last executing test programs: 3.252461098s ago: executing program 1: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[], 0x1, 0x1f1, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = dup(r0) ftruncate(r1, 0x400f80) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000008c0)={{}, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000304000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000500010000000a000100aa"], 0x48}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2ded, 0x8001, 0x6, 0xfffffffffffffffb, 0x7, 0x7, 0x78b, 0x6}, &(0x7f0000000080)={0x81, 0xfff, 0x8001, 0x3, 0xfffffffffffffffe, 0x7ff, 0x9, 0x100}, &(0x7f0000000140)={0x3, 0x6, 0x57, 0x40, 0x2, 0x2, 0x101, 0x8000}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8}) syz_open_dev$dri(&(0x7f00000002c0), 0xfffffffffffffffb, 0x101400) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400), 0x3}) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x208300, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="f92a5b747576"}, 0x14) getsockname$packet(r5, &(0x7f00000022c0), &(0x7f00000000c0)=0x14) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"a74b"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private0, @empty, [], [0xff000000, 0xf020149252800794], 'bond0\x00', 'veth0_to_bridge\x00', {}, {}, 0x6, 0x8, 0x2, 0x5c}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1_macvtap\x00', {0x401}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) fstat(r1, 0x0) 3.078881705s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.834198252s ago: executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000006a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000065850000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="01000000", 0x4}], 0x1) 2.752633695s ago: executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 2.39439214s ago: executing program 4: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[], 0x1, 0x1f1, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = dup(r0) ftruncate(r1, 0x400f80) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000008c0)={{}, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000304000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000500010000000a000100aa"], 0x48}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2ded, 0x8001, 0x6, 0xfffffffffffffffb, 0x7, 0x7, 0x78b, 0x6}, &(0x7f0000000080)={0x81, 0xfff, 0x8001, 0x3, 0xfffffffffffffffe, 0x7ff, 0x9, 0x100}, &(0x7f0000000140)={0x3, 0x6, 0x57, 0x40, 0x2, 0x2, 0x101, 0x8000}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8}) syz_open_dev$dri(&(0x7f00000002c0), 0xfffffffffffffffb, 0x101400) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000440)={&(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400), 0x3}) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x208300, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r5 = socket$inet6(0xa, 0x3, 0x1f) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="f92a5b747576"}, 0x14) getsockname$packet(r6, &(0x7f00000022c0), &(0x7f00000000c0)=0x14) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"a74b"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private0, @empty, [], [0xff000000, 0xf020149252800794], 'bond0\x00', 'veth0_to_bridge\x00', {}, {}, 0x6, 0x8, 0x2, 0x5c}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1_macvtap\x00', {0x401}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) fstat(r1, 0x0) 2.216146458s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast1}}}}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) 2.139894259s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bind$llc(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f00000004c0), 0x0}, 0x20) 2.083197038s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000000)) 2.062583301s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) io_setup(0x10000, &(0x7f0000000180)=0x0) io_cancel(r2, 0x0, &(0x7f0000000340)) read$char_usb(r1, &(0x7f0000000b00)=""/182, 0xb6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nr_inodes']) preadv(r1, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000780)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x3, 0x0) 2.015568309s ago: executing program 4: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)="1380204305db3005fee06a4edeab5e114e7ab994e47e0d17030cd7f061099f9368", 0x21}, {&(0x7f0000000800)="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", 0x394}], 0x2}}], 0x1, 0x0) 1.856057573s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 1.635818488s ago: executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0), 0x0, 0x0) 1.567504018s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.566903598s ago: executing program 3: socket(0x840000000002, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 1.064435256s ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 861.422207ms ago: executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0xcd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in6={0xa, 0x0, 0x0, @mcast2}], 0x48) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004a80)=ANY=[@ANYBLOB="1c0100002d000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b640868603000180001801400000000000000000000000000ffffe0000001140006800800df00", @ANYRES32, @ANYBLOB='\b\x00\r\x00', @ANYRES32, @ANYBLOB="1400e20000000000000000000000ffff64010100a4007d8008003700", @ANYRES32, @ANYBLOB="9300260091ff7f00006c21159aca6d864b0a0077606caf5bdff8b012acd2c6cf00151f3f376704ca8ab08f4c80331ea9d76dea275ad783217f709771220fd854b060b7be60224158d0a4c21207028f3439d76c875aa5b4ef21634850370c52232ccde4851e42ee8bc9cda8118ca939931ee0f913f83ee3871507b28ad1af31063796af6a27291a06d7bfcb556b49583b8f330100040097001400d800ff010000000000000000000000000001fb47c53dc05e37"], 0x11c}], 0x1}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) msgget(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) 611.643276ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r1}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000008}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01040000000000000000020000000900010073797a300000000014000bc560ae240d053e3fc6545b46b4b72b00001100010000000000000000000000000a"], 0x48}}, 0x0) 486.242795ms ago: executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0), 0x0, 0x0) 485.984625ms ago: executing program 0: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000000280040200000000000000", 0x14, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 412.512396ms ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000006000b00000000000c000100535e7d2721239c0008000200050000001400050009000000000000000000ffffe00000011400060000000000000000000000000095"], 0x58}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 391.1828ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bind$llc(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f00000004c0), 0x0}, 0x20) 376.947211ms ago: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003f40)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x0, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x38}}], 0x1, 0x0) 334.641079ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x13, &(0x7f0000001640), 0x4) 320.46559ms ago: executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, &(0x7f00000003c0)='\x00!', 0x100000) 288.993436ms ago: executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x840000000002, 0x3, 0x100) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad21ed0d09f91b45090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f330063090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b5b070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210380106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b07c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 182.034341ms ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x45c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x3c8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x3ac, 0x6, [@m_tunnel_key={0x140, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xf1, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795ec248a49"}, {0xc}, {0xc}}}, @m_ife={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc}}}, @m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x8c, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{}, {}, {}]}]}, {0x3d, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc5c63c60e180d0c44ef1e097dda82cf07"}, {0xc}, {0xc}}}, @m_ctinfo={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x9, 0x6, "41be356e96"}, {0xc}, {0xc}}}]}]}}]}, 0x45c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 82.267687ms ago: executing program 2: socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000007240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB], 0x1a) 58.459551ms ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x34}, 0x20) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x31}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 45.955083ms ago: executing program 3: r0 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 0s ago: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0), 0x0, 0x0) kernel console output (not intermixed with test programs): rformance. Setting the MTU to 1560 would solve the problem. [ 117.790438][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.860095][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.863398][ T6599] loop3: detected capacity change from 0 to 128 [ 118.067862][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.915781][ T4265] Bluetooth: hci3: command tx timeout [ 118.993869][ T6547] device hsr_slave_0 entered promiscuous mode [ 119.031701][ T6547] device hsr_slave_1 entered promiscuous mode [ 119.071773][ T6547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.074056][ T6547] Cannot create hsr debugfs directory [ 119.103945][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.195596][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.283992][ T27] audit: type=1326 audit(119.250:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 119.297905][ T27] audit: type=1326 audit(119.260:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 119.308742][ T27] audit: type=1326 audit(119.270:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 119.346252][ T27] audit: type=1326 audit(119.270:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 119.372001][ T27] audit: type=1326 audit(119.270:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 119.388699][ T27] audit: type=1326 audit(119.270:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 119.406034][ T27] audit: type=1326 audit(119.270:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 120.090534][ T27] audit: type=1326 audit(119.270:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 120.125691][ T6628] device wireguard0 entered promiscuous mode [ 120.251838][ T27] audit: type=1326 audit(119.270:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 120.257842][ T27] audit: type=1326 audit(119.270:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb765d028 code=0x7ffc0000 [ 120.477652][ T6639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.480357][ T6639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.991963][ T4265] Bluetooth: hci3: command tx timeout [ 121.185192][ T6547] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.213487][ T6547] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.263960][ T6547] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.325894][ T6547] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.519890][ T6657] loop4: detected capacity change from 0 to 32768 [ 122.551129][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.596393][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.598948][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.642769][ T6657] XFS (loop4): Mounting V5 Filesystem [ 122.715703][ T6657] XFS (loop4): Ending clean mount [ 122.745771][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.785990][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.788863][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.794528][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.796586][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.805030][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.814922][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.844695][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.846716][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.973613][ T11] device hsr_slave_0 left promiscuous mode [ 123.027712][ T11] device hsr_slave_1 left promiscuous mode [ 123.046916][ T5150] XFS (loop4): Unmounting Filesystem [ 123.071756][ T47] Bluetooth: hci3: command tx timeout [ 123.122366][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.124473][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.130367][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.138622][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.154107][ T11] device bridge_slave_1 left promiscuous mode [ 123.158196][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.230510][ T11] device bridge_slave_0 left promiscuous mode [ 123.238285][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.381775][ T11] device veth1_macvtap left promiscuous mode [ 123.383493][ T11] device veth0_macvtap left promiscuous mode [ 123.385171][ T11] device veth1_vlan left promiscuous mode [ 123.386776][ T11] device veth0_vlan left promiscuous mode [ 123.407971][ T6704] loop3: detected capacity change from 0 to 32768 [ 123.411268][ T6704] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 123.500008][ T6307] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 123.758440][ T11] bond2 (unregistering): Released all slaves [ 123.788892][ T11] bond1 (unregistering): Released all slaves [ 124.103066][ T11] team0 (unregistering): Port device team_slave_1 removed [ 124.113131][ T11] team0 (unregistering): Port device team_slave_0 removed [ 124.121484][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.164523][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.302403][ T6742] loop3: detected capacity change from 0 to 32768 [ 124.315440][ T6742] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 124.327375][ T6307] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 124.367827][ T11] bond0 (unregistering): Released all slaves [ 124.456356][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.461222][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.465766][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.475580][ T6747] validate_nla: 3 callbacks suppressed [ 124.475594][ T6747] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 124.481768][ T6733] lo speed is unknown, defaulting to 1000 [ 124.490328][ T6747] team0: Port device netdevsim0 removed [ 124.496431][ T6747] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.513046][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.516893][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.551666][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.579739][ T6733] lo speed is unknown, defaulting to 1000 [ 124.584195][ T6733] lo speed is unknown, defaulting to 1000 [ 124.585948][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.588535][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.592338][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.595064][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.597596][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.600167][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.630107][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.640460][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.732228][ T5656] lo speed is unknown, defaulting to 1000 [ 124.735317][ T6733] infiniband syz0: set active [ 124.737889][ T6733] infiniband syz0: added lo [ 124.766271][ T6733] infiniband syz0: Couldn't open port 1 [ 124.804531][ T6733] RDS/IB: syz0: added [ 124.807568][ T6733] smc: adding ib device syz0 with port count 1 [ 124.813555][ T6733] smc: ib device syz0 port 1 has pnetid [ 124.819783][ T4634] lo speed is unknown, defaulting to 1000 [ 124.829195][ T6733] lo speed is unknown, defaulting to 1000 [ 124.892082][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.894230][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.920186][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.979525][ T6733] lo speed is unknown, defaulting to 1000 [ 125.000209][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.003988][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.022570][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.025310][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.028275][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.030723][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.045605][ T6547] device veth0_vlan entered promiscuous mode [ 125.067102][ T6547] device veth1_vlan entered promiscuous mode [ 125.115204][ T6733] lo speed is unknown, defaulting to 1000 [ 125.135621][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.138324][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.140942][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.144417][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.154256][ T6547] device veth0_macvtap entered promiscuous mode [ 125.158377][ T6547] device veth1_macvtap entered promiscuous mode [ 125.199572][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.219345][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.224728][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.235211][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.241722][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.246819][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.251068][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.257475][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.266439][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.270791][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.286537][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.289139][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.302458][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.328067][ T6733] lo speed is unknown, defaulting to 1000 [ 125.329379][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.339267][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.343800][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.346562][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.349025][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.356387][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.359287][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.362243][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.366402][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.369292][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.384711][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.463180][ T6733] lo speed is unknown, defaulting to 1000 [ 125.464900][ T6547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.467416][ T6547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.469811][ T6547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.477227][ T6547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.497893][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.502221][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.513369][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.517122][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.519687][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.535705][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.650020][ T6767] loop0: detected capacity change from 0 to 32768 [ 125.682831][ T6772] lo speed is unknown, defaulting to 1000 [ 125.709635][ T6767] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 125.715103][ T6767] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 125.723497][ T6767] BTRFS info (device loop0): using free space tree [ 125.741104][ T4619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.746759][ T4619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.785605][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.849076][ T5465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.854893][ T5465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.860255][ T6767] BTRFS info (device loop0): enabling ssd optimizations [ 125.912521][ T6230] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 125.923206][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.955109][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.956839][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.268982][ T6772] chnl_net:caif_netlink_parms(): no params data found [ 126.416235][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.418443][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.426513][ T6772] device bridge_slave_0 entered promiscuous mode [ 126.446802][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.455729][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.467013][ T6772] device bridge_slave_1 entered promiscuous mode [ 126.520432][ T6808] loop0: detected capacity change from 0 to 8192 [ 126.624792][ T6772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.629954][ T6772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.726475][ T6772] team0: Port device team_slave_0 added [ 126.750824][ T6772] team0: Port device team_slave_1 added [ 126.819142][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.824730][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.847090][ T6772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.866083][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.871238][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.902429][ T6772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.943853][ T6816] syz-executor.2 (6816): drop_caches: 2 [ 127.004848][ T6772] device hsr_slave_0 entered promiscuous mode [ 127.041941][ T6772] device hsr_slave_1 entered promiscuous mode [ 127.081546][ T6772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.081607][ T6772] Cannot create hsr debugfs directory [ 127.214586][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.224915][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.410821][ T6772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.540820][ T6772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.551709][ T4265] Bluetooth: hci2: command tx timeout [ 127.637863][ T6839] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 127.677350][ T6772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.818667][ T4993] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.874867][ T6772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.908529][ T6845] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 127.956217][ T6845] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 128.007486][ T6831] loop0: detected capacity change from 0 to 32768 [ 128.016519][ T6847] device syzkaller0 entered promiscuous mode [ 128.037252][ T6831] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6831) [ 128.059460][ T6831] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 128.062657][ T6831] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 128.072743][ T6831] BTRFS info (device loop0): using free space tree [ 128.363989][ T6831] BTRFS info (device loop0): enabling ssd optimizations [ 128.398900][ T6230] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 128.433228][ T6772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.483781][ T6772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.568697][ T6772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.614584][ T6772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 128.677413][ T6878] lo speed is unknown, defaulting to 1000 [ 128.778413][ T6882] device syzkaller0 entered promiscuous mode [ 128.837961][ T6888] mmap: syz-executor.0 (6888): VmData 37429248 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 128.859437][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.961017][ T6892] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 129.058973][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.106806][ T6772] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.129730][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.138459][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.144740][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.147495][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.149997][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.151960][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.218045][ T6905] ptrace attach of "/root/syz-executor.3 exec"[4251] was attempted by "/root/syz-executor.3 exec"[6905] [ 129.223460][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.226035][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.228716][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.237178][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.239096][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.248367][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.251217][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.259139][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.277135][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.305949][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.317676][ T6905] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 129.331703][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.334839][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.340808][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.355703][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.368639][ T6772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.380878][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.386133][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.388877][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.618829][ T6923] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 129.631566][ T4265] Bluetooth: hci2: command tx timeout [ 129.708554][ T6927] ptrace attach of "/root/syz-executor.3 exec"[4251] was attempted by "/root/syz-executor.3 exec"[6927] [ 129.721314][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.731938][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.744880][ T6772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.818744][ T6932] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 129.827739][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.833933][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.869567][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.873030][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.882498][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.884957][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.899912][ T6772] device veth0_vlan entered promiscuous mode [ 129.934813][ T6772] device veth1_vlan entered promiscuous mode [ 129.988257][ T6772] device veth0_macvtap entered promiscuous mode [ 130.015898][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.018641][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.021242][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.032747][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.036319][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.052417][ T6772] device veth1_macvtap entered promiscuous mode [ 130.071590][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.074626][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.077215][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.094142][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.107723][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.116153][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.136089][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.140804][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.144304][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.146981][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.151130][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.177159][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.179968][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.183504][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.186258][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.188852][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.205310][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.208062][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.210808][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.221787][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.224482][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.232309][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.253189][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.255870][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.258589][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.261303][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.289172][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.315230][ T6956] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 130.319864][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.356251][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.358256][ T6956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.364670][ T6956] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 130.478304][ T6772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.480522][ T6772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.488857][ T6772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.494560][ T6772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.508608][ T6949] lo speed is unknown, defaulting to 1000 [ 130.621106][ T6968] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 130.703467][ T4547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.708877][ T4547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.774744][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.798852][ T6588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.802353][ T6588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.810522][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.181562][ T4298] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.279360][ T6990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 131.451552][ T4298] usb 1-1: Using ep0 maxpacket: 16 [ 131.561037][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.611970][ T4298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.614972][ T4298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.619713][ T4298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.635157][ T4298] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 131.649026][ T4298] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.713441][ T47] Bluetooth: hci2: command tx timeout [ 131.741563][ T4298] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.744496][ T4298] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.746813][ T4298] usb 1-1: Manufacturer: syz [ 131.758841][ T4298] usb 1-1: config 0 descriptor?? [ 132.021942][ T4298] Registered IR keymap rc-hauppauge [ 132.181418][ T4298] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 132.184675][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.212228][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.254771][ T4298] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 132.258896][ T4298] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input3 [ 132.311987][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.351995][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.360987][ T7004] lo speed is unknown, defaulting to 1000 [ 132.381538][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.386929][ T7017] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 132.387456][ T6983] syz-executor.3 (6983): drop_caches: 2 [ 132.427597][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.452734][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.482108][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.511684][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.544858][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.575905][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.601486][ T4298] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.643382][ T4298] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 132.646021][ T4298] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 132.648897][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.663169][ T4298] usb 1-1: USB disconnect, device number 4 [ 132.689493][ T7022] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 132.823582][ T7024] loop3: detected capacity change from 0 to 1764 [ 133.801521][ T4265] Bluetooth: hci2: command tx timeout [ 134.071043][ T7041] loop0: detected capacity change from 0 to 1024 [ 134.093439][ T7041] EXT4-fs: Ignoring removed nobh option [ 134.101565][ T7041] EXT4-fs: Mount option(s) incompatible with ext3 [ 134.310695][ T7045] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 134.358772][ T7049] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 134.447042][ T7049] team0: Port device netdevsim0 added [ 134.582153][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.769624][ T7067] loop0: detected capacity change from 0 to 1764 [ 135.671456][ T7072] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 135.716760][ T7072] team0: Port device netdevsim0 removed [ 135.728416][ T7072] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 135.827572][ T7078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.827784][ T7078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.871529][ T47] Bluetooth: hci2: command tx timeout [ 137.101765][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.204067][ T7092] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 137.293012][ T7092] team0: Port device netdevsim0 added [ 137.400476][ T7100] device syzkaller0 entered promiscuous mode [ 138.544549][ T7108] loop0: detected capacity change from 0 to 1764 [ 138.656117][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.667619][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.830465][ T7125] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 138.844892][ T7125] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 138.848159][ T7125] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 138.851050][ T7125] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 140.015879][ T7137] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 140.053587][ T7137] bond0: (slave netdevsim0): Releasing backup interface [ 140.080255][ T7137] team0: Port device netdevsim0 added [ 140.090005][ T7136] bridge0: port 3(hsr0) entered blocking state [ 140.092173][ T7136] bridge0: port 3(hsr0) entered disabled state [ 140.095061][ T7136] device hsr0 entered promiscuous mode [ 140.108831][ T7136] bridge0: port 3(hsr0) entered blocking state [ 140.110571][ T7136] bridge0: port 3(hsr0) entered forwarding state [ 140.324374][ T7149] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 140.379058][ T7145] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 141.361204][ T7160] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 141.467133][ T7160] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 141.477379][ T7161] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 141.488759][ T7164] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 141.527524][ T7167] loop4: detected capacity change from 0 to 1764 [ 142.904411][ T7196] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 142.906874][ T7196] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 142.951602][ T7196] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 142.957598][ T7196] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 143.054863][ T7206] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 143.118021][ T7206] team0: Port device netdevsim0 removed [ 143.139699][ T7206] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 143.150569][ T7202] lo speed is unknown, defaulting to 1000 [ 143.167844][ T39] device hsr_slave_0 left promiscuous mode [ 143.223691][ T39] device hsr_slave_1 left promiscuous mode [ 143.281518][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.283595][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.294561][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.313289][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.363295][ T39] device bridge_slave_1 left promiscuous mode [ 143.369799][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.386158][ T7213] loop3: detected capacity change from 0 to 1764 [ 143.433297][ T39] device bridge_slave_0 left promiscuous mode [ 143.435283][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.592094][ T39] device veth1_macvtap left promiscuous mode [ 143.594077][ T39] device veth0_macvtap left promiscuous mode [ 143.595827][ T39] device veth1_vlan left promiscuous mode [ 143.598580][ T39] device veth0_vlan left promiscuous mode [ 144.283966][ T39] team0 (unregistering): Port device team_slave_1 removed [ 144.315017][ T39] team0 (unregistering): Port device team_slave_0 removed [ 144.331745][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.383720][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.617016][ T39] bond0 (unregistering): Released all slaves [ 145.001401][ T7237] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 145.218328][ T7242] loop2: detected capacity change from 0 to 1024 [ 145.405364][ T7244] loop1: detected capacity change from 0 to 1764 [ 145.602464][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.605122][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.672094][ T7238] loop0: detected capacity change from 0 to 32768 [ 145.698721][ T7238] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7238) [ 145.745903][ T7238] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 145.753601][ T7238] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 145.764242][ T7238] BTRFS info (device loop0): using free space tree [ 145.816706][ T7255] lo speed is unknown, defaulting to 1000 [ 145.909477][ T7238] BTRFS info (device loop0): enabling ssd optimizations [ 146.044889][ T6230] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 146.283592][ T7277] loop3: detected capacity change from 0 to 128 [ 146.316353][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 146.474397][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.492089][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.152361][ T7301] loop2: detected capacity change from 0 to 1764 [ 147.390770][ T7305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.550847][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 147.550861][ T27] audit: type=1326 audit(147.510:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa865d028 code=0x0 [ 147.579080][ T7297] loop0: detected capacity change from 0 to 32768 [ 147.595394][ T7297] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7297) [ 147.615844][ T7297] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 147.622463][ T7297] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 147.629822][ T7297] BTRFS info (device loop0): using free space tree [ 147.651152][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.770671][ T7297] BTRFS info (device loop0): enabling ssd optimizations [ 147.876798][ T6230] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 147.990962][ T7334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.008512][ T7334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.026552][ T7334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.039510][ T7334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.167987][ T7340] loop3: detected capacity change from 0 to 1024 [ 148.180951][ T7340] hfsplus: invalid btree flag [ 148.186530][ T7340] hfsplus: failed to load catalog file [ 148.235285][ T6307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.251310][ T7340] loop3: detected capacity change from 0 to 128 [ 148.257895][ T7340] FAT-fs (loop3): Unrecognized mount option "¯·‡SI.Õ- Ý^×ó¼" or missing value [ 148.459564][ T7347] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 149.401739][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.467090][ T7356] 8021q: VLANs not supported on ipvlan0 [ 149.529904][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.580601][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.607909][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.619914][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.634596][ T7366] loop1: detected capacity change from 0 to 1764 [ 150.007129][ T7358] loop4: detected capacity change from 0 to 32768 [ 150.010827][ T7358] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7358) [ 150.046152][ T7358] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 150.051463][ T7368] syz-executor.2 (7368): drop_caches: 2 [ 150.061302][ T7358] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 150.070251][ T7358] BTRFS info (device loop4): using free space tree [ 150.256499][ T7358] BTRFS info (device loop4): enabling ssd optimizations [ 150.729719][ T5522] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.204358][ T5150] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 151.381712][ T5522] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 151.384790][ T5522] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 151.387578][ T5522] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.390901][ T5522] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.414856][ T5522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.445945][ T7408] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 151.449785][ T5522] usb 1-1: config 0 descriptor?? [ 151.466163][ T7409] loop2: detected capacity change from 0 to 1024 [ 151.471936][ T7397] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.484165][ T7409] hfsplus: invalid btree flag [ 151.487969][ T7409] hfsplus: failed to load catalog file [ 151.511074][ T7411] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.548285][ T7403] loop1: detected capacity change from 0 to 8192 [ 151.632911][ T7409] loop2: detected capacity change from 0 to 128 [ 151.635362][ T7409] FAT-fs (loop2): Unrecognized mount option "¯·‡SI.