalid crc value [ 270.535925][ T6042] device hsr_slave_0 entered promiscuous mode [ 270.585957][ T6042] device hsr_slave_1 entered promiscuous mode [ 270.602016][ T6104] F2FS-fs (loop0): Found nat_bits in checkpoint [ 270.627397][ T6042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.651457][ T6116] loop1: detected capacity change from 0 to 256 [ 270.668097][ T6042] Cannot create hsr debugfs directory [ 270.906765][ T4229] Bluetooth: hci6: command 0x040f tx timeout [ 270.938118][ T6104] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 270.984217][ T6104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 271.840662][ T4238] Bluetooth: hci5: command 0x040f tx timeout [ 272.053626][ T6122] bridge: RTM_NEWNEIGH with invalid ether address [ 272.579134][ T6142] loop3: detected capacity change from 0 to 256 [ 272.646400][ T6041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 272.729365][ T6041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 272.807653][ T6041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 272.837215][ T6042] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 272.867108][ T6041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.881073][ T6042] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 273.006165][ T4681] Bluetooth: hci6: command 0x0419 tx timeout [ 273.305629][ T6142] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.612266][ T6042] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 273.861623][ T6042] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 273.894276][ T4229] Bluetooth: hci5: command 0x0419 tx timeout [ 274.420482][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.440147][ T6041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.479306][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.501202][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.551092][ T6041] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.608325][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.630062][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.688840][ T6042] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.731211][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.750996][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.790638][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.797803][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.893391][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.913171][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.963383][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.981406][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.988583][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.005305][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.024409][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.045091][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.052225][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.071766][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.089568][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.107599][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.121827][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.129005][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.167940][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.226546][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.260642][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.281564][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.319090][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.350759][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.370591][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.382519][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.393563][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.419975][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.462506][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.535623][ T6193] loop1: detected capacity change from 0 to 512 [ 275.652002][ T6193] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 276.952982][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.995225][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.054749][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.536633][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.591736][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.667118][ T6197] loop0: detected capacity change from 0 to 256 [ 277.701901][ T6042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.084659][ T6201] loop1: detected capacity change from 0 to 256 [ 278.947075][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.084908][ T6201] FAT-fs (loop1): Directory bread(block 64) failed [ 279.091688][ T6201] FAT-fs (loop1): Directory bread(block 65) failed [ 279.098762][ T6201] FAT-fs (loop1): Directory bread(block 66) failed [ 279.105490][ T6201] FAT-fs (loop1): Directory bread(block 67) failed [ 279.112423][ T6201] FAT-fs (loop1): Directory bread(block 68) failed [ 279.119217][ T6201] FAT-fs (loop1): Directory bread(block 69) failed [ 279.126586][ T6201] FAT-fs (loop1): Directory bread(block 70) failed [ 279.133304][ T6201] FAT-fs (loop1): Directory bread(block 71) failed [ 279.140359][ T6201] FAT-fs (loop1): Directory bread(block 72) failed [ 279.147054][ T6201] FAT-fs (loop1): Directory bread(block 73) failed [ 279.583408][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.194111][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.413706][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.618441][ T6041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.788355][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.803833][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.825087][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.079020][ T4627] device hsr_slave_0 left promiscuous mode [ 281.144247][ T4627] device hsr_slave_1 left promiscuous mode [ 281.160636][ T4627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.181763][ T4627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.241520][ T4627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.252040][ T4627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.272175][ T4627] device bridge_slave_1 left promiscuous mode [ 281.285957][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.325979][ T4627] device bridge_slave_0 left promiscuous mode [ 281.332257][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.434866][ T4627] device veth1_macvtap left promiscuous mode [ 281.441416][ T4627] device veth0_macvtap left promiscuous mode [ 281.485424][ T4627] device veth1_vlan left promiscuous mode [ 281.501717][ T4627] device veth0_vlan left promiscuous mode [ 282.019929][ T6243] loop1: detected capacity change from 0 to 4096 [ 282.071968][ T6243] EXT4-fs (loop1): Test dummy encryption mode enabled [ 282.104795][ T6243] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 282.149637][ T4627] team0 (unregistering): Port device team_slave_1 removed [ 282.199448][ T4627] team0 (unregistering): Port device team_slave_0 removed [ 282.224534][ T4627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.241607][ T4627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.291155][ T6243] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 282.416334][ T6253] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 282.466796][ T6253] overlayfs: upper fs does not support tmpfile. [ 282.506733][ T6253] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 282.511038][ T4627] bond0 (unregistering): Released all slaves [ 282.842720][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.850822][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.921765][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.958119][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.053883][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.198610][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.572098][ T6279] device bridge0 entered promiscuous mode [ 283.578203][ T6279] device macsec1 entered promiscuous mode [ 283.589255][ T6279] bridge0: port 3(macsec1) entered blocking state [ 283.595940][ T6279] bridge0: port 3(macsec1) entered disabled state [ 283.618815][ T6279] device bridge0 left promiscuous mode [ 283.974128][ C0] ------------[ cut here ]------------ [ 283.980028][ C0] WARNING: CPU: 0 PID: 4608 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 283.989408][ C0] Modules linked in: [ 283.993347][ C0] CPU: 0 PID: 4608 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 284.001040][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 284.011153][ C0] Workqueue: bat_events batadv_nc_worker [ 284.016854][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 284.023070][ C0] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 284.042737][ C0] RSP: 0018:ffffc90000007778 EFLAGS: 00010246 [ 284.048900][ C0] RAX: ffffffff819ed760 RBX: 0000000000000008 RCX: ffff88807f038000 [ 284.056928][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.064980][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fe07001 [ 284.072976][ C0] R10: ffffed100fe07001 R11: 1ffff1100fe07000 R12: ffff88807f039788 [ 284.081044][ C0] R13: 00007ffffffff000 R14: ffffc900000077e8 R15: 0000000000000000 [ 284.089107][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 284.098120][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.104756][ C0] CR2: 0000000000000000 CR3: 00000000222b5000 CR4: 00000000003506f0 [ 284.112761][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.120818][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.128857][ C0] Call Trace: [ 284.132166][ C0] [ 284.135785][ C0] bpf_probe_read_compat+0xdd/0x170 [ 284.141038][ C0] bpf_prog_ea44d77e194c9431+0x35/0xca8 [ 284.146679][ C0] bpf_trace_run3+0x17e/0x320 [ 284.151383][ C0] ? bpf_trace_run2+0x2d0/0x2d0 [ 284.156335][ C0] ? hsr_forward_skb+0x666/0x16e0 [ 284.161385][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 284.166686][ C0] ? hsr_forward_skb+0x666/0x16e0 [ 284.171742][ C0] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 284.177471][ C0] ? hsr_forward_skb+0x666/0x16e0 [ 284.182525][ C0] kmem_cache_free+0x1e7/0x210 [ 284.187383][ C0] hsr_forward_skb+0x666/0x16e0 [ 284.192278][ C0] ? prp_fill_frame_info+0x660/0x660 [ 284.197657][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 284.202713][ C0] ? memset+0x1e/0x40 [ 284.206776][ C0] ? __skb_pad+0x407/0x620 [ 284.211220][ C0] send_hsr_supervision_frame+0x4de/0xa60 [ 284.217011][ C0] hsr_announce+0x162/0x300 [ 284.221539][ C0] ? hsr_dev_finalize+0x6e0/0x6e0 [ 284.226643][ C0] ? hsr_dev_finalize+0x6e0/0x6e0 [ 284.231694][ C0] call_timer_fn+0x16c/0x530 [ 284.236358][ C0] ? hsr_dev_finalize+0x6e0/0x6e0 [ 284.241404][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 284.247461][ C0] ? __run_timers+0x7c0/0x7c0 [ 284.252168][ C0] ? rcu_is_watching+0x11/0xa0 [ 284.257005][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 284.262232][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 284.267515][ C0] ? hsr_dev_finalize+0x6e0/0x6e0 [ 284.272569][ C0] __run_timers+0x525/0x7c0 [ 284.277167][ C0] ? detach_timer+0x2b0/0x2b0 [ 284.281870][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 284.287943][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 284.292816][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 284.298195][ C0] run_timer_softirq+0x63/0xf0 [ 284.302987][ C0] handle_softirqs+0x328/0x820 [ 284.307824][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 284.312711][ C0] ? do_softirq+0x200/0x200 [ 284.317316][ C0] __irq_exit_rcu+0x12f/0x220 [ 284.322025][ C0] ? irq_exit_rcu+0x20/0x20 [ 284.326605][ C0] irq_exit_rcu+0x5/0x20 [ 284.330879][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 284.336618][ C0] [ 284.339577][ C0] [ 284.342533][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 284.348598][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 284.353916][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 284.373654][ C0] RSP: 0018:ffffc9000359faa0 EFLAGS: 00000206 [ 284.379818][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6a267eeb309b1600 [ 284.387892][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2ac0 RDI: ffffffff8a59a480 [ 284.395936][ C0] RBP: ffffc9000359fbc0 R08: dffffc0000000000 R09: fffffbfff1ff7819 [ 284.403973][ C0] R10: fffffbfff1ff7819 R11: 1ffffffff1ff7818 R12: ffffffff8c11c660 [ 284.411972][ C0] R13: 1ffff920006b3f60 R14: 0000000000000246 R15: dffffc0000000000 [ 284.420080][ C0] ? rcu_lock_release+0x5/0x20 [ 284.424909][ C0] ? read_lock_is_recursive+0x10/0x10 [ 284.430322][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 284.435417][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 284.441434][ C0] rcu_lock_acquire+0x2a/0x30 [ 284.446170][ C0] ? rcu_lock_acquire+0x5/0x30 [ 284.450956][ C0] batadv_nc_worker+0xc9/0x5c0 [ 284.455797][ C0] process_one_work+0x863/0x1000 [ 284.460784][ C0] ? worker_detach_from_pool+0x240/0x240 [ 284.466479][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 284.471804][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 284.476893][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 284.482296][ C0] ? wq_worker_running+0x97/0x170 [ 284.487392][ C0] worker_thread+0xaa8/0x12a0 [ 284.492130][ C0] kthread+0x436/0x520 [ 284.496283][ C0] ? rcu_lock_release+0x20/0x20 [ 284.501159][ C0] ? kthread_blkcg+0xd0/0xd0 [ 284.505838][ C0] ret_from_fork+0x1f/0x30 [ 284.510298][ C0] [ 284.513338][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.520630][ C0] CPU: 0 PID: 4608 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 284.528281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 284.538355][ C0] Workqueue: bat_events batadv_nc_worker [ 284.544027][ C0] Call Trace: [ 284.547334][ C0] [ 284.550200][ C0] dump_stack_lvl+0x168/0x230 [ 284.554911][ C0] ? show_regs_print_info+0x20/0x20 [ 284.560138][ C0] ? load_image+0x3b0/0x3b0 [ 284.564680][ C0] panic+0x2c9/0x7f0 [ 284.568607][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 284.573143][ C0] ? ret_from_fork+0x1f/0x30 [ 284.577759][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 284.583334][ C0] __warn+0x248/0x2b0 [ 284.587340][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 284.592916][ C0] report_bug+0x1b7/0x2e0 [ 284.597275][ C0] handle_bug+0x3a/0x70 [ 284.601451][ C0] exc_invalid_op+0x16/0x40 [ 284.605974][ C0] asm_exc_invalid_op+0x16/0x20 [ 284.610840][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 284.617018][ C0] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 284.634037][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.636647][ C0] RSP: 0018:ffffc90000007778 EFLAGS: 00010246 [ 284.650230][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.650812][ C0] RAX: ffffffff819ed760 RBX: 0000000000000008 RCX: ffff88807f038000 [ 