last executing test programs: 21.263321042s ago: executing program 2: syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000140)='./bus\x00', 0x14000, &(0x7f0000000000)=ANY=[], 0xc, 0x299, &(0x7f0000000e80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = socket$kcm(0x21, 0x0, 0x2) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x110, 0xd}}], 0x18}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xadc51, 0x0) 19.039321169s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x80fe, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.13152716s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a00000005000100070000000900020073797a30000000000500040000000000140007800800134000000000080006400000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 8.602931292s ago: executing program 2: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB="636f6465706167653d6370313235312c696f636861727365743d69736f383835392d342c747970653daa5448a32c00afce260e2a0771ea36bb8da71246382c41b1a4c98fa73c"], 0x4, 0x339, &(0x7f00000004c0)="$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") statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000e00)=""/176) 2.517666808s ago: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000700)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0xe000000d}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x6, 0xc, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x0, 0x0, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f1350837ea6296c27ce6ae65a87d1afb1f9d684d16000000000000000026bdfd56a26f139224e13a8a9c74db3a4d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00'}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000400)='./bus/file0\x00', 0x1008002, &(0x7f0000000600), 0x1, 0x606, &(0x7f0000000cc0)="$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") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) fallocate(r5, 0x0, 0x0, 0xb5) open(0x0, 0x87c1c4810c1c22f3, 0x0) fallocate(r4, 0x0, 0x0, 0xf4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.12456568s ago: executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0xfe}) 2.035413324s ago: executing program 0: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x12) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r5, 0x5432, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 1.09458347s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x119, 0x8, &(0x7f0000000000), 0x4) 985.621977ms ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000000)) 984.094527ms ago: executing program 3: prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 901.20296ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 881.215463ms ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200810000000000000000000000000000000000000000000000001000000a69bbfa853b"], 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 795.836076ms ago: executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x498, 0x0, 0x3f0, 0xffffffff, 0x0, 0x0, 0x508, 0x508, 0xffffffff, 0x508, 0x508, 0x5, 0x0, {[{{@ipv6={@loopback, @remote, [], [], 'hsr0\x00', 'team0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@local, @port, @icmp_id}}}, {{@ipv6={@private0, @private0, [], [], 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) 795.256576ms ago: executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/212, 0xd4, 0x0, 0x0}, &(0x7f0000000200)=0x40) 671.251026ms ago: executing program 4: mlockall(0x7) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc004) 640.59423ms ago: executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 599.466557ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0d04000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000008000240000000000c00048005000900310000000c000380050001008d0000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 489.744884ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x407, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 478.803906ms ago: executing program 1: syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="fb270d546bcf83ef0b1ac397e70cecce18f99c075b5a7dba1c3e62b1ba8d4e6d17d00ef7b5514fb9be0f3537ea1870bbff68f870f5651fb45afc4ed82e667e11c7e27e90134a4052e1750d7e0370b13b29293dec5b1acdeaa6e99641491aef9aee5e2baa41d42c360f8e72bd4a2b0235d2cb1aec9ef23d7326bfa9", @ANYRES8, @ANYRES64, @ANYBLOB], 0x8b, 0x290, &(0x7f0000000180)="$eJzs3c1q1Fwcx/HfSabT6dM+NbUVQVxIteBK2roRNwUpXoMrUTsjFIcKWkHdWFyLF+DejRfgRbgSwbWuXHkB3UXOmaRzonmZtnaOQ78fmDZNzsv/JJnk/AMlAnBq3dr89v76D/sxUqxY0k0pspsuqSXpnM53nu3sbu/2e926hmKpI/cxkqtp/iiztdMrq2rruRqZxP7V0py/DicjTdP0e+ggEFIn+x2XbYyk6ezbGfuFJ91e6AACM/va13PNh44DABCWGdzfo+w+P5fN36NIWslu+/79/+v/geM9rv3QAQTm3f9dlpUae3zPuE3DfM+lcHZ7lGeJh+3HTh7bGpxZhQmmacoqXSzRzMPtfu/a1uN+N9JrbWS8YkuSNtTNctZMQ7TLJblpUVujt1Zj1o1hyo5hvSL+xbJOj95jM/PJfDZ3TaJ36h7M/1qpsd27CJKDI3V7ahj/anWLbpTJoFTFKBdcJxeKO7Z2lHFVRqJ8Ty2o+IAgKcbZLq3V1m+1BqNbqx6da2extNZ6Q60lW+uDV2t4NlfXPGnmrbljlvVTH7Xpzf8ju7dXNMo305ZxJbMzIx9PaW7YciUTf9XexdI2o6ONB0fyRg90Q/NPX7x8dL/f7z1h4RQt5CfBvxLP31tojaev9rF3XUeHKizVlckvnSM0mF+kGzsNc1nCeA0PenWZV+MMCONmLx5mkP95+cqqS5Hsj6Rmnp42Tdu8FtdKcoPpg4L/eS2Z7Pl8dQY0W53BjZpzXb4qXfFWNuRcic5KM7VjnSRmU190j+f/AAAAAAAAAAAAAAAAAAAAk2Yc/5sReowAAAAAAAAAAAAAAAAAAAAAAEy66vf/dnSC7/8tvEyH9/8CYfwKAAD//9I2dIE=") creat(&(0x7f00000000c0)='./bus\x00', 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000080)='./file1\x00') rename(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='./file1\x00') unlink(&(0x7f0000000180)='./file1\x00') 419.288145ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)={0x28, r1, 0x401, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}]}]}, 0x28}}, 0x0) 335.629278ms ago: executing program 4: syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, 0xfffffffffffffffe) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc0505510, &(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00\x00']) 229.535915ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x119, 0x8, &(0x7f0000000000), 0x4) 219.324136ms ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000000)) 194.27708ms ago: executing program 4: prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 70.616979ms ago: executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 67.85989ms ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200810000000000000000000000000000000000000000000000001000000a69bbfa853b"], 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 31.653245ms ago: executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x498, 0x0, 0x3f0, 0xffffffff, 0x0, 0x0, 0x508, 0x508, 0xffffffff, 0x508, 0x508, 0x5, 0x0, {[{{@ipv6={@loopback, @remote, [], [], 'hsr0\x00', 'team0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@local, @port, @icmp_id}}}, {{@ipv6={@private0, @private0, [], [], 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) 0s ago: executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000040)='(', 0x1}], 0x1, 0x0) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000a83000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. 