last executing test programs: 4.059769194s ago: executing program 0 (id=457): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000104010100260ad02f000000050000010800034000007fff05000100010000000800054000000006"], 0x2c}, 0x1, 0x0, 0x0, 0x240c0009}, 0x20000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) 3.887960428s ago: executing program 2 (id=460): connect$unix(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000e40)=[{&(0x7f0000000bc0)='u', 0x1}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x44084) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/firmware/fdt', 0x0, 0x0) 3.887759248s ago: executing program 4 (id=461): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x2, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) 3.887655448s ago: executing program 4 (id=462): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000340)={"0c137b43cc00d731ff00070000007dab00", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{}]}) 3.577969732s ago: executing program 2 (id=464): r0 = socket(0xa, 0x3, 0xf7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r1, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 3.256018218s ago: executing program 4 (id=465): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private2, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002900000004"], 0x18}}], 0x1, 0x4000000) 3.171371115s ago: executing program 0 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000002b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.140569818s ago: executing program 2 (id=467): socket$nl_generic(0x10, 0x3, 0x10) brk(0x689d80000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x1009}}) io_uring_enter(r2, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 3.087958222s ago: executing program 4 (id=468): socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xe2, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xfe1e}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 2.779691727s ago: executing program 0 (id=469): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.157980747s ago: executing program 1 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}}, 0x20000000) 2.150151237s ago: executing program 2 (id=473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000280), &(0x7f00000003c0)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r0, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file5\x00', &(0x7f00000002c0), 0x800, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file5\x00', 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768b5fa24cef6efd89d5718fc89b68d3ccbb4ca7dc7d615408663367bd98415", @ANYBLOB="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", @ANYRESDEC, @ANYBLOB="000000000200"/28], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) 2.103601771s ago: executing program 1 (id=475): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_delete(r0) 2.041789826s ago: executing program 3 (id=477): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000040000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x140cc014) 1.899984217s ago: executing program 3 (id=478): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = userfaultfd(0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000104010100260ad02f000000050000010800034000007fff05000100010000000800054000000006"], 0x2c}, 0x1, 0x0, 0x0, 0x240c0009}, 0x20000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.62269034s ago: executing program 3 (id=479): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.480817881s ago: executing program 3 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000002b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.387880159s ago: executing program 3 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000003340), 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x39011, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e22, @private=0xa010102}}}, &(0x7f0000000040)=0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000240)="7c773d39aeef000000006dcffe32d6e49f") ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r8, 0x400448e7, &(0x7f0000000080)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 1.255396649s ago: executing program 2 (id=482): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) setresuid(0x0, 0xee00, 0x0) 1.215903642s ago: executing program 4 (id=483): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x41}, 0x1}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, 0x0) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000003d40), 0x0, 0x40010020, 0x0) r6 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) 947.955294ms ago: executing program 1 (id=484): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 884.433539ms ago: executing program 1 (id=485): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 860.430421ms ago: executing program 1 (id=486): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x9) 763.941068ms ago: executing program 1 (id=487): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x80000000, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x810, 0xffffffffffffffff, 0x0) getpid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open_tree(0xffffffffffffffff, 0x0, 0x88800) add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0xffffffffffffffff, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580), 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[], 0xfce1) ioctl$TCFLSH(r1, 0x540b, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x800000, &(0x7f0000000040), 0x111, 0x3}}, 0x20) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={0xffffffffffffffff, 0x1000, 0x9, "8010b6453c2f92f82b854f1124be6b228af1529d35279f5c07c88d7668374e58581c7466a331e72b71b6040ed231beab8887d81224e8e6"}) 656.397717ms ago: executing program 2 (id=488): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x2ff00) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0xa4a29afaa74aaeb4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) connect$bt_l2cap(r4, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0b080510"], 0xe) 654.745317ms ago: executing program 0 (id=489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x6, &(0x7f00000003c0)=[{0x8000, 0xff, 0x1, 0x3}, {0x1, 0x6, 0x6, 0x3}, {0x8, 0x4, 0xd, 0x6}, {0xb8b, 0x9, 0x80, 0xbf6}, {0x1d3, 0x8, 0x71}, {0x1, 0xf0, 0x4, 0xff}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'r\x00'}, 0x8) 629.291159ms ago: executing program 4 (id=490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) 582.258593ms ago: executing program 0 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000002b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 581.882753ms ago: executing program 0 (id=492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x88e, &(0x7f00000003c0)={0x0, 0x4436b, 0x0, 0x6, 0xbfdfeffd}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x12, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) rt_sigprocmask(0x3, 0x0, &(0x7f0000000240), 0xfea4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) set_tid_address(0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6021000000283afffe8000000000000000000000000000aaff0200000000000000000000000000018900907800000000ff020000000000000000000000000001000000000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 30.831807][ T4033] cgroup: Unknown subsys name 'net' [ 31.104519][ T4033] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.368791][ T4033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.229891][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 32.252757][ T4051] chnl_net:caif_netlink_parms(): no params data found [ 32.268748][ T4058] chnl_net:caif_netlink_parms(): no params data found [ 32.272258][ T4059] chnl_net:caif_netlink_parms(): no params data found [ 32.289309][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.290398][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.292559][ T4044] device bridge_slave_0 entered promiscuous mode [ 32.299473][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 32.305613][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.306701][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.308205][ T4044] device bridge_slave_1 entered promiscuous mode [ 32.331221][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.338327][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.339521][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.341049][ T4051] device bridge_slave_0 entered promiscuous mode [ 32.345798][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.350899][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.352144][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.353881][ T4058] device bridge_slave_0 entered promiscuous mode [ 32.355426][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.356471][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.357984][ T4051] device bridge_slave_1 entered promiscuous mode [ 32.368631][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.369822][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.371380][ T4058] device bridge_slave_1 entered promiscuous mode [ 32.378751][ T4059] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.379847][ T4059] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.381249][ T4059] device bridge_slave_0 entered promiscuous mode [ 32.386800][ T4044] team0: Port device team_slave_0 added [ 32.395465][ T4059] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.396527][ T4059] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.397969][ T4059] device bridge_slave_1 entered promiscuous mode [ 32.399910][ T4044] team0: Port device team_slave_1 added [ 32.407405][ T4058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.409872][ T4051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.411476][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.412899][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.414323][ T4048] device bridge_slave_0 entered promiscuous mode [ 32.421433][ T4051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.429322][ T4058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.430910][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.432173][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.433591][ T4048] device bridge_slave_1 entered promiscuous mode [ 32.448714][ T4051] team0: Port device team_slave_0 added [ 32.453290][ T4059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.455073][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.456183][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.460052][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.462581][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.463637][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.467823][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.472967][ T4051] team0: Port device team_slave_1 added [ 32.478616][ T4059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.486377][ T4058] team0: Port device team_slave_0 added [ 32.490807][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.493388][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.495711][ T4058] team0: Port device team_slave_1 added [ 32.510149][ T4059] team0: Port device team_slave_0 added [ 32.511468][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.512847][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.516811][ T4051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.572788][ T4044] device hsr_slave_0 entered promiscuous mode [ 32.621842][ T4044] device hsr_slave_1 entered promiscuous mode [ 32.665264][ T4059] team0: Port device team_slave_1 added [ 32.669066][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.670225][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.674478][ T4051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.677592][ T4048] team0: Port device team_slave_0 added [ 32.680086][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.681152][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.685210][ T4058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.687532][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.688613][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.693035][ T4058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.698161][ T4048] team0: Port device team_slave_1 added [ 32.703484][ T4059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.704590][ T4059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.708850][ T4059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.715997][ T4059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.717047][ T4059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.721202][ T4059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.736949][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.738072][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.744907][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.753535][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.754635][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.758643][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.802651][ T4051] device hsr_slave_0 entered promiscuous mode [ 32.841903][ T4051] device hsr_slave_1 entered promiscuous mode [ 32.901735][ T4051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.903010][ T4051] Cannot create hsr debugfs directory [ 32.952736][ T4058] device hsr_slave_0 entered promiscuous mode [ 33.011861][ T4058] device hsr_slave_1 entered promiscuous mode [ 33.051729][ T4058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.053188][ T4058] Cannot create hsr debugfs directory [ 33.112633][ T4059] device hsr_slave_0 entered promiscuous mode [ 33.151912][ T4059] device hsr_slave_1 entered promiscuous mode [ 33.211729][ T4059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.212998][ T4059] Cannot create hsr debugfs directory [ 33.272614][ T4048] device hsr_slave_0 entered promiscuous mode [ 33.321900][ T4048] device hsr_slave_1 entered promiscuous mode [ 33.361735][ T4048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.362928][ T4048] Cannot create hsr debugfs directory [ 33.454239][ T4044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.497237][ T4044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.542795][ T4044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.585886][ T4044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.649795][ T4051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.706129][ T4051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.742991][ T4051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.809822][ T4051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.844221][ T4048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.912699][ T4048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.954001][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.968099][ T4048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.025562][ T4048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.083765][ T4058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.102010][ T4103] Bluetooth: hci2: command 0x0409 tx timeout [ 34.111729][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 34.112714][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 34.123048][ T4058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.162626][ T4058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.181724][ T4096] Bluetooth: hci4: command 0x0409 tx timeout [ 34.182115][ T4104] Bluetooth: hci3: command 0x0409 tx timeout [ 34.215180][ T4059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.253409][ T4059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.274291][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.277564][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.279387][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.280825][ T4058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.322506][ T4059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.365518][ T4059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.407055][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.408800][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.410316][ T1624] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.411452][ T1624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.416044][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.417748][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.419201][ T1624] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.420318][ T1624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.422094][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.445316][ T4051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.452027][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.458180][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.462873][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.464463][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.466875][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.468243][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.469789][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.473155][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.474785][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.476233][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.477691][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.481488][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.484839][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.487235][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.494079][ T4051] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.504746][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.506250][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.507638][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.508750][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.510003][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.511408][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.514640][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.515730][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.524838][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.526005][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.527438][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.532640][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.534252][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.536084][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.539897][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.541399][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.547269][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.560982][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.569239][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.570744][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.572942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.574392][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.577510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.578775][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.585249][ T4058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.589196][ T4059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.595353][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.598526][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.600128][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.604898][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.606402][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.607891][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.609413][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.610838][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.611961][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.613960][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.616451][ T4051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.619012][ T4059] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.624768][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.626327][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.627637][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.628726][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.630169][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.632892][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.634501][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.635607][ T1621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.637106][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.642846][ T4058] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.655068][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.656726][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.658048][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.659156][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.660505][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.663340][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.664875][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.666278][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.667654][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.668695][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.670143][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.674907][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.676401][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.677541][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.678807][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.680338][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.682643][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.684188][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.685667][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.687204][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.688690][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.690192][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.691971][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.693429][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.695798][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.698935][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.706812][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.708203][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.709691][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.711299][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.715891][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.720714][ T4058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.723574][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.725208][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.726675][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.731077][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.734751][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.736352][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.737905][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.739462][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.748621][ T4059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.750198][ T4059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.754409][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.755971][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.757402][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.758841][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.760453][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.766467][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.767981][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.769788][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.771229][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.775962][ T4048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.778036][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.787866][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.789197][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.790723][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.795532][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.796672][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.797804][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.799942][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.809954][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.811379][ T1621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.817321][ T4044] device veth0_vlan entered promiscuous mode [ 34.820857][ T4051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.839020][ T4044] device veth1_vlan entered promiscuous mode [ 34.850893][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.852489][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.853990][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.866589][ T4044] device veth0_macvtap entered promiscuous mode [ 34.868046][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.869564][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.870810][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.873025][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.874566][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.876098][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.880001][ T4051] device veth0_vlan entered promiscuous mode [ 34.884835][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.886452][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.888075][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.889459][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.891533][ T4044] device veth1_macvtap entered promiscuous mode [ 34.898655][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.900097][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.901248][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.903630][ T4051] device veth1_vlan entered promiscuous mode [ 34.910803][ T4058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.915898][ T4059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.918259][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.919641][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.921066][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.923011][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.929747][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.932410][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.936168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.937695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.939254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.940697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.951459][ T4051] device veth0_macvtap entered promiscuous mode [ 34.960154][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.962855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.964332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.965802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.967323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.968793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.978144][ T4044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.979523][ T4044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.980771][ T4044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.982679][ T4044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.985189][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.986750][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.988154][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.989637][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.992579][ T4051] device veth1_macvtap entered promiscuous mode [ 34.996525][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.997872][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.999280][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.008043][ T4058] device veth0_vlan entered promiscuous mode [ 35.013377][ T4058] device veth1_vlan entered promiscuous mode [ 35.019098][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.020502][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.025580][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.027411][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.028727][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.030128][ T4059] device veth0_vlan entered promiscuous mode [ 35.031459][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.033651][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.035719][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.041465][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.043708][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.045227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.053714][ T4059] device veth1_vlan entered promiscuous mode [ 35.058903][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.060551][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.063982][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.068120][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.069633][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.071023][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.073325][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.084419][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.085915][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.089486][ T4051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.090933][ T4051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.092659][ T4051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.094077][ T4051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.101591][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.103497][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.108787][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.110410][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.112157][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.113521][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.116167][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.117441][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.119221][ T4059] device veth0_macvtap entered promiscuous mode [ 35.125347][ T4048] device veth0_vlan entered promiscuous mode [ 35.126649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.128108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.135830][ T4059] device veth1_macvtap entered promiscuous mode [ 