last executing test programs: 1.502851926s ago: executing program 1 (id=296): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_newrule={0x68, 0x20, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x80, 0x10, 0x7, 0x5, 0x0, 0x0, 0x0, 0x1001a}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x800008}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xee01, 0xffffffffffffffff}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc001}, 0x8) 1.468701308s ago: executing program 1 (id=299): ftruncate(0xffffffffffffffff, 0xc17a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}], 0x1) 1.42229923s ago: executing program 1 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000390009000000000000000000010000000400000004000180080002"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.343227853s ago: executing program 1 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, 0x0, 0x0}, 0x20) 1.331040473s ago: executing program 1 (id=310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) 1.252623607s ago: executing program 2 (id=312): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f0000000240), 0x11, 0x565, &(0x7f0000000440)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) acct(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00') r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) unshare(0x20060400) r9 = syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x30, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) tgkill(r9, 0x0, 0x2f) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f00000003c0)=0x16, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x4080, 0x0) fcntl$addseals(r2, 0x409, 0x0) 1.251973257s ago: executing program 1 (id=313): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="02070900040000002dbd7000ffdbdf2502000b"], 0x20}}, 0x4040014) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[], 0x254}}, 0x0) 1.071526684s ago: executing program 4 (id=318): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.007405777s ago: executing program 4 (id=319): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2, 0x0, 0xe}, 0x18) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 934.68102ms ago: executing program 4 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 927.491631ms ago: executing program 4 (id=321): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@delqdisc={0x3c, 0x25, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xf, 0x1}, {0x5, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x60005) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) sendmsg$NFC_CMD_DEV_DOWN(r2, 0x0, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020020000400feff0700000080000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = gettid() socket(0x2, 0x80805, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x10007ffffffff}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6, 0x1}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x200000000000000, 0x0) 546.952837ms ago: executing program 2 (id=330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20010000) 546.635357ms ago: executing program 3 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 525.941748ms ago: executing program 2 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x4, r3}, 0x14) bind$packet(r2, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x47) 518.330668ms ago: executing program 3 (id=334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0x1}, {0xa, 0xfffe, 0xffdffffd, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1, {[0xba, 0x2, 0x1, 0x10b, 0x0, 0x40001, 0x8, 0x5]}}, 0x5c) 438.815861ms ago: executing program 3 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0xd86, &(0x7f0000001b40)={@multicast, @random="7b3b8485d288", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xd50, 0x3a, 0xff, @remote, @mcast2, {[@hopopts={0x3a, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @pad1, @ra]}, @srh={0x5e, 0xa, 0x4, 0x5, 0x82, 0x78, 0x1, [@remote, @rand_addr=' \x01\x00', @private0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x0, 0x8, 0x4, 0x4, 0x6, 0x40, 0x81, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @remote, @mcast1, @private1]}, @dstopts={0x29, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x164}, @ra={0x5, 0x2, 0x4}]}, @dstopts={0x3a, 0x18c, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x6, 0xc56, "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"}]}], @ndisc_ra}}}}}, 0x0) 438.517731ms ago: executing program 2 (id=336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") 427.338192ms ago: executing program 3 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2b9, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/48, 0x30) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 299.022487ms ago: executing program 3 (id=339): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) 298.395997ms ago: executing program 2 (id=340): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x101, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x48000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, 0x1c) 286.540408ms ago: executing program 0 (id=341): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000098000000980000000a0000000600000007000093030000000800000008000000100000000d0000000f000000050000000000000000100000000000000c000000feffffff0500000005000000d40e000009000000b09210000000040000000e0000000e00000004000000258f0000050000000000000b020000000a00000000000012050000000d0000000000000700000000000000000100000d000000000f00000005000000005f002e6130302e"], &(0x7f0000000bc0)=""/61, 0xba, 0x3d, 0x1, 0x120000}, 0x28) 261.185279ms ago: executing program 3 (id=342): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000007c0)="e02742e8680d", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', 0xffffffffffffffff, 0x0, 0x2000000}, 0x18) io_setup(0x3, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 186.978982ms ago: executing program 0 (id=343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@barrier}, {@norecovery}, {@mblk_io_submit}, {@dioread_nolock}, {@i_version}, {@data_ordered}]}, 0x6, 0x615, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZp0uZ90768ii2KAQ8tSNOkFqtebOvBHgoW7EHEQ0OT1NDtD5oUbC2YggcFBRGvIr34D3iX4tWbCOrNs1BFKgoqXZnd2XST7CZrmt1NMp8PbHaeZ2b3eb47efI8M5NnJ4DCGs1+pBF7I+6fTSJGGtYNR23laL7dvV8r+ZpK5dVfkkiqeTfP1bdP8uddeWIwIr45EfG/0spy567fuDBZrtS8E3Fo/uKVQ3PXbxycvTh5fvr89KWJw88dOTr+/MSRiQ2Jc1f+fPLUK49/+O6bz858Wz6YxLE40//2VCyLY6OMxmjcz0NszO+LiKPZQpPPZavZBiEUWin/feyPiEdjJErVVM1IzH7Q08oBHVUpZb15Wwbb3RDYKpJ1NusdG10RoMvq44Ds+Lf+WHvUcKbDo5LuuXu8dgC0Mv6+2rmRGKweG+28lzQcGdXObezegPKzMv6+ue/T7BFLzkP8sbh3+jagnFYWbkXEY83iT6p1212NNIs/XVKPJCLGI2Igr99LD1GHpGG5E+dhVrPe+NOIOJY/Z/kn1ln+6LJ0t+MHoJjuHM878oUstdj/fRWLfVO9/1s6/hlu0netR6/7v9bjv3p/P1g9R54uG4dlY5bTzd+yf3nGj++f/LhV+Y3jv+yRlV8fC3bD3VsR+5bF/14WbD7+yeJPmuz/bJOzx9or4+Xvfj7Zal2v46/cjtjf9Pjnwag0W1rl+uShmdny9HjtZ9Myvvz6jc9bld/r+LP9v7NF/A37P13+uuwzudJmGV+cvn2x1brhNeNPfxpIasebA3nOW5Pz81cnIgaSU/kmDfmHV69LfZv6e2TxH3iqeftf8vt/a+n7DNX/ZLbhymsX7rVat57933Ax+X6lzTq0ksU/tfb+X9H+s7yP2izj99evPdFq3WrxDz1MYAAAAAAAAFBAafUabJKOLS6n6dhYbb7s/2NnWr48N//0zOVrl6YiDlT/H7I/rV/pHqmlkyw9kf8/bD19eFn6mYjYExGflIaq6bFzl8tTvQ4eAAAAAAAAAAAAAAAAAAAANold+fz/+n2qfyvV5v8DBdHJG8wBm5v2D8VVbf8rbvEEFIH+H4pL+4fi0v6huLR/KC7tH4pL+4fi0v6huLR/AAAAANiW9jx554ckIhZeGKo+MgP5OjOCYHvr73UFgJ4p9boCQM8sXvo32IfCaWv8/2f+5YCdrw7QA0mzzOrgoLJ647/T9JUAAAAAAAAAAAAAQAfs39t6/r+5wbC9mfYHxfUQ8/99dQBscb76H4rLMT6w1iz+wVYrzP8HAAAAAAAAAAAAgK4Zrj6SdCyfCzwcaTo2FvGfiNgd/cnMbHl6PCL+GxHfl/p3ZOmJXlcaAAAAAAAAAAAAAAAAAAAAtpm56zcuTJbL01cbF/5akbP5FkprbfNItP2G9bugdqHyL8a/fFUk3f94hyJic+zlTiz0NeQkEQvZnt8UFbs6F5ujGtWFHv9hAgAAAAAAAAAAAAAAAACAAmqYe9zcvs+6XCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6L4H9//v3EKvYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtqZ/AgAA//9ffTgl") mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2390024, 0x0) 186.705632ms ago: executing program 2 (id=344): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x4, 0xe}, {0xfff1}}}, 0x24}}, 0x74000800) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000140)=0x10) 175.763663ms ago: executing program 0 (id=345): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) 153.421183ms ago: executing program 0 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 63.207307ms ago: executing program 0 (id=347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) 55.613357ms ago: executing program 0 (id=348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x2b, 0x80801, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) 55.132457ms ago: executing program 4 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 0s ago: executing program 4 