last executing test programs: 1.215212382s ago: executing program 0 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x9}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.202151953s ago: executing program 0 (id=144): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) readv(r4, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x40, 0x6, 0x9, {{0x1a, 0x4, 0x3, 0x1a, 0x68, 0x66, 0x0, 0x10, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x89, 0x5, "5fdad7"}, @noop, @rr={0x7, 0x17, 0x2a, [@local, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0x34, 0x91, 0x1, 0x8, [{@remote, 0x6}, {@remote, 0x1}, {@empty, 0x9}, {@multicast2, 0x6}, {@local, 0x7}, {@local, 0x4}]}, @end]}}}}}) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 531.635877ms ago: executing program 1 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 531.485228ms ago: executing program 1 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x27bc, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000180), 0x0) 530.413727ms ago: executing program 3 (id=175): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="d7000000000000007910280000000000150000000000000095000010000000009ee3fd3fb812ca5fa206e5f5a663e44259594903aa2c7c73c41069731415510985d32ff27f416867e7e90fef8b13c29962f3c680c829f6c6b88c22f4e37af7bc6d592140df63026c2313725312ba18ea77c834ef80fa17cc0fb3928fc61b45e6c54e1bf618a0c6f50c0ec682e20d7332860eac63b2b1ba0b908004328fac6715959b948cfd82a77524fbe9ef43966d246be6d79564bacd8ab0664449f77e482ae2e9e2d07251b445cf7350ce52abe1843a0d64440381bae4a111f562f4d8b01354d9343b581fcfd86befed0534525ea92b09fd20d7b4cc77f6793ce7207d88a72f136af30c516bf05c45f5551c8453146a4e7424e27025e4e9679609349ac2ee34a6708bc4dd63afce3df464915923331ffa6613e9888bdcc66236eff3e14973bcda2fa982000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 514.697089ms ago: executing program 1 (id=176): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 467.305852ms ago: executing program 3 (id=178): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c7379735f696d6d757461626c652c646973636172642c73686f72746e616d653d77696e6e742c6572726f72733d636f6e74696e75652c636865636b3d6e6f726d616c2c00686f72746e616d653d6c6f7765722c757466383d312c00d8a854a49f1564b0567b61d830bae5d60504da3850ef9c5fd1"], 0xfd, 0x2c7, &(0x7f0000000480)="$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") socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 467.056493ms ago: executing program 1 (id=179): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 465.899552ms ago: executing program 2 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffdffffffffffe}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 399.581068ms ago: executing program 1 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 399.474758ms ago: executing program 4 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 383.653529ms ago: executing program 1 (id=184): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) syz_usb_disconnect(r0) 377.32685ms ago: executing program 2 (id=185): ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = syz_io_uring_setup(0x7733, &(0x7f00000005c0)={0x0, 0x2283, 0x800, 0x1, 0x160}, &(0x7f0000000780)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000004ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400, 0xbeed3c6170858c64}) io_uring_enter(r1, 0x1d69, 0x4b5d, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 331.762534ms ago: executing program 4 (id=186): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 331.581844ms ago: executing program 3 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xff, 0x2f0, 0x4944}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 331.484724ms ago: executing program 4 (id=188): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x7ffffff, 0x0, 0x14}, 0x94) 331.373213ms ago: executing program 2 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 323.083454ms ago: executing program 4 (id=190): r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x10000000, 0x10100, 0x0, 0xc7}, &(0x7f0000000600)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x1b, 0x6000, @fd=r0, 0x8, &(0x7f0000000700)=[{&(0x7f00000006c0)="5a563afc64408cae45bf7f60dbbf94761b1725fe91dd5e15d58fd931432036dc1751f2b2ed299dff5eb70f7f80", 0x2d}], 0x1, 0x1d, 0x1, {0x3}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 276.914518ms ago: executing program 2 (id=191): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r1, 0x47bc, 0x2000, 0x0, 0x0, 0x0) 3.56053ms ago: executing program 4 (id=196): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x2b, 0x2, 0x2, @remote, @local, 0x80c7, 0x7800, 0x401, 0x53c}}) 3.49295ms ago: executing program 3 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@sr0, 0x0, 0x0) 0s ago: executing program 2 (id=198): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) getresgid(&(0x7f0000000040), 0x0, &(0x7f00000000c0)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000340), 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @empty, 0xfffffffd, 0xffffffff}, 0x80, 0x0}, 0x4810) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 31.506409][ T4032] cgroup: Unknown subsys name 'net' [ 31.779087][ T4032] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.042153][ T4032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.861448][ T4045] chnl_net:caif_netlink_parms(): no params data found [ 32.890217][ T4042] chnl_net:caif_netlink_parms(): no params data found [ 32.924977][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.926227][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.927615][ T4045] device bridge_slave_0 entered promiscuous mode [ 32.946419][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.947570][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.949589][ T4045] device bridge_slave_1 entered promiscuous mode [ 32.956018][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.957483][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.958940][ T4042] device bridge_slave_0 entered promiscuous mode [ 32.961006][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.962151][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.963602][ T4042] device bridge_slave_1 entered promiscuous mode [ 32.973919][ T4045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.979416][ T4052] chnl_net:caif_netlink_parms(): no params data found [ 32.985484][ T4045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.987413][ T4050] chnl_net:caif_netlink_parms(): no params data found [ 32.999478][ T4042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.009403][ T4042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.015953][ T4045] team0: Port device team_slave_0 added [ 33.018243][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 33.022544][ T4045] team0: Port device team_slave_1 added [ 33.043491][ T4042] team0: Port device team_slave_0 added [ 