2024/06/14 21:51:17 fuzzer started 2024/06/14 21:51:17 dialing manager at 10.128.0.163:30022 [ 51.976083][ T3548] cgroup: Unknown subsys name 'net' [ 52.181794][ T3548] cgroup: Unknown subsys name 'rlimit' 2024/06/14 21:51:19 starting 5 executor processes [ 53.181291][ T3556] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.194020][ T3556] syz-executor (3556) used greatest stack depth: 20016 bytes left [ 54.059693][ T3573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.074800][ T3579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.083144][ T3579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.087697][ T3581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.094123][ T3582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.097705][ T3581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.112516][ T3582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.112989][ T3581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.120245][ T3582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.127494][ T3581] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.135088][ T3582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.143298][ T3581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.149267][ T3582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.155878][ T3581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.163040][ T3582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.169735][ T3581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.176440][ T3582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.183551][ T3581] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.190205][ T3582] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.197497][ T3581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.204453][ T3582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.210990][ T3581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.218486][ T3582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.225378][ T3581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.232810][ T3582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.240859][ T3581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.278614][ T3581] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.287634][ T3581] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.295697][ T3581] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.303856][ T3581] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.674109][ T3567] chnl_net:caif_netlink_parms(): no params data found [ 54.684390][ T3568] chnl_net:caif_netlink_parms(): no params data found [ 54.773656][ T3575] chnl_net:caif_netlink_parms(): no params data found [ 54.816828][ T3578] chnl_net:caif_netlink_parms(): no params data found [ 54.828422][ T3576] chnl_net:caif_netlink_parms(): no params data found [ 54.925679][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.933879][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.941881][ T3567] device bridge_slave_0 entered promiscuous mode [ 54.957884][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.965201][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.973447][ T3568] device bridge_slave_0 entered promiscuous mode [ 54.984396][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.991478][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.999821][ T3568] device bridge_slave_1 entered promiscuous mode [ 55.008235][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.015645][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.023921][ T3567] device bridge_slave_1 entered promiscuous mode [ 55.079059][ T3568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.130371][ T3568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.141666][ T3567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.151823][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.160599][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.168579][ T3575] device bridge_slave_0 entered promiscuous mode [ 55.176895][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.184467][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.192757][ T3576] device bridge_slave_0 entered promiscuous mode [ 55.200238][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.207391][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.215216][ T3578] device bridge_slave_0 entered promiscuous mode [ 55.232514][ T3567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.241738][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.249241][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.257502][ T3575] device bridge_slave_1 entered promiscuous mode [ 55.264661][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.271789][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.280355][ T3576] device bridge_slave_1 entered promiscuous mode [ 55.287540][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.295009][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.302905][ T3578] device bridge_slave_1 entered promiscuous mode [ 55.350051][ T3568] team0: Port device team_slave_0 added [ 55.389782][ T3568] team0: Port device team_slave_1 added [ 55.397625][ T3578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.409351][ T3567] team0: Port device team_slave_0 added [ 55.416596][ T3575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.428209][ T3575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.439383][ T3576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.451579][ T3576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.469661][ T3578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.481152][ T3567] team0: Port device team_slave_1 added [ 55.541197][ T3576] team0: Port device team_slave_0 added [ 55.547831][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.554962][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.581212][ T3568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.618166][ T3575] team0: Port device team_slave_0 added [ 55.625264][ T3576] team0: Port device team_slave_1 added [ 55.632524][ T3575] team0: Port device team_slave_1 added [ 55.638826][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.646347][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.672773][ T3568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.690272][ T3578] team0: Port device team_slave_0 added [ 55.697076][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.704325][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.730398][ T3567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.767900][ T3578] team0: Port device team_slave_1 added [ 55.774605][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.781572][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.808246][ T3567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.836457][ T3576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.843465][ T3576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.878870][ T3576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.902877][ T3575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.909868][ T3575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.936351][ T3575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.957489][ T3576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.964564][ T3576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.990730][ T3576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.009372][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.016576][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.042562][ T3578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.054577][ T3575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.061536][ T3575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.088180][ T3575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.101753][ T3568] device hsr_slave_0 entered promiscuous mode [ 56.109439][ T3568] device hsr_slave_1 entered promiscuous mode [ 56.128931][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.135935][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.162305][ T3578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.240694][ T3567] device hsr_slave_0 entered promiscuous mode [ 56.247797][ T3567] device hsr_slave_1 entered promiscuous mode [ 56.255283][ T3567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.263320][ T3567] Cannot create hsr debugfs directory [ 56.291869][ T3575] device hsr_slave_0 entered promiscuous mode [ 56.298734][ T3575] device hsr_slave_1 entered promiscuous mode [ 56.305640][ T3575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.313640][ T3575] Cannot create hsr debugfs directory [ 56.322430][ T3576] device hsr_slave_0 entered promiscuous mode [ 56.329042][ T3576] device hsr_slave_1 entered promiscuous mode [ 56.336168][ T3576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.342951][ T3581] Bluetooth: hci2: command tx timeout [ 56.343832][ T3579] Bluetooth: hci1: command tx timeout [ 56.349272][ T3581] Bluetooth: hci3: command tx timeout [ 56.354817][ T3579] Bluetooth: hci0: command tx timeout [ 56.366154][ T3576] Cannot create hsr debugfs directory [ 56.397818][ T3578] device hsr_slave_0 entered promiscuous mode [ 56.405023][ T3578] device hsr_slave_1 entered promiscuous mode [ 56.411530][ T3578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.419503][ T3579] Bluetooth: hci4: command tx timeout [ 56.425691][ T3578] Cannot create hsr debugfs directory [ 56.733100][ T3576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.744228][ T3576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.753784][ T3576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.768002][ T3576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.833772][ T3568] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.854999][ T3568] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.868873][ T3568] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.890217][ T3568] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.936946][ T3567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.958075][ T3567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.968864][ T3567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.989780][ T3567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.022736][ T3576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.037470][ T3575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.048838][ T3575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.072242][ T3575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.081275][ T3575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.129470][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.138325][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.156779][ T3578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.170647][ T3576] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.190170][ T3578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.199626][ T3578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.210394][ T3578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.222013][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.230965][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.239548][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.247274][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.280745][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.289374][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.298597][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.307012][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.314118][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.321770][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.349596][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.359019][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.368890][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.395114][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.409379][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.418365][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.427462][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.436685][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.469464][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.478055][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.488784][ T3567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.503042][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.526026][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.568907][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.578068][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.592766][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.605021][ T3567] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.623027][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.631552][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.640469][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.657812][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.666751][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.674051][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.689983][ T3575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.700892][ T3578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.710711][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.719228][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.728710][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.743843][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.750964][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.764731][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.776551][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.789295][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.796560][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.805574][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.820278][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.829684][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.838977][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.846142][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.856100][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.884456][ T3576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.899646][ T3575] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.928798][ T3578] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.947996][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.964527][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.975981][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.986025][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.998732][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.007955][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.017536][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.026820][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.035005][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.043812][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.053393][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.061220][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.071460][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.079720][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.099360][ T3568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.113327][ T3568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.127828][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.137435][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.153101][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.161980][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.171787][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.179036][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.187527][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.196728][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.206069][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.218747][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.227459][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.234579][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.243505][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.251276][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.284246][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.307602][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.326867][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.334175][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.367716][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.377681][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.386749][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.395751][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.402894][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.410707][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.418873][ T3579] Bluetooth: hci0: command tx timeout [ 58.425339][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.426827][ T3581] Bluetooth: hci3: command tx timeout [ 58.439421][ T3579] Bluetooth: hci1: command tx timeout [ 58.439602][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.445168][ T3574] Bluetooth: hci2: command tx timeout [ 58.460018][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.468624][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.478316][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.487193][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.495769][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.502304][ T3579] Bluetooth: hci4: command tx timeout [ 58.504270][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.517256][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.532585][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.541315][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.551117][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.583800][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.593102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.603199][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.611724][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.620743][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.629931][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.638643][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.647172][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.656157][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.665930][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.679535][ T3575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.692853][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.703492][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.729455][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.738015][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.746958][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.756895][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.765537][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.773963][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.798808][ T3576] device veth0_vlan entered promiscuous mode [ 58.812402][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.820338][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.830337][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.839577][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.854064][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.863051][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.871608][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.890171][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.912533][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.921188][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.936416][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.948228][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.007202][ T3576] device veth1_vlan entered promiscuous mode [ 59.069734][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.090939][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.140095][ T3576] device veth0_macvtap entered promiscuous mode [ 59.161197][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.185066][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.201747][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.211379][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.222411][ T3568] device veth0_vlan entered promiscuous mode [ 59.234653][ T3568] device veth1_vlan entered promiscuous mode [ 59.249720][ T3576] device veth1_macvtap entered promiscuous mode [ 59.263995][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.271825][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.280525][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.289020][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.298883][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.340406][ T3567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.350891][ T3575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.374598][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.383484][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.390964][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.399658][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.407356][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.417726][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.440181][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.448970][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.457840][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.466594][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.484646][ T3568] device veth0_macvtap entered promiscuous mode [ 