Õ- Ý^×ó¼" or missing value [ 152.976625][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 152.978819][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 152.980811][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.011454][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.018134][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.033415][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.038893][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.046642][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.051901][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.059931][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.066977][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.075959][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.085150][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.092911][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.103344][ T5522] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 153.115636][ T5522] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 153.153398][ T5522] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 153.274262][ T4992] usb 1-1: USB disconnect, device number 5 [ 153.700448][ T7426] loop4: detected capacity change from 0 to 32768 [ 153.712619][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.728529][ T7426] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7426) [ 153.767847][ T7426] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 153.796677][ T7426] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 153.809222][ T7447] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 153.811926][ T7426] BTRFS info (device loop4): using free space tree [ 153.815929][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.848341][ T7452] Zero length message leads to an empty skb [ 153.998752][ T7461] loop0: detected capacity change from 0 to 64 [ 154.353986][ T7426] BTRFS info (device loop4): enabling ssd optimizations [ 154.478109][ T5150] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 154.932422][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.943211][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.861239][ T7497] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 155.908417][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.281529][ T7517] bridge0: port 3(macvlan0) entered blocking state [ 157.283475][ T7517] bridge0: port 3(macvlan0) entered disabled state [ 157.309252][ T7517] device macvlan0 entered promiscuous mode [ 157.324688][ T7517] bridge0: port 3(macvlan0) entered blocking state [ 157.326778][ T7517] bridge0: port 3(macvlan0) entered forwarding state [ 157.415749][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.418280][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.499269][ T7529] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 157.528327][ T7529] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.785892][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 159.973053][ T7571] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 160.046824][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.843060][ T7580] loop1: detected capacity change from 0 to 32768 [ 161.011413][ T7597] loop2: detected capacity change from 0 to 256 [ 161.651171][ T7599] loop3: detected capacity change from 0 to 128 [ 161.778885][ T7599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.842257][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 161.859830][ T7605] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 161.910402][ T7605] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.242952][ T7636] tmpfs: Unknown parameter 'fscontext' [ 162.249929][ T7638] loop4: detected capacity change from 0 to 256 [ 162.772995][ T7643] loop2: detected capacity change from 0 to 256 [ 163.476174][ T7651] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 163.571191][ T7656] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.792102][ T7672] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 163.862606][ T7672] team0: Port device netdevsim0 removed [ 163.882305][ T7672] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 163.885602][ T7678] loop1: detected capacity change from 0 to 128 [ 164.044136][ T7680] loop4: detected capacity change from 0 to 256 [ 164.759102][ T7678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.793016][ T7686] loop0: detected capacity change from 0 to 64 [ 165.017251][ T7697] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 165.050324][ T6772] EXT4-fs (loop1): unmounting filesystem. [ 165.280285][ T7701] loop4: detected capacity change from 0 to 256 [ 165.882224][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.997489][ T7705] lo speed is unknown, defaulting to 1000 [ 166.068743][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.072441][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.916403][ T7714] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 168.116300][ T7730] loop4: detected capacity change from 0 to 64 [ 169.005424][ T7731] hub 9-0:1.0: USB hub found [ 169.009644][ T7731] hub 9-0:1.0: 8 ports detected [ 169.504740][ T7740] hub 9-0:1.0: USB hub found [ 169.508230][ T7740] hub 9-0:1.0: 8 ports detected [ 170.124821][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.199758][ T7751] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 170.295058][ T7754] lo speed is unknown, defaulting to 1000 [ 171.349098][ T7771] hub 9-0:1.0: USB hub found [ 171.355764][ T7771] hub 9-0:1.0: 8 ports detected [ 171.639169][ T27] audit: type=1326 audit(171.600:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb765d028 code=0x7fc00000 [ 171.659172][ T27] audit: type=1326 audit(171.600:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb765d028 code=0x7fc00000 [ 171.729820][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.670356][ T7788] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 172.930699][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.962852][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.170705][ T7802] loop4: detected capacity change from 0 to 256 [ 174.929224][ T7805] hub 9-0:1.0: USB hub found [ 174.932856][ T7805] hub 9-0:1.0: 8 ports detected [ 175.102404][ T7812] loop4: detected capacity change from 0 to 64 [ 175.460954][ T7817] loop1: detected capacity change from 0 to 256 [ 176.096611][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.306939][ T7825] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 176.656725][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.675364][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.839353][ T7845] loop1: detected capacity change from 0 to 512 [ 176.849411][ T7845] EXT4-fs: Ignoring removed i_version option [ 176.872824][ T7845] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.892674][ T7845] EXT4-fs (loop1): DAX unsupported by block device. [ 176.984259][ T7849] loop0: detected capacity change from 0 to 64 [ 177.129905][ T7852] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 177.411660][ T7858] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 177.459714][ T7858] team0: Port device netdevsim0 removed [ 177.479998][ T7858] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 177.494357][ T7859] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 177.499316][ T7859] device syz_tun entered promiscuous mode [ 177.534678][ T7859] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 178.660148][ T7863] hub 9-0:1.0: USB hub found [ 178.661640][ T7863] hub 9-0:1.0: 8 ports detected [ 179.017159][ T7873] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 179.249690][ T7880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.254322][ T7880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.377670][ T7884] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 179.654837][ T7895] loop0: detected capacity change from 0 to 512 [ 179.668766][ T7895] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 179.672591][ T7895] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.705641][ T7895] EXT4-fs (loop0): 1 truncate cleaned up [ 179.707314][ T7895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 179.754547][ T7895] EXT4-fs (loop0): unmounting filesystem. [ 179.767918][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.772522][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.775715][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.779701][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.782276][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.785734][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.944444][ T7895] gfs2: not a GFS2 filesystem [ 180.023031][ T7905] loop0: detected capacity change from 0 to 256 [ 180.074277][ T6307] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.187858][ T7909] loop0: detected capacity change from 0 to 1764 [ 180.225958][ T4547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.250984][ T7899] lo speed is unknown, defaulting to 1000 [ 180.318644][ T4547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.372146][ T4547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.389926][ T7915] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 181.124838][ T4547] bond0: (slave netdevsim0): Releasing backup interface [ 181.265527][ T4547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.417849][ T7927] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 181.426145][ T7927] bond0: (slave netdevsim0): Releasing backup interface [ 181.490149][ T7927] team0: Port device netdevsim0 added [ 181.576515][ T7926] bridge0: port 3(hsr0) entered disabled state [ 181.578375][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.580430][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.617444][ T7899] chnl_net:caif_netlink_parms(): no params data found [ 181.718741][ T7936] syz-executor.0 (7936): drop_caches: 2 [ 182.063508][ T47] Bluetooth: hci1: command tx timeout [ 182.668648][ T7940] loop0: detected capacity change from 0 to 1764 [ 182.746258][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.751000][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.765664][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.772527][ T7899] device bridge_slave_0 entered promiscuous mode [ 182.840630][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.843434][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.845951][ T7899] device bridge_slave_1 entered promiscuous mode [ 182.898081][ T4264] Bluetooth: hci3: unexpected subevent 0x01 length: 25 > 18 [ 182.899198][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.907794][ T7957] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 182.935989][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.957382][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.026660][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.106483][ T4298] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 183.172985][ T7899] team0: Port device team_slave_0 added [ 183.180626][ T7899] team0: Port device team_slave_1 added [ 183.237712][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.247700][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.681256][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.079336][ T7978] bridge0: port 3(hsr0) entered blocking state [ 184.081170][ T7978] bridge0: port 3(hsr0) entered listening state [ 184.083045][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.084993][ T7978] bridge0: port 2(bridge_slave_1) entered listening state [ 184.086834][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.088711][ T7978] bridge0: port 1(bridge_slave_0) entered listening state [ 184.091048][ T7978] device bridge0 entered promiscuous mode [ 184.094714][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.096899][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.104855][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.111748][ T4264] Bluetooth: hci1: command tx timeout [ 184.231505][ T4298] usb 1-1: config 0 has no interfaces? [ 184.267120][ T7986] loop1: detected capacity change from 0 to 1764 [ 184.309832][ T7899] device hsr_slave_0 entered promiscuous mode [ 184.341955][ T7899] device hsr_slave_1 entered promiscuous mode [ 184.351486][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 184.391584][ T4298] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 184.394129][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.396298][ T4298] usb 1-1: Product: syz [ 184.397465][ T4298] usb 1-1: Manufacturer: syz [ 184.398674][ T4298] usb 1-1: SerialNumber: syz [ 184.407949][ T4298] usb 1-1: config 0 descriptor?? [ 184.411606][ T7899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.413579][ T7899] Cannot create hsr debugfs directory [ 184.476539][ T7996] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 184.690285][ T4298] usb 1-1: USB disconnect, device number 6 [ 184.921420][ T47] Bluetooth: hci3: command tx timeout [ 185.120829][ T7992] bridge0: port 3(hsr0) entered disabled state [ 185.122737][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.124659][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.129452][ T7992] device bridge0 left promiscuous mode [ 186.361435][ T4265] Bluetooth: hci1: command tx timeout [ 186.364897][ T8034] device bridge0 entered promiscuous mode [ 186.377238][ T7899] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.443432][ T7899] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.446979][ T8035] loop2: detected capacity change from 0 to 1764 [ 186.473295][ T7899] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.557295][ C1] vxcan0: j1939_tp_txtimer: 0x000000006ab65c1a: tx aborted with unknown reason: -2 [ 186.566969][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x0000000070c855a4: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 186.572484][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x000000006ab65c1a: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 186.587078][ T4547] device hsr_slave_0 left promiscuous mode [ 186.638133][ T4547] device hsr_slave_1 left promiscuous mode [ 186.713796][ T4547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.717249][ T4547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.731534][ T4547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.738508][ T4547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.759812][ T4547] device bridge_slave_1 left promiscuous mode [ 186.766910][ T4547] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.812642][ T4547] device bridge_slave_0 left promiscuous mode [ 186.815223][ T4547] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.827320][ T8064] syz-executor.0 (8064): drop_caches: 2 [ 186.911747][ T4547] device veth1_macvtap left promiscuous mode [ 186.913610][ T4547] device veth0_macvtap left promiscuous mode [ 186.915318][ T4547] device veth1_vlan left promiscuous mode [ 186.916872][ T4547] device veth0_vlan left promiscuous mode [ 186.958282][ T8068] dccp_xmit_packet: Payload too large (65475) for featneg. [ 186.971746][ T8068] dccp_close: ABORT with 65475 bytes unread [ 186.984597][ T8068] sctp: [Deprecated]: syz-executor.0 (pid 8068) Use of int in maxseg socket option. [ 186.984597][ T8068] Use struct sctp_assoc_value instead [ 187.095482][ T4547] bond5 (unregistering): Released all slaves [ 187.104599][ T4547] bond4 (unregistering): Released all slaves [ 187.114834][ T4547] bond3 (unregistering): Released all slaves [ 187.135981][ T4547] bond2 (unregistering): Released all slaves [ 187.145421][ T4547] bond1 (unregistering): Released all slaves [ 