33.048827][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.049966][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.051486][ T4052] device bridge_slave_0 entered promiscuous mode [ 33.057254][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.058376][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.062539][ T4045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.070171][ T4042] team0: Port device team_slave_1 added [ 33.073856][ T4052] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.075002][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.077184][ T4052] device bridge_slave_1 entered promiscuous mode [ 33.079206][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.080352][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.084322][ T4045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.157344][ T4045] device hsr_slave_0 entered promiscuous mode [ 33.206404][ T4045] device hsr_slave_1 entered promiscuous mode [ 33.266424][ T4052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.268886][ T4052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.270525][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.271653][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.273069][ T4050] device bridge_slave_0 entered promiscuous mode [ 33.274935][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.276048][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.280781][ T4042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.282921][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.284030][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.285484][ T4049] device bridge_slave_0 entered promiscuous mode [ 33.293365][ T4052] team0: Port device team_slave_0 added [ 33.294483][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.295612][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.297248][ T4050] device bridge_slave_1 entered promiscuous mode [ 33.301328][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.302455][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.307014][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.308879][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.310008][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.311422][ T4049] device bridge_slave_1 entered promiscuous mode [ 33.316081][ T4052] team0: Port device team_slave_1 added [ 33.332898][ T4050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.342702][ T4050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.346702][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.348362][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.349440][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.353440][ T4052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.364390][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.369034][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.370072][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.374168][ T4052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.387088][ T4049] team0: Port device team_slave_0 added [ 33.390267][ T4050] team0: Port device team_slave_0 added [ 33.427164][ T4042] device hsr_slave_0 entered promiscuous mode [ 33.476469][ T4042] device hsr_slave_1 entered promiscuous mode [ 33.526230][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.527425][ T4042] Cannot create hsr debugfs directory [ 33.530300][ T4049] team0: Port device team_slave_1 added [ 33.533841][ T4050] team0: Port device team_slave_1 added [ 33.557295][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.558439][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.562443][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.568037][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.569147][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.572918][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.580718][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.581735][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.585971][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.589717][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.590755][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.594872][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.637371][ T4052] device hsr_slave_0 entered promiscuous mode [ 33.676431][ T4052] device hsr_slave_1 entered promiscuous mode [ 33.716618][ T4052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.717782][ T4052] Cannot create hsr debugfs directory [ 33.787167][ T4049] device hsr_slave_0 entered promiscuous mode [ 33.826411][ T4049] device hsr_slave_1 entered promiscuous mode [ 33.866213][ T4049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.867442][ T4049] Cannot create hsr debugfs directory [ 33.937345][ T4050] device hsr_slave_0 entered promiscuous mode [ 33.976374][ T4050] device hsr_slave_1 entered promiscuous mode [ 34.016351][ T4050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.017607][ T4050] Cannot create hsr debugfs directory [ 34.064764][ T4045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.113803][ T4045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.157708][ T4045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.209960][ T4045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.287475][ T4042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.321056][ T4042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.357418][ T4042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.417305][ T4042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.481404][ T4052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.527795][ T4052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.567418][ T4052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.617755][ T4050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.658984][ T4052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.710586][ T4050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.748120][ T4050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.787594][ T4050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.806430][ T3624] Bluetooth: hci4: command 0x0409 tx timeout [ 34.806437][ T4107] Bluetooth: hci0: command 0x0409 tx timeout [ 34.806677][ T4107] Bluetooth: hci2: command 0x0409 tx timeout [ 34.807514][ T3624] Bluetooth: hci3: command 0x0409 tx timeout [ 34.808529][ T4107] Bluetooth: hci1: command 0x0409 tx timeout [ 34.861203][ T4045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.862770][ T4049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.887913][ T4049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.949001][ T4049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.992469][ T4049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.053010][ T4045] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.059067][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.061114][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.062473][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.064030][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.065800][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.066959][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.069556][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.077912][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.079498][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.080847][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.081883][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.095314][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.103470][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.110321][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.114355][ T4052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.118857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.120534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.122062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.127790][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.131740][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.138648][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.140085][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.142119][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.143500][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.147882][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.154457][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.155858][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.157941][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.159050][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.160462][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.161970][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.163417][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.164448][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.165774][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.174480][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.175975][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.181422][ T4052] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.182685][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.184373][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.185828][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.191144][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.194296][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.196108][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.201484][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.204833][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.212210][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.217454][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.223264][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.224848][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.227369][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.228444][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.230347][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.231948][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.233490][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.234886][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.238552][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.240272][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.241940][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.243388][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.244474][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.252077][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.253730][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.255255][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.258533][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.259999][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.261671][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.263183][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.267695][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.275153][ T4052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.284114][ T4052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.288568][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.290206][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.291954][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.293536][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.295014][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.296934][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.298383][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.299555][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.300937][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.302449][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.303907][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.305501][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.307934][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.309016][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.310415][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.311860][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.313494][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.315068][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.317559][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.318971][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.320567][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.321931][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.323337][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.325966][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.337111][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.340957][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.342296][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.343476][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.345116][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.347346][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.348558][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.350059][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.362508][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.364600][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.367034][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.368630][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.370237][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.371796][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.374100][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.379057][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.380547][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.381981][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.382990][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.384274][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.391596][ T4050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.396341][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.401817][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.403461][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.405092][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.424584][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.426225][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.430896][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.432040][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.434860][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.437050][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.439189][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.440541][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.446746][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.447942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.449742][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.451665][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.453950][ T4045] device veth0_vlan entered promiscuous mode [ 35.460485][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.463075][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.468813][ T4045] device veth1_vlan entered promiscuous mode [ 35.471160][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.472606][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.474156][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.481446][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.482935][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.484252][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.485702][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.490864][ T4052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.494096][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.504826][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.506848][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.508355][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.509886][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.511067][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.523355][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.533092][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.534677][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.548986][ T4045] device veth0_macvtap entered promiscuous mode [ 35.550621][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.552189][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.553748][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.555288][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.560632][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.562171][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.563894][ T4042] device veth0_vlan entered promiscuous mode [ 35.566163][ T4052] device veth0_vlan entered promiscuous mode [ 35.568949][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.570438][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.579576][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.581035][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.582441][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.585392][ T4042] device veth1_vlan entered promiscuous mode [ 35.588842][ T4045] device veth1_macvtap entered promiscuous mode [ 35.603734][ T4052] device veth1_vlan entered promiscuous mode [ 35.608516][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.609865][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.611172][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.612647][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.614042][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.615268][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.624375][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.629153][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.632176][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.633751][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.635332][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.642995][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.645331][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.647413][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.648887][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.650359][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.654988][ T4042] device veth0_macvtap entered promiscuous mode [ 35.660493][ T4045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.661906][ T4045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.663225][ T4045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.664545][ T4045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.673617][ T4042] device veth1_macvtap entered promiscuous mode [ 35.680991][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.682392][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.683809][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.685278][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.686912][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.688398][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.701710][ T4052] device veth0_macvtap entered promiscuous mode [ 35.706628][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.708380][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.709824][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.720598][ T4049] device veth0_vlan entered promiscuous mode [ 35.724571][ T4052] device veth1_macvtap entered promiscuous mode [ 35.727991][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.729719][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.732050][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.733218][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.734682][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.736110][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.738676][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.740264][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.741786][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.743301][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.751397][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.753082][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.756980][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.758626][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.760664][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.764118][ T4049] device veth1_vlan entered promiscuous mode [ 