59.496040][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.509152][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.518963][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.529002][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.536611][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.545427][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.559739][ T3578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.574092][ T3576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.583272][ T3576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.593968][ T3576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.603584][ T3576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.616540][ T3568] device veth1_macvtap entered promiscuous mode [ 59.630888][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.641201][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.651194][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.681682][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.693953][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.705600][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.719364][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.730122][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.741601][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.756616][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.766137][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.776205][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.785391][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.794237][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.803052][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.811718][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.820671][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.845969][ T3568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.856181][ T3568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.865149][ T3568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.874143][ T3568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.910119][ T3567] device veth0_vlan entered promiscuous mode [ 59.925782][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.939725][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.961702][ T3567] device veth1_vlan entered promiscuous mode [ 59.988345][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.997007][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.005568][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.014357][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.023079][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.031314][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.039693][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.048216][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.057176][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.065153][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.073712][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.081523][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.090577][ T3575] device veth0_vlan entered promiscuous mode [ 60.125292][ T3578] device veth0_vlan entered promiscuous mode [ 60.132660][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.143514][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.160944][ T3575] device veth1_vlan entered promiscuous mode [ 60.185060][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.193897][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.220288][ T3578] device veth1_vlan entered promiscuous mode [ 60.237784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.243647][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.246619][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.260483][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.262991][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.277135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.285874][ T3567] device veth0_macvtap entered promiscuous mode [ 60.293350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.342650][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.350736][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.361729][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.370761][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.382447][ T3567] device veth1_macvtap entered promiscuous mode [ 60.408034][ T3575] device veth0_macvtap entered promiscuous mode [ 60.422960][ T3575] device veth1_macvtap entered promiscuous mode [ 60.439153][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.455547][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.467091][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.492544][ T3579] Bluetooth: hci3: command tx timeout [ 60.495530][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.497951][ T3579] Bluetooth: hci1: command tx timeout [ 60.513086][ T3581] Bluetooth: hci2: command tx timeout [ 60.514412][ T3573] Bluetooth: hci0: command tx timeout [ 60.534826][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.550715][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.575410][ T3579] Bluetooth: hci4: command tx timeout [ 60.580948][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.603320][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.611573][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.620260][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.629118][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.638743][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.649345][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.657952][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.667557][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.678144][ T3578] device veth0_macvtap entered promiscuous mode [ 60.709866][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.721225][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.731808][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.743228][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.756036][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.779835][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.785337][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.798788][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.805062][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.816947][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.827855][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.837958][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.849150][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.861060][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.870276][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.882067][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.890655][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.900160][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.908205][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.916858][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.927944][ T3567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.938698][ T3567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.947802][ T3567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.957796][ T3567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.973469][ T3578] device