187.274012][ T4547] team0 (unregistering): Port device team_slave_1 removed [ 187.286399][ T4547] team0 (unregistering): Port device team_slave_0 removed [ 187.296484][ T4547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.349159][ T4547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.393616][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.395464][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.479181][ T4547] bond0 (unregistering): Released all slaves [ 187.582045][ T7899] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 187.641996][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 187.771287][ T8094] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 187.849664][ T7899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.892382][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.894911][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.916819][ T7899] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.928319][ T8100] loop2: detected capacity change from 0 to 1764 [ 187.938267][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.941684][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.944384][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.946445][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.966521][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.969461][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.973588][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.981036][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.983191][ T4900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.005282][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.008352][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.019689][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.054699][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.060029][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.068095][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.088980][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.094783][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.098732][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.103865][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.110235][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.134979][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.357842][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.360214][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.370611][ T7899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.415953][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.419012][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.431873][ T47] Bluetooth: hci1: command tx timeout [ 188.515343][ T7899] device veth0_vlan entered promiscuous mode [ 188.528660][ T7899] device veth1_vlan entered promiscuous mode [ 188.591473][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.594470][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.597275][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.626753][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.629529][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.639153][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.647318][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.657029][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.667678][ T7899] device veth0_macvtap entered promiscuous mode [ 188.673363][ T7899] device veth1_macvtap entered promiscuous mode [ 188.742053][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.744740][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.755397][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.770945][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.784018][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.798533][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.808284][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.817974][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.830611][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.840248][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.859174][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.903956][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.906671][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.911142][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.922265][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.924811][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.927374][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.929877][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.964952][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.967499][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.970223][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.994073][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.998666][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.001965][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.018680][ T7899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.021065][ T7899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.038129][ T8129] dccp_xmit_packet: Payload too large (65475) for featneg. [ 189.042356][ T7899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.044668][ T7899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.063826][ T8129] dccp_close: ABORT with 65475 bytes unread [ 189.076199][ T8129] sctp: [Deprecated]: syz-executor.4 (pid 8129) Use of int in maxseg socket option. [ 189.076199][ T8129] Use struct sctp_assoc_value instead [ 189.195318][ T7980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.197647][ T7980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.208725][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.247993][ T5353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.250351][ T5353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.256365][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.053447][ T8158] device veth1_macvtap left promiscuous mode [ 190.057645][ T8158] device macsec0 entered promiscuous mode [ 190.138338][ T8158] device veth1_macvtap entered promiscuous mode [ 190.146417][ T8158] device macsec0 left promiscuous mode [ 190.154734][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.390706][ T8162] loop2: detected capacity change from 0 to 1764 [ 190.441831][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.771533][ T8174] device bridge0 entered promiscuous mode [ 193.293821][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 194.243811][ T8214] 9pnet_fd: Insufficient options for proto=fd [ 194.336342][ T8217] syz-executor.4 (8217): drop_caches: 2 [ 195.672722][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 196.128778][ T8254] syz-executor.2 (8254): drop_caches: 2 [ 196.208233][ T8258] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.218281][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.235322][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.242679][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.254758][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.266139][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.171094][ T8285] sctp: [Deprecated]: syz-executor.2 (pid 8285) Use of int in max_burst socket option deprecated. [ 197.171094][ T8285] Use struct sctp_assoc_value instead [ 197.238279][ T8287] could not allocate digest TFM handle poly1305-simd [ 197.338539][ T8297] syz-executor.0 (8297): drop_caches: 2 [ 197.380268][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.391734][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.498831][ T8302] syz-executor.0 (8302): drop_caches: 2 [ 197.520430][ T8302] syz-executor.0 (8302): drop_caches: 2 [ 197.683035][ T27] audit: type=1326 audit(197.650:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa865d028 code=0x0 [ 197.817872][ T8306] sctp: [Deprecated]: syz-executor.3 (pid 8306) Use of int in max_burst socket option deprecated. [ 197.817872][ T8306] Use struct sctp_assoc_value instead [ 199.898646][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.186263][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.205571][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.207351][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.209061][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.210859][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.212746][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.214528][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.216194][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.218014][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.219847][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.221678][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.223433][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.225223][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.226987][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.228688][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.230477][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.232300][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.234109][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.235894][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.237755][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.239442][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.241256][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.243078][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.244864][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.246600][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.248389][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.250036][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.251881][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.253607][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.255341][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.257012][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.258704][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.260437][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.262260][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.263958][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.265667][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.267292][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.269043][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.270791][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.272597][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.274388][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.276185][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.277917][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.279738][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.281546][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.283325][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.285038][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.286834][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.288510][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.290361][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.292105][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.293986][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.295731][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.297504][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.299155][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.300908][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.302822][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.304775][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.306486][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.308285][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.310143][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.312081][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.313878][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 200.315640][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 200.317419][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 201.884549][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.059533][ T8406] sctp: [Deprecated]: syz-executor.2 (pid 8406) Use of int in max_burst socket option deprecated. [ 202.059533][ T8406] Use struct sctp_assoc_value instead [ 202.088426][ T8408] device batadv0 entered promiscuous mode [ 202.141413][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.161000][ T8412] bridge0: port 3(hsr0) entered blocking state [ 202.166560][ T8412] bridge0: port 3(hsr0) entered disabled state [ 202.169078][ T8412] device hsr0 entered promiscuous mode [ 202.198817][ T8412] bridge0: port 3(hsr0) entered blocking state [ 202.200633][ T8412] bridge0: port 3(hsr0) entered forwarding state [ 202.258091][ T8417] loop1: detected capacity change from 0 to 64 [ 203.529297][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.635754][ T8446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.638150][ T8446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.644651][ T8446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.657914][ T8446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.696360][ T8453] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 203.763885][ T8453] device geneve0 entered promiscuous mode [ 203.774625][ T8453] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 203.777135][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.867918][ T8459] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 204.271223][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.290314][ T8480] syz-executor.4 (8480): drop_caches: 2 [ 204.430755][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.549197][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.626737][ T8496] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 204.649646][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.994198][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.062357][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.068495][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.221992][ T8527] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 205.281822][ T8527] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 206.722573][ T8559] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 206.758590][ T8562] loop0: detected capacity change from 0 to 64 [ 207.032998][ T8582] __nla_validate_parse: 4 callbacks suppressed [ 