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xad, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d5115007711fffc010000000000000000000000000001ff02000000000000000000000000000132"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. [ 23.709194][ T4306] cgroup: Unknown subsys name 'net' [ 23.980461][ T4306] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.273157][ T4306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 25.583281][ T4322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.588204][ T4320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.589687][ T4326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.591156][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.593010][ T4326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.594361][ T4326] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 25.595665][ T4326] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 25.603577][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.605210][ T4326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.607631][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.609265][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 25.610526][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 25.616268][ T4324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.621105][ T4324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 25.622626][ T4324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 25.624711][ T4324] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 25.626122][ T4324] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 25.627352][ T4324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.629467][ T4324] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 25.638478][ T4326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 25.643370][ T4324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.647958][ T4324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.647970][ T4320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 25.650627][ T4320] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 25.652421][ T4324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 25.654153][ T4324] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 25.655521][ T4324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 25.657195][ T4324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 25.664495][ T4326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 25.665890][ T4326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 25.730861][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 25.790332][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 25.793984][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.795166][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.796714][ T4319] device bridge_slave_0 entered promiscuous mode [ 25.801177][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 25.803113][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.804294][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.805765][ T4319] device bridge_slave_1 entered promiscuous mode [ 25.823063][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 25.841171][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.848575][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.849760][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.851298][ T4323] device bridge_slave_0 entered promiscuous mode [ 25.853475][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.854740][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.856272][ T4323] device bridge_slave_1 entered promiscuous mode [ 25.858479][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.876720][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.878236][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.879723][ T4327] device bridge_slave_0 entered promiscuous mode [ 25.882312][ T4319] team0: Port device team_slave_0 added [ 25.890213][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.891453][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.893060][ T4331] device bridge_slave_0 entered promiscuous mode [ 25.894749][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.895959][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.897331][ T4327] device bridge_slave_1 entered promiscuous mode [ 25.899895][ T4319] team0: Port device team_slave_1 added [ 25.901743][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.904487][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.911009][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.912208][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.913670][ T4331] device bridge_slave_1 entered promiscuous mode [ 25.939651][ T4323] team0: Port device team_slave_0 added [ 25.941497][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.944473][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.946287][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.947446][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.951451][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.954054][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.955095][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.959271][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.961602][ T4323] team0: Port device team_slave_1 added [ 25.963371][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.965538][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.981261][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.982467][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.986423][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.990636][ T4327] team0: Port device team_slave_0 added [ 25.992463][ T4327] team0: Port device team_slave_1 added [ 25.997488][ T4331] team0: Port device team_slave_0 added [ 25.999231][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.000218][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.004108][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.006492][ T4331] team0: Port device team_slave_1 added [ 26.014271][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 26.058734][ T4319] device hsr_slave_0 entered promiscuous mode [ 26.097815][ T4319] device hsr_slave_1 entered promiscuous mode [ 26.141411][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.142474][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.146254][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.148959][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.149991][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.153789][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.162192][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.163355][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.167341][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.175465][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.176530][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.180821][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.204889][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.206045][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.207501][ T4328] device bridge_slave_0 entered promiscuous mode [ 26.258549][ T4323] device hsr_slave_0 entered promiscuous mode [ 26.297775][ T4323] device hsr_slave_1 entered promiscuous mode [ 26.337685][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.338954][ T4323] Cannot create hsr debugfs directory [ 26.378697][ T4327] device hsr_slave_0 entered promiscuous mode [ 26.417763][ T4327] device hsr_slave_1 entered promiscuous mode [ 26.477635][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.478792][ T4327] Cannot create hsr debugfs directory [ 26.480566][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.481746][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.483204][ T4328] device bridge_slave_1 entered promiscuous mode [ 26.505359][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.558652][ T4331] device hsr_slave_0 entered promiscuous mode [ 26.598380][ T4331] device hsr_slave_1 entered promiscuous mode [ 26.637761][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.639035][ T4331] Cannot create hsr debugfs directory [ 26.643420][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.670574][ T4328] team0: Port device team_slave_0 added [ 26.678084][ T4328] team0: Port device team_slave_1 added [ 26.702529][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.703701][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.708108][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.717475][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.719007][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.723029][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.799953][ T4328] device hsr_slave_0 entered