35.140582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.142230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.143670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.157636][ T4058] device veth0_macvtap entered promiscuous mode [ 35.161482][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.162879][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.163821][ T4058] device veth1_macvtap entered promiscuous mode [ 35.169077][ T4048] device veth1_vlan entered promiscuous mode [ 35.170480][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.173196][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.174805][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.176435][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.178396][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.179720][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.181098][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.183587][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.184923][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.186307][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.188181][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.195606][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.196889][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.198430][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.203374][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.205050][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.206571][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.208238][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.209862][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.211453][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.217038][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.226513][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.227312][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.227765][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.229470][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.236834][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.238477][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.242489][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.244101][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.245625][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.247125][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.248687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.250116][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.251528][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.251626][ T4152] loop0: detected capacity change from 0 to 1024 [ 35.259278][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.261302][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.266092][ T4058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.267420][ T4058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.268755][ T4058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.270025][ T4058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.275632][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.277174][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.278660][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.280232][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.281615][ T4059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.284351][ T4059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.286578][ T4059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.290158][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.292156][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.297651][ T4059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.299054][ T4059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.300585][ T4059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.302134][ T4059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.302625][ T4152] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.304530][ T4048] device veth0_macvtap entered promiscuous mode [ 35.307658][ T4048] device veth1_macvtap entered promiscuous mode [ 35.362606][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.364145][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.365543][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.367096][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.368590][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.370077][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.371626][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.373991][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.376068][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.393834][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.395566][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.397090][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.398721][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.400274][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.402757][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.404251][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.405879][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.408726][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.410428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.415420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.416773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.418209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.419782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.421911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.434938][ T4048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.436266][ T4048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.437594][ T4048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.438912][ T4048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.457382][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.457555][ T358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.458584][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.459837][ T358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.462078][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.466834][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.466964][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.468086][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.470793][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.520677][ T358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.524257][ T358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.529106][ T4174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'. [ 35.537912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.577739][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.579043][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.580996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.616952][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.618259][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.619836][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.658096][ T4184] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 35.660145][ T4184] device syzkaller1 entered promiscuous mode [ 35.663667][ T4186] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 35.731788][ T4194] tipc: Started in network mode [ 35.732659][ T4194] tipc: Node identity , cluster identity 4711 [ 35.733726][ T4194] tipc: Failed to obtain node identity [ 35.734584][ T4194] tipc: Enabling of bearer rejected, failed to enable media [ 35.767360][ T4194] device syzkaller0 entered promiscuous mode [ 35.797061][ T4178] loop2: detected capacity change from 0 to 32768 [ 35.805207][ T4178] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4178) [ 35.815546][ T4178] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 35.816994][ T4178] BTRFS info (device loop2): enabling auto defrag [ 35.817992][ T4178] BTRFS info (device loop2): max_inline at 0 [ 35.818940][ T4178] BTRFS info (device loop2): enabling ssd optimizations [ 35.820001][ T4178] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 35.822083][ T4178] BTRFS info (device loop2): use lzo compression, level 0 [ 35.823164][ T4178] BTRFS info (device loop2): using free space tree [ 35.824086][ T4178] BTRFS info (device loop2): has skinny extents [ 35.934228][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 36.182195][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 36.183342][ T25] Bluetooth: hci1: command 0x041b tx timeout [ 36.184387][ T25] Bluetooth: hci2: command 0x041b tx timeout [ 36.261974][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 36.263145][ T25] Bluetooth: hci4: command 0x041b tx timeout [ 36.828756][ T4253] netlink: 16 bytes leftover after parsing attributes in process `syz.4.31'. [ 37.294702][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b0277a4c: rx timeout, send abort [ 37.296779][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b0277a4c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 37.381190][ T4268] device syzkaller1 entered promiscuous mode [ 38.017705][ T4308] netlink: 'syz.0.57': attribute type 4 has an invalid length. [ 38.039313][ T4313] Zero length message leads to an empty skb [ 38.134537][ T4334] netlink: 'syz.4.67': attribute type 4 has an invalid length. [ 38.223585][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 38.261818][ T25] Bluetooth: hci2: command 0x040f tx timeout [ 38.262934][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 38.263903][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 38.341913][ T25] Bluetooth: hci4: command 0x040f tx timeout [ 38.343021][ T25] Bluetooth: hci3: command 0x040f tx timeout [ 38.625493][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.626925][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.990727][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.004904][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.318940][ T4414] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.320485][ T4414] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.323419][ T4414] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.324914][ T4414] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.538852][ T4448] tipc: Started in network mode [ 39.539840][ T4448] tipc: Node identity fffff001, cluster identity 4711 [ 39.547961][ T4448] tipc: Node number set to 4294963201 [ 39.653917][ T4469] tipc: Started in network mode [ 39.654759][ T4469] tipc: Node identity 9afc7efc832e, cluster identity 4711 [ 39.656027][ T4469] tipc: Enabled bearer , priority 0 [ 39.665188][ T4469] tipc: Resetting bearer [ 39.667739][ T4468] tipc: Disabling bearer [ 39.709344][ T148] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 39.720549][ C1] vcan0: j1939_tp_rxtimer: 0x00000000900888ed: rx timeout, send abort [ 39.722005][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000900888ed: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 39.740700][ T4477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.129'. [ 40.352455][ T25] Bluetooth: hci0: command 0x0419 tx timeout [ 40.353641][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 40.354773][ T25] Bluetooth: hci2: command 0x0419 tx timeout [ 40.423052][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 40.424348][ T25] Bluetooth: hci4: command 0x0419 tx timeout [ 40.610769][ T4521] netlink: 200 bytes leftover after parsing attributes in process `syz.2.147'. [ 40.746061][ T4543] loop2: detected capacity change from 0 to 2048 [ 40.768981][ T4545] udc-core: couldn't find an available UDC or it's busy [ 40.770140][ T4545] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 41.115191][ T4543] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.162084][ T4555] loop4: detected capacity change from 0 to 256 [ 41.166214][ T4557] loop2: detected capacity change from 0 to 1024 [ 41.193916][ T4555] exfat: Deprecated parameter 'namecase' [ 41.194841][ T4555] exfat: Deprecated parameter 'namecase' [ 41.203678][ T4557] ======================================================= [ 41.203678][ T4557] WARNING: The mand mount option has been deprecated and [ 41.203678][ T4557] and is ignored by this kernel. Remove the mand [ 41.203678][ T4557] option from the mount to silence this warning. [ 41.203678][ T4557] ======================================================= [ 41.205065][ T4555] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 41.222375][ T4555] attempt to access beyond end of device [ 41.222375][ T4555] loop4: rw=0, want=34225520825, limit=256 [ 41.240411][ T4557] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.499821][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 41.509069][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 41.542341][ T4579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.544967][ T4581] IPv6: Can't replace route, no match found [ 41.815738][ T4620] loop1: detected capacity change from 0 to 256 [ 41.828781][ T4620] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 41.837689][ T4620] binfmt_misc: register: failed to install interpreter file ./file0 [ 41.890839][ T4618] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 41.929204][ T4627] loop0: detected capacity change from 0 to 128 [ 41.961323][ T4631] loop1: detected capacity change from 0 to 512 [ 41.968044][ T4627] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 41.971348][ T4627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 41.989097][ T4631] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 41.989097][ T4631] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 41.989097][ T4631] [ 42.000884][ T4631] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 42.000884][ T4631] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.000884][ T4631] [ 42.015329][ T4631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.022793][ T4631] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.043737][ T4631] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032019, mo2=0000] [ 42.054439][ T4631] EXT4-fs (loop1): 1 truncate cleaned up [ 42.055608][ T4631] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x000000000000000c,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 42.112318][ T136] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 42.114658][ T136] EXT4-fs error (device loop1): ext4_release_dquot:6243: comm kworker/u4:1: Failed to release dquot type 1 [ 42.157283][ T4639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 42.211589][ T4645] loop0: detected capacity change from 0 to 256 [ 42.312575][ T4653] loop1: detected capacity change from 0 to 1024 [ 42.327067][ T4653] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 42.337201][ T4653] EXT4-fs error (device loop1): __ext4_iget:4894: inode #3: block 1803188595: comm syz.1.203: invalid block [ 42.344460][ T4653] EXT4-fs (loop1): no journal found [ 42.355235][ T4657] netlink: 'syz.0.205': attribute type 9 has an invalid length. [ 42.358702][ T4657] netlink: 'syz.0.205': attribute type 6 has an invalid length. [ 42.369320][ T4657] netlink: 'syz.0.205': attribute type 7 has an invalid length. [ 42.374782][ T4657] netlink: 'syz.0.205': attribute type 8 has an invalid length. [ 42.560557][ T4670] loop1: detected capacity change