207.033014][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.138598][ T8577] sctp: [Deprecated]: syz-executor.3 (pid 8577) Use of int in max_burst socket option deprecated. [ 207.138598][ T8577] Use struct sctp_assoc_value instead [ 207.146012][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.154311][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.794134][ T4265] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 207.797303][ T4265] Bluetooth: hci2: Injecting HCI hardware error event [ 207.803071][ T4265] Bluetooth: hci2: hardware error 0x00 [ 207.814766][ T4511] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 208.306686][ T8600] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 208.324141][ T8601] loop3: detected capacity change from 0 to 64 [ 208.341787][ T4511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.344700][ T4511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.347183][ T4511] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 208.349506][ T4511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.373134][ T4511] usb 1-1: config 0 descriptor?? [ 209.871799][ T4511] hid (null): bogus close delimiter [ 210.000250][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.036468][ T8629] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.045157][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.091607][ T4511] usb 1-1: string descriptor 0 read error: -71 [ 210.111879][ T4511] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 210.114170][ T4511] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 210.116130][ T4511] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 210.118135][ T4511] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 210.120098][ T4511] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 210.135620][ T8633] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 210.169838][ T4511] usb 1-1: USB disconnect, device number 7 [ 210.269679][ T8644] syz-executor.4 (8644): drop_caches: 2 [ 210.432434][ T4265] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 211.338490][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.503347][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.513088][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.538876][ T8668] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 211.599472][ T8668] team0: Port device netdevsim0 removed [ 211.610538][ T8668] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 212.079713][ T8681] syz-executor.0 (8681): drop_caches: 2 [ 212.224284][ T8686] loop3: detected capacity change from 0 to 128 [ 213.563093][ T8685] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 213.845930][ T8715] syz-executor.4 (8715): drop_caches: 2 [ 214.681561][ T4634] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 214.782509][ T8743] syz-executor.3 (8743): drop_caches: 2 [ 214.840570][ T8745] device bridge0 entered promiscuous mode [ 214.935702][ T8749] loop3: detected capacity change from 0 to 1764 [ 215.041781][ T4634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.045260][ T4634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.048149][ T4634] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 215.063861][ T4634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.076032][ T4634] usb 1-1: config 0 descriptor?? [ 215.087806][ T8754] xt_cgroup: path and classid specified [ 215.344228][ T8733] device macsec1 entered promiscuous mode [ 215.519738][ T8767] loop2: detected capacity change from 0 to 2048 [ 215.552248][ T4634] usbhid 1-1:0.0: can't add hid device: -71 [ 215.553562][ T8767] NILFS (loop2): invalid segment: Sequence number mismatch [ 215.553874][ T4634] usbhid: probe of 1-1:0.0 failed with error -71 [ 215.556089][ T8767] NILFS (loop2): trying rollback from an earlier position [ 215.560149][ T4634] usb 1-1: USB disconnect, device number 8 [ 215.616806][ T8767] NILFS (loop2): recovery complete [ 215.650250][ T8770] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.790231][ T8772] syz-executor.2 (8772): drop_caches: 2 [ 216.029116][ T8776] loop2: detected capacity change from 0 to 1764 [ 217.391145][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.397676][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.498192][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.538164][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.547711][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.983810][ T8818] lo speed is unknown, defaulting to 1000 [ 218.097113][ T8808] loop3: detected capacity change from 0 to 32768 [ 218.113727][ T8800] loop1: detected capacity change from 0 to 40427 [ 218.141977][ T8808] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (8808) [ 218.196503][ T8808] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 218.209773][ T8808] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 218.228543][ T8800] F2FS-fs (loop1): invalid crc value [ 218.231780][ T8808] BTRFS info (device loop3): using free space tree [ 218.266176][ T8800] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.307551][ T8800] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 218.382351][ T8833] loop2: detected capacity change from 0 to 1764 [ 218.387582][ T8808] BTRFS info (device loop3): enabling ssd optimizations [ 218.594346][ T7899] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 219.369795][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.477929][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.481729][ T6052] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 219.618648][ T8886] lo speed is unknown, defaulting to 1000 [ 219.759524][ T8893] loop2: detected capacity change from 0 to 1764 [ 219.883086][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.891537][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.894548][ T6052] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.907001][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.920560][ T6052] usb 1-1: config 0 descriptor?? [ 220.191512][ T4264] Bluetooth: hci5: command 0x0406 tx timeout [ 220.222301][ T8864] device macsec1 entered promiscuous mode [ 220.421521][ T6052] usbhid 1-1:0.0: can't add hid device: -71 [ 220.423228][ T6052] usbhid: probe of 1-1:0.0 failed with error -71 [ 220.444484][ T6052] usb 1-1: USB disconnect, device number 9 [ 220.464980][ T8917] syz-executor.4 (8917): drop_caches: 2 [ 221.809526][ T8943] device bond0 entered promiscuous mode [ 221.811299][ T8943] device bond_slave_0 entered promiscuous mode [ 221.841846][ T8943] device bond_slave_1 entered promiscuous mode [ 221.843834][ T8943] device netdevsim0 entered promiscuous mode [ 221.846169][ T8943] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.887996][ T8951] 9pnet_fd: Insufficient options for proto=fd [ 221.903956][ T8946] loop4: detected capacity change from 0 to 1764 [ 221.913751][ T8943] device bond0 left promiscuous mode [ 221.915422][ T8943] device bond_slave_0 left promiscuous mode [ 221.917146][ T8943] device bond_slave_1 left promiscuous mode [ 221.918973][ T8943] device netdevsim0 left promiscuous mode [ 221.967476][ T8950] lo speed is unknown, defaulting to 1000 [ 222.296723][ T8968] loop0: detected capacity change from 0 to 256 [ 223.382062][ T8972] fuse: Unknown parameter '017777777777777777777770000000000000000000000000000000000000000' [ 223.535540][ T8978] 9pnet_fd: Insufficient options for proto=fd [ 223.624883][ T8979] syz-executor.4 (8979): drop_caches: 2 [ 223.950711][ T8999] loop0: detected capacity change from 0 to 1764 [ 223.988820][ T9003] loop1: detected capacity change from 0 to 64 [ 224.058042][ T9008] 9pnet_fd: Insufficient options for proto=fd [ 224.064933][ T9009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.068954][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.125173][ T9012] syz-executor.1 (9012): drop_caches: 2 [ 224.675409][ T9034] loop4: detected capacity change from 0 to 64 [ 224.745220][ T9036] 9pnet_fd: Insufficient options for proto=fd [ 224.824962][ T9040] syz-executor.4 (9040): drop_caches: 2 [ 224.894532][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.924971][ T9047] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.927453][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.237481][ T9069] 9pnet_fd: Insufficient options for proto=fd [ 225.263029][ T9068] syz-executor.2 (9068): drop_caches: 2 [ 225.402616][ T9079] loop1: detected capacity change from 0 to 64 [ 225.417540][ T9080] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.423778][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.541159][ T9102] 9pnet_fd: Insufficient options for proto=fd [ 226.679301][ T9112] loop4: detected capacity change from 0 to 64 [ 226.679945][ T9110] syz-executor.3 (9110): drop_caches: 2 [ 226.753392][ T9115] fuse: Bad value for 'fd' [ 228.500045][ T9127] loop4: detected capacity change from 0 to 1764 [ 229.059668][ T9156] syz-executor.1 (9156): drop_caches: 2 [ 229.086251][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.609115][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.609318][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.633711][ T9190] syz-executor.3 (9190): drop_caches: 2 [ 232.583468][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.814795][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.044455][ T9227] loop2: detected capacity change from 0 to 256 [ 234.103987][ T9227] FAT-fs (loop2): Directory bread(block 64) failed [ 234.113162][ T9227] FAT-fs (loop2): Directory bread(block 65) failed [ 234.123270][ T9227] FAT-fs (loop2): Directory bread(block 66) failed [ 234.133074][ T9227] FAT-fs (loop2): Directory bread(block 67) failed [ 234.143041][ T9227] FAT-fs (loop2): Directory bread(block 68) failed [ 234.149478][ T9229] syz-executor.0 (9229): drop_caches: 2 [ 234.152557][ T9227] FAT-fs (loop2): Directory bread(block 69) failed [ 234.159144][ T9227] FAT-fs (loop2): Directory bread(block 70) failed [ 234.171667][ T9227] FAT-fs (loop2): Directory bread(block 71) failed [ 234.180499][ T9227] FAT-fs (loop2): Directory bread(block 72) failed [ 234.189551][ T9227] FAT-fs (loop2): Directory bread(block 73) failed [ 234.305969][ T9232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.306152][ T9232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.714039][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.001573][ T9271] syz-executor.0 (9271): drop_caches: 2 [ 237.139608][ T9279] loop0: detected capacity change from 0 to 128 [ 237.171974][ T9281] loop4: detected capacity change from 0 to 512 [ 237.177635][ T9278] sctp: [Deprecated]: syz-executor.2 (pid 9278) Use of int in max_burst socket option deprecated. [ 237.177635][ T9278] Use struct sctp_assoc_value instead [ 237.188292][ T9281] EXT4-fs (loop4): Encoding requested by superblock is unknown [ 237.309069][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.333634][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.287589][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.294450][ T9315] syz-executor.2 (9315): drop_caches: 2 [ 239.310193][ T9319] loop3: detected capacity change from 0 to 128 [ 239.328639][ T9320] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 239.334215][ T9320] pim6reg0: linktype set to 778 [ 241.230586][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 241.640937][ T9316] loop1: detected capacity change from 0 to 40427 [ 241.687261][ T9316] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(33558016) blocks(1024) [ 241.693430][ T9316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 241.712566][ T9316] F2FS-fs (loop1): Unrecognized mount option "00000000000000000000003" or missing value [ 241.799219][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.788156][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.827827][ T9359] syz-executor.1 (9359): drop_caches: 2 [ 243.022198][ T9372] device bond0 entered promiscuous mode [ 243.023937][ T9372] device bond_slave_0 entered promiscuous mode [ 243.025894][ T9372] device bond_slave_1 entered promiscuous mode [ 243.040190][ T9372] device netdevsim0 entered promiscuous mode [ 243.084440][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 243.140293][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.731784][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.827517][ T9406] loop4: detected capacity change from 0 to 256 [ 244.879701][ T9409] syz-executor.3 (9409): drop_caches: 2 [ 244.888747][ T9406] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 245.073089][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.172350][ T9427] lo speed is unknown, defaulting to 1000 [ 245.321720][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.553856][ T9442] syz-executor.0 (9442): drop_caches: 2 [ 245.898861][ T9428] loop3: detected capacity change from 0 to 32768 [ 246.028418][ T9428] XFS (loop3): Mounting V5 Filesystem [ 246.053343][ T9467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.055884][ T9467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.136798][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.153060][ T9428] XFS (loop3): Ending clean mount [ 246.251268][ T7899] XFS (loop3): Unmounting Filesystem [ 246.385565][ T9478] loop2: detected capacity change from 0 to 512 [ 246.388152][ T9478] EXT4-fs: Invalid want_extra_isize 5 [ 246.441509][ T6307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.815382][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.026271][ T9501] loop4: detected capacity change from 0 to 512 [ 247.037063][ T9501] EXT4-fs: Invalid want_extra_isize 5 [ 247.045778][ T9464] loop0: detected capacity change from 0 to 65536 [ 247.082146][ T6307] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.103727][ T9464] XFS (loop0): Mounting V5 Filesystem [ 247.174820][ T9464] XFS (loop0): Ending clean mount [ 247.303828][ T6230] XFS (loop0): Unmounting Filesystem [ 247.340367][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.350626][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.210744][ T9549] loop0: detected capacity change from 0 to 164 [ 248.408539][ T9560] 9pnet_fd: Insufficient options for proto=fd [ 248.439802][ T9561] syz-executor.1 (9561): drop_caches: 2 [ 248.525382][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.538890][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.771638][ T9571] serio: Serial port pts0 [ 249.617518][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.619688][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.696483][ T9582] binder: BINDER_SET_CONTEXT_MGR already set [ 249.706609][ T9582] binder: 9581:9582 ioctl 4018620d 20000040 returned -16 [ 249.731547][ T9582] binder: 9581:9582 got transaction to invalid handle, 1 [ 249.743702][ T9582] binder: 9582:9581 cannot find target node [ 249.743774][ T9585] loop2: detected capacity change from 0 to 64 [ 249.745286][ T9582] binder: 9581:9582 transaction async to 0:0 failed 2/29201/-22, size 0-0 line 3056 [ 249.745627][ T9582] binder: 9581:9582 ioctl c0306201 0 returned -14 [ 249.871655][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.874202][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.885934][ T4296] binder: undelivered TRANSACTION_ERROR: 29201 [ 249.968116][ T9596] 9pnet_fd: Insufficient options for proto=fd [ 250.001971][ T9598] syz-executor.4 (9598): drop_caches: 2 [ 250.111192][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.468632][ T9628] syz-executor.3 (9628): drop_caches: 2 [ 250.571245][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.576132][ T9593] loop1: detected capacity change from 0 to 40427 [ 250.579347][ T9593] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 250.586927][ T9593] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 250.590851][ T9593] F2FS-fs (loop1): invalid crc value [ 250.622100][ T9593] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.663676][ T9593] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 250.665866][ T9593] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.752986][ T9650] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 251.908399][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.927153][ T9660] syz-executor.3 (9660): drop_caches: 2 [ 252.094628][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.107224][ T9672] loop0: detected capacity change from 0 to 64 [ 252.107231][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.458800][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.680362][ T9707] device pim6reg1 entered promiscuous mode [ 253.147714][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.156744][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.270813][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.276084][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.825444][ T9780] loop0: detected capacity change from 0 to 512 [ 255.838611][ T9780] EXT4-fs (loop0): Test dummy encryption mode enabled [ 255.887091][ T9780] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz-executor.0: iget: bogus i_mode (0) [ 255.892165][ T9780] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 255.895851][ T9780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 255.955094][ T9788] loop3: detected capacity change from 0 to 512 [ 255.970253][ T9788] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.3: invalid block [ 255.983053][ T9788] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 255.995627][ T9788] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 256.008211][ T9788] EXT4-fs (loop3): 2 truncates cleaned up [ 256.012395][ T9788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 256.028522][ T6230] EXT4-fs (loop0): unmounting filesystem. [ 256.184094][ T7899] EXT4-fs error (device loop3): ext4_lookup:1855: inode #17: comm syz-executor.3: iget: bad extended attribute block 6904 [ 256.194969][ T7899] EXT4-fs error (device loop3): ext4_lookup:1855: inode #17: comm syz-executor.3: iget: bad extended attribute block 6904 [ 256.342365][ T9803] loop0: detected capacity change from 0 to 256 [ 256.407738][ T6307] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.425150][ T9803] Process accounting resumed [ 256.565927][ T9807] loop0: detected capacity change from 0 to 64 [ 256.592360][ T9807] hfs: unable to locate alternate MDB [ 256.594045][ T9807] hfs: continuing without an alternate MDB [ 256.706535][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.754068][ T9815] loop1: detected capacity change from 0 to 512 [ 256.772715][ T9815] EXT4-fs (loop1): Test dummy encryption mode enabled [ 256.788343][ T9815] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #17: comm syz-executor.1: iget: bogus i_mode (0) [ 256.796597][ T9815] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 17 (err -117) [ 256.808420][ T9815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 256.810996][ T9811] device hsr_slave_1 left promiscuous mode [ 256.816499][ T7899] EXT4-fs (loop3): unmounting filesystem. [ 256.927547][ T6772] EXT4-fs (loop1): unmounting filesystem. [ 257.084667][ T9813] loop0: detected capacity change from 0 to 40427 [ 257.095865][ T9813] F2FS-fs (loop0): invalid crc value [ 257.121896][ T9813] F2FS-fs (loop0): Found nat_bits in checkpoint [ 257.165107][ T9813] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 257.237629][ T5353] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.253706][ T9813] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 257.256246][ T9813] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 257.258483][ T9813] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 257.275202][ T9813] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.334392][ T5353] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.369475][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.374420][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.378301][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.396383][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.398801][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 257.400830][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.439824][ T5353] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.475470][ T9839] lo speed is unknown, defaulting to 1000 [ 257.519311][ T5353] bond0: (slave netdevsim0): Releasing backup interface [ 258.110019][ T5353] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.830943][ T9839] chnl_net:caif_netlink_parms(): no params data found [ 259.055936][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.058137][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.060821][ T9839] device bridge_slave_0 entered promiscuous mode [ 259.066285][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.068421][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.071228][ T9839] device bridge_slave_1 entered promiscuous mode [ 259.114878][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.119198][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.274768][ T9839] team0: Port device team_slave_0 added [ 259.278016][ T9839] team0: Port device team_slave_1 added [ 259.419157][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.419176][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.419196][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.420491][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.420505][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.420525][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.471653][ T4264] Bluetooth: hci1: command tx timeout [ 259.707589][ T9839] device hsr_slave_0 entered promiscuous mode [ 259.746153][ T9839] device hsr_slave_1 entered promiscuous mode [ 259.810979][ T9940] 9pnet: Could not find request transport: fd0x0000000000000005 [ 259.894621][ T9946] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 259.897056][ T9946] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.957441][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.345893][ T9973] 9pnet: Could not find request transport: fd0x0000000000000005 [ 260.789912][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.901102][ T5353] device hsr_slave_0 left promiscuous mode [ 260.943734][ T5353] device hsr_slave_1 left promiscuous mode [ 261.011715][ T5353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.013851][ T5353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.039941][ T5353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.043295][ T5353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.061921][ T5353] device hsr0 left promiscuous mode [ 261.074024][ T5353] bridge0: port 3(hsr0) entered disabled state [ 261.126860][ T5353] device bridge_slave_1 left promiscuous mode [ 261.128802][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.191164][ T5353] device bridge_slave_0 left promiscuous mode [ 261.193162][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.247073][T10009] loop2: detected capacity change from 0 to 4096 [ 261.261026][T10009] NILFS (loop2): invalid segment: Checksum error in segment payload [ 261.267559][T10009] NILFS (loop2): trying rollback from an earlier position [ 261.294196][T10009] NILFS (loop2): recovery complete [ 261.301083][T10013] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.331840][ T5353] device veth1_macvtap left promiscuous mode [ 261.333706][ T5353] device veth0_macvtap left promiscuous mode [ 261.335509][ T5353] device veth1_vlan left promiscuous mode [ 261.337200][ T5353] device veth0_vlan left promiscuous mode [ 261.551929][ T4264] Bluetooth: hci1: command tx timeout [ 261.897776][ T5353] team0 (unregistering): Port device team_slave_1 removed [ 261.926825][ T5353] team0 (unregistering): Port device team_slave_0 removed [ 261.948411][ T5353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.018410][ T5353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.041237][T10020] 9pnet: Could not find request transport: fd0x0000000000000005 [ 262.227291][ T5353] bond0 (unregistering): Released all slaves [ 262.329867][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.420760][ T9839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 262.484514][ T9839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.563609][ T9839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.610317][T10038] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.613301][ T9839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.638943][T10041] loop2: detected capacity change from 0 to 2048 [ 262.669752][T10041] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.828103][T10047] 9pnet_fd: Insufficient options for proto=fd [ 262.863335][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.875903][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.878444][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.894745][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.910125][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.915587][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.918291][ T5522] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.920258][ T5522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.942397][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.945067][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.947802][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.956115][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.958172][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.965369][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.988602][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.997462][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.010036][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.020565][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.030583][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.146169][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.149019][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.156985][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.164616][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.178728][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.186635][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.263201][T10037] loop1: detected capacity change from 0 to 32768 [ 263.395916][T10037] XFS (loop1): Mounting V5 Filesystem [ 263.537122][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.541132][T10037] XFS (loop1): Ending clean mount [ 263.552766][T10037] XFS (loop1): Quotacheck needed: Please wait. [ 263.558710][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.561024][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.626651][T10037] XFS (loop1): Quotacheck: Done. [ 263.631678][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.632175][ T4264] Bluetooth: hci1: command tx timeout [ 263.634386][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.662687][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.665623][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.677785][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.691977][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.708595][ T6772] XFS (loop1): Unmounting Filesystem [ 263.712282][ T9839] device veth0_vlan entered promiscuous mode [ 263.718286][ T9839] device veth1_vlan entered promiscuous mode [ 263.771043][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.774407][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.777293][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.779975][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.795533][ T9839] device veth0_macvtap entered promiscuous mode [ 263.800383][ T9839] device veth1_macvtap entered promiscuous mode [ 263.833750][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.836755][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.839398][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.872299][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.875080][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.877783][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.880424][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.891565][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.903042][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.907035][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.909625][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.913009][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.916306][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.944220][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.947171][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.949726][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.963253][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.965978][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.968638][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.969030][T10096] SET target dimension over the limit! [ 