veth1_macvtap entered promiscuous mode [ 60.990286][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.001263][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.011566][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.023258][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.033225][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.044484][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.057571][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.068961][ T3575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.078851][ T3575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.088861][ T3575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.098091][ T3575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.127429][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.141664][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.179402][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.196866][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.207915][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.240386][ T3615] kernel write not supported for file bpf-prog (pid: 3615 comm: kworker/1:5) [ 61.241616][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.267112][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.278107][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.288998][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.300759][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.314281][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.352736][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.361494][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.412851][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.432476][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.466710][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.471058][ T3664] loop4: detected capacity change from 0 to 512 [ 61.482705][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.494010][ T3663] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.499087][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.519506][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.529719][ T3663] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.531558][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.550401][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.563292][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.586179][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.601942][ T3664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.625110][ T3664] ext4 filesystem being mounted at /root/syzkaller-testdir2999665266/syzkaller.sjFpKA/1/bus supports timestamps until 2038 (0x7fffffff) [ 61.627653][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.651147][ T3578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.677561][ T3578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.698857][ T3578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.707821][ T3578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.740055][ T3576] EXT4-fs (loop4): unmounting filesystem. [ 61.797484][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.823853][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.867224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.929882][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.948751][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.956399][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.976439][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.997553][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.024136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.066234][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.132271][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.142842][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.172755][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.192562][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.209488][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.226061][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.233028][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.276020][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.573638][ T3579] Bluetooth: hci2: command tx timeout [ 62.579099][ T3579] Bluetooth: hci3: command tx timeout [ 62.585162][ T3573] Bluetooth: hci1: command tx timeout [ 62.590752][ T3574] Bluetooth: hci0: command tx timeout [ 62.662164][ T3579] Bluetooth: hci4: command tx timeout [ 62.789264][ T3690] loop1: detected capacity change from 0 to 512 [ 62.991978][ T3690] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.005378][ T3690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.037351][ T3685] loop2: detected capacity change from 0 to 64 [ 63.342362][ T3685] hfs: unable to locate alternate MDB [ 63.414361][ T3690] EXT4-fs (loop1): 1 orphan inode deleted [ 63.420107][ T3690] EXT4-fs (loop1): 1 truncate cleaned up [ 63.425843][ T3690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.515623][ T3694] syz-executor.3[3694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.515730][ T3694] syz-executor.3[3694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.728489][ T3685] hfs: continuing without an alternate MDB [ 63.750093][ T3697] tty tty27: ldisc open failed (-12), clearing slot 26 [ 63.779114][ T3575] EXT4-fs (loop1): unmounting filesystem. [ 63.794468][ T3700] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.942389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 63.969075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.977471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 64.111555][ T3706] ======================================================= [ 64.111555][ T3706] WARNING: The mand mount option has been deprecated and [ 64.111555][ T3706] and is ignored by this kernel. Remove the mand [ 64.111555][ T3706] option from the mount to silence this warning. [ 64.111555][ T3706] ======================================================= [ 64.569627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.575069][ T3704] loop0: detected capacity change from 0 to 1024 [ 65.852467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.861412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.869921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 65.878188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 65.886574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 65.894838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 74.366546][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.373100][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.730775][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.814335][ T3724] loop0: detected capacity change from 0 to 64 [ 74.943765][ T3726] loop1: detected capacity change from 0 to 1024 [ 74.989278][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.024267][ T3726] hfsplus: failed to load root directory [ 75.110993][ T3729] 9pnet_fd: p9_fd_create_unix (3729): problem connecting socket: ./file0: -1 [ 75.120427][ T3731] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.235689][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.379240][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.692622][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.701598][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.901694][ T3747] loop0: detected capacity change from 0 to 1024 [ 75.937550][ T3579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.947324][ T3579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.970039][ T3757] loop3: detected capacity change from 0 to 64 [ 75.976477][ T3579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.984878][ T3579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.024672][ T3573] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.034169][ T3573] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.605167][ T7] cfg80211: failed to load regulatory.db [ 76.874748][ T3770] 9pnet_fd: p9_fd_create_unix (3770): problem connecting socket: ./file0: -1 [ 76.963363][ T3768] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.384985][ T26] audit: type=1804 audit(1718401903.534:2): pid=3783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1663178163/syzkaller.M0IHxf/12/bus/file0" dev="overlay" ino=1966 res=1 errno=0 [ 77.520135][ T3793] syz-executor.3[3793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.520538][ T3793] syz-executor.3[3793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.149327][ T3573] Bluetooth: hci3: command tx timeout [ 78.332957][ T3792] loop1: detected capacity change from 0 to 1024 [ 78.430209][ T3809] loop3: detected capacity change from 0 to 1024 [ 78.488225][ T3809] hfsplus: failed to load root directory [ 78.498439][ T3756] chnl_net:caif_netlink_parms(): no params data found [ 78.567424][ T3715] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.939478][ T26] audit: type=1804 audit(1718401905.084:3): pid=3839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2999665266/syzkaller.sjFpKA/15/bus/file0" dev="overlay" ino=1959 res=1 errno=0 [ 79.160437][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.167860][ T3756] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.176487][ T3756] device bridge_slave_0 entered promiscuous mode [ 79.184565][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.191913][ T3756] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.200230][ T3756] device bridge_slave_1 entered promiscuous mode [ 79.223859][ T3756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.302891][ T11] device hsr_slave_0 left promiscuous mode [ 79.363404][ T11] device hsr_slave_1 left promiscuous mode [ 79.400728][ T3851] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.410420][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.425710][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.483801][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.496438][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.517276][ T11] device bridge_slave_1 left promiscuous mode [ 79.552742][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.569818][ T3859] loop4: detected capacity change from 0 to 1024 [ 79.583280][ T11] device bridge_slave_0 left promiscuous mode [ 79.604695][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.626571][ T11] device veth1_macvtap left promiscuous mode [ 79.643068][ T11] device veth0_macvtap left promiscuous mode [ 79.660034][ T11] device veth1_vlan left promiscuous mode [ 79.679751][ T11] device veth0_vlan left promiscuous mode [ 79.698495][ T3715] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.172339][ T3573] Bluetooth: hci3: command tx timeout [ 80.214137][ T3883] loop4: detected capacity change from 0 to 8 [ 80.261652][ T3883] squashfs image failed sanity check [ 80.323741][ T3715] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.589919][ T3895] 9pnet_fd: p9_fd_create_unix (3895): problem connecting socket: ./file0: -1 [ 80.600650][ T11] team0 (unregistering): Port device team_slave_1 removed [ 80.688364][ T3897] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.248084][ T11] team0 (unregistering): Port device team_slave_0 removed [ 81.338384][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.347932][ T3901] loop0: detected capacity change from 0 to 1024 [ 81.388397][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.665036][ T11] bond0 (unregistering): Released all slaves [ 81.893858][ T3919] syz-executor.0[3919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.894259][ T3919] syz-executor.0[3919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.252576][ T3573] Bluetooth: hci3: command tx timeout [ 82.544071][ T3756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.553968][ T3855] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.753410][ T3756] team0: Port device team_slave_0 added [ 82.789986][ T3756] team0: Port device team_slave_1 added [ 82.904707][ T3756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.911770][ T3756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.928662][ T3931] loop0: detected capacity change from 0 to 1024 [ 83.003220][ T3931] EXT4-fs: Ignoring removed orlov option [ 83.009020][ T3931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.012073][ T3756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.083002][ T3756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.118540][ T3931] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.139097][ T3756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.254967][ T3951] loop1: detected capacity change from 0 to 64 [ 83.263060][ T3931] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.0: corrupt xattr in inline inode [ 83.277104][ T3756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.425474][ T3931] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.0: corrupted in-inode xattr [ 83.454817][ T3756] device hsr_slave_0 entered promiscuous mode [ 83.512925][ T3756] device hsr_slave_1 entered promiscuous mode [ 83.626995][ T3756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.650897][ T3756] Cannot create hsr debugfs directory [ 83.673625][ T3568] ================================================================== [ 83.681810][ T3568] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 83.689834][ T3568] Read of size 4 at addr ffff888054d23000 by task syz-executor.0/3568 [ 83.697993][ T3568] [ 83.700324][ T3568] CPU: 1 PID: 3568 Comm: syz-executor.0 Not tainted 6.1.93-syzkaller #0 [ 83.708649][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.718810][ T3568] Call Trace: [ 83.722092][ T3568] [ 83.725027][ T3568] dump_stack_lvl+0x1e3/0x2cb [ 83.729730][ T3568] ? nf_tcp_handle_invalid+0x642/0x642 [ 83.735295][ T3568] ? panic+0x764/0x764 [ 83.739382][ T3568] ? _printk+0xd1/0x111 [ 83.743644][ T3568] ? __virt_addr_valid+0x17f/0x520 [ 83.748767][ T3568] ? __virt_addr_valid+0x17f/0x520 [ 83.753890][ T3568] print_report+0x15f/0x4f0 [ 83.758410][ T3568] ? __virt_addr_valid+0x17f/0x520 [ 83.763534][ T3568] ? __virt_addr_valid+0x17f/0x520 [ 83.768744][ T3568] ? __virt_addr_valid+0x44a/0x520 [ 83.773869][ T3568] ? __phys_addr+0xb6/0x170 [ 83.778367][ T3568] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 83.783998][ T3568] kasan_report+0x136/0x160 [ 83.788487][ T3568] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 83.794127][ T3568] ext4_xattr_delete_inode+0xcd0/0xce0 [ 83.799578][ T3568] ? ext4_blocks_for_truncate+0x270/0x270 [ 83.805286][ T3568] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 83.811345][ T3568] ? rcu_read_lock_any_held+0xb3/0x160 [ 83.816796][ T3568] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 83.822679][ T3568] ext4_evict_inode+0xc77/0x1150 [ 83.827603][ T3568] ? _raw_spin_unlock+0x24/0x40 [ 83.832444][ T3568] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 83.838323][ T3568] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 83.844205][ T3568] evict+0x2a4/0x620 [ 83.848104][ T3568] vfs_rmdir+0x381/0x4b0 [ 83.852340][ T3568] do_rmdir+0x3a2/0x590 [ 83.856509][ T3568] ? d_delete_notify+0x150/0x150 [ 83.861548][ T3568] ? syscall_enter_from_user_mode+0x2e/0x230 [ 83.867532][ T3568] __x64_sys_unlinkat+0xdc/0xf0 [ 83.872380][ T3568] do_syscall_64+0x3b/0xb0 [ 83.876791][ T3568] ? clear_bhb_loop+0x45/0xa0 [ 83.881462][ T3568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.887344][ T3568] RIP: 0033:0x7f265887c687 [ 83.891754][ T3568] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 83.911343][ T3568] RSP: 002b:00007ffd4df507d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 83.919739][ T3568] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f265887c687 [ 83.927782][ T3568] RDX: 0000000000000200 RSI: 00007ffd4df51980 RDI: 00000000ffffff9c [ 83.935734][ T3568] RBP: 00007f26588d9636 R08: 0000000000000000 R09: 0000000000000000 [ 83.943688][ T3568] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd4df51980 [ 83.951643][ T3568] R13: 00007f26588d9636 R14: 0000000000014344 R15: 0000000000000008 [ 83.959862][ T3568] [ 83.962868][ T3568] [ 83.965181][ T3568] The buggy address belongs to the physical page: [ 83.971583][ T3568] page:ffffea00015348c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x54d23 [ 83.981717][ T3568] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.988911][ T3568] raw: 00fff00000000000 ffffea0001520248 ffffea0001534d48 0000000000000000 [ 83.997477][ T3568] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 84.006040][ T3568] page dumped because: kasan: bad access detected [ 84.012440][ T3568] page_owner tracks the page as freed [ 84.017785][ T3568] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 3952, tgid 3952 (syz-executor.3), ts 83324461446, free_ts 83381233023 [ 84.036604][ T3568] post_alloc_hook+0x18d/0x1b0 [ 84.041353][ T3568] get_page_from_freelist+0x31a1/0x3320 [ 84.046882][ T3568] __alloc_pages+0x28d/0x770 [ 84.051456][ T3568] __folio_alloc+0xf/0x30 [ 84.055768][ T3568] vma_alloc_folio+0x486/0x990 [ 84.060519][ T3568] wp_page_copy+0x25d/0x18c0 [ 84.065096][ T3568] handle_mm_fault+0x2525/0x5340 [ 84.070020][ T3568] exc_page_fault+0x26f/0x620 [ 84.074683][ T3568] asm_exc_page_fault+0x22/0x30 [ 84.079523][ T3568] page last free stack trace: [ 84.084172][ T3568] free_unref_page_prepare+0xf63/0x1120 [ 84.089701][ T3568] free_unref_page_list+0x663/0x900 [ 84.094879][ T3568] release_pages+0x2836/0x2b40 [ 84.099623][ T3568] tlb_flush_mmu+0xfc/0x210 [ 84.104108][ T3568] tlb_finish_mmu+0xce/0x1f0 [ 84.108678][ T3568] exit_mmap+0x3c3/0x9f0 [ 84.112902][ T3568] __mmput+0x115/0x3c0 [ 84.116952][ T3568] exit_mm+0x226/0x300 [ 84.121004][ T3568] do_exit+0x9f6/0x26a0 [ 84.125146][ T3568] do_group_exit+0x202/0x2b0 [ 84.129719][ T3568] get_signal+0x16f7/0x17d0 [ 84.134207][ T3568] arch_do_signal_or_restart+0xb0/0x1a10 [ 84.139822][ T3568] exit_to_user_mode_loop+0x6a/0x100 [ 84.145089][ T3568] exit_to_user_mode_prepare+0xb1/0x140 [ 84.150614][ T3568] syscall_exit_to_user_mode+0x60/0x270 [ 84.156146][ T3568] do_syscall_64+0x47/0xb0 [ 84.160559][ T3568] [ 84.162865][ T3568] Memory state around the buggy address: [ 84.168474][ T3568] ffff888054d22f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2024/06/14 21:51:50 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 84.176515][ T3568] ffff888054d22f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.184557][ T3568] >ffff888054d23000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.192596][ T3568] ^ [ 84.196643][ T3568] ffff888054d23080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.204683][ T3568] ffff888054d23100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.212721][ T3568] ================================================================== [ 84.332355][ T3573] Bluetooth: hci3: command tx timeout [ 84.352189][ T3568] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.359431][ T3568] CPU: 0 PID: 3568 Comm: syz-executor.0 Not tainted 6.1.93-syzkaller #0 [ 84.367793][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 84.377865][ T3568] Call Trace: [ 84.381142][ T3568] [ 84.384074][ T3568] dump_stack_lvl+0x1e3/0x2cb [ 84.388768][ T3568] ? nf_tcp_handle_invalid+0x642/0x642 [ 84.394237][ T3568] ? panic+0x764/0x764 [ 84.398310][ T3568] ? preempt_schedule_common+0xa6/0xd0 [ 84.403778][ T3568] ? vscnprintf+0x59/0x80 [ 84.408109][ T3568] panic+0x318/0x764 [ 84.412006][ T3568] ? check_panic_on_warn+0x1d/0xa0 [ 84.417123][ T3568] ? memcpy_page_flushcache+0xfc/0xfc [ 84.422503][ T3568] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 84.428493][ T3568] ? _raw_spin_unlock+0x40/0x40 [ 84.433354][ T3568] ? print_report+0x4a3/0x4f0 [ 84.438127][ T3568] check_panic_on_warn+0x7e/0xa0 [ 84.443071][ T3568] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 84.448712][ T3568] end_report+0x66/0x110 [ 84.452955][ T3568] kasan_report+0x143/0x160 [ 84.457469][ T3568] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 84.463125][ T3568] ext4_xattr_delete_inode+0xcd0/0xce0 [ 84.468601][ T3568] ? ext4_blocks_for_truncate+0x270/0x270 [ 84.474332][ T3568] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 84.480418][ T3568] ? rcu_read_lock_any_held+0xb3/0x160 [ 84.485898][ T3568] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 84.491891][ T3568] ext4_evict_inode+0xc77/0x1150 [ 84.496833][ T3568] ? _raw_spin_unlock+0x24/0x40 [ 84.501677][ T3568] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 84.507558][ T3568] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 84.513442][ T3568] evict+0x2a4/0x620 [ 84.517339][ T3568] vfs_rmdir+0x381/0x4b0 [ 84.521573][ T3568] do_rmdir+0x3a2/0x590 [ 84.525721][ T3568] ? d_delete_notify+0x150/0x150 [ 84.530647][ T3568] ? syscall_enter_from_user_mode+0x2e/0x230 [ 84.536703][ T3568] __x64_sys_unlinkat+0xdc/0xf0 [ 84.541544][ T3568] do_syscall_64+0x3b/0xb0 [ 84.546123][ T3568] ? clear_bhb_loop+0x45/0xa0 [ 84.550794][ T3568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.556762][ T3568] RIP: 0033:0x7f265887c687 [ 84.561162][ T3568] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 84.580771][ T3568] RSP: 002b:00007ffd4df507d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 84.589191][ T3568] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f265887c687 [ 84.597151][ T3568] RDX: 0000000000000200 RSI: 00007ffd4df51980 RDI: 00000000ffffff9c [ 84.605110][ T3568] RBP: 00007f26588d9636 R08: 0000000000000000 R09: 0000000000000000 [ 84.613066][ T3568] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd4df51980 [ 84.621040][ T3568] R13: 00007f26588d9636 R14: 0000000000014344 R15: 0000000000000008 [ 84.629011][ T3568] [ 84.632257][ T3568] Kernel Offset: disabled [ 84.636583][ T3568] Rebooting in 86400 seconds..