last executing test programs: 3m48.174631087s ago: executing program 1 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m47.209734694s ago: executing program 1 (id=234): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x1, 0x0, 0xfffffffffffffffc}) 3m46.257446149s ago: executing program 1 (id=242): listen(0xffffffffffffffff, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRRU(r2, 0x4004743b, 0x0) 3m46.23255348s ago: executing program 1 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1000000}, 0x48) 3m45.350740721s ago: executing program 1 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m44.492721481s ago: executing program 1 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x59) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3m29.311830375s ago: executing program 32 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x59) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8.615574098s ago: executing program 2 (id=1415): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_clone(0x80808400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.232015967s ago: executing program 2 (id=1413): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) syz_read_part_table(0x1053, &(0x7f00000008c0)="$eJzszzGqwkAUhtH/PRMSsHEL1q4ittqmchPuQMHGjdi4MVchkTEWCrYiwjnVfMPMhRu+6u+lhiRtOdRvnk6fY3XdNsl+Ms+h+0/aoblfd7OclouU2JReD6NdnWr8eOkfE45Nlf78kaUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MfcAgAA///KhRGw") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) futex(&(0x7f0000000040)=0x1, 0x1, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x204010, &(0x7f0000000000), 0x0, 0x65e, &(0x7f00000004c0)="$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") 4.764229293s ago: executing program 2 (id=1424): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x1, 0x0, 0x1, 0x0, 0x6, @random="8e5a341b9f02"}, 0x14) 4.159461128s ago: executing program 2 (id=1426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x814) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x74, 0x4, 0x8, 0xfffff02f}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x18) 3.709384014s ago: executing program 0 (id=1427): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x808}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x80000001, 0x0, 0x7f, 0x0, 0x4, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.691512085s ago: executing program 5 (id=1428): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x803, 0x10000000}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdfff}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000007640)={0x0, 0xffffffffffffff93, &(0x7f0000007600)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050004000000140004"], 0x58}}, 0x0) 3.690725415s ago: executing program 3 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001100010025bd7000fbdbdf25fc010000000000000000110000000001000004d50a0000000c0015005c0735000400000014000d00fe880000000000000000000000000101853f63"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 3.552326273s ago: executing program 5 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) 2.763061639s ago: executing program 2 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(0x0) 2.717979912s ago: executing program 0 (id=1442): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0xcc, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x5}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 2.640415736s ago: executing program 5 (id=1433): timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000180), 0x0, 0x65b, &(0x7f0000000880)="$eJzs3c9vG1kdAPDvjJ04PxaSrRCwHNgIhLYSbLLJ7qIKIe3mwmlVtcA/EJq0quo2VRMkUiqRSHBEXDggceJS/guoxJUTtx64cEKVKkA5UFTRWY09kzhOHDtOHTfO5yM5mZlnv/dG8tfvzfN74wAurLn8TxrxTkTcTyJmWtKqUSTONZ+3+59HN/JHEln2o38l8egXyXZrXknxf7p48f9nmkcuVQ6Xu7H18M5Kvb72oNhf2Lx7f2Fj6+H7t++u3Fq7tXZv6btLVz7+6OMrix+c6vzyGowV259NFBu/f5ks/vHvV5P4NF4VdcvPq/21tZ5y72wu5iJrenEgIY240vMZvNn+O1O+Txpq+RsiqQ6zRpxEGhGfFDHylZiJSuwH60z86vpQKwcMVJZEo42ay4CLJ4mOSbeLDvMRSRMDrRNwFsp+QHltf9R18GHpILskwBl5vhwR18v4H4uIMv6rzbHBmGiMDUztxr/3Py2aI1+nG5lrmqtE/PUvV3+ZP6LDOBwwGNs75Sh3e/ufNOJ/NprXAFO7aes4bywXvYC0+J7gh+0Zdx88b5hr2xf/cHa2dyLiq824O9irPyL+n+6npkXslvH/kz7L7zP+3+qzOAAAAAAAABhpT5Yj4jtHzf9L9+b/jFcipnaTA9//T0fEp6+h/O7f/6XPio3jF9sBJ/Z8OeL7R87/3ZsNMFsp9r7QmA8wlty8XV/7ICK+GBGXY6yW7y+25ds6l+D9X1/6Xafy8/gv5//lj7z8ci5gkdOzattcotWVzZXTnjcQ8Xwn4mvVPP7fLY4cnP+Xt/9JlO3//rSbPL7v91jGpW89vtYprXv8A4OS/SHivSPb//3udnL8/TkWGv2BhbJXcNjXf/6bP3UqX/zD8OTt/9Tx8V9LWu/Xs9E8ONFj/uMR8eFWNeuU3m//fzz5caXMP/ezlc3NB4sR48lnh48v9VhZGHFlPJTxksf/5W8eP/631/9vicPJiNjuscwvv5r+R6c07T8MTx7/q8e3/zMH2/+Tbyw9nv1zp/Kv9dT+f9Ro0y8XR4z/QavD9+PoNUCHUl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOOfSiHgrknR+bztN5+cjpiPiSzGV1tc3Nr99c/2n91aj8evfszGWlr/0O9PcT8rf/59t2V9q2/8wIt6OiN9WJhv78zfW66vDPnkAAAAAAAAAAAAAAAAAAAB4Q0w31vxntfb1/7l/VoZdO2DgqsV/8Q4XT7XvV2a111oR4Mz1H//AebZzovgfG2hdgLPXOf5fvMwa2g7/4BsDrxNwNnpu///mch9GTZ/X/74ugBFg/A8uqh7H9CYGXQ9gGLT/AAAAAAAwUt5+98nTJCK2vzfZeOTGi7TJodYMGLS0S7rPABhd5vDCxVVdH3YNgGGxoB9I9rb+177Yv6Hz7P9kMBUCAAAAAAAAAAAAAA55753O6/+tDYDRduz6/243BwDOtWPW/x+1sMftAmCEdP7pD+v6YNS5xge6tfbW/wMAAAAAAAAAAADAG2Di4Z2Ven3twcbW+dv4pK9XVSJiiJXfXjldPlltWJWfiE5JrwZT6FhEDPs91m1jJ8uynp6cB1u9vpZlEd2fXN6CY4gn2P2jozbgjyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDp8wAAAP//bCMbTw==") 1.808192875s ago: executing program 4 (id=1434): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getpid() r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xd, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0xf, 0x9a8, "381482b94e28"}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="94000000000801010000000000000000000000000400048005000300110000000900010073797a300000000006000240883e000006000240000800000900010073797a31"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x30) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x1, 0x8, 0x5, 0x0, 0x0, {0xec6c9fe26e8ef6af, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0xcd47) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00') readv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) 1.694322951s ago: executing program 4 (id=1435): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)='D', 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x24048001}}], 0x1, 0x44080) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) 1.621154185s ago: executing program 4 (id=1436): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.574382598s ago: executing program 4 (id=1437): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r4, 0x100) listen(r2, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.108544585s ago: executing program 3 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)="000087000000000000cc4c52bb85", 0xe, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 1.100374975s ago: executing program 0 (id=1439): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x18, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.018764791s ago: executing program 5 (id=1440): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a4, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ce900400124a79da3100ce8c6a50cfed21fcad7ff0fbcb568009826ad59300000000008000000000ad00", 0x36}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 1.004331551s ago: executing program 4 (id=1441): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000240)={0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 995.090052ms ago: executing program 2 (id=1443): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) 614.576264ms ago: executing program 4 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x81}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r5, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) setxattr$incfs_id(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000100), 0x20, 0x0) 556.010928ms ago: executing program 0 (id=1445): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2200082, &(0x7f0000000140)=ANY=[], 0xfe, 0x15b, &(0x7f0000000280)="$eJzs0UlrGmEcx/HvM/O4QBVbakFKW4UWaisFF9pbKU6pVKgdaOmlJ8FOF1AsEZIclZBbDkKuHrJcQ96CRg8hQS/Jm8jFWyBHw8yYhCwv4f+5ze+/wTyf3k/Siisfm43/C06r5fxKfbMrpe8n/X7RzYNA+Frd7x8U4S+awQuYdsCNR1H4/a/uGLVm3f2eFiEEWPfmOY3YxT0rruloyOHPp5/D8JHXZ3A7cwoEvLnHGqyYn2WBJ5vwkhnWAz9z950CJigVnB97arJaziQfKljuZXZ3Dr+OD8pvXn9w1vKl7qtIwswAW1gqvD/6c2zOpybjyhe7Yk8K+fy7QjZn8PbIW9juoj9HFuGnAu3uM/D2BUk80z9gRcG6d2u6p6LAcOPMboQu/3V7yUyBSvZq1URguxq/b2CmtVuZcQev4j2CEEIIIYQQQgghhBBCCCGEEEIIccN5AAAA//9YP1Ga") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setgroups(0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000200)={0x10001, 0x0, '\x00', 0x1, 0x0}) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) close(r0) fanotify_init(0x8, 0x800) 218.486697ms ago: executing program 3 (id=1446): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4b7f, &(0x7f00000005c0)={0x0, 0x409f00, 0x800, 0x0, 0x2ff}, 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000400)={0x0, 0x2000000, 0x0, 0xffffffff, 0x39f}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 183.214099ms ago: executing program 3 (id=1447): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 128.729533ms ago: executing program 5 (id=1448): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x42ea, &(0x7f0000000200)={0x0, 0xaa0e, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, 0x0}, 0x52) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_RENAMEAT={0x23, 0x20, 0x0, r4, 0x0, 0x0, r0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 83.653525ms ago: executing program 3 (id=1449): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r5, &(0x7f0000000140)='./file0\x00') r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, 0x1c) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') 57.447606ms ago: executing program 0 (id=1450): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001380)={&(0x7f0000001340)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000300)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 8.110399ms ago: executing program 0 (id=1451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000600)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@nodioread_nolock}, {@usrquota}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@mblk_io_submit}, {@nombcache}, {@stripe}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./bus\x00', 0x200) 3.10409ms ago: executing program 5 (id=1452): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x800) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 0s ago: executing program 3 (id=1453): openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000640), 0x2000, 0xc) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r4, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 26.370270][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.371495][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.372585][ T519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.373980][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.377021][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.378541][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.380481][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.382799][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.387827][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.391339][ T4319] device veth0_vlan entered promiscuous mode [ 26.394189][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.398953][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.400441][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.401866][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.403415][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.404916][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.406145][ T519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.409869][ T4319] device veth1_vlan entered promiscuous mode [ 26.418993][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 26.420553][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 26.422327][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.423813][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.425253][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.427003][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.428486][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.430289][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.431416][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.433339][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.439418][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.448712][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.450316][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.451776][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.452853][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.454175][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.455911][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.457765][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.459236][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 26.461760][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.463864][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.466388][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.472447][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.474017][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.475328][ T777] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.476437][ T777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.478505][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.487464][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.489078][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.490552][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.492076][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.493523][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.495032][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.497349][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.498374][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.502451][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.503941][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.505354][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.508624][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.511587][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 26.519112][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.520554][ T4319] device veth0_macvtap entered promiscuous mode [ 26.522714][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 26.524245][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.533389][ T4325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.534956][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.541007][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.542687][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.544051][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.546908][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.549124][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.550738][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.552094][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.553480][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.554971][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.559464][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.560955][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 26.562397][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 26.563793][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 26.571931][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.573567][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.578855][ T4319] device veth1_macvtap entered promiscuous mode [ 26.584838][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.587619][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.589197][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.590865][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.592204][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.593803][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.599302][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.600772][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.602190][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.603511][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.604882][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 26.610870][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.620385][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.621969][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.623517][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.624990][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.626731][ T777] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.627792][ T777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.629183][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.630600][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.632075][ T777] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.633149][ T777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.634480][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.647507][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.651969][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.660290][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.661923][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.667442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.669100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.670459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.672105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.673647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.675098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.687723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.689531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.690945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.692767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.694219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.697391][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.698718][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.699945][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.701250][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.709413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 26.710994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 26.721201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 26.722420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 26.723637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 26.724758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 26.733300][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.738095][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.768965][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.770565][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.772064][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.773524][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.779330][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 26.780560][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 26.802828][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.809808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 26.811068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 26.812276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.813720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.815136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.816973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.819484][ T4329] device veth0_vlan entered promiscuous mode [ 26.827818][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.829833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.831435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.832885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.834261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.839018][ T4323] device veth0_vlan entered promiscuous mode [ 26.841930][ T4323] device veth1_vlan entered promiscuous mode [ 26.847526][ T4329] device veth1_vlan entered promiscuous mode [ 26.853394][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.854613][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.860363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 26.862836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 26.864454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 26.867125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 26.868638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 26.873345][ T4329] device veth0_macvtap entered promiscuous mode [ 26.876400][ T4329] device veth1_macvtap entered promiscuous mode [ 26.884977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.886988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.888563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.889870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.891392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.893201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 26.901404][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.903037][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.905470][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.910084][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.911650][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.913773][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.916669][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.918243][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.919711][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.921166][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.927584][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.928868][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.931426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 26.933349][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.934720][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.936517][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.938938][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.945000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.946651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.952538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.954010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.957653][ T4325] device veth0_vlan entered promiscuous mode [ 26.969637][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.971308][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.974961][ T4323] device veth0_macvtap entered promiscuous mode [ 26.987871][ T4325] device veth1_vlan entered promiscuous mode [ 26.991324][ T4323] device veth1_macvtap entered promiscuous mode [ 27.014408][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.016331][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.020055][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.021602][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.023784][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.031993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.033628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.035017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.039927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.041455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.043044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.044563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.047443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.048004][ T4428] loop0: detected capacity change from 0 to 2048 [ 27.068501][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.069838][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.075045][ T4328] device veth0_vlan entered promiscuous mode [ 27.081493][ T4428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 27.099028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.100635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.102129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.103636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.104982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.117485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.119036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.120851][ T4328] device veth1_vlan entered promiscuous mode [ 27.123649][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.125304][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.128377][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.130081][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.132305][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.136225][ T519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.137070][ T4325] device veth0_macvtap entered promiscuous mode [ 27.137358][ T519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.140626][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.142176][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.143653][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.145182][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.147666][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.154567][ T4323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.156481][ T4323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.157932][ T4323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.159260][ T4323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.161635][ T4325] device veth1_macvtap entered promiscuous mode [ 27.166972][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.168996][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.173635][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.175297][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.177331][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.179022][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.184429][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.211657][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.213196][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.214723][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.216845][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.219254][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.220866][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.222409][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.223847][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.225228][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.230254][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.233540][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.240140][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.241665][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.243179][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.244938][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.248751][ T4431] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 27.261264][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.262694][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.264070][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.265388][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.292621][ T4328] device veth0_macvtap entered promiscuous mode [ 27.302815][ T4328] device veth1_macvtap entered promiscuous mode [ 27.325127][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.328336][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.329592][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.334290][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.335966][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.337685][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.339053][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.340552][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.342012][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.343390][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.346123][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.347887][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.349345][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.350709][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.352191][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.353707][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.370672][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.372291][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.373803][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.375724][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.377371][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.378906][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.380295][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.382382][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.384694][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.387162][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.388353][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.391459][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.393062][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.397646][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.422199][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.423495][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.503308][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.504688][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.506251][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.507644][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.538718][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.588562][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.589873][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.591254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.600750][ T4441] loop0: detected capacity change from 0 to 8 [ 27.611781][ T4441] SQUASHFS error: lzo decompression failed, data probably corrupt [ 27.612993][ T4441] SQUASHFS error: Failed to read block 0x91: -5 [ 27.614673][ T4441] SQUASHFS error: Unable to read metadata cache entry [8f] [ 27.617274][ T4441] SQUASHFS error: Unable to read inode 0x11f [ 27.683375][ T4442] loop2: detected capacity change from 0 to 16 [ 27.842384][ T4442] erofs: (device loop2): mounted with root inode @ nid 36. [ 28.275806][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 28.276993][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 28.316329][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 28.316411][ T4322] Bluetooth: hci2: command 0x041b tx timeout [ 28.318782][ T4321] Bluetooth: hci3: command 0x041b tx timeout [ 28.527024][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.528252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.550344][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.565231][ T4441] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 28.675149][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.676541][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.682162][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.040274][ T4441] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 29.191824][ T4457] loop2: detected capacity change from 0 to 8192 [ 29.881703][ T4486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 30.315815][ T4321] Bluetooth: hci0: command 0x040f tx timeout [ 30.315838][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 30.396322][ T4322] Bluetooth: hci3: command 0x040f tx timeout [ 30.396349][ T4321] Bluetooth: hci2: command 0x040f tx timeout [ 30.396365][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 30.803960][ T4491] IPVS: fo: FWM 3 0x00000003 - no destination available [ 31.001686][ T4499] loop1: detected capacity change from 0 to 4096 [ 31.064902][ T4507] loop3: detected capacity change from 0 to 512 [ 31.079296][ T4507] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.081269][ T4507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.093441][ T4510] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 31.104783][ T4507] EXT4-fs (loop3): 1 truncate cleaned up [ 31.105995][ T4507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.140382][ T4507] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.28: bit already cleared for inode 15 [ 31.151823][ T4507] EXT4-fs (loop3): Remounting filesystem read-only [ 31.165286][ T4499] EXT4-fs (loop1): Test dummy encryption mode enabled [ 31.173337][ T4499] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 31.174752][ T4499] System zones: 0-5 [ 31.177386][ T4499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.202022][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 31.221158][ T4499] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 31.362513][ T4499] EXT4-fs (loop1): shut down requested (0) [ 32.396107][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 32.397101][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 32.742653][ T4321] Bluetooth: hci3: command 0x0419 tx timeout [ 32.743686][ T4321] Bluetooth: hci4: command 0x0419 tx timeout [ 32.744642][ T4321] Bluetooth: hci2: command 0x0419 tx timeout [ 32.784614][ T4551] binder: 4550:4551 tried to acquire reference to desc 0, got 1 instead [ 32.793214][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 32.797158][ T4551] binder: 4550:4551 got transaction with invalid data ptr [ 32.798884][ T4551] binder: 4550:4551 transaction async to 4550:0 failed 5/29201/-14, size 0-24 line 3333 [ 32.801068][ T4551] binder: 4550:4551 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 32.803087][ T4551] binder: 4551 RLIMIT_NICE not set [ 32.853781][ T4551] binder: 4551 RLIMIT_NICE not set [ 32.854539][ T4555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.866283][ T3897] binder: undelivered TRANSACTION_ERROR: 29201 [ 32.867371][ T3897] binder: release 4550:4556 transaction 6 out, still active [ 32.868481][ T3897] binder: undelivered TRANSACTION_COMPLETE [ 32.895918][ T4435] binder: release 4550:4551 transaction 6 in, still active [ 32.897164][ T4435] binder: send failed reply for transaction 6, target dead [ 32.945977][ T4563] netlink: 'syz.0.44': attribute type 6 has an invalid length. [ 32.947343][ T4563] netlink: 72 bytes leftover after parsing attributes in process `syz.0.44'. [ 33.595059][ T4575] loop0: detected capacity change from 0 to 8192 [ 33.983244][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.002059][ T4582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.006967][ T4582] bond1: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 34.496736][ T4599] loop2: detected capacity change from 0 to 2048 [ 34.524909][ T4599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.537038][ T4602] Zero length message leads to an empty skb [ 34.551587][ T4599] netlink: 182 bytes leftover after parsing attributes in process `syz.2.59'. [ 34.778382][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 35.045830][ T4612] loop1: detected capacity change from 0 to 2048 [ 35.055781][ T4612] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 35.079630][ T4612] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 36.455492][ C1] sched: RT throttling activated [ 36.696142][ T4621] loop2: detected capacity change from 0 to 32768 [ 36.702651][ T4621] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.65 (4621) [ 36.716512][ T4621] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 36.718719][ T4621] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 36.720832][ T4621] BTRFS info (device loop2): using free space tree [ 36.744935][ T4621] BTRFS info (device loop2): enabling ssd optimizations [ 36.880823][ T4329] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 37.011520][ T4664] loop3: detected capacity change from 0 to 2048 [ 37.016728][ T4664] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 37.018654][ T4664] UDF-fs: Scanning with blocksize 512 failed [ 37.052958][ T4664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 37.069735][ T4308] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 10 /dev/loop2 scanned by udevd (4308) [ 37.529396][ T4678] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 39.595772][ T4321] Bluetooth: hci0: command 0x0c1a tx timeout [ 39.942640][ T4322] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 39.943871][ T4321] Bluetooth: hci5: command 0x1003 tx timeout [ 39.959021][ T4674] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 41.096327][ T4720] ptrace attach of "./syz-executor exec"[4721] was attempted by "./syz-executor exec"[4720] [ 41.111356][ T4724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.195531][ T4745] fuse: Bad value for 'fd' [ 42.230132][ T4748] overlayfs: failed to clone upperpath [ 42.234324][ T4748] overlayfs: failed to clone upperpath [ 44.594834][ T4787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.597442][ T4787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.607353][ T4774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 44.609496][ T4774] device veth0_macvtap left promiscuous mode [ 44.771091][ T4781] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.895114][ T4801] loop3: detected capacity change from 0 to 256 [ 44.902514][ T4801] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.904390][ T4801] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 44.920556][ T4801] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 44.929409][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 46.833863][ T4836] loop0: detected capacity change from 0 to 256 [ 46.845972][ T4836] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.847625][ T4836] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 46.859886][ T4836] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 47.278071][ T4805] loop3: detected capacity change from 0 to 131072 [ 47.284790][ T4805] F2FS-fs (loop3): Test dummy encryption mode enabled [ 47.286897][ T4805] F2FS-fs (loop3): invalid crc value [ 47.318904][ T4805] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.710373][ T4849] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 47.710373][ T4849] The task syz.2.123 (4849) triggered the difference, watch for misbehavior. [ 47.727711][ T4848] loop2: detected capacity change from 0 to 512 [ 47.790111][ T4805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.810282][ T4805] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 47.823441][ T4856] loop1: detected capacity change from 0 to 512 [ 47.831012][ T4856] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 47.920979][ T4857] loop0: detected capacity change from 0 to 16 [ 47.930277][ T4857] erofs: (device loop0): mounted with root inode @ nid 36. [ 53.895255][ T4951] loop2: detected capacity change from 0 to 256 [ 55.539729][ T4963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.287742][ T4985] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.289322][ T4985] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.347980][ T4989] loop2: detected capacity change from 0 to 512 [ 56.405407][ T4989] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 56.412220][ T4989] FAT-fs (loop2): Filesystem has been set read-only [ 57.583482][ T4985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.619149][ T4985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.273039][ T4985] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.274558][ T4985] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.278505][ T4985] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.279984][ T4985] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.689187][ T5030] ======================================================= [ 58.689187][ T5030] WARNING: The mand mount option has been deprecated and [ 58.689187][ T5030] and is ignored by this kernel. Remove the mand [ 58.689187][ T5030] option from the mount to silence this warning. [ 58.689187][ T5030] ======================================================= [ 58.747331][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.748912][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.766300][ T5029] device ip6gre1 entered promiscuous mode [ 58.788666][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.790098][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.803534][ T5036] device bridge_slave_1 left promiscuous mode [ 58.806044][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.816473][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.858122][ T5036] device bridge_slave_0 left promiscuous mode [ 58.859331][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.005687][ T4372] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.248519][ T4372] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 60.542699][ T5052] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.544094][ T5052] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.431647][ T5052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.565062][ T5079] loop1: detected capacity change from 0 to 1024 [ 61.568695][ T5079] EXT4-fs: Ignoring removed bh option [ 61.582004][ T5079] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.731736][ T5052] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.733171][ T5052] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.734565][ T5052] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.736016][ T5052] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.958458][ T5066] netlink: 'syz.0.195': attribute type 27 has an invalid length. [ 61.959726][ T5066] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 61.961054][ T5066] netlink: 144 bytes leftover after parsing attributes in process `syz.0.195'. [ 62.709470][ T4323] EXT4-fs (loop1): unmounting filesystem. [ 62.875569][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 63.960736][ T5121] netlink: 52 bytes leftover after parsing attributes in process `syz.3.211'. [ 63.964960][ T5121] netlink: 76 bytes leftover after parsing attributes in process `syz.3.211'. [ 63.971180][ T5121] netlink: 52 bytes leftover after parsing attributes in process `syz.3.211'. [ 64.477557][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.479030][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.722380][ T5123] loop0: detected capacity change from 0 to 131072 [ 64.735431][ T5123] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.744056][ T5123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.918712][ T5146] F2FS-fs (loop0): sanity_check_inode: corrupted inode i_blocks i_ino=6 iblocks=0, run fsck to fix. [ 65.449780][ T5128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.474378][ T5128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.832560][ T5128] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.834204][ T5128] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.836400][ T5128] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.837893][ T5128] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.141724][ T5221] tipc: Failed to remove unknown binding: 66,0,0/0:526109551/526109553 [ 66.143219][ T5221] tipc: Failed to remove unknown binding: 66,0,0/0:526109551/526109552 [ 66.145230][ T5221] tipc: Failed to remove unknown binding: 66,0,0/0:526109551/526109553 [ 66.147123][ T5221] tipc: Failed to remove unknown binding: 66,0,0/0:526109551/526109552 [ 67.268102][ T5247] Soft offlining pfn 0x14080c at process virtual address 0x20000000 [ 67.271471][ T5247] Soft offlining pfn 0x14346c at process virtual address 0x20001000 [ 67.272999][ T5247] Soft offlining pfn 0x14346b at process virtual address 0x20002000 [ 67.274429][ T5247] Soft offlining pfn 0x14085c at process virtual address 0x20003000 [ 67.275901][ T5247] Soft offlining pfn 0x14085d at process virtual address 0x20004000 [ 67.277286][ T5247] Soft offlining pfn 0x14085e at process virtual address 0x20005000 [ 67.278721][ T5247] Soft offlining pfn 0x14085f at process virtual address 0x20006000 [ 67.280057][ T5247] Soft offlining pfn 0x13ae40 at process virtual address 0x20007000 [ 67.281421][ T5247] Soft offlining pfn 0x13ae41 at process virtual address 0x20008000 [ 67.282838][ T5247] Soft offlining pfn 0x13ae42 at process virtual address 0x20009000 [ 67.284301][ T5247] Soft offlining pfn 0x13ae43 at process virtual address 0x2000a000 [ 67.285696][ T5247] Soft offlining pfn 0x13ae44 at process virtual address 0x2000b000 [ 67.287125][ T5247] Soft