263.971206][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.971225][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.991905][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.994877][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.997824][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.013078][ T9839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.015524][ T9839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.022623][ T9839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.025107][ T9839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.160496][ T6588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.168330][ T6588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.196622][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.236886][ T7980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.239283][ T7980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.259331][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.494391][T10116] 9pnet_fd: Insufficient options for proto=fd [ 265.566514][T10153] loop3: detected capacity change from 0 to 4096 [ 265.618338][T10153] NILFS (loop3): invalid segment: Checksum error in segment payload [ 265.633004][T10153] NILFS (loop3): trying rollback from an earlier position [ 265.680301][T10153] NILFS (loop3): recovery complete [ 265.702368][T10156] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.729459][ T4265] Bluetooth: hci1: command tx timeout [ 268.162742][T10247] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.166221][T10247] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 268.202492][T10247] loop3: detected capacity change from 0 to 512 [ 268.234795][T10255] loop2: detected capacity change from 0 to 256 [ 268.391799][T10247] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz-executor.3: iget: bad extended attribute block 128 [ 268.398937][T10255] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 268.408684][T10247] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 268.421223][T10247] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 269.406062][ T9839] EXT4-fs (loop3): unmounting filesystem. [ 270.303590][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.565877][T10278] device syzkaller0 entered promiscuous mode [ 271.392065][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.709720][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.720447][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.110514][T10325] loop0: detected capacity change from 0 to 1024 [ 272.197933][T10310] device syzkaller0 entered promiscuous mode [ 272.208031][T10322] hub 9-0:1.0: USB hub found [ 272.209445][T10322] hub 9-0:1.0: 8 ports detected [ 272.256029][ T217] hfsplus: b-tree write err: -5, ino 4 [ 272.337427][T10330] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.728278][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.822174][T10338] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 273.899686][T10338] loop2: detected capacity change from 0 to 512 [ 273.960775][T10338] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz-executor.2: iget: bad extended attribute block 128 [ 273.971287][T10338] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 16 (err -117) [ 273.995108][T10338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 274.096632][ T6547] EXT4-fs (loop2): unmounting filesystem. [ 274.498886][T10346] loop4: detected capacity change from 0 to 32768 [ 274.596988][T10346] XFS (loop4): Mounting V5 Filesystem [ 274.704186][T10346] XFS (loop4): Ending clean mount [ 274.728613][T10346] XFS (loop4): Quotacheck needed: Please wait. [ 274.801325][T10346] XFS (loop4): Quotacheck: Done. [ 275.243220][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.893094][T10403] loop3: detected capacity change from 0 to 256 [ 276.009313][T10405] loop0: detected capacity change from 0 to 8 [ 276.200597][T10417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.233151][T10414] loop1: detected capacity change from 0 to 1024 [ 276.243608][T10416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.279162][T10414] hfsplus: invalid btree flag [ 276.280901][T10414] hfsplus: failed to load catalog file [ 276.289625][T10407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.332911][T10414] loop1: detected capacity change from 0 to 128 [ 276.342068][T10416] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 276.342831][T10414] FAT-fs (loop1): Unrecognized mount option "¯·‡SI.Õ- Ý^×ó¼" or missing value [ 276.360497][T10407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.376915][T10416] loop0: detected capacity change from 0 to 512 [ 276.506518][T10416] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz-executor.0: iget: bad extended attribute block 128 [ 276.510894][T10416] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 16 (err -117) [ 276.516935][T10416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 277.283875][ T27] audit: type=1326 audit(277.100:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa865d028 code=0x0 [ 277.304516][ T6230] EXT4-fs (loop0): unmounting filesystem. [ 277.876533][ T5656] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 278.121059][ T5150] XFS (loop4): Unmounting Filesystem [ 278.233381][T10438] loop3: detected capacity change from 0 to 40427 [ 278.258792][ T5656] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 278.261109][ T5656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.291231][T10438] F2FS-fs (loop3): Invalid segment count (0) [ 278.295012][T10438] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 278.298737][T10438] F2FS-fs (loop3): invalid crc value [ 278.308637][T10438] F2FS-fs (loop3): Found nat_bits in checkpoint [ 278.331737][T10438] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 278.334046][T10438] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 278.363871][ T5656] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 278.366243][ T5656] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 278.368286][ T5656] usb 1-1: Manufacturer: syz [ 278.373190][ T5656] usb 1-1: config 0 descriptor?? [ 278.418777][ T9839] syz-executor.3: attempt to access beyond end of device [ 278.418777][ T9839] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.424406][ T5656] Registered IR keymap rc-hauppauge [ 278.531534][ T5656] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 278.538213][ T5656] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 278.550324][ T5656] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 278.630340][ T5656] usb 1-1: USB disconnect, device number 10 [ 278.940360][T10464] loop4: detected capacity change from 0 to 1024 [ 279.805188][T10463] loop3: detected capacity change from 0 to 256 [ 280.033774][ T4265] Bluetooth: hci1: hardware error 0x00 [ 280.118807][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.127216][T10481] loop0: detected capacity change from 0 to 64 [ 280.293071][T10491] 9pnet_fd: Insufficient options for proto=fd [ 280.480913][T10498] kernel profiling enabled (shift: 0) [ 281.381232][T10495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.444708][T10495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.505245][T10495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.603653][ T4298] kernel write not supported for file /vcsu (pid: 4298 comm: kworker/0:6) [ 282.728235][ T4265] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 283.441092][T10520] loop1: detected capacity change from 0 to 64 [ 283.529815][T10525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.554442][T10525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.817475][ T4404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 283.828002][ T4404] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 283.881489][ T5656] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 284.252789][T10549] loop4: detected capacity change from 0 to 64 [ 284.281818][ T5656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.284760][ T5656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.287313][ T5656] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.289712][ T5656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.310041][ T5656] usb 1-1: config 0 descriptor?? [ 284.747783][T10568] tmpfs: Bad value for 'nr_inodes' [ 284.847547][T10581] device hsr_slave_0 left promiscuous mode [ 284.895977][T10583] loop3: detected capacity change from 0 to 64 [ 285.041560][ T5656] usb 1-1: string descriptor 0 read error: -71 [ 285.071511][ T5656] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 285.074219][ T5656] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 285.076477][ T5656] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 285.081001][ T5656] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 285.085803][ T5656] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 285.095915][ T5656] usb 1-1: USB disconnect, device number 11 [ 285.740446][T10599] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 285.742999][T10599] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.895370][T10605] syz-executor.1 (10605): drop_caches: 2 [ 286.394277][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.396824][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.397923][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.403436][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.405077][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.406085][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.578413][T10637] bridge0: port 4(hsr0) entered blocking state [ 286.586447][T10637] bridge0: port 4(hsr0) entered disabled state [ 286.590293][T10637] device hsr0 entered promiscuous mode [ 286.594609][T10637] bridge0: port 4(hsr0) entered blocking state [ 286.596490][T10637] bridge0: port 4(hsr0) entered forwarding state [ 287.151523][ C0] [ 287.152235][ C0] ============================================ [ 287.153820][ C0] WARNING: possible recursive locking detected [ 287.155490][ C0] 6.1.92-syzkaller #0 Not tainted [ 287.156840][ C0] -------------------------------------------- [ 287.158437][ C0] syz-executor.2/10644 is trying to acquire lock: [ 287.160192][ C0] ffff0000ed7c8d88 (&hsr->seqnr_lock){+.-.}-{2:2}, at: hsr_dev_xmit+0xf8/0x2d8 [ 287.162744][ C0] [ 287.162744][ C0] but task is already holding lock: [ 287.164940][ C0] ffff0000f14d0d88 (&hsr->seqnr_lock){+.-.}-{2:2}, at: send_hsr_supervision_frame+0x1fc/0x8a4 [ 287.167880][ C0] [ 287.167880][ C0] other info that might help us debug this: [ 287.170117][ C0] Possible unsafe locking scenario: [ 287.170117][ C0] [ 287.172153][ C0] CPU0 [ 287.173071][ C0] ---- [ 287.173960][ C0] lock(&hsr->seqnr_lock); [ 287.175217][ C0] lock(&hsr->seqnr_lock); [ 287.176470][ C0] [ 287.176470][ C0] *** DEADLOCK *** [ 287.176470][ C0] [ 287.178720][ C0] May be due to missing lock nesting notation [ 287.178720][ C0] [ 287.181043][ C0] 8 locks held by syz-executor.2/10644: [ 287.182602][ C0] #0: ffff0000e795b590 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x1ec/0xe2c [ 287.185311][ C0] #1: ffff800008007c80 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd0/0xa1c [ 287.188110][ C0] #2: ffff800015a24ca0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 287.190684][ C0] #3: ffff0000f14d0d88 (&hsr->seqnr_lock){+.-.}-{2:2}, at: send_hsr_supervision_frame+0x1fc/0x8a4 [ 287.193631][ C0] #4: ffff800015a24ca0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 287.196184][ C0] #5: ffff800015a24d00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 287.198844][ C0] #6: ffff800015a24ca0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 287.201449][ C0] #7: ffff800015a24d00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 287.204152][ C0] [ 287.204152][ C0] stack backtrace: [ 287.205740][ C0] CPU: 0 PID: 10644 Comm: syz-executor.2 Not tainted 6.1.92-syzkaller #0 [ 287.208038][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.210784][ C0] Call trace: [ 287.211676][ C0] dump_backtrace+0x1c8/0x1f4 [ 287.212964][ C0] show_stack+0x2c/0x3c [ 287.214096][ C0] dump_stack_lvl+0x108/0x170 [ 287.215421][ C0] dump_stack+0x1c/0x5c [ 287.216578][ C0] __lock_acquire+0x6310/0x7680 [ 287.217926][ C0] lock_acquire+0x26c/0x7cc [ 287.219139][ C0] _raw_spin_lock_bh+0x54/0x6c [ 287.220435][ C0] hsr_dev_xmit+0xf8/0x2d8 [ 287.221632][ C0] dev_hard_start_xmit+0x25c/0x9a4 [ 287.223065][ C0] __dev_queue_xmit+0x186c/0x38d8 [ 287.224482][ C0] br_dev_queue_push_xmit+0x584/0x730 [ 287.225921][ C0] NF_HOOK+0x35c/0x408 [ 287.227064][ C0] br_forward_finish+0xd0/0x118 [ 287.228402][ C0] NF_HOOK+0x35c/0x408 [ 287.229485][ C0] __br_forward+0x2f0/0x458 [ 287.230770][ C0] maybe_deliver+0xc8/0x178 [ 287.232045][ C0] br_flood+0x28c/0x3f8 [ 287.233190][ C0] br_dev_xmit+0xd88/0x137c [ 287.234420][ C0] dev_hard_start_xmit+0x25c/0x9a4 [ 287.235828][ C0] __dev_queue_xmit+0x186c/0x38d8 [ 287.237142][ C0] hsr_forward_skb+0x1048/0x1c5c [ 287.238500][ C0] send_hsr_supervision_frame+0x414/0x8a4 [ 287.240209][ C0] hsr_announce+0x17c/0x31c [ 287.241498][ C0] call_timer_fn+0x1c0/0xa1c [ 287.242828][ C0] __run_timers+0x554/0x718 [ 287.244030][ C0] run_timer_softirq+0x7c/0x114 [ 287.245436][ C0] __do_softirq+0x314/0xe38 [ 287.246689][ C0] ____do_softirq+0x14/0x20 [ 287.248043][ C0] call_on_irq_stack+0x24/0x4c [ 287.249387][ C0] do_softirq_own_stack+0x20/0x2c [ 287.250842][ C0] __irq_exit_rcu+0x264/0x4d4 [ 287.252153][ C0] irq_exit_rcu+0x14/0x84 [ 287.253354][ C0] el1_interrupt+0x38/0x68 [ 287.254603][ C0] el1h_64_irq_handler+0x18/0x24 [ 287.255990][ C0] el1h_64_irq+0x64/0x68 [ 287.257180][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 287.258684][ C0] __skb_try_recv_datagram+0x198/0x584 [ 287.260167][ C0] __unix_dgram_recvmsg+0x2f8/0xe2c [ 287.261593][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 287.262914][ C0] ____sys_recvmsg+0x234/0x69c [ 287.264332][ C0] do_recvmmsg+0x41c/0xb60 [ 287.265561][ C0] __arm64_sys_recvmmsg+0x180/0x23c [ 287.267117][ C0] invoke_syscall+0x98/0x2c0 [ 287.268421][ C0] el0_svc_common+0x138/0x258 [ 287.269834][ C0] do_el0_svc+0x64/0x218 [ 287.271049][ C0] el0_svc+0x58/0x168 [ 287.272150][ C0] el0t_64_sync_handler+0x84/0xf0 [ 287.273540][ C0] el0t_64_sync+0x18c/0x190 1970/01/01 00:04:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 287.448486][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.494918][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.537048][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.697741][ T9] bond0: (slave netdevsim0): Releasing backup interface [ 287.734202][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0