from 0 to 1024 [ 42.604688][ T4670] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.211: Invalid block bitmap block 0 in block_group 0 [ 42.607976][ T4670] Quota error (device loop1): write_blk: dquota write failed [ 42.609136][ T4670] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 42.610590][ T4670] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.211: Failed to acquire dquot type 0 [ 42.939588][ T4670] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.211: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.950760][ T4670] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.211: Invalid inode bitmap blk 0 in block_group 0 [ 42.958251][ T136] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 42.959506][ T136] EXT4-fs error (device loop1): ext4_release_dquot:6243: comm kworker/u4:1: Failed to release dquot type 0 [ 42.973628][ T4670] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 42.976921][ T4670] EXT4-fs (loop1): 1 orphan inode deleted [ 42.977933][ T4670] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 43.180297][ T4684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'. [ 43.181823][ T4684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'. [ 43.183211][ T4684] netlink: 5 bytes leftover after parsing attributes in process `syz.0.214'. [ 43.569699][ T4688] udc-core: couldn't find an available UDC or it's busy [ 43.570933][ T4688] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.579255][ T4686] loop1: detected capacity change from 0 to 2048 [ 43.588161][ T4686] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 43.592881][ T4686] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 44.159465][ T4696] loop0: detected capacity change from 0 to 1024 [ 44.387076][ T4701] input: syz1 as /devices/virtual/input/input2 [ 44.446788][ T4703] loop2: detected capacity change from 0 to 2048 [ 44.468707][ T4703] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 44.479904][ T4703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 44.531208][ T4705] device syzkaller0 entered promiscuous mode [ 44.624674][ T4711] loop2: detected capacity change from 0 to 1024 [ 44.657212][ T4711] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.658952][ T4711] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.660888][ T4711] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.226: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.710402][ T4711] EXT4-fs (loop2): 1 orphan inode deleted [ 44.711302][ T4711] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.011566][ T4734] loop2: detected capacity change from 0 to 128 [ 45.019846][ T4739] loop1: detected capacity change from 0 to 512 [ 45.024963][ T4740] loop3: detected capacity change from 0 to 8 [ 45.063166][ T4739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.068563][ T4739] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.072336][ T4739] EXT4-fs (loop1): 1 truncate cleaned up [ 45.075352][ T4739] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x00000000000007ff,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 45.158526][ T4734] device sit0 entered promiscuous mode [ 45.167683][ T4734] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 45.168911][ T4734] netlink: 1 bytes leftover after parsing attributes in process `syz.2.237'. [ 45.184360][ T4745] loop1: detected capacity change from 0 to 764 [ 45.210255][ T4750] loop3: detected capacity change from 0 to 1024 [ 45.240988][ T4745] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 45.244293][ T4750] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.246055][ T4750] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.249911][ T4745] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 45.263050][ T4750] JBD2: no valid journal superblock found [ 45.264729][ T4750] EXT4-fs (loop3): error loading journal [ 45.269966][ T4759] loop2: detected capacity change from 0 to 128 [ 45.284458][ T4761] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 45.288112][ T4761] loop0: detected capacity change from 0 to 512 [ 45.347868][ T4761] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.247: corrupted xattr block 255 [ 45.350314][ T4761] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 45.351506][ T4761] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 45.364800][ T4761] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.247: corrupted xattr block 255 [ 45.388790][ T4752] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 45.390136][ T4752] netlink: 1 bytes leftover after parsing attributes in process `syz.2.244'. [ 45.648225][ T4783] loop2: detected capacity change from 0 to 1024 [ 45.882705][ T4783] hfsplus: umask requires a value [ 45.883686][ T4783] hfsplus: unable to parse mount options [ 46.037274][ T4797] loop0: detected capacity change from 0 to 512 [ 46.057446][ T4797] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.228392][ T4806] loop1: detected capacity change from 0 to 8192 [ 46.514531][ T4811] loop3: detected capacity change from 0 to 256 [ 46.706322][ T4811] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 46.708492][ T4811] exFAT-fs (loop3): failed to load alloc-bitmap [ 46.709571][ T4811] exFAT-fs (loop3): failed to recognize exfat type [ 46.773831][ T4818] usb usb1: usbfs: process 4818 (syz.2.266) did not claim interface 0 before use [ 46.832276][ T4822] udc-core: couldn't find an available UDC or it's busy [ 46.836506][ T4822] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.850178][ T4822] loop2: detected capacity change from 0 to 16 [ 46.866126][ T4824] loop4: detected capacity change from 0 to 512 [ 46.908414][ T4824] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 46.912923][ T4822] erofs: (device loop2): mounted with root inode @ nid 36. [ 46.927035][ T4824] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.928737][ T4824] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.268: Block bitmap for bg 0 marked uninitialized [ 46.946788][ T4824] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 46.951048][ T4824] EXT4-fs (loop4): 1 orphan inode deleted [ 46.961511][ T4824] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.017443][ T4830] udc-core: couldn't find an available UDC or it's busy [ 47.021828][ T4830] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.047141][ T4828] loop3: detected capacity change from 0 to 4096 [ 47.082719][ T4828] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.183557][ T4837] loop0: detected capacity change from 0 to 1024 [ 47.194818][ T4846] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 47.536798][ T4849] loop1: detected capacity change from 0 to 512 [ 47.588056][ T4849] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #2: comm syz.1.278: corrupted xattr block 255 [ 47.589303][ T1022] hfsplus: b-tree write err: -5, ino 4 [ 47.590126][ T4849] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 47.593369][ T4849] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 47.596942][ T4849] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #2: comm syz.1.278: corrupted xattr block 255 [ 47.619425][ T4852] udc-core: couldn't find an available UDC or it's busy [ 47.620481][ T4852] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.680246][ T4858] loop0: detected capacity change from 0 to 512 [ 47.685852][ T4858] EXT4-fs (loop0): Unrecognized mount option "fsuuid=d 6fef [ 47.685852][ T4858] c-153b-9U9a-ec i-50e3f538" or missing value [ 48.490112][ T4924] tap0: tun_chr_ioctl cmd 35108 [ 49.472858][ T5079] 9pnet_virtio: no channels available for device syz [ 49.537902][ T5085] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 