284.650832][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.650845][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fe07001 [ 284.679399][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.682810][ C0] R10: ffffed100fe07001 R11: 1ffff1100fe07000 R12: ffff88807f039788 [ 284.682831][ C0] R13: 00007ffffffff000 R14: ffffc900000077e8 R15: 0000000000000000 [ 284.682854][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 284.691736][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.698442][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 284.698473][ C0] bpf_probe_read_compat+0xdd/0x170 [ 284.708960][ T6042] device veth0_vlan entered promiscuous mode [ 284.711994][ C0] ? bpf_trace_run3+0x17e/0x320 [ 284.723692][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.725146][ C0] ? bpf_trace_run2+0x2d0/0x2d0 [ 284.725170][ C0] ? hsr_forward_skb+0x666/0x16e0 [ 284.731483][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.736334][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 284.736365][ C0] ? hsr_forward_skb+0x666/0x16e0 [ 284.736387][ C0] ? __bpf_trace_kmem_cache_free+0x99/0xc0 [ 284.748083][ T6042] device veth1_vlan entered promiscuous mode [ 284.748411][ C0] ? hsr_forward_skb+0x666/0x16e0 [ 284.772127][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 284.775670][ C0] ? kmem_cache_free+0x1e7/0x210 [ 284.775705][ C0] ? hsr_forward_skb+0x666/0x16e0 [ 284.782145][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 284.787491][ C0] ? prp_fill_frame_info+0x660/0x660 [ 284.787515][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 284.787538][ C0] ? memset+0x1e/0x40 [ 284.794646][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.799994][ C0] ? __skb_pad+0x407/0x620 [ 284.800027][ C0] ? send_hsr_supervision_frame+0x4de/0xa60 [ 284.805596][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.809970][ C0] ? hsr_announce+0x162/0x300 [ 284.809993][ C0] ? hsr_dev_finalize+0x6e0/0x6e0 [ 284.821940][ T6042] device veth0_macvtap entered promiscuous mode [ 284.822714][ C0] ? hsr_dev_finalize+0x6e0/0x6e0 [ 284.829297][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.831700][ C0] ? call_timer_fn+0x16c/0x530 [ 284.831728][ C0] ? hsr_dev_finalize+0x6e0/0x6e0 [ 284.842739][ T6042] device veth1_macvtap entered promiscuous mode [ 284.844005][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 284.844043][ C0] ? __run_timers+0x7c0/0x7c0 [ 284.863529][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.867516][ C0] ? rcu_is_watching+0x11/0xa0 [ 284.867543][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 284.867564][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 284.867582][ C0] ? hsr_dev_finalize+0x6e0/0x6e0 [ 284.867606][ C0] ? __run_timers+0x525/0x7c0 [ 284.867638][ C0] ? detach_timer+0x2b0/0x2b0 [ 284.867655][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 284.867683][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 284.867701][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 284.867730][ C0] ? run_timer_softirq+0x63/0xf0 [ 284.867750][ C0] ? handle_softirqs+0x328/0x820 [ 284.867772][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 284.867796][ C0] ? do_softirq+0x200/0x200 [ 284.867826][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 284.867844][ C0] ? irq_exit_rcu+0x20/0x20 [ 284.867874][ C0] ? irq_exit_rcu+0x5/0x20 [ 284.867889][ C0] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 284.867907][ C0] [ 284.867914][ C0] [ 284.867922][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 284.867953][ C0] ? lock_acquire+0x1f2/0x3f0 [ 284.867983][ C0] ? rcu_lock_release+0x5/0x20 [ 284.868001][ C0] ? read_lock_is_recursive+0x10/0x10 [ 284.868048][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 284.868070][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 284.868101][ C0] ? rcu_lock_acquire+0x2a/0x30 [ 284.868116][ C0] ? rcu_lock_acquire+0x5/0x30 [ 284.868131][ C0] ? batadv_nc_worker+0xc9/0x5c0 [ 284.868159][ C0] ? process_one_work+0x863/0x1000 [ 284.868194][ C0] ? worker_detach_from_pool+0x240/0x240 [ 284.868211][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 284.868234][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 284.876885][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.879482][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 284.879513][ C0] ? wq_worker_running+0x97/0x170 [ 284.889823][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.891709][ C0] ? worker_thread+0xaa8/0x12a0 [ 284.891760][ C0] ? kthread+0x436/0x520 [ 284.897084][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.902968][ C0] ? rcu_lock_release+0x20/0x20 [ 284.902989][ C0] ? kthread_blkcg+0xd0/0xd0 [ 284.909298][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.913626][ C0] ? ret_from_fork+0x1f/0x30 [ 284.913663][ C0] [ 284.924654][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.928997][ C0] Kernel Offset: disabled [ 285.171915][ C0] Rebooting in 86400 seconds..