offlining pfn 0x13ae45 at process virtual address 0x2000c000 [ 67.288503][ T5247] Soft offlining pfn 0x13ae46 at process virtual address 0x2000d000 [ 67.289888][ T5247] Soft offlining pfn 0x13ae47 at process virtual address 0x2000e000 [ 67.291191][ T5247] Soft offlining pfn 0x13ae48 at process virtual address 0x2000f000 [ 67.292640][ T5247] Soft offlining pfn 0x13ae49 at process virtual address 0x20010000 [ 67.294029][ T5247] Soft offlining pfn 0x13ae4a at process virtual address 0x20011000 [ 68.911184][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.912712][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.601017][ T24] cfg80211: failed to load regulatory.db [ 69.724912][ T5278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.746171][ T5278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.081788][ T5278] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.083198][ T5278] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.084595][ T5278] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.086045][ T5278] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.343854][ T5282] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 70.380342][ T5301] Illegal XDP return value 1655386081 on prog (id 64) dev syz_tun, expect packet loss! [ 70.420354][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.421744][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.423459][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.499757][ T5312] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 71.303960][ T5321] netlink: 'syz.3.260': attribute type 27 has an invalid length. [ 71.305274][ T5321] netlink: 'syz.3.260': attribute type 4 has an invalid length. [ 71.306887][ T5321] netlink: 144 bytes leftover after parsing attributes in process `syz.3.260'. [ 71.410521][ T5330] netlink: 'syz.4.264': attribute type 10 has an invalid length. [ 71.962732][ T5330] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 71.974888][ T5337] bridge0: port 3(batadv0) entered blocking state [ 71.976567][ T5337] bridge0: port 3(batadv0) entered disabled state [ 71.984196][ T5337] device batadv0 entered promiscuous mode [ 71.988104][ T5342] device batadv0 left promiscuous mode [ 71.989058][ T5342] bridge0: port 3(batadv0) entered disabled state [ 72.037859][ T5346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 72.046610][ T5346] bridge0: port 1(gretap1) entered blocking state [ 72.047885][ T5346] bridge0: port 1(gretap1) entered disabled state [ 72.049372][ T5346] device gretap1 entered promiscuous mode [ 72.218783][ T5356] device ip6gre1 entered promiscuous mode [ 72.221492][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.222782][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.225918][ T5356] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.250248][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.283813][ T5366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.277'. [ 72.745635][ T4332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.772870][ T5376] bridge0: port 3(batadv0) entered blocking state [ 72.773970][ T5376] bridge0: port 3(batadv0) entered disabled state [ 72.779641][ T5376] device batadv0 entered promiscuous mode [ 72.779884][ T5379] 9pnet: p9_errstr2errno: server reported unknown error / [ 72.783110][ T5376] device batadv0 left promiscuous mode [ 72.784030][ T5376] bridge0: port 3(batadv0) entered disabled state [ 73.303383][ T4332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.797954][ T5414] loop0: detected capacity change from 0 to 8 [ 74.802091][ T5414] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.803374][ T5414] SQUASHFS error: Failed to read block 0x9b: -5 [ 74.804398][ T5414] SQUASHFS error: Unable to read metadata cache entry [99] [ 74.805565][ T5414] SQUASHFS error: Unable to read inode 0x127 [ 74.886793][ T4308] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.749625][ T5444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.303'. [ 75.800102][ T5450] tipc: Failed to remove unknown binding: 66,0,0/0:312082754/312082756 [ 75.803420][ T5450] tipc: Failed to remove unknown binding: 66,0,0/0:312082754/312082755 [ 75.805886][ T5450] tipc: Failed to remove unknown binding: 66,0,0/0:312082754/312082756 [ 75.811367][ T5450] tipc: Failed to remove unknown binding: 66,0,0/0:312082754/312082755 [ 75.823544][ T5435] overlayfs: failed to clone upperpath [ 75.937475][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.790605][ T5468] netlink: 'syz.2.322': attribute type 4 has an invalid length. [ 76.796454][ T5468] netlink: 'syz.2.322': attribute type 17 has an invalid length. [ 76.800264][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 76.888682][ T5477] Soft offlining pfn 0x149d4e at process virtual address 0x20000000 [ 76.891502][ T5477] Soft offlining pfn 0x1463e8 at process virtual address 0x20001000 [ 76.892799][ T5477] Soft offlining pfn 0x146726 at process virtual address 0x20002000 [ 76.894137][ T5477] Soft offlining pfn 0x14649b at process virtual address 0x20003000 [ 76.895588][ T5477] Soft offlining pfn 0x146cbd at process virtual address 0x20004000 [ 76.896894][ T5477] Soft offlining pfn 0x145bf2 at process virtual address 0x20005000 [ 76.898273][ T5477] Soft offlining pfn 0x1456d7 at process virtual address 0x20006000 [ 76.899570][ T5477] Soft offlining pfn 0x13aa00 at process virtual address 0x20007000 [ 76.900883][ T5477] Soft offlining pfn 0x144d6a at process virtual address 0x20008000 [ 76.902313][ T5477] Soft offlining pfn 0x14605e at process virtual address 0x20009000 [ 76.903626][ T5477] Soft offlining pfn 0x144674 at process virtual address 0x2000a000 [ 76.904862][ T5477] Soft offlining pfn 0x14780d at process virtual address 0x2000b000 [ 76.906240][ T5477] Soft offlining pfn 0x146ed0 at process virtual address 0x2000c000 [ 76.907546][ T5477] Soft offlining pfn 0x13a803 at process virtual address 0x2000d000 [ 76.908832][ T5477] Soft offlining pfn 0x1447e7 at process virtual address 0x2000e000 [ 76.910103][ T5477] Soft offlining pfn 0x14a755 at process virtual address 0x2000f000 [ 76.911406][ T5477] Soft offlining pfn 0x1249e3 at process virtual address 0x20010000 [ 76.912749][ T5477] Soft offlining pfn 0x1456d2 at process virtual address 0x20011000 [ 77.267272][ T5481] loop0: detected capacity change from 0 to 128 [ 77.295159][ T5481] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54) [ 77.296499][ T5481] FAT-fs (loop0): Filesystem has been set read-only [ 77.306245][ T5481] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 54) [ 79.580936][ T27] audit: type=1326 audit(79.715:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5501 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91777368 code=0x7fc00000 [ 79.819010][ T5541] Soft offlining pfn 0x13aeb1 at process virtual address 0x20000000 [ 79.821404][ T5541] Soft offlining pfn 0x14367d at process virtual address 0x20001000 [ 79.822773][ T5541] Soft offlining pfn 0x1464e0 at process virtual address 0x20002000 [ 79.824226][ T5541] Soft offlining pfn 0x149f52 at process virtual address 0x20003000 [ 79.825590][ T5541] Soft offlining pfn 0x140e37 at process virtual address 0x20004000 [ 79.826948][ T5541] Soft offlining pfn 0x140e36 at process virtual address 0x20005000 [ 79.828380][ T5541] Soft offlining pfn 0x14691a at process virtual address 0x20006000 [ 79.829749][ T5541] Soft offlining pfn 0x146c30 at process virtual address 0x20007000 [ 79.831242][ T5541] Soft offlining pfn 0x14a775 at process virtual address 0x20008000 [ 79.832681][ T5541] Soft offlining pfn 0x146ad7 at process virtual address 0x20009000 [ 79.834170][ T5541] Soft offlining pfn 0x1463ea at process virtual address 0x2000a000 [ 79.835558][ T5541] Soft offlining pfn 0x122160 at process virtual address 0x2000b000 [ 79.836919][ T5541] Soft offlining pfn 0x1249f2 at process virtual address 0x2000c000 [ 79.838349][ T5541] Soft offlining pfn 0x14699c at process virtual address 0x2000d000 [ 79.839757][ T5541] Soft offlining pfn 0x1464ed at process virtual address 0x2000e000 [ 79.841066][ T5541] Soft offlining pfn 0x149b45 at process virtual address 0x2000f000 [ 79.842412][ T5541] Soft offlining pfn 0x13a8c1 at process virtual address 0x20010000 [ 79.843673][ T5541] Soft offlining pfn 0x146ae2 at process virtual address 0x20011000 [ 80.657042][ T5561] overlayfs: failed to clone upperpath [ 80.659002][ T5561] overlayfs: failed to clone upperpath [ 81.886299][ T5596] Soft offlining pfn 0x140908 at process virtual address 0x20000000 [ 81.888458][ T5596] Soft offlining pfn 0x143a21 at process virtual address 0x20001000 [ 81.889808][ T5596] Soft offlining pfn 0x1466dc at process virtual address 0x20002000 [ 81.891303][ T5596] Soft offlining pfn 0x14a5b9 at process virtual address 0x20003000 [ 81.892630][ T5596] Soft offlining pfn 0x14a5ad at process virtual address 0x20004000 [ 81.894123][ T5596] Soft offlining pfn 0x14a5b2 at process virtual address 0x20005000 [ 81.895482][ T5596] Soft offlining pfn 0x14a5b5 at process virtual address 0x20006000 [ 81.897353][ T5596] Soft offlining pfn 0x14a5b7 at process virtual address 0x20007000 [ 81.898763][ T5596] Soft offlining pfn 0x14a5b6 at process virtual address 0x20008000 [ 81.900111][ T5596] Soft offlining pfn 0x14a5a0 at process virtual address 0x20009000 [ 81.901589][ T5596] Soft offlining pfn 0x14a59d at process virtual address 0x2000a000 [ 81.902940][ T5596] Soft offlining pfn 0x14a5ae at process virtual address 0x2000b000 [ 81.904402][ T5596] Soft offlining pfn 0x14a59f at process virtual address 0x2000c000 [ 81.905762][ T5596] Soft offlining pfn 0x14a5aa at process virtual address 0x2000d000 [ 81.907031][ T5596] Soft offlining pfn 0x14a5b1 at process virtual address 0x2000e000 [ 81.908406][ T5596] Soft offlining pfn 0x14a621 at process virtual address 0x2000f000 [ 81.909778][ T5596] Soft offlining pfn 0x14a5b3 at process virtual address 0x20010000 [ 81.911230][ T5596] Soft offlining pfn 0x14a5b0 at process virtual address 0x20011000 [ 83.426065][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 83.556310][ T5617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 86.630848][ T4321] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.639303][ T4321] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.641471][ T4321] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.644017][ T4321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.650146][ T4321] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.651543][ T4321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.756044][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 86.939802][ T5673] tmpfs: Bad value for 'nr_blocks' [ 87.107609][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.206772][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.213321][ T5646] chnl_net:caif_netlink_parms(): no params data found [ 87.219275][ T5685] netlink: 'syz.2.381': attribute type 10 has an invalid length. [ 87.220547][ T5685] device syz_tun entered promiscuous mode [ 87.227481][ T5685] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 87.661684][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.903640][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.905118][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.906948][ T5646] device bridge_slave_0 entered promiscuous mode [ 87.968034][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.253632][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.254821][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.263567][ T5646] device bridge_slave_1 entered promiscuous mode [ 88.267807][ T5708] netlink: 52 bytes leftover after parsing attributes in process `syz.3.388'. [ 88.281721][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.284405][ T5708] netlink: 76 bytes leftover after parsing attributes in process `syz.3.388'. [ 88.286940][ T5708] netlink: 52 bytes leftover after parsing attributes in process `syz.3.388'. [ 88.294715][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.305714][ T5646] team0: Port device team_slave_0 added [ 88.307746][ T5646] team0: Port device team_slave_1 added [ 88.314293][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.315534][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.319928][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.324095][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.328083][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.334572][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.429444][ T5646] device hsr_slave_0 entered promiscuous mode [ 88.693250][ T4322] Bluetooth: hci5: command 0x0409 tx timeout [ 88.751914][ T5646] device hsr_slave_1 entered promiscuous mode [ 88.776298][ T5723] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 88.800451][ T5646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.802657][ T5646] Cannot create hsr debugfs directory [ 88.867804][ T5727] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 88.937082][ T5646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.756106][ T5646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.783543][ T5646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.237539][ T5646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.583299][ T5767] device veth0_to_team entered promiscuous mode [ 90.705918][ T4322] Bluetooth: hci5: command 0x041b tx timeout [ 91.123199][ T5791] netlink: 'syz.4.404': attribute type 10 has an invalid length. [ 91.125642][ T5791] device syz_tun entered promiscuous mode [ 91.130106][ T5791] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 91.267985][ T5803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.624889][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.630622][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.633138][ T777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.638544][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.968452][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.971325][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.974695][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.975832][ T4761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.994419][ T5816] netlink: 'syz.4.410': attribute type 4 has an invalid length. [ 92.016687][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.018345][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.021052][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.024377][ T4761] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.025539][ T4761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.028994][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.037460][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.039197][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.044808][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.047340][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.050856][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.053548][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.056159][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.063194][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 92.163642][ T5816] netlink: 'syz.4.410': attribute type 17 has an invalid length. [ 92.166716][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.168463][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.170015][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.181195][ T5646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.294595][ T5845] tmpfs: Bad value for 'nr_blocks' [ 92.753323][ T4322] Bluetooth: hci5: command 0x040f tx timeout [ 93.210704][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.213274][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.226639][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.643372][ T5892] ptrace attach of "./syz-executor exec"[4329] was attempted by "./syz-executor exec"[5892] [ 93.957947][ T39] device hsr_slave_0 left promiscuous mode [ 93.995869][ T39] device hsr_slave_1 left promiscuous mode [ 94.082340][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.083737][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.087864][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.088980][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.090383][ T39] device bridge_slave_1 left promiscuous mode [ 94.091618][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.132795][ T39] device bridge_slave_0 left promiscuous mode [ 94.134803][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.306769][ T39] device veth1_macvtap left promiscuous mode [ 94.308009][ T39] device veth0_macvtap left promiscuous mode [ 94.309002][ T39] device veth1_vlan left promiscuous mode [ 94.310889][ T39] device veth0_vlan left promiscuous mode [ 94.891838][ T4321] Bluetooth: hci5: command 0x0419 tx timeout [ 97.252438][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.438608][ T5948] ptrace attach of "./syz-executor exec"[4319] was attempted by "./syz-executor exec"[5948] [ 98.056151][ T39] team0 (unregistering): Port device team_slave_1 removed [ 98.267141][ T39] team0 (unregistering): Port device team_slave_0 removed [ 98.627702][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.796976][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.202585][ T39] bond0 (unregistering): Released all slaves [ 100.477383][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.479011][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.501377][ T5924] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 100.557874][ T5646] device veth0_vlan entered promiscuous mode [ 100.561916][ T5646] device veth1_vlan entered promiscuous mode [ 100.566614][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.568439][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.569981][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.572272][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.573714][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.604833][ T5646] device veth0_macvtap entered promiscuous mode [ 100.607080][ T5646] device veth1_macvtap entered promiscuous mode [ 100.629683][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.631492][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.633077][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.634507][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.647488][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.662084][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.674069][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.675779][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.682244][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.687853][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.706348][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.713877][ T5646] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.715176][ T5646] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.716536][ T5646] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.725613][ T5646] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.094511][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.095912][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.111950][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.128781][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.130006][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.131183][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.630388][ T6021] Soft offlining pfn 0x146d3c at process virtual address 0x20000000 [ 102.632802][ T6021] Soft offlining pfn 0x1469d4 at process virtual address 0x20001000 [ 102.634192][ T6021] Soft offlining pfn 0x1469d5 at process virtual address 0x20002000 [ 102.635553][ T6021] Soft offlining pfn 0x1469d6 at process virtual address 0x20003000 [ 102.636877][ T6021] Soft offlining pfn 0x1469d7 at process virtual address 0x20004000 [ 102.638252][ T6021] Soft offlining pfn 0x1469d8 at process virtual address 0x20005000 [ 102.639612][ T6021] Soft offlining pfn 0x1469d9 at process virtual address 0x20006000 [ 102.641108][ T6021] Soft offlining pfn 0x1469da at process virtual address 0x20007000 [ 102.642455][ T6021] Soft offlining pfn 0x1469db at process virtual address 0x20008000 [ 102.643819][ T6021] Soft offlining pfn 0x1469dc at process virtual address 0x20009000 [ 102.645172][ T6021] Soft offlining pfn 0x1469dd at process virtual address 0x2000a000 [ 102.646507][ T6021] Soft offlining pfn 0x149baf at process virtual address 0x2000b000 [ 102.647814][ T6021] Soft offlining pfn 0x14a560 at process virtual address 0x2000c000 [ 102.649174][ T6021] Soft offlining pfn 0x14a561 at process virtual address 0x2000d000 [ 102.650559][ T6021] Soft offlining pfn 0x14a562 at process virtual address 0x2000e000 [ 102.651909][ T6021] Soft offlining pfn 0x14a563 at process virtual address 0x2000f000 [ 102.653268][ T6021] Soft offlining pfn 0x14a4cc at process virtual address 0x20010000 [ 102.654585][ T6021] Soft offlining pfn 0x14a4cd at process virtual address 0x20011000 [ 103.680754][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.737740][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.739018][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.742468][ T6032] device bridge_slave_0 left promiscuous mode [ 103.743537][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.437182][ T6032] device bridge_slave_1 left promiscuous mode [ 104.438627][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.462720][ T6032] bond0: (slave bond_slave_0): Releasing backup interface [ 104.530444][ T6046] fuse: Bad value for 'fd' [ 104.539335][ T6032] bond0: (slave bond_slave_1): Releasing backup interface [ 104.608333][ T6032] team0: Port device team_slave_0 removed [ 104.619038][ T6032] team0: Port device team_slave_1 removed [ 104.620494][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.621681][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.624123][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.625448][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.646534][ T6038] team0: Port device ip6gre1 added [ 104.883672][ T6063] capability: warning: `syz.5.461' uses deprecated v2 capabilities in a way that may be insecure [ 105.268305][ T6052] batman_adv: batadv0: Adding interface: dummy0 [ 105.273161][ T6052] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.278154][ T6052] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 106.338716][ T6095] fuse: Bad value for 'fd' [ 107.113483][ T6107] tmpfs: Bad value for 'mpol' [ 108.002859][ T6119] netlink: 'syz.5.475': attribute type 10 has an invalid length. [ 108.025260][ T6119] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.026796][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 108.161791][ T6153] process 'syz.5.482' launched '/dev/loop#' with NULL argv: empty string added [ 109.169894][ T6179] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.788801][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 109.844340][ T6191] bond0: (slave syz_tun): Releasing backup interface [ 109.924617][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.492'. [ 110.431997][ T27] audit: type=1326 audit(524399.029:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91777368 code=0x7ffc0000 [ 110.436714][ T27] audit: type=1326 audit(524399.029:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=8 compat=0 ip=0xffff91777368 code=0x7ffc0000 [ 110.442159][ T27] audit: type=1326 audit(524399.039:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91777368 code=0x7ffc0000 [ 110.447898][ T27] audit: type=1326 audit(524399.039:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9175a32c code=0x7ffc0000 [ 110.463355][ T27] audit: type=1326 audit(524399.039:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9175a32c code=0x7ffc0000 [ 110.466781][ T27] audit: type=1326 audit(524399.039:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91777368 code=0x7ffc0000 [ 110.471880][ T27] audit: type=1326 audit(524399.039:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff91777368 code=0x7ffc0000 [ 110.475109][ T27] audit: type=1326 audit(524399.039:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91777368 code=0x7ffc0000 [ 110.478245][ T27] audit: type=1326 audit(524399.039:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff91777368 code=0x7ffc0000 [ 110.483093][ T27] audit: type=1326 audit(524399.039:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91777368 code=0x7ffc0000 [ 112.055930][ T6249] netlink: 'syz.2.505': attribute type 11 has an invalid length. [ 112.148013][ T6249] netlink: 'syz.2.505': attribute type 11 has an invalid length. [ 112.163966][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.507'. [ 112.709139][ T6261] tipc: Started in network mode [ 112.709982][ T6261] tipc: Node identity 4, cluster identity 4711 [ 112.712492][ T6261] tipc: Node number set to 4 [ 112.714705][ T6271] device syz_tun left promiscuous mode [ 112.819944][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 112.841555][ T6285] device macvlan2 entered promiscuous mode [ 112.843172][ T6285] device bond1 entered promiscuous mode [ 112.844346][ T6285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.170868][ T6285] device bond1 left promiscuous mode [ 113.628329][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.525'. [ 114.547767][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 114.722800][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.241305][ T6346] tipc: Started in network mode [ 115.242161][ T6346] tipc: Node identity 4, cluster identity 4711 [ 115.243083][ T6346] tipc: Node number set to 4 [ 116.015532][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 116.210097][ T6375] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 116.220806][ T6375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.278860][ T6375] bond2: (slave gretap1): making interface the new active one [ 116.659717][ T6375] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 116.661648][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 116.756626][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 118.919921][ T6423] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 118.921928][ T6423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.357483][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'. [ 119.395564][ T6439] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 119.415837][ T6439] device bond2 entered promiscuous mode [ 119.416695][ T6439] device bridge1 entered promiscuous mode [ 119.515364][ T6447] loop5: detected capacity change from 0 to 40427 [ 119.537139][ T6447] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 119.538302][ T6447] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 119.546045][ T6447] F2FS-fs (loop5): invalid crc value [ 119.568260][ T6447] F2FS-fs (loop5): Found nat_bits in checkpoint [ 119.594058][ T6447] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 119.596580][ T6447] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 119.661359][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.557'. [ 119.675519][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 119.698657][ T6447] mmap: syz.5.553 (6447) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.402820][ T6487] device vlan2 entered promiscuous mode [ 122.467834][ T6588] device ip6gre1 entered promiscuous mode [ 122.469170][ T6589] loop5: detected capacity change from 0 to 1024 [ 122.552562][ T6589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 122.930858][ T5646] EXT4-fs (loop5): unmounting filesystem. [ 122.933926][ T6601] netlink: 'syz.3.576': attribute type 6 has an invalid length. [ 122.935119][ T6601] netlink: 'syz.3.576': attribute type 7 has an invalid length. [ 122.936329][ T6601] netlink: 52 bytes leftover after parsing attributes in process `syz.3.576'. [ 122.999464][ T6607] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 123.001316][ T6607] netlink: 40 bytes leftover after parsing attributes in process `syz.3.579'. [ 123.005137][ T6607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.006622][ T6607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.007943][ T6607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.009199][ T6607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.018671][ T6607] team0: Port device geneve0 added [ 123.162874][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 123.162884][ T27] audit: type=1326 audit(524411.805:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.0.582" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a577368 code=0x0 [ 124.052300][ T6625] loop5: detected capacity change from 0 to 512 [ 124.083755][ T6625] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 125.257543][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.259700][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.423799][ T6690] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 125.426034][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.426929][ T4734] bond0: (slave bond_slave_0): interface is now down [ 125.426968][ T4734] bond0: (slave bond_slave_1): interface is now down [ 125.426975][ T4734] bond0: (slave syz_tun): interface is now down [ 125.440165][ T6690] team0: Failed to send port change of device bond0 via netlink (err -105) [ 125.442227][ T6690] team0: Failed to send options change via netlink (err -105) [ 125.443412][ T6690] team0: Port device bond0 added [ 125.447763][ T11] bond0: (slave bond_slave_0): interface is now down [ 125.448932][ T11] bond0: (slave bond_slave_1): interface is now down [ 125.449925][ T11] bond0: (slave syz_tun): interface