promiscuous mode [ 26.837837][ T4328] device hsr_slave_1 entered promiscuous mode [ 26.877633][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.878754][ T4328] Cannot create hsr debugfs directory [ 26.892022][ T4319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.922321][ T4319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.963483][ T4319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.009744][ T4319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.058198][ T4323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.099017][ T4323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.144843][ T4323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.172105][ T4323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.217839][ T4331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.283596][ T4331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.319493][ T4331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.361768][ T4331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.435845][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.441170][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.473699][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.523625][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.568626][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.615882][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.618360][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 27.620426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.622295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.626696][ T4328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.670355][ T4328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.687659][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 27.687705][ T4326] Bluetooth: hci4: command 0x0409 tx timeout [ 27.688700][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 27.689657][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 27.711164][ T4328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.760991][ T4328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.822279][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.823943][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.825605][ T1580] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.826744][ T1580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.828457][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.830299][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.831674][ T1580] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.832703][ T1580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.834101][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.839802][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.845923][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.853154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.855715][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.858543][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.863781][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.875269][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.877024][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.883974][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.885549][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.890426][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.892244][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.895543][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.896911][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.899432][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.900829][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.907532][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.915070][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.916695][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.922195][ T1580] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.923338][ T1580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.925002][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.932093][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.936269][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.938555][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.940098][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.945187][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.946755][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.949007][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.950061][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.956802][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.958464][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.960271][ T209] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.961352][ T209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.970053][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.971675][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.973206][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.974722][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.976132][ T209] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.977651][ T209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.993674][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.995526][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.997414][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.999719][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.001296][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.002900][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.004492][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.006089][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.008015][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.009573][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.011069][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.012439][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.014069][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.015614][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.017157][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.020558][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.022123][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.031003][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.032494][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.033999][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.035265][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.038422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.039775][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.042977][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.048647][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.051275][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.058876][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.063925][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.071855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.073326][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.077084][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.083474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.085161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.091831][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.095299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.096973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.099164][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.100738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.106455][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.107678][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.109563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.115981][ T4319] device veth0_vlan entered promiscuous mode [ 28.119221][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.120839][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.124154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.125458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.126833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.128628][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.130133][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.131255][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.132576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.138924][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.140474][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.141609][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.144274][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.153863][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.155458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.156874][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.158139][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.160160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.165777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.167444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.170256][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.173218][ T4319] device veth1_vlan entered promiscuous mode [ 28.177419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.180850][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.182409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.184256][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.196415][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.199022][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.200314][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.201565][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.202865][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.204103][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.206449][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.208655][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.210148][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.211682][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.213157][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.214565][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.219255][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.221665][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.228475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.230036][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.231560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.233457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.235127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.250154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.251947][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.261565][ T4319] device veth0_macvtap entered promiscuous mode [ 28.266933][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.268759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.270252][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.271673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.273211][ T4331] device veth0_vlan entered promiscuous mode [ 28.276822][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.279285][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.282431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.283991][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.285404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.286831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.291383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.293405][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.294831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.296289][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.299570][ T4319] device veth1_macvtap entered promiscuous mode [ 28.304194][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.305987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.307538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.310471][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.315481][ T4331] device veth1_vlan entered promiscuous mode [ 28.323753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.325270][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.327240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.336758][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.338941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.340467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.341972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.350302][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.351663][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.352959][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.354254][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.359816][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.361523][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.363029][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.364435][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.365928][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.367258][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.375425][ T4331] device veth0_macvtap entered promiscuous mode [ 28.384833][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.386784][ T4331] device veth1_macvtap entered promiscuous mode [ 28.389840][ T4323] device veth0_vlan entered promiscuous mode [ 28.392612][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.394145][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.395587][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.396763][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.403397][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.411743][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.413039][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.437060][ T4323] device veth1_vlan entered promiscuous mode [ 28.442271][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.443945][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.446178][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.454226][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.455776][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.458667][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.465680][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.467368][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.470214][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.479428][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.481016][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.483968][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.486542][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.488656][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.496001][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.497205][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.501524][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.503046][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.504771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.506311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.508695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.511366][ T4327] device veth0_vlan entered promiscuous mode [ 28.519448][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.520806][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.522238][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.523531][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.525804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.527504][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.533622][ T4323] device veth0_macvtap entered promiscuous mode [ 28.536221][ T4327] device veth1_vlan entered promiscuous mode [ 28.543846][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.545353][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.546673][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.548866][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.550935][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.552301][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.552589][ T4323] device veth1_macvtap entered promiscuous mode [ 28.554932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.556396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.571208][ T4328] device veth0_vlan entered promiscuous mode [ 28.581605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.583152][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.584595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.586310][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.589120][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.590501][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.591950][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.594064][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.597425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.600033][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.601469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.602977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.606969][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.613786][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.616942][ T4328] device veth1_vlan entered promiscuous mode [ 28.619865][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.621424][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.622851][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.624419][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.626498][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.632299][ T4323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.633656][ T4323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.635152][ T4323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.636555][ T4323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.661072][ T4327] device veth0_macvtap entered promiscuous mode [ 28.662439][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.664074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.665612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.667179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.678979][ T4428] macvtap0: refused to change device tx_queue_len [ 28.682008][ T4327] device veth1_macvtap entered promiscuous mode [ 28.685595][ T27] audit: type=1326 audit(28.670:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.689557][ T27] audit: type=1326 audit(28.670:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.692967][ T27] audit: type=1326 audit(28.