35.765581][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.767926][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.769341][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.770655][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.772214][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.775751][ T4050] device veth0_vlan entered promiscuous mode [ 35.784638][ T4042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.786021][ T4042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.788028][ T4042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.789414][ T4042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.792583][ T4050] device veth1_vlan entered promiscuous mode [ 35.799515][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.801184][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.802750][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.804423][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.807698][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.808892][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.810371][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.811706][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.813222][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.827874][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.829594][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.831166][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.832856][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.835064][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.842729][ T4138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.843959][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.845457][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.849767][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.851437][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.852789][ T4138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.852940][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.855461][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.862522][ T4049] device veth0_macvtap entered promiscuous mode [ 35.868874][ T4052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.870179][ T4052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.871488][ T4052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.872684][ T4052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.879931][ T4049] device veth1_macvtap entered promiscuous mode [ 35.898131][ T399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.899337][ T399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.902367][ T4050] device veth0_macvtap entered promiscuous mode [ 35.904622][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.906233][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.907657][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.909089][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.910739][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.912306][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.915871][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.918617][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.920195][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.921851][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.923258][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.924837][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.930781][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.933439][ T4050] device veth1_macvtap entered promiscuous mode [ 35.941196][ T4138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.942047][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.942433][ T4138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.943905][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.949699][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.951314][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.953640][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.955294][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.958061][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.969338][ T4154] loop3: detected capacity change from 0 to 512 [ 35.970747][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.972205][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.973821][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.976051][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.980283][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.981884][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.983770][ T4049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.985166][ T4049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.987233][ T4049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.988580][ T4049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.000910][ T4154] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 36.002089][ T4154] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.004031][ T4154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.019131][ T4154] EXT4-fs (loop3): 1 truncate cleaned up [ 36.020039][ T4154] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 36.054805][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.057121][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.058703][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.060176][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.062636][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.064236][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.065817][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.071552][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.076060][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.085112][ T399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.089520][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.091043][ T4138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.093756][ T4138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.094942][ T4138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.096556][ T399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.098657][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.100261][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.101733][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.103365][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.104750][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.107518][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.109053][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.110575][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.112505][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.114970][ T4050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.117055][ T4050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.118393][ T4050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.119752][ T4050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.136125][ T4135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.137581][ T4135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.139926][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.141487][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.142947][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.144452][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.146844][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.202892][ T4161] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 36.215397][ T4162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7'. [ 36.219821][ T4162] tipc: Invalid UDP bearer configuration [ 36.219845][ T4162] tipc: Enabling of bearer rejected, failed to enable media [ 36.239351][ T399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.240466][ T399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.242929][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.270450][ T556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.271688][ T556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.275396][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.284867][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.286477][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.289875][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.293424][ T556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.294628][ T556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.296370][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.351820][ T26] audit: type=1326 audit(36.330:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.355176][ T26] audit: type=1326 audit(36.330:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.355831][ T4175] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10'. [ 36.362831][ T26] audit: type=1326 audit(36.330:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.373628][ T4172] loop2: detected capacity change from 0 to 1024 [ 36.380378][ T26] audit: type=1326 audit(36.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.384006][ T4175] serio: Serial port ptm0 [ 36.384541][ T26] audit: type=1326 audit(36.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.391188][ T26] audit: type=1326 audit(36.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.394915][ T26] audit: type=1326 audit(36.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.401170][ T26] audit: type=1326 audit(36.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.405141][ T26] audit: type=1326 audit(36.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.408063][ T4180] loop4: detected capacity change from 0 to 512 [ 36.409925][ T26] audit: type=1326 audit(36.350:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4174 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb41e4068 code=0x7ffc0000 [ 36.415091][ T4172] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 36.416493][ T4172] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.427717][ T4172] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 36.429057][ T4172] System zones: 0-1, 3-36 [ 36.431886][ T4172] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 36.496505][ T4180] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.499980][ T4180] EXT4-fs (loop4): 1 truncate cleaned up [ 36.501059][ T4180] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 36.552074][ T4187] device bridge0 entered promiscuous mode [ 36.553825][ T4187] bridge0: port 3(macsec1) entered blocking state [ 36.555160][ T4187] bridge0: port 3(macsec1) entered disabled state [ 36.571618][ T4185] hub 6-0:1.0: USB hub found [ 36.577949][ T4185] hub 6-0:1.0: 8 ports detected [ 36.579307][ T4187] device bridge0 left promiscuous mode [ 36.600380][ T4185] loop4: detected capacity change from 0 to 164 [ 36.639863][ T4185] process 'syz.4.13' launched '/dev/fd/6' with NULL argv: empty string added [ 36.651464][ T4185] attempt to access beyond end of device [ 36.651464][ T4185] loop4: rw=524288, want=263332, limit=164 [ 36.653885][ T4185] attempt to access beyond end of device [ 36.653885][ T4185] loop4: rw=0, want=263332, limit=164 [ 36.785730][ T4204] loop2: detected capacity change from 0 to 164 [ 36.883146][ T4210] device dummy0 entered promiscuous mode [ 36.886776][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 36.887118][ T4096] Bluetooth: hci1: command 0x041b tx timeout [ 36.889179][ T4096] Bluetooth: hci3: command 0x041b tx timeout [ 36.890280][ T4096] Bluetooth: hci4: command 0x041b tx timeout [ 37.204882][ T4222] loop0: detected capacity change from 0 to 512 [ 37.560665][ T4222] EXT4-fs (loop0): Ignoring removed oldalloc option [ 37.572728][ T4222] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.28: Parent and EA inode have the same ino 15 [ 37.587064][ T4222] EXT4-fs (loop0): Remounting filesystem read-only [ 37.588317][ T4222] EXT4-fs (loop0): 1 orphan inode deleted [ 37.589207][ T4222] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,mb_optimize_scan=0x0000000000000001,bsdgroups,oldalloc,resuid=0x0000000000000000,. Quota mode: none. [ 37.599253][ T4222] netlink: 56 bytes leftover after parsing attributes in process `syz.0.28'. [ 37.669932][ T4231] hub 6-0:1.0: USB hub found [ 37.670807][ T4231] hub 6-0:1.0: 8 ports detected [ 37.698919][ T4231] loop3: detected capacity change from 0 to 164 [ 37.728536][ T4237] loop0: detected capacity change from 0 to 512 [ 37.740061][ T4231] attempt to access beyond end of device [ 37.740061][ T4231] loop3: rw=524288, want=263332, limit=164 [ 37.741884][ T4231] attempt to access beyond end of device [ 37.741884][ T4231] loop3: rw=0, want=263332, limit=164 [ 37.775830][ T4237] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.788524][ T4237] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.34: corrupted inode contents [ 37.792887][ T4237] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #16: comm syz.0.34: mark_inode_dirty error [ 37.806737][ T4237] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.34: corrupted inode contents [ 37.808827][ T4237] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.34: mark_inode_dirty error [ 37.813955][ T4237] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.34: corrupted inode contents [ 37.820383][ T4237] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 37.825939][ T4237] EXT4-fs error (device loop0): ext4_do_update_inode:5204: inode #16: comm syz.0.34: corrupted inode contents [ 37.833302][ T4237] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.34: mark_inode_dirty error [ 37.839547][ T4237] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 37.845131][ T4237] EXT4-fs (loop0): 1 truncate cleaned up [ 37.848930][ T4237] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.880492][ T4246] loop9: detected capacity change from 0 to 7 [ 