is now down [ 125.453470][ T11] bond0: now running without any active interface! [ 125.623826][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 125.628589][ T6697] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.630043][ T6697] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.631497][ T6697] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.632777][ T6697] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.912294][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 126.396830][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 126.400093][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 126.414895][ T5646] EXT4-fs (loop5): unmounting filesystem. [ 126.466683][ T6714] binder: 6713:6714 tried to acquire reference to desc 0, got 1 instead [ 126.473471][ T4365] binder: undelivered TRANSACTION_COMPLETE [ 126.484217][ T4365] binder: undelivered transaction 11, process died. [ 127.137382][ T6736] netlink: 'syz.3.611': attribute type 10 has an invalid length. [ 127.139049][ T6736] netlink: 40 bytes leftover after parsing attributes in process `syz.3.611'. [ 127.142929][ T6736] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 127.597789][ T6748] dns_resolver: Unsupported server list version (0) [ 129.501520][ T6775] device bridge2 entered promiscuous mode [ 129.506431][ T6775] team0: Port device bridge2 added [ 129.518968][ T6775] bridge0: port 3(team0) entered blocking state [ 129.521058][ T6775] bridge0: port 3(team0) entered disabled state [ 129.523066][ T6775] device team0 entered promiscuous mode [ 129.524757][ T6775] device team_slave_0 entered promiscuous mode [ 129.526807][ T6775] device team_slave_1 entered promiscuous mode [ 129.527882][ T6775] device bond0 entered promiscuous mode [ 129.530818][ T6775] device bond_slave_0 entered promiscuous mode [ 129.532071][ T6775] device bond_slave_1 entered promiscuous mode [ 129.533105][ T6775] device syz_tun entered promiscuous mode [ 130.743133][ T6808] binder: 6805:6808 tried to acquire reference to desc 0, got 1 instead [ 130.745338][ T6808] binder: 6805:6808 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 130.756027][ T6808] binder: 6808 RLIMIT_NICE not set [ 130.761228][ T6808] binder: 6808 RLIMIT_NICE not set [ 130.764757][ T6808] binder: 6808 RLIMIT_NICE not set [ 130.765751][ T6808] binder_alloc: 6805: binder_alloc_buf, no vma [ 130.768266][ T6808] binder: cannot allocate buffer: vma cleared, target dead or dying [ 130.768301][ T6808] binder: 6805:6808 transaction reply to 6805:6808 failed 23/29189/-3, size 0-0 line 3230 [ 130.772239][ T6808] binder: send failed reply for transaction 22 to 6805:6808 [ 130.787216][ T4578] binder: undelivered TRANSACTION_COMPLETE [ 130.789074][ T4578] binder: undelivered TRANSACTION_ERROR: 29189 [ 130.804880][ T4372] binder: undelivered TRANSACTION_ERROR: 29190 [ 130.831647][ T6811] netlink: 'syz.5.637': attribute type 10 has an invalid length. [ 130.840016][ T6811] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 132.507921][ T27] audit: type=1326 audit(524421.164:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6849 comm="syz.5.647" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab177368 code=0x0 [ 134.415951][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 134.434254][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.658'. [ 134.518911][ T6895] device syzkaller0 entered promiscuous mode [ 136.634503][ T6940] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 136.636003][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.668'. [ 136.654758][ T6940] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 137.399720][ T27] audit: type=1326 audit(524426.061:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.4.671" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94577368 code=0x0 [ 138.299619][ T6978] loop5: detected capacity change from 0 to 2048 [ 138.643050][ T6978] loop5: p1 p3 p4 [ 138.652165][ T6978] loop5: p4 size 589824 extends beyond EOD, truncated [ 138.679908][ T3935] loop5: p1 p3 p4 [ 138.691301][ T3935] loop5: p4 size 589824 extends beyond EOD, truncated [ 139.056214][ T6997] netlink: 'syz.2.687': attribute type 10 has an invalid length. [ 139.057629][ T6997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.687'. [ 139.060298][ T6997] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 139.287292][ T5646] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 139.940827][ T6992] I/O error, dev loop5, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.968172][ T6992] I/O error, dev loop5, sector 136 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.969698][ T6992] Buffer I/O error on dev loop5p3, logical block 1, async page read [ 139.994667][ T6992] udevd[6992]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 139.997790][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 140.001575][ T6993] udevd[6993]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 140.805009][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 140.808216][ T27] audit: type=1326 audit(524429.476:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7009 comm="syz.2.692" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91777368 code=0x0 [ 140.811358][ T6993] udevd[6993]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 140.822164][ T6992] udevd[6992]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 141.205927][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 141.309879][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 143.022496][ T7088] cgroup: No subsys list or none specified [ 144.574433][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 144.598288][ T4578] kernel write not supported for file [eventfd] (pid: 4578 comm: kworker/0:7) [ 144.911895][ T7108] Invalid ELF header magic: != ELF [ 145.583481][ T7126] loop5: detected capacity change from 0 to 512 [ 145.610089][ T7126] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 146.264497][ T7137] device bridge2 entered promiscuous mode [ 146.271100][ T7137] team0: Port device bridge2 added [ 146.284164][ T7137] bridge0: port 2(team0) entered blocking state [ 146.285365][ T7137] bridge0: port 2(team0) entered disabled state [ 146.287427][ T7137] device team0 entered promiscuous mode [ 146.288357][ T7137] device team_slave_0 entered promiscuous mode [ 146.289362][ T7137] device team_slave_1 entered promiscuous mode [ 146.319067][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 146.333680][ T7139] device veth5 entered promiscuous mode [ 146.335173][ T7139] bridge3: port 1(veth5) entered blocking state [ 146.341903][ T7139] bridge3: port 1(veth5) entered disabled state [ 146.343852][ T7139] bridge3: port 1(veth5) entered blocking state [ 146.344845][ T7139] bridge3: port 1(veth5) entered forwarding state [ 146.428294][ T7139] device veth7 entered promiscuous mode [ 146.429779][ T7139] bridge3: port 2(veth7) entered blocking state [ 146.430927][ T7139] bridge3: port 2(veth7) entered disabled state [ 146.432980][ T7139] bridge3: port 2(veth7) entered blocking state [ 146.433956][ T7139] bridge3: port 2(veth7) entered forwarding state [ 146.735096][ T7146] "syz.0.730" (7146) uses obsolete ecb(arc4) skcipher [ 147.436002][ T9] bridge3: port 1(veth5) entered disabled state [ 147.462782][ T9] bridge3: port 2(veth7) entered disabled state [ 148.271362][ T4333] Bluetooth: hci4: command 0x0406 tx timeout [ 148.272536][ T4322] Bluetooth: hci0: command 0x0406 tx timeout [ 148.273473][ T4321] Bluetooth: hci2: command 0x0406 tx timeout [ 148.288534][ T7183] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 148.296738][ T7183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.320594][ T7183] bond1: (slave gretap2): making interface the new active one [ 148.322568][ T7183] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 148.580857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 148.606646][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.746'. [ 148.741848][ T7196] loop5: detected capacity change from 0 to 164 [ 149.129155][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 150.491876][ T7228] netlink: 'syz.5.759': attribute type 1 has an invalid length. [ 150.512258][ T7228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.548536][ T7228] bond1: (slave gretap1): making interface the new active one [ 150.579327][ T7228] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 150.580946][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 150.670313][ T7236] tipc: Failed to remove unknown binding: 66,0,0/4:643479853/643479855 [ 150.674749][ T7237] device bridge_slave_0 left promiscuous mode [ 150.675815][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.680230][ T27] audit: type=1326 audit(524439.355:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.5.761" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab177368 code=0x0 [ 150.683832][ T7231] tipc: Failed to remove unknown binding: 66,0,0/4:1359083037/1359083038 [ 150.685622][ T7231] tipc: Failed to remove unknown binding: 66,0,0/4:1359083037/1359083038 [ 150.723035][ T7237] device bridge_slave_1 left promiscuous mode [ 150.724086][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.763441][ T7237] bond0: (slave bond_slave_0): Releasing backup interface [ 150.812993][ T7237] bond0: (slave bond_slave_1): Releasing backup interface [ 151.077799][ T7237] team0: Port device team_slave_0 removed [ 151.083492][ T7237] team0: Port device team_slave_1 removed [ 151.084693][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.089170][ T7237] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.091099][ T7237] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.092710][ T7237] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.094204][ T7237] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.155834][ T7237] team0: Port device geneve0 removed [ 151.159984][ T7243] team0: Mode changed to "loadbalance" [ 153.046937][ T7277] fuse: Bad value for 'fd' [ 153.052490][ T7276] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 153.083861][ T7276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.141111][ T7276] bond1: (slave gretap1): making interface the new active one [ 153.143300][ T7276] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 153.718163][ T7287] capability: warning: `syz.0.777' uses 32-bit capabilities (legacy support in use) [ 153.892853][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 154.853536][ T7308] tipc: Failed to remove unknown binding: 66,0,0/0:251199778/251199780 [ 154.855364][ T7298] tipc: Failed to remove unknown binding: 66,0,0/0:630007928/630007929 [ 154.856733][ T7298] tipc: Failed to remove unknown binding: 66,0,0/0:630007928/630007929 [ 155.421024][ T7328] MPTCP: kernel_bind error, err=-99 [ 155.512076][ T7323] loop5: detected capacity change from 0 to 512 [ 155.614311][ T7331] netlink: 104 bytes leftover after parsing attributes in process `syz.2.789'. [ 156.208083][ T7352] tipc: Enabled bearer , priority 0 [ 156.980846][ T7363] tipc: Failed to remove unknown binding: 66,0,0/4:1291527820/1291527821 [ 156.984320][ T7363] tipc: Failed to remove unknown binding: 66,0,0/4:1291527820/1291527821 [ 156.985873][ T7365] tipc: Failed to remove unknown binding: 66,0,0/4:966723867/966723869 [ 157.361781][ T7377] netlink: 'syz.5.802': attribute type 3 has an invalid length. [ 157.364292][ T7377] netlink: 'syz.5.802': attribute type 1 has an invalid length. [ 159.142819][ T7399] loop5: detected capacity change from 0 to 512 [ 159.215961][ T7399] loop5: detected capacity change from 0 to 2048 [ 159.217561][ T7399] FAT-fs (loop5): Unrecognized mount option "time_offset=-xfffffffffffffbc3" or missing value [ 159.605876][ T6992] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.010118][ T7399] loop5: detected capacity change from 0 to 8192 [ 164.144371][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 164.533931][ T7465] netlink: 104 bytes leftover after parsing attributes in process `syz.3.831'. [ 165.116563][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 165.119378][ T7480] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 166.081366][ T7491] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.844'. [ 166.570591][ T7508] sctp: [Deprecated]: syz.4.842 (pid 7508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.570591][ T7508] Use struct sctp_sack_info instead [ 167.528562][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.848'. [ 168.010804][ T7535] overlayfs: failed to clone upperpath [ 168.249367][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.855'. [ 169.486767][ T7561] MPTCP: kernel_bind error, err=-98 [ 169.492883][ T7563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.495278][ T7563] team0: Port device bond0 added [ 169.498337][ T7563] netlink: 'syz.3.863': attribute type 16 has an invalid length. [ 169.503072][ T7563] netlink: 'syz.3.863': attribute type 17 has an invalid length. [ 173.285677][ T4322] Bluetooth: hci4: Malformed Event: 0x48 [ 175.545725][ T7658] sctp: [Deprecated]: syz.5.888 (pid 7658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.545725][ T7658] Use struct sctp_sack_info instead [ 177.768699][ T7714] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 177.779412][ T7714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.810764][ T7714] bond2: (slave ip6gretap1): making interface the new active one [ 177.813073][ T7714] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 177.816285][ T7688] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 177.893198][ T7714] device veth7 entered promiscuous mode [ 178.290215][ T7714] bond2: (slave veth7): Enslaving as an active interface with a down link [ 179.405503][ T7744] netlink: 'syz.3.909': attribute type 3 has an invalid length. [ 179.824728][ T7754] MPTCP: kernel_bind error, err=-99 [ 183.339814][ T7811] tipc: Started in network mode [ 183.342139][ T7811] tipc: Node identity 4, cluster identity 4711 [ 183.343081][ T7811] tipc: Node number set to 4 [ 183.450414][ T7290] bond0: (slave bond_slave_0): interface is now down [ 183.451814][ T7290] bond0: (slave bond_slave_1): interface is now down [ 183.452797][ T7290] bond0: (slave wlan1): interface is now down [ 183.459107][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.460748][ T7815] device bond0 entered promiscuous mode [ 183.461877][ T7815] device bond_slave_0 entered promiscuous mode [ 183.462978][ T7815] device bond_slave_1 entered promiscuous mode [ 183.463967][ T7815] device wlan1 entered promiscuous mode [ 183.465181][ T7815] team0: Port device bond0 added [ 183.470128][ T7815] netlink: 'syz.4.928': attribute type 16 has an invalid length. [ 183.471549][ T7290] bond0: (slave bond_slave_0): interface is now down [ 183.472637][ T7290] bond0: (slave bond_slave_1): interface is now down [ 183.473642][ T7290] bond0: (slave wlan1): interface is now down [ 183.474778][ T7815] netlink: 'syz.4.928': attribute type 17 has an invalid length. [ 183.491272][ T7290] bond0: (slave bond_slave_0): interface is now down [ 183.492374][ T7290] bond0: (slave bond_slave_1): interface is now down [ 183.493343][ T7290] bond0: (slave wlan1): interface is now down [ 183.496110][ T7290] bond0: now running without any active interface! [ 183.611235][ T4321] Bluetooth: hci3: command 0x0406 tx timeout [ 183.830472][ T7823] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 183.836644][ T7823] device bond3 entered promiscuous mode [ 183.837815][ T7823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.854787][ T7823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.931'. [ 183.862987][ T7823] bond3: (slave bridge1): making interface the new active one [ 183.864243][ T7823] device bridge1 entered promiscuous mode [ 183.865977][ T7823] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 183.867556][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 183.968240][ T7832] netlink: 'syz.5.946': attribute type 1 has an invalid length. [ 183.975863][ T7832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.991394][ T7832] bond2: (slave ip6gretap1): making interface the new active one [ 183.993480][ T7832] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 184.008360][ T7832] device veth3 entered promiscuous mode [ 184.011110][ T7832] bond2: (slave veth3): Enslaving as an active interface with a down link [ 184.060649][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 184.100339][ T7837] MPTCP: kernel_bind error, err=-98 [ 185.624920][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.940'. [ 185.764691][ T4322] Bluetooth: hci2: Malformed Event: 0x48 [ 186.640184][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.642018][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.104865][ T7871] tipc: Started in network mode [ 187.105760][ T7871] tipc: Node identity 4, cluster identity 4711 [ 187.106832][ T7871] tipc: Node number set to 4 [ 187.135225][ T7872] netlink: 'syz.2.945': attribute type 16 has an invalid length. [ 187.136537][ T7872] netlink: 'syz.2.945': attribute type 17 has an invalid length. [ 188.093014][ T7893] MPTCP: kernel_bind error, err=-99 [ 189.826783][ T7922] tipc: Started in network mode [ 189.828401][ T7922] tipc: Node identity 4, cluster identity 4711 [ 189.829255][ T7922] tipc: Node number set to 4 [ 191.298511][ T7939] tipc: Enabling of bearer rejected, failed to enable media [ 192.446731][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 192.548710][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 192.636933][ T7967] ptrace attach of "./syz-executor exec"[4329] was attempted by " [ 197.110404][ T8011] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 199.027873][ T8052] tipc: Enabling of bearer rejected, failed to enable media [ 199.031747][ T8052] tipc: Enabled bearer , priority 0 [ 203.047892][ T8132] netlink: 'syz.3.1019': attribute type 10 has an invalid length. [ 203.120154][ T8132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.638082][ T8158] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 205.776958][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1027'. [ 205.850084][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 207.528632][ T27] audit: type=1326 audit(524496.239:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 207.532019][ T27] audit: type=1326 audit(524496.249:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 207.535463][ T27] audit: type=1326 audit(524496.249:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 207.536861][ T8206] netlink: 1343 bytes leftover after parsing attributes in process `syz.4.1038'. [ 207.540038][ T27] audit: type=1326 audit(524496.249:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 207.543957][ T27] audit: type=1326 audit(524496.249:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 207.547591][ T27] audit: type=1326 audit(524496.249:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 207.551351][ T27] audit: type=1326 audit(524496.249:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 207.554742][ T27] audit: type=1326 audit(524496.249:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 207.558271][ T27] audit: type=1326 audit(524496.249:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 207.568050][ T27] audit: type=1326 audit(524496.249:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8205 comm="syz.4.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94577368 code=0x7ffc0000 [ 208.194219][ T8218] fuse: Bad value for 'fd' [ 208.862699][ C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 209.441878][ T4322] Bluetooth: hci5: command 0x0406 tx timeout [ 209.890830][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 210.802243][ T8254] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 216.588076][ T8367] bond4: option mode: unable to set because the bond device is up [ 216.597330][ T8367] bond4: (slave macvlan2): Enslaving as a backup interface with a down link [ 216.746552][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 216.848900][ T8380] bond0: (slave syz_tun): Releasing backup interface [ 217.564829][ T8380] device syz_tun left promiscuous mode [ 217.650590][ T8390] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 217.656017][ T8390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.685912][ T8390] bond5: (slave ip6gretap2): making interface the new active one [ 217.710814][ T8390] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 218.126190][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 218.126201][ T27] audit: type=1326 audit(524506.844:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a577368 code=0x7ffc0000 [ 218.133133][ T27] audit: type=1326 audit(524506.844:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9a577368 code=0x7ffc0000 [ 218.140239][ T27] audit: type=1326 audit(524506.854:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a577368 code=0x7ffc0000 [ 218.148139][ T27] audit: type=1326 audit(524506.864:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a55a32c code=0x7ffc0000 [ 218.159746][ T27] audit: type=1326 audit(524506.864:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a577368 code=0x7ffc0000 [ 218.171791][ T27] audit: type=1326 audit(524506.864:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9a577368 code=0x7ffc0000 [ 218.180027][ T27] audit: type=1326 audit(524506.864:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a577368 code=0x7ffc0000 [ 218.184313][ T27] audit: type=1326 audit(524506.864:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff9a577368 code=0x7ffc0000 [ 218.188098][ T27] audit: type=1326 audit(524506.884:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a577368 code=0x7ffc0000 [ 218.191559][ T27] audit: type=1326 audit(524506.884:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.0.1099" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9a55a32c code=0x7ffc0000 [ 218.272840][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1100'. [ 218.277944][ T8411] tipc: Enabling of bearer rejected, failed to enable media [ 222.512831][ T8478] fuse: Bad value for 'fd' [ 222.583806][ T4321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.586304][ T4321] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.588859][ T4321] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.590329][ T4321] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.592328][ T4321] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.593713][ T4321] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.737512][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 223.410376][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.420667][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.424601][ T8481] device bridge_slave_0 entered promiscuous mode [ 223.433742][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.436102][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.437974][ T8481] device bridge_slave_1 entered promiscuous mode [ 223.448311][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.453961][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.537262][ T8481] team0: Port device team_slave_0 added [ 223.538414][ T8500] netlink: 'syz.0.1124': attribute type 4 has an invalid length. [ 223.555107][ T8481] team0: Port device team_slave_1 added [ 223.558538][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1125'. [ 223.800498][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.801612][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.805414][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.814876][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.816080][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.819812][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.205920][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1125'. [ 224.411418][ T8481] device hsr_slave_0 entered promiscuous mode [ 224.464861][ T8481] device hsr_slave_1 entered promiscuous mode [ 224.511194][ T8481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.512673][ T8481] Cannot create hsr debugfs directory [ 224.917852][ T4322] Bluetooth: hci1: command 0x0409 tx timeout [ 225.201080][ T8521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.225765][ T8525] bond3: (slave macvlan2): making interface the new active one [ 225.229444][ T8525] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 225.242608][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 225.715158][ T8544] tipc: Can't bind to reserved service type 1 [ 226.302837][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1140'. [ 226.310102][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1140'. [ 226.779041][ T8572] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 227.232379][ T4322] Bluetooth: hci1: command 0x041b tx timeout [ 227.563197][ T8580] bond1: option mode: unable to set because the bond device has slaves [ 227.587064][ T8580] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 227.597098][ T8582] netlink: 'syz.5.1149': attribute type 1 has an invalid length. [ 227.632721][ T8582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.643819][ T8582] bond3: (slave veth5): Enslaving as an active interface with a down link [ 227.662190][ T8582] device veth1 entered promiscuous mode [ 227.664104][ T8582] device veth1 left promiscuous mode [ 227.668300][ T8582] bond3: (slave vlan4): making interface the new active one [ 227.686066][ T8582] device veth1 entered promiscuous mode [ 227.694108][ T8582] device vlan4 entered promiscuous mode [ 227.695146][ T8582] bond3: (slave vlan4): Enslaving as an active interface with an up link [ 227.696497][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 227.964345][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 228.586827][ T8481] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.602542][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1156'. [ 228.604546][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1156'. [ 228.620059][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 228.623358][ T8607] device vlan4 entered promiscuous mode [ 228.624237][ T8607] device bond0 entered promiscuous mode [ 228.625069][ T8607] device bond_slave_0 entered promiscuous mode [ 228.626077][ T8607] device bond_slave_1 entered promiscuous mode [ 228.698953][ T8481] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.073644][ T8481] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.122910][ T8481] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.317857][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 229.651175][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.911798][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.913323][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.917145][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.929397][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.963211][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.964753][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.965890][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.967652][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.981101][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.983000][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.984729][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.985946][ T4534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.995478][ T8638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.002329][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.006976][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.015612][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.019664][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.021591][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.026092][ T8641] netlink: 'syz.2.1163': attribute type 4 has an invalid length. [ 230.031500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.282304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.534960][ T8638] bond2: (slave macvlan2): making interface the new active one [ 230.536576][ T8638] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 230.538915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.540571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.542809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 230.551699][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.553570][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.559506][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.624007][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 230.642750][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 230.836870][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.838197][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.127091][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.128617][ T8659] netlink: 'syz.4.1168': attribute type 1 has an invalid length. [ 231.135177][ T8659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.160330][ T8659] bond4: (slave ip6gretap1): making interface the new active one [ 231.162255][ T8659] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 231.165384][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.167019][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.189552][ T7688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.191288][ T7688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.193063][ T7688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.194565][ T7688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.211126][ T8481] device veth0_vlan entered promiscuous mode [ 231.215405][ T8481] device veth1_vlan entered promiscuous mode [ 