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.696010][ T27] audit: type=1326 audit(28.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.709907][ T27] audit: type=1326 audit(28.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.712304][ T4328] device veth0_macvtap entered promiscuous mode [ 28.713164][ T27] audit: type=1326 audit(28.670:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.717372][ T27] audit: type=1326 audit(28.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.717474][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.720973][ T27] audit: type=1326 audit(28.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.724881][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.726013][ T27] audit: type=1326 audit(28.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.728943][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.730805][ T27] audit: type=1326 audit(28.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 28.732339][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.736979][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.740819][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.743534][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.744736][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.746244][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.748950][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.750514][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.752049][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.753636][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.755160][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.766763][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.770422][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.772031][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.773678][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.775221][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.776849][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.780259][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.782485][ T4328] device veth1_macvtap entered promiscuous mode [ 28.784492][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.785697][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.787019][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.789735][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.791333][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.793046][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.794544][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.796120][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.798238][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.799705][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.802573][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.804748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.806204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.808340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.809714][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.811160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.812814][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.817426][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.818402][ T4430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.820309][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.824607][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.826115][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.838832][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.840454][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.841981][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.843727][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.845062][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.846641][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.848463][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.850138][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.852432][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.855843][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.857079][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.864644][ T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.866010][ T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.870668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.872254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.873863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.875336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.912156][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.913590][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.915021][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.916390][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.921861][ T1580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.923002][ T1580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.934452][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.014863][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.016107][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.020451][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.021597][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.024387][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.025832][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.045283][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.046634][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.052964][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.066973][ T1580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.069078][ T1580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.070838][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.544739][ T4453] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 29.545862][ T4453] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 29.550706][ T4453] vhci_hcd vhci_hcd.0: Device attached [ 29.687948][ T4324] Bluetooth: hci0: command 0x041b tx timeout [ 29.784708][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 29.784790][ T4320] Bluetooth: hci4: command 0x041b tx timeout [ 29.787057][ T4324] Bluetooth: hci1: command 0x041b tx timeout [ 29.788640][ T4324] Bluetooth: hci3: command 0x041b tx timeout [ 29.978849][ T22] vhci_hcd: vhci_device speed not set [ 29.980485][ T112] cfg80211: failed to load regulatory.db [ 30.032827][ T4464] xt_CT: No such helper "pptp" [ 30.044424][ T4469] macvtap0: refused to change device tx_queue_len [ 30.047953][ T22] usb 4-1: new full-speed USB device number 2 using vhci_hcd [ 30.053514][ T4473] openvswitch: netlink: EtherType 0 is less than min 600 [ 30.056322][ T4472] xt_hashlimit: max too large, truncated to 1048576 [ 30.178440][ T4485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13'. [ 30.223796][ T4491] netlink: 'syz.2.23': attribute type 4 has an invalid length. [ 30.365179][ T4455] vhci_hcd: connection reset by peer [ 30.367118][ T209] vhci_hcd: stop threads [ 30.368072][ T209] vhci_hcd: release socket [ 30.369425][ T209] vhci_hcd: disconnect device [ 30.404053][ T4507] loop4: detected capacity change from 0 to 512 [ 30.432133][ T4507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.455281][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 30.460657][ T4517] loop0: detected capacity change from 0 to 512 [ 30.493582][ T4517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.509054][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 30.606351][ T4532] process 'syz.0.41' launched '/dev/fd/5' with NULL argv: empty string added [ 30.611406][ T4530] loop4: detected capacity change from 0 to 128 [ 30.632488][ T4530] syz.4.37: attempt to access beyond end of device [ 30.632488][ T4530] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 30.646647][ T4530] syz.4.37: attempt to access beyond end of device [ 30.646647][ T4530] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 30.652123][ T4530] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 30.702015][ T4539] loop0: detected capacity change from 0 to 1024 [ 30.715983][ T4539] ======================================================= [ 30.715983][ T4539] WARNING: The mand mount option has been deprecated and [ 30.715983][ T4539] and is ignored by this kernel. Remove the mand [ 30.715983][ T4539] option from the mount to silence this warning. [ 30.715983][ T4539] ======================================================= [ 30.722528][ T4539] EXT4-fs: inline encryption not supported [ 30.724372][ T4539] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.733738][ T4539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.761112][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 30.945662][ T4550] loop1: detected capacity change from 0 to 1764 [ 30.994308][ T4552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 31.021459][ T4554] loop1: detected capacity change from 0 to 512 [ 31.024084][ T4554] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.026422][ T4554] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.039700][ T4554] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.042667][ T4554] EXT4-fs (loop1): 1 truncate cleaned up [ 31.043827][ T4554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.067296][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 31.127903][ T4326] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 31.128179][ T4465] Bluetooth: hci5: command 0x1003 tx timeout [ 31.221747][ T4566] loop3: detected capacity change from 0 to 8192 [ 31.321228][ T4575] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 31.322292][ T4575] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 31.324761][ T4575] vhci_hcd vhci_hcd.0: Device attached [ 31.428947][ T4585] loop2: detected capacity change from 0 to 2048 [ 31.527517][ T112] vhci_hcd: vhci_device speed not set [ 31.608575][ T112] usb 8-1: new full-speed USB device number 2 using vhci_hcd [ 31.734139][ T4585] loop2: p3 < > p4 < > [ 31.734933][ T4585] loop2: partition table partially beyond EOD, truncated [ 31.736266][ T4585] loop2: p3 start 4284289 is beyond EOD, truncated [ 31.768024][ T4326] Bluetooth: hci0: command 0x040f tx timeout [ 31.795985][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 31.802897][ T4588] xt_CT: No such helper "pptp" [ 31.829450][ T4331] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 31.833554][ T4442] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.835651][ T4442] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.837497][ T4442] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 31.848556][ T4442] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.855069][ T4442] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 31.856716][ T4442] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.858445][ T4326] Bluetooth: hci2: command 0x040f tx timeout [ 31.859447][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 31.860390][ T4326] Bluetooth: hci4: command 0x040f tx timeout [ 31.861335][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 31.864884][ T4442] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 31.867030][ T4442] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.869129][ T4442] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 31.871247][ T4442] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.872751][ T4442] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 31.895161][ T4442] udevd[4442]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 31.945686][ T4607] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.70'. [ 31.951675][ T4607] netlink: zone id is out of range [ 31.952534][ T4607] netlink: zone id is out of range [ 31.954441][ T4607] netlink: zone id is out of range [ 31.957308][ T4607] netlink: zone id is out of range [ 31.965240][ T4607] netlink: zone id is out of range [ 31.967750][ T4607] netlink: zone id is out of range [ 31.971688][ T4607] netlink: zone id is out of range [ 31.973268][ T4607] netlink: zone id is out of range [ 32.040800][ T4607] netlink: set zone limit has 8 unknown bytes [ 32.053765][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 32.107283][ T4622] syz.4.78 uses obsolete (PF_INET,SOCK_PACKET) [ 32.134114][ T4626] loop1: detected capacity change from 0 to 512 [ 32.144336][ T4626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.151026][ T4577] vhci_hcd: connection reset by peer [ 32.153481][ T4407] vhci_hcd: stop threads [ 32.154145][ T4407] vhci_hcd: release socket [ 32.154822][ T4407] vhci_hcd: disconnect device [ 32.163988][ T4626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.193750][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 32.210492][ T4630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 32.441249][ T4649] loop4: detected capacity change from 0 to 256 [ 32.472803][ T4649] FAT-fs (loop4): Directory bread(block 64) failed [ 32.474152][ T4649] FAT-fs (loop4): Directory bread(block 65) failed [ 32.475425][ T4649] FAT-fs (loop4): Directory bread(block 66) failed [ 32.476685][ T4649] FAT-fs (loop4): Directory bread(block 67) failed [ 32.481530][ T4649] FAT-fs (loop4): Directory bread(block 68) failed [ 32.482673][ T4649] FAT-fs (loop4): Directory bread(block 69) failed [ 32.483808][ T4649] FAT-fs (loop4): Directory bread(block 70) failed [ 32.485031][ T4649] FAT-fs (loop4): Directory bread(block 71) failed [ 32.486285][ T4649] FAT-fs (loop4): Directory bread(block 72) failed [ 32.487544][ T4649] FAT-fs (loop4): Directory bread(block 73) failed [ 32.618347][ T4662] IPv6: NLM_F_CREATE should be specified when creating new route [ 32.625848][ T4662] loop4: detected capacity change from 0 to 1024 [ 32.639499][ T4662] EXT4-fs: Ignoring removed orlov option [ 32.708745][ T4662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.711604][ T4667] infiniband syz0: set active [ 32.713535][ T4667] infiniband syz0: added bond_slave_0 [ 32.745142][ T4667] RDS/IB: syz0: added [ 32.746013][ T4667] smc: adding ib device syz0 with port count 1 [ 32.746948][ T4667] smc: ib device syz0 port 1 has pnetid [ 32.762028][ T4677] loop3: detected capacity change from 0 to 512 [ 32.764172][ T4677] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.773060][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 32.783603][ T4680] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 32.788366][ T4677] EXT4-fs (loop3): 1 truncate cleaned up [ 32.789319][ T4677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.825467][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 32.912045][ T4686] netlink: 'syz.1.105': attribute type 29 has an invalid length. [ 32.970341][ T4692] device syzkaller1 entered promiscuous mode [ 33.052653][ T4697] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 33.053708][ T4697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 33.055461][ T4697] vhci_hcd vhci_hcd.0: Device attached [ 33.265129][ T4362] vhci_hcd: vhci_device speed not set [ 33.337901][ T4362] usb 10-1: new full-speed USB device number 2 using vhci_hcd [ 33.493854][ T4707] xt_CT: No such helper "pptp" [ 33.572198][ T4719] capability: warning: `syz.3.118' uses 32-bit capabilities (legacy support in use) [ 33.848214][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 33.864571][ T27] kauditd_printk_skb: 267 callbacks suppressed [ 33.864585][ T27] audit: type=1326 audit(33.850:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.870082][ T27] audit: type=1326 audit(33.850:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.885079][ T4698] vhci_hcd: connection reset by peer [ 33.886137][ T1580] vhci_hcd: stop threads [ 33.886899][ T1580] vhci_hcd: release socket [ 33.887660][ T1580] vhci_hcd: disconnect device [ 33.888311][ T27] audit: type=1326 audit(33.850:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.891672][ T27] audit: type=1326 audit(33.850:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.900717][ T27] audit: type=1326 audit(33.850:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.904299][ T27] audit: type=1326 audit(33.850:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.910507][ T27] audit: type=1326 audit(33.850:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.913786][ T27] audit: type=1326 audit(33.850:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.916907][ T27] audit: type=1326 audit(33.850:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=48 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.928268][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 33.929284][ T4326] Bluetooth: hci4: command 0x0419 tx timeout [ 33.930225][ T4326] Bluetooth: hci3: command 0x0419 tx timeout [ 33.931132][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 33.934048][ T27] audit: type=1326 audit(33.850:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.1.132" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf5b9e8 code=0x7ffc0000 [ 33.973550][ T4757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.976708][ T4757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.008798][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.010920][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.144006][ T4775] Cannot find add_set index 0 as target [ 34.145766][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 34.148711][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 34.462478][ T4783] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 34.465827][ T4783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.148'. [ 34.620847][ T4780] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.662195][ T4786] netlink: 'syz.4.148': attribute type 10 has an invalid length. [ 34.688560][ T4807] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 34.694261][ T4786] team0: Port device dummy0 added [ 34.695644][ T4798] netlink: 'syz.4.148': attribute type 10 has an invalid length. [ 34.710835][ T4798] team0: Port device dummy0 removed [ 34.713425][ T4798] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 34.789326][ T4780] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.842073][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 34.845682][ T4822] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 34.846759][ T4822] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 34.849456][ T4822] vhci_hcd vhci_hcd.0: Device attached [ 34.858461][ T4823] vhci_hcd: connection closed [ 34.869618][ T1580] vhci_hcd: stop threads [ 34.870973][ T1580] vhci_hcd: release socket [ 34.871634][ T1580] vhci_hcd: disconnect device [ 34.922391][ T4780] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.971334][ T4838] loop3: detected capacity change from 0 to 1024 [ 34.989663][ T4838] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 35.018934][ T4832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.164'. [ 35.020394][ T4837] netlink: 'syz.2.166': attribute type 13 has an invalid length. [ 35.036678][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 35.125948][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.127810][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.208101][ T22] vhci_hcd: vhci_device speed not set [ 35.452466][ T4837] infiniband syz0: set down [ 35.491645][ T4837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.506096][ T4837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.783886][ T4837] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.785283][ T4837] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.786913][ T4837] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.788799][ T4837] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.100461][ T4780] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.143148][ T4860] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 36.167759][ T4860] device macvlan0 entered promiscuous mode [ 36.168981][ T4860] device geneve1 entered promiscuous mode [ 36.178727][ T4860] team0: Port device macvlan0 added [ 36.221841][ T4780] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.225377][ T4780] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.229961][ T4780] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.233219][ T4780] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.267507][ T4871] tipc: Started in network mode [ 36.278581][ T4871] tipc: Node identity 8e1c54d532ca, cluster identity 4711 [ 36.280090][ T4871] tipc: Enabled bearer , priority 0 [ 36.291245][ T4870] tipc: Resetting bearer [ 36.336480][ T4879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 36.727711][ T112] vhci_hcd: vhci_device speed not set [ 37.265486][ T4895] capability: warning: `syz.4.189' uses deprecated v2 capabilities in a way that may be insecure [ 37.278536][ T4370] tipc: Node number set to 3168163029 [ 37.289675][ T4897] loop4: detected capacity change from 0 to 512 [ 37.295962][ T4897] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.190: corrupted inode contents [ 37.302024][ T4897] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #15: comm syz.4.190: mark_inode_dirty error [ 37.303998][ T4897] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.190: corrupted inode contents [ 37.306099][ T4897] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2964: inode #15: comm syz.4.190: mark_inode_dirty error [ 37.311333][ T4897] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #15: comm syz.4.190: mark inode dirty (error -117) [ 37.313609][ T4897] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 37.315340][ T4897] EXT4-fs (loop4): 1 orphan inode deleted [ 37.316447][ T4897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.329986][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 38.487673][ T4362] vhci_hcd: vhci_device speed not set [ 47.462220][ T4870] tipc: Disabling bearer [ 47.548096][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 47.548106][ T27] audit: type=1326 audit(47.540:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.553684][ T27] audit: type=1326 audit(47.540:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.558619][ T27] audit: type=1326 audit(47.540:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.573860][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 47.575545][ T4927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.576708][ T4927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.584991][ T27] audit: type=1326 audit(47.550:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.598175][ T4927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.599318][ T4927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.600445][ T27] audit: type=1326 audit(47.550:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.603853][ T27] audit: type=1326 audit(47.550:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.621747][ T27] audit: type=1326 audit(47.550:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.641115][ T27] audit: type=1326 audit(47.550:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.644216][ T27] audit: type=1326 audit(47.550:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.647305][ T27] audit: type=1326 audit(47.550:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 47.727926][ T4946] loop4: detected capacity change from 0 to 1024 [ 47.735683][ T4946] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.740653][ T4946] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.756067][ T4946] JBD2: no valid journal superblock found [ 47.756951][ T4946] EXT4-fs (loop4): error loading journal [ 47.771911][ T4950] loop3: detected capacity change from 0 to 1024 [ 47.773259][ T4950] EXT4-fs: Ignoring removed oldalloc option [ 47.832272][ T4950] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.840695][ T4950] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.209: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.856027][ T4950] EXT4-fs (loop3): Remounting filesystem read-only [ 47.949003][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 48.330333][ T4984] rdma_op 00000000bf63092b conn xmit_rdma 0000000000000000 [ 48.360537][ T4989] netlink: 'syz.4.224': attribute type 29 has an invalid length. [ 48.374221][ T4989] netlink: 'syz.4.224': attribute type 29 has an invalid length. [ 48.406462][ T4994] loop3: detected capacity change from 0 to 128 [ 48.449310][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 48.494315][ T5004] loop4: detected capacity change from 0 to 512 [ 48.532260][ T4942] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.563335][ T5014] loop1: detected capacity change from 0 to 512 [ 48.581855][ T5014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.621786][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 48.747546][ T5022] loop2: detected capacity change from 0 to 512 [ 48.749721][ T5022] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 48.788678][ T4942] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.214414][ T5022] macvtap0: refused to change device tx_queue_len [ 49.226191][ T5012] can0: slcan on ttyS3. [ 49.287978][ T5011] can0 (unregistered): slcan