50.090796][ T5112] udc-core: couldn't find an available UDC or it's busy [ 50.093429][ T5112] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.120952][ T5108] Invalid ELF header magic: != ELF [ 50.745086][ T5131] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 50.765793][ T5131] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.767984][ T5131] bond0: (slave team0): Enslaving as an active interface with an up link [ 50.855190][ T5136] udc-core: couldn't find an available UDC or it's busy [ 50.856474][ T5136] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.182572][ T5144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.415'. [ 51.238729][ T5146] udc-core: couldn't find an available UDC or it's busy [ 51.239981][ T5146] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.636668][ T5158] netlink: 'syz.4.417': attribute type 4 has an invalid length. [ 51.654750][ T5158] netlink: 'syz.4.417': attribute type 4 has an invalid length. [ 51.799442][ T5163] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 51.805517][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.806938][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.953502][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.954743][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.955997][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.957141][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.972255][ T5163] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 51.996344][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 51.997814][ T5164] device bridge_slave_1 left promiscuous mode [ 52.001735][ T5164] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.054630][ T5164] device bridge_slave_0 left promiscuous mode [ 52.055918][ T5164] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.105421][ T5164] bond0: (slave bridge0): Releasing backup interface [ 52.231502][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 52.273535][ T5174] udc-core: couldn't find an available UDC or it's busy [ 52.277304][ T5174] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.111195][ T26] audit: type=1326 audit(59.082:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.115005][ T26] audit: type=1326 audit(59.082:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.125850][ T26] audit: type=1326 audit(59.092:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.133806][ T26] audit: type=1326 audit(59.092:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.146770][ T26] audit: type=1326 audit(59.092:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.181529][ T26] audit: type=1326 audit(59.092:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.202464][ T26] audit: type=1326 audit(59.092:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.226450][ T26] audit: type=1326 audit(59.092:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.257876][ T26] audit: type=1326 audit(59.102:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.261275][ T26] audit: type=1326 audit(59.102:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94e450a8 code=0x7ffc0000 [ 53.757398][ T5233] udc-core: couldn't find an available UDC or it's busy [ 53.787047][ T5233] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.797022][ T5235] udc-core: couldn't find an available UDC or it's busy [ 53.808352][ T5235] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.838114][ T5239] udc-core: couldn't find an available UDC or it's busy [ 53.839262][ T5239] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.222129][ T5248] binder: 5240:5248 ioctl c0306201 0 returned -14 [ 54.225922][ T5248] binder: 5240:5248 got transaction to invalid handle, 1 [ 54.227152][ T5248] binder: 5240:5248 transaction failed 29201/-22, size 0-0 line 2917 [ 54.327821][ T5254] netlink: 165 bytes leftover after parsing attributes in process `syz.3.459'. [ 54.857184][ T5263] netlink: 'syz.3.463': attribute type 10 has an invalid length. [ 55.089786][ T1541] binder: undelivered TRANSACTION_ERROR: 29201 [ 55.109335][ T5263] team0: Port device netdevsim0 added [ 56.004430][ T5285] process 'syz.3.471' launched './file1' with NULL argv: empty string added [ 56.026740][ T4417] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.266756][ T4417] usb 1-1: Using ep0 maxpacket: 8 [ 56.386652][ T4417] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 56.388043][ T4417] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.389382][ T4417] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.390798][ T4417] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.392348][ T4417] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.403052][ T4417] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 56.410037][ T4417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.686543][ T4417] usb 1-1: GET_CAPABILITIES returned 0 [ 56.687643][ T4417] usbtmc 1-1:16.0: can't read capabilities [ 57.034971][ T5316] udc-core: couldn't find an available UDC or it's busy [ 57.038623][ T5316] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.054698][ T5280] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 57.097224][ T5313] 9pnet_virtio: no channels available for device syz [ 57.097318][ T25] usb 1-1: USB disconnect, device number 2 [ 58.357791][ T5351] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 58.362054][ T5351] futex_wake_op: syz.2.488 tries to shift op by 144; fix this program [ 58.362122][ T5351] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 58.362130][ T5351] Modules linked in: [ 58.362137][ T5351] CPU: 1 PID: 5351 Comm: syz.2.488 Not tainted 5.15.189-syzkaller #0 [ 58.362144][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 58.362148][ T5351] pstate: 82000405 (Nzcv daif -PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 58.362156][ T5351] pc : do_futex+0x848/0x257c [ 58.362168][ T5351] lr : do_futex+0x814/0x257c [ 58.362173][ T5351] sp : ffff80001fe578a0 [ 58.362175][ T5351] x29: ffff80001fe57c20 x28: 00000000fffffff2 x27: 00000000a0090199 [ 58.362186][ T5351] x26: ffff0000d9f23680 x25: 0000000000000001 x24: 0000000000000002 [ 58.362195][ T5351] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000 [ 58.362203][ T5351] x20: 0000000000000000 x19: 1fffe0001b3e4979 x18: 0000000000000001 [ 58.362212][ T5351] x17: 0000000000000002 x16: ffff8000083bf9c0 x15: 0000000000000004 [ 58.362221][ T5351] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000010000 [ 58.362230][ T5351] x11: 00000000fffffff5 x10: 00000000fffffff2 x9 : ffff8000083bf98c [ 58.362239][ T5351] x8 : 0000000000000080 x7 : 0000000000000000 x6 : 0000000000000000 [ 58.362247][ T5351] x5 : ffff800016f65908 x4 : 0000000000000000 x3 : ffff80000850433c [ 58.362256][ T5351] x2 : 0000000000000001 x1 : ffff80001435cb90 x0 : 0000000000000002 [ 58.362265][ T5351] Call trace: [ 58.362267][ T5351] do_futex+0x848/0x257c [ 58.362273][ T5351] __arm64_sys_futex+0x388/0x400 [ 58.362279][ T5351] invoke_syscall+0x98/0x2b8 [ 58.362289][ T5351] el0_svc_common+0x138/0x258 [ 58.362295][ T5351] do_el0_svc+0x58/0x14c [ 58.362302][ T5351] el0_svc+0x78/0x1e0 [ 58.362310][ T5351] el0t_64_sync_handler+0xcc/0xe4 [ 58.362317][ T5351] el0t_64_sync+0x1a0/0x1a4 [ 58.362331][ T5351] Code: 3400009c 4b1c0108 35ffff68 2a0b03fc (d5033bbf) [ 58.362337][ T5351] ---[ end trace 71db4b867ea234bb ]--- [ 58.572063][ T5351] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 58.573240][ T5351] SMP: stopping secondary CPUs [ 58.574009][ T5351] Kernel Offset: disabled [ 58.574652][ T5351] CPU features: 0x8,000003c1,7d33ffd9 [ 58.575508][ T5351] Memory Limit: none [ 58.784504][ T5351] Rebooting in 86400 seconds..