231.225184][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 231.226881][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 231.228274][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.229798][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.232710][ T8481] device veth0_macvtap entered promiscuous mode [ 231.235505][ T8481] device veth1_macvtap entered promiscuous mode [ 231.241068][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.242263][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.244083][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.245552][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.247520][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.260113][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.262489][ T8481] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.263789][ T8481] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.265168][ T8481] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.266540][ T8481] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.275378][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.278558][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.311663][ T7290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.313035][ T7290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.315516][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.337800][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 231.350684][ T7688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.352126][ T7688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.354583][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.333077][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1182'. [ 232.979228][ T8687] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 232.991060][ T8687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.054024][ T8687] bond5: (slave vlan3): Opening slave failed [ 233.462498][ T8695] loop3: detected capacity change from 0 to 256 [ 233.479737][ T8695] netlink: 'syz.3.1176': attribute type 4 has an invalid length. [ 233.931245][ T8699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.945685][ T8699] device veth0 entered promiscuous mode [ 233.947969][ T8699] bond4: (slave macvlan2): making interface the new active one [ 233.949334][ T8699] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 233.951313][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 234.207414][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1181'. [ 238.253197][ T8777] device gretap2 entered promiscuous mode [ 238.257116][ T8777] batman_adv: batadv0: Adding interface: gretap2 [ 238.258493][ T8777] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 238.321343][ T8777] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 238.638308][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1203'. [ 241.908995][ T8839] netlink: 'syz.5.1218': attribute type 4 has an invalid length. [ 242.425298][ T8844] cgroup: Invalid name [ 244.852694][ T24] Process accounting resumed [ 245.778533][ T8900] netlink: 'syz.5.1236': attribute type 12 has an invalid length. [ 245.971337][ T8910] netlink: 'syz.5.1239': attribute type 10 has an invalid length. [ 245.973026][ T8910] tipc: Resetting bearer [ 245.998401][ T8910] bond4: option mode: unable to set because the bond device has slaves [ 246.004934][ T8910] device bridge0 entered promiscuous mode [ 246.006032][ T8910] device netdevsim0 entered promiscuous mode [ 246.007665][ T8910] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 246.010760][ T8910] bond4: (slave macvlan3): Enslaving as a backup interface with an up link [ 247.110476][ T4577] device vlan4 left promiscuous mode [ 247.756161][ T8939] loop3: detected capacity change from 0 to 128 [ 247.816879][ T8939] EXT4-fs (loop3): Test dummy encryption mode enabled [ 248.068560][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.069616][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.349435][ T8939] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 248.432268][ T8939] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 249.239690][ T8481] EXT4-fs (loop3): unmounting filesystem. [ 250.611754][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'. [ 250.634682][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'. [ 252.240954][ T9000] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 253.146826][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1267'. [ 254.768917][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'. [ 254.770610][ T9038] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1276'. [ 254.775242][ T9038] netlink: 'syz.2.1276': attribute type 3 has an invalid length. [ 254.776586][ T9038] netlink: 'syz.2.1276': attribute type 2 has an invalid length. [ 254.777865][ T9038] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1276'. [ 254.835470][ T9041] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1277'. [ 254.836970][ T9041] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1277'. [ 256.275358][ T9063] netlink: 'syz.4.1284': attribute type 10 has an invalid length. [ 256.276931][ T9063] device team0 left promiscuous mode [ 256.277757][ T9063] device team_slave_0 left promiscuous mode [ 256.278807][ T9063] device team_slave_1 left promiscuous mode [ 256.279919][ T9063] device bond0 left promiscuous mode [ 256.280747][ T9063] device bond_slave_0 left promiscuous mode [ 256.281789][ T9063] device bond_slave_1 left promiscuous mode [ 256.282955][ T9063] device wlan1 left promiscuous mode [ 256.283951][ T9063] bridge0: port 2(team0) entered disabled state [ 256.331308][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.877706][ T9068] bond3: option mode: unable to set because the bond device has slaves [ 258.305303][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'. [ 258.696009][ T9093] syz.4.1290 sent an empty control message without MSG_MORE. [ 259.016711][ T9091] bridge5: port 1(vlan4) entered blocking state [ 259.017838][ T9091] bridge5: port 1(vlan4) entered disabled state [ 259.019819][ T9091] device vlan4 entered promiscuous mode [ 259.020752][ T9091] device bridge0 entered promiscuous mode [ 260.348453][ T9124] tipc: Enabling of bearer rejected, already enabled [ 261.299955][ T9142] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 261.480602][ T9142] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.484555][ T9142] bond0: (slave team0): Enslaving as an active interface with an up link [ 261.513820][ T9143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.519520][ T9145] device bond_slave_0 entered promiscuous mode [ 261.520497][ T9145] device bond_slave_1 entered promiscuous mode [ 261.521578][ T9145] device team_slave_0 entered promiscuous mode [ 261.522537][ T9145] device team_slave_1 entered promiscuous mode [ 261.524196][ T9145] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.528156][ T9145] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 261.657780][ T7688] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 264.357228][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 264.360621][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 264.362970][ T9201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1318'. [ 264.364569][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 264.761763][ T9207] loop3: detected capacity change from 0 to 2048 [ 264.821915][ T9207] EXT4-fs error (device loop3): __ext4_fill_super:5423: inode #2: comm syz.3.1319: inode has both inline data and extents flags [ 264.897513][ T9207] EXT4-fs (loop3): get root inode failed [ 264.898431][ T9207] EXT4-fs (loop3): mount failed [ 269.732534][ T9287] syz.3.1346 uses obsolete (PF_INET,SOCK_PACKET) [ 269.740763][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.753239][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.126151][ T9418] netlink: 'syz.5.1368': attribute type 1 has an invalid length. [ 278.132618][ T9418] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.230856][ T9418] bond5: (slave dummy0): making interface the new active one [ 278.235645][ T9418] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 278.237126][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 278.314187][ T9426] device syzkaller0 entered promiscuous mode [ 281.502709][ T9489] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 281.528774][ T9489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.530290][ T9489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.538537][ T9489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.539853][ T9489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 281.545368][ T9489] bond3: (slave geneve2): making interface the new active one [ 281.546984][ T9489] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 281.563688][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1386'. [ 281.567612][ T9489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.782437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 285.430622][ T9556] netlink: 'syz.5.1403': attribute type 1 has an invalid length. [ 286.427983][ T9563] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 286.731645][ T9563] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 286.733013][ T9563] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 286.734288][ T9563] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 286.742484][ T9563] bond6: (slave geneve2): making interface the new active one [ 286.754225][ T9563] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 286.780779][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1403'. [ 286.784643][ T9556] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.318595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 288.095594][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 288.095607][ T27] audit: type=1326 audit(524576.849:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.2.1415" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff91777368 code=0x0 [ 289.568179][ T9612] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 289.586963][ T9617] netlink: 'syz.4.1419': attribute type 1 has an invalid length. [ 289.614099][ T9617] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.663029][ T9617] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.664547][ T9617] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 289.666948][ T9617] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 290.581932][ T9617] device gretap2 entered promiscuous mode [ 290.584266][ T9617] bond6: (slave gretap2): making interface the new active one [ 290.617506][ T9617] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 290.626700][ T9617] device macvlan3 entered promiscuous mode [ 290.628197][ T9617] device bond6 entered promiscuous mode [ 290.629260][ T9617] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 290.705878][ T9617] bond6: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 290.997484][ T9617] device bond6 left promiscuous mode [ 291.079548][ T9632] netlink: 'syz.2.1424': attribute type 1 has an invalid length. [ 291.090448][ T9632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.094733][ T9638] bond3: (slave dummy0): making interface the new active one [ 291.096902][ T9638] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 291.098552][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 291.775930][ T9662] netlink: 'syz.5.1428': attribute type 11 has an invalid length. [ 293.593329][ T9685] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1434'. [ 294.298695][ T9695] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 294.329621][ T9695] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.882484][ T4321] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 295.399974][ T9733] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 295.401677][ T9733] Mem abort info: [ 295.402183][ T9733] ESR = 0x0000000086000006 [ 295.402814][ T9733] EC = 0x21: IABT (current EL), IL = 32 bits [ 295.403753][ T9733] SET = 0, FnV = 0 [ 295.404327][ T9733] EA = 0, S1PTW = 0 [ 295.404994][ T9733] FSC = 0x06: level 2 translation fault [ 295.405854][ T9733] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001417c0000 [ 295.406915][ T9733] [0000000000000000] pgd=0800000128764003, p4d=0800000128764003, pud=080000011f8b2003, pmd=0000000000000000 [ 295.408659][ T9733] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 295.409620][ T9733] Modules linked in: [ 295.410122][ T9733] CPU: 1 PID: 9733 Comm: syz.3.1453 Not tainted syzkaller #0 [ 295.411099][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 295.412441][ T9733] pstate: 82400805 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 295.413615][ T9733] pc : 0x0 [ 295.414023][ T9733] lr : bond_xdp_xmit+0x280/0x46c [ 295.414687][ T9733] sp : ffff800023967040 [ 295.415293][ T9733] x29: ffff8000239670e0 x28: 000000000000000f x27: dfff800000000000 [ 295.416503][ T9733] x26: ffff70000472ce10 x25: ffff800012c317b8 x24: ffff00010a8b4000 [ 295.417722][ T9733] x23: fffffbffefede5c0 x22: ffff00010a8b0000 x21: fffffbffefede5c0 [ 295.418903][ T9733] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 [ 295.420008][ T9733] x17: ffff800018349000 x16: ffff8000082d7e60 x15: 0000000000000002 [ 295.421135][ T9733] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 295.422276][ T9733] x11: 0000000000004dd4 x10: ffff800032b3e000 x9 : ffff800023967080 [ 295.423414][ T9733] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 295.424569][ T9733] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000000 [ 295.425740][ T9733] x2 : ffff8000239670a0 x1 : 0000000000000001 x0 : ffff00010a8b4000 [ 295.426915][ T9733] Call trace: [ 295.427447][ T9733] 0x0 [ 295.427821][ T9733] bq_xmit_all+0xaf8/0xf80 [ 295.428409][ T9733] bq_enqueue+0x288/0x30c [ 295.429037][ T9733] dev_map_enqueue_multi+0xa18/0xdf0 [ 295.429877][ T9733] xdp_do_redirect_frame+0x3e4/0x578 [ 295.430699][ T9733] bpf_test_run_xdp_live+0x8b8/0x15d0 [ 295.431457][ T9733] bpf_prog_test_run_xdp+0x5fc/0xc88 [ 295.432225][ T9733] bpf_prog_test_run+0x2dc/0x360 [ 295.432927][ T9733] __sys_bpf+0x504/0x660 [ 295.433588][ T9733] __arm64_sys_bpf+0x80/0x98 [ 295.434292][ T9733] invoke_syscall+0x98/0x2b4 [ 295.434998][ T9733] el0_svc_common+0x138/0x258 [ 295.435761][ T9733] do_el0_svc+0x58/0x130 [ 295.436405][ T9733] el0_svc+0x58/0x128 [ 295.437030][ T9733] el0t_64_sync_handler+0x84/0xf0 [ 295.437774][ T9733] el0t_64_sync+0x18c/0x190 [ 295.438487][ T9733] Code: bad PC value [ 295.439078][ T9733] ---[ end trace 0000000000000000 ]--- [ 295.569935][ T9733] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 295.571133][ T9733] SMP: stopping secondary CPUs [ 295.571838][ T9733] Kernel Offset: disabled [ 295.572459][ T9733] CPU features: 0x080000,000f0097,a65bfea7 [ 295.573280][ T9733] Memory Limit: none [ 295.695833][ T9733] Rebooting in 86400 seconds..