37.883001][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.884687][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.894172][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.895825][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.897463][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.899417][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.902126][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.903739][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.909780][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.911406][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.914295][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.915997][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.919363][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.920983][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.922228][ T4246] ldm_validate_partition_table(): Disk read failed. [ 37.932488][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.934261][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.948485][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.950282][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.952327][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.954050][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 37.955377][ T4246] Dev loop9: unable to read RDB block 0 [ 37.957864][ T4246] loop9: unable to read partition table [ 37.958865][ T4246] loop9: partition table beyond EOD, truncated [ 37.959892][ T4246] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 37.959892][ T4246] ) failed (rc=-5) [ 38.056547][ T4259] loop3: detected capacity change from 0 to 1024 [ 38.286542][ T4259] ======================================================= [ 38.286542][ T4259] WARNING: The mand mount option has been deprecated and [ 38.286542][ T4259] and is ignored by this kernel. Remove the mand [ 38.286542][ T4259] option from the mount to silence this warning. [ 38.286542][ T4259] ======================================================= [ 38.388895][ T4259] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 38.394896][ T4267] hub 6-0:1.0: USB hub found [ 38.396902][ T4267] hub 6-0:1.0: 8 ports detected [ 38.398380][ T4259] smc: net device bond0 applied user defined pnetid SYZ0 [ 38.399763][ T4259] smc: net device bond0 erased user defined pnetid SYZ0 [ 38.415461][ T4267] loop0: detected capacity change from 0 to 164 [ 38.442251][ T4273] loop1: detected capacity change from 0 to 1024 [ 38.453835][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 38.470622][ T4273] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 38.471769][ T4273] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.480519][ T4273] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 38.481855][ T4273] System zones: 0-1, 3-36 [ 38.483307][ T4273] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 38.511506][ T4267] attempt to access beyond end of device [ 38.511506][ T4267] loop0: rw=524288, want=263332, limit=164 [ 38.513180][ T4267] attempt to access beyond end of device [ 38.513180][ T4267] loop0: rw=0, want=263332, limit=164 [ 38.544921][ T4290] loop3: detected capacity change from 0 to 512 [ 38.628243][ T4290] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.55: iget: bad i_size value: 38620345925642 [ 38.639466][ T4290] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.55: couldn't read orphan inode 15 (err -117) [ 38.647355][ T4290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.697877][ T4312] netlink: 112 bytes leftover after parsing attributes in process `syz.0.64'. [ 38.743595][ T4316] loop1: detected capacity change from 0 to 164 [ 38.759835][ T4316] attempt to access beyond end of device [ 38.759835][ T4316] loop1: rw=524288, want=263332, limit=164 [ 38.762514][ T4319] loop4: detected capacity change from 0 to 512 [ 38.763042][ T4316] attempt to access beyond end of device [ 38.763042][ T4316] loop1: rw=0, want=263332, limit=164 [ 38.770029][ T4319] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.780111][ T4319] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.782619][ T4319] EXT4-fs (loop4): 1 truncate cleaned up [ 38.783504][ T4319] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 38.966491][ T4096] Bluetooth: hci4: command 0x040f tx timeout [ 38.968291][ T4096] Bluetooth: hci3: command 0x040f tx timeout [ 38.969579][ T4096] Bluetooth: hci1: command 0x040f tx timeout [ 38.970570][ T4096] Bluetooth: hci2: command 0x040f tx timeout [ 39.001391][ T4348] loop0: detected capacity change from 0 to 164 [ 39.009932][ T4348] attempt to access beyond end of device [ 39.009932][ T4348] loop0: rw=524288, want=263332, limit=164 [ 39.011748][ T4348] attempt to access beyond end of device [ 39.011748][ T4348] loop0: rw=0, want=263332, limit=164 [ 39.050264][ T4352] netlink: 96 bytes leftover after parsing attributes in process `syz.1.83'. [ 39.089768][ T4356] tipc: Started in network mode [ 39.090703][ T4356] tipc: Node identity 92788dc5d675, cluster identity 4711 [ 39.091849][ T4356] tipc: Enabled bearer , priority 0 [ 39.093723][ T4356] device syzkaller0 entered promiscuous mode [ 39.107620][ T4356] tipc: Resetting bearer [ 39.113246][ T4355] tipc: Resetting bearer [ 39.118545][ T4355] tipc: Disabling bearer [ 39.218659][ T4372] loop0: detected capacity change from 0 to 164 [ 39.286126][ T4374] loop0: detected capacity change from 0 to 512 [ 39.338501][ T4377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 39.566836][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 39.615906][ T4400] loop2: detected capacity change from 0 to 164 [ 40.007721][ T4427] loop2: detected capacity change from 0 to 4096 [ 40.028786][ T4427] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.053906][ T4419] loop3: detected capacity change from 0 to 32768 [ 40.082203][ T4058] loop3: p1 p3 < > [ 40.095161][ T4419] loop3: p1 p3 < > [ 40.175638][ T4431] loop2: detected capacity change from 0 to 1024 [ 40.245531][ T4431] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.280607][ T4308] udevd[4308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 40.301339][ T2388] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.302491][ T2388] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.303548][ T2388] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 40.310268][ T4058] udevd[4058]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.328605][ T2388] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 40.358322][ T4452] loop4: detected capacity change from 0 to 128 [ 40.410217][ T4034] udevd[4034]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.413413][ T4058] udevd[4058]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 40.442594][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 40.444159][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 40.461521][ T4466] loop2: detected capacity change from 0 to 164 [ 40.589394][ T4478] loop2: detected capacity change from 0 to 2048 [ 40.637177][ T4478] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.693890][ T4495] loop0: detected capacity change from 0 to 164 [ 40.808094][ T4503] syz.4.148 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.978825][ T4521] loop1: detected capacity change from 0 to 164 [ 41.046905][ T4103] Bluetooth: hci2: command 0x0419 tx timeout [ 41.048080][ T4103] Bluetooth: hci1: command 0x0419 tx timeout [ 41.048998][ T4103] Bluetooth: hci3: command 0x0419 tx timeout [ 41.049916][ T4103] Bluetooth: hci4: command 0x0419 tx timeout [ 41.134755][ T4541] loop2: detected capacity change from 0 to 256 [ 41.161284][ T4541] FAT-fs (loop2): Directory bread(block 64) failed [ 41.162562][ T4541] FAT-fs (loop2): Directory bread(block 65) failed [ 41.163667][ T4541] FAT-fs (loop2): Directory bread(block 66) failed [ 41.169247][ T4541] FAT-fs (loop2): Directory bread(block 67) failed [ 41.170220][ T4541] FAT-fs (loop2): Directory bread(block 68) failed [ 41.189146][ T4541] FAT-fs (loop2): Directory bread(block 69) failed [ 41.190197][ T4541] FAT-fs (loop2): Directory bread(block 70) failed [ 41.191214][ T4541] FAT-fs (loop2): Directory bread(block 71) failed [ 41.192318][ T4541] FAT-fs (loop2): Directory bread(block 72) failed [ 41.193339][ T4541] FAT-fs (loop2): Directory bread(block 73) failed [ 41.260767][ T4528] __nla_validate_parse: 3 callbacks suppressed [ 41.260775][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 41.353256][ T4558] loop2: detected capacity change from 0 to 164 [ 41.398274][ T4563] tipc: Started in network mode [ 41.399058][ T4563] tipc: Node identity ac14140f, cluster identity 4711 [ 41.400303][ T4563] tipc: New replicast peer: 255.255.255.255 [ 41.401569][ T4563] tipc: Enabled bearer , priority 10 [ 41.404654][ T4566] loop3: detected capacity change from 0 to 128 [ 41.452475][ T4566] FAT-fs (loop3): Directory bread(block 414) failed [ 41.453544][ T4566] FAT-fs (loop3): Directory bread(block 415) failed [ 41.454633][ T4566] FAT-fs (loop3): Directory bread(block 416) failed [ 41.455663][ T4566] FAT-fs (loop3): Directory bread(block 417) failed [ 41.459159][ T4566] FAT-fs (loop3): Directory bread(block 418) failed [ 41.460242][ T4566] FAT-fs (loop3): Directory bread(block 419) failed [ 41.461439][ T4566] FAT-fs (loop3): Directory bread(block 420) failed [ 41.462462][ T4566] FAT-fs (loop3): Directory bread(block 421) failed [ 41.482932][ T4566] FAT-fs (loop3): Directory bread(block 414) failed [ 41.483980][ T4566] FAT-fs (loop3): Directory bread(block 415) failed [ 41.510467][ T4581] usb usb8: usbfs: process 4581 (syz.4.186) did not claim interface 0 before use [ 41.580644][ T4587] tipc: Started in network mode [ 41.581488][ T4587] tipc: Node identity a652ee68e3ba, cluster identity 4711 [ 41.582685][ T4587] tipc: Enabled bearer , priority 0 [ 41.599856][ T4587] device syzkaller0 entered promiscuous mode [ 41.613444][ T4587] Zero length message leads to an empty skb [ 41.625664][ T4587] tipc: Resetting bearer [ 41.626940][ T4593] loop2: detected capacity change from 0 to 164 [ 41.630517][ T4586] tipc: Resetting bearer [ 41.635099][ T4591] loop4: detected capacity change from 0 to 512 [ 41.639825][ T4586] tipc: Disabling bearer [ 41.673945][ T26] kauditd_printk_skb: 467 callbacks suppressed [ 41.673951][ T26] audit: type=1326 audit(41.650:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d6a2068 code=0x7ffc0000 [ 41.682753][ T26] audit: type=1326 audit(41.660:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff9d6a2068 code=0x7ffc0000 [ 41.687700][ T26] audit: type=1326 audit(41.660:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9d6a209c code=0x7ffc0000 [ 41.690998][ T26] audit: type=1326 audit(41.660:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9d6a0730 code=0x7ffc0000 [ 41.694781][ T26] audit: type=1326 audit(41.660:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff9d6a210c code=0x7ffc0000 [ 41.698625][ T26] audit: type=1326 audit(41.670:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9d6a0594 code=0x7ffc0000 [ 41.715701][ T4591] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.719313][ T4591] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.720530][ T4591] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 41.723794][ T4591] EXT4-fs warning (device loop4): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.725704][ T4595] loop2: detected capacity change from 0 to 512 [ 41.726084][ T4591] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 41.727692][ T26] audit: type=1326 audit(41.700:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9d6a1b90 code=0x7ffc0000 [ 41.732301][ T4591] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.192: bg 0: block 40: padding at end of block bitmap is not set [ 41.734910][ T4591] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 41.734922][ T26] audit: type=1326 audit(41.710:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9d6a096c code=0x7ffc0000 [ 41.741883][ T4591] EXT4-fs (loop4): 1 truncate cleaned up [ 41.742783][ T4591] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,min_batch_time=0x0000000000000000,journal_dev=0x0000000000000008,noblock_validity,,errors=continue. Quota mode: writeback. [ 41.754690][ T26] audit: type=1326 audit(41.710:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4594 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9d6a096c code=0x7ffc0000 [ 41.768624][ T4595] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 41.770077][ T4595] System zones: 0-2, 18-18, 34-34 [ 41.771341][ T4595] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.780297][ T4595] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.193: bg 0: block 248: padding at end of block bitmap is not set [ 41.790441][ T4595] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.193: Failed to acquire dquot type 1 [ 41.813290][ T4595] EXT4-fs (loop2): 1 orphan inode deleted [ 41.814382][ T4135] EXT4-fs error (device loop2): ext4_release_dquot:6243: comm kworker/u4:5: Failed to release dquot type 1 [ 41.819853][ T4595] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,discard,quota,nodiscard,data_err=ignore,,errors=continue. Quota mode: writeback. [ 41.904601][ T4606] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 41.905814][ T4606] Modules linked in: [ 41.906386][ T4606] CPU: 1 PID: 4606 Comm: syz.2.198 Not tainted 5.15.189-syzkaller #0 [ 41.907614][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 41.909248][ T4606] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 41.910530][ T4606] pc : __arm64_sys_getresgid+0x304/0x4b0 [ 41.911462][ T4606] lr : __arm64_sys_getresgid+0x2e0/0x4b0 [ 41.912360][ T4606] sp : ffff80001fda7d10 [ 41.912985][ T4606] x29: ffff80001fda7d20 x28: 0000000020000040 x27: 0000000000000000 [ 41.914145][ T4606] x26: dfff800000000000 x25: 1fffe0001a900a3c x24: 00000000fffffff2 [ 41.915326][ T4606] x23: 0000000000000001 x22: ffff0000d48