off ttyS3. [ 49.420267][ T4709] Bluetooth: hci5: Frame reassembly failed (-84) [ 49.460156][ T5038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.499986][ T5024] loop0: detected capacity change from 0 to 256 [ 49.516982][ T5024] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 49.559633][ T5052] infiniband syz1: set down [ 49.561118][ T5052] infiniband syz1: added syz_tun [ 49.569175][ T5052] RDS/IB: syz1: added [ 49.570363][ T5052] smc: adding ib device syz1 with port count 1 [ 49.571445][ T5052] smc: ib device syz1 port 1 has pnetid [ 49.587147][ T5062] loop0: detected capacity change from 0 to 512 [ 49.590070][ T5038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.599638][ T5062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.607246][ T5062] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 49.616214][ T5062] EXT4-fs (loop0): 1 truncate cleaned up [ 49.618499][ T5062] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.645465][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 49.689017][ T5038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.782965][ T5038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.834411][ T5085] vhci_hcd: invalid port number 9 [ 49.837905][ T5085] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 49.928183][ T5038] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.931900][ T5038] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.964865][ T5038] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.966324][ T5097] random: crng reseeded on system resumption [ 49.973619][ T5038] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.080229][ T5108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 50.082679][ T5108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 50.235402][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 50.262799][ T5126] Illegal XDP return value 4040772605 on prog (id 6) dev syz_tun, expect packet loss! [ 50.495022][ T5147] loop4: detected capacity change from 0 to 512 [ 50.515174][ T5147] EXT4-fs: Ignoring removed nobh option [ 50.537090][ T5147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.577140][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 50.599355][ T5159] loop1: detected capacity change from 0 to 256 [ 50.601405][ T5159] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.758093][ T5180] random: crng reseeded on system resumption [ 50.773906][ T5182] usb usb8: usbfs: process 5182 (syz.4.298) did not claim interface 0 before use [ 50.853867][ T5192] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 51.021766][ T5214] loop2: detected capacity change from 0 to 1024 [ 51.068870][ T5214] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.082584][ T5227] loop4: detected capacity change from 0 to 512 [ 51.086147][ T5227] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.110388][ T5227] EXT4-fs (loop4): 1 truncate cleaned up [ 51.114991][ T5227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 51.191376][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 51.427523][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.428939][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.430157][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.431259][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.432415][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.433496][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.434641][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.435788][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.436924][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.441052][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.442221][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.443593][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.444698][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.445820][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.446934][ T24] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 51.448678][ T4326] Bluetooth: hci5: command 0x1003 tx timeout [ 51.450394][ T4322] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 51.453628][ T24] hid-generic 00A0:0006:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 51.521593][ T5265] ieee802154 phy0 wpan0: encryption failed: -22 [ 51.528053][ T5261] fido_id[5261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.661959][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 51.698085][ T5285] netlink: 'syz.2.330': attribute type 21 has an invalid length. [ 51.699438][ T5285] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 51.700613][ T5285] netlink: 144 bytes leftover after parsing attributes in process `syz.2.330'. [ 51.755445][ T5291] tipc: Started in network mode [ 51.757064][ T5291] tipc: Node identity ac14140f, cluster identity 4711 [ 51.760249][ T5291] tipc: New replicast peer: 255.255.255.255 [ 51.761849][ T5291] tipc: Enabled bearer , priority 10 [ 51.843989][ T5305] loop2: detected capacity change from 0 to 512 [ 51.866458][ T5309] loop3: detected capacity change from 0 to 128 [ 51.872931][ T5309] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.875444][ T5309] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.886742][ T5305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.336: bg 0: block 248: padding at end of block bitmap is not set [ 51.895583][ T5305] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.336: Failed to acquire dquot type 1 [ 51.910661][ T5305] EXT4-fs (loop2): 1 truncate cleaned up [ 51.911638][ T5305] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.936748][ T5315] vhci_hcd: invalid port number 96 [ 51.941208][ T5315] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 51.946284][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 52.124274][ T5342] 9pnet_fd: Insufficient options for proto=fd [ 52.183708][ T5350] Zero length message leads to an empty skb [ 52.189599][ T5350] hub 9-0:1.0: USB hub found [ 52.193906][ T5350] hub 9-0:1.0: 8 ports detected [ 52.230462][ T5354] sch_fq: defrate 4294967295 ignored. [ 52.309730][ T5327] ------------[ cut here ]------------ [ 52.310674][ T5327] WARNING: CPU: 0 PID: 5327 at mm/page_alloc.c:5590 __alloc_pages+0xd0/0x53c [ 52.312150][ T5327] Modules linked in: [ 52.312861][ T5327] CPU: 0 PID: 5327 Comm: syz.2.344 Not tainted syzkaller #0 [ 52.314083][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 52.315690][ T5327] pstate: 22400005 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 52.317011][ T5327] pc : __alloc_pages+0xd0/0x53c [ 52.317783][ T5327] lr : __alloc_pages+0xac/0x53c [ 52.318524][ T5327] sp : ffff800021737820 [ 52.319202][ T5327] x29: ffff8000217378e0 x28: dfff800000000000 x27: ffff800021737840 [ 52.320471][ T5327] x26: 1fffe0001907d6f0 x25: dfff800000000000 x24: ffff7000042e6f08 [ 52.321710][ T5327] x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000040cc0 [ 52.322960][ T5327] x20: 0000000000000000 x19: 000000000000000e x18: 0000000000000000 [ 52.324197][ T5327] x17: 0000000000000000 x16: ffff8000082d10fc x15: 0000000020000140 [ 52.325434][ T5327] x14: 00000000c0085508 x13: 1ffff00002a180b1 x12: 0000000000000005 [ 52.326687][ T5327] x11: 1ffff000042e6f0c x10: 0000000000000000 x9 : 0000000000000001 [ 52.327978][ T5327] x8 : ffff800017a8a000 x7 : 0000000000000000 x6 : ffff800021737ae8 [ 52.329245][ T5327] x5 : ffff800021737ae8 x4 : 0000000000000000 x3 : 0000000000000020 [ 52.330478][ T5327] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 52.331660][ T5327] Call trace: [ 52.332147][ T5327] __alloc_pages+0xd0/0x53c [ 52.332867][ T5327] __kmalloc_large_node+0xa8/0x1e0 [ 52.333595][ T5327] __kmalloc+0x140/0x178 [ 52.334257][ T5327] raw_alloc_io_data+0x1cc/0x298 [ 52.335008][ T5327] raw_ioctl+0x974/0x31f4 [ 52.335658][ T5327] __arm64_sys_ioctl+0x14c/0x1c8 [ 52.336375][ T5327] invoke_syscall+0x98/0x2bc [ 52.337049][ T5327] el0_svc_common+0x138/0x258 [ 52.337751][ T5327] do_el0_svc+0x58/0x13c [ 52.338381][ T5327] el0_svc+0x58/0x138 [ 52.338985][ T5327] el0t_64_sync_handler+0x84/0xf0 [ 52.339783][ T5327] el0t_64_sync+0x18c/0x190 [ 52.340565][ T5327] irq event stamp: 430 [ 52.341221][ T5327] hardirqs last enabled at (429): [] kasan_quarantine_put+0xc4/0x204 [ 52.342722][ T5327] hardirqs last disabled at (430): [] el1_dbg+0x24/0x80 [ 52.344015][ T5327] softirqs last enabled at (412): [] local_bh_enable+0x10/0x34 [ 52.345477][ T5327] softirqs last disabled at (410): [] local_bh_disable+0x10/0x34 [ 52.346954][ T5327] ---[ end trace 0000000000000000 ]--- [ 52.658538][ T5367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.660098][ T5367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.778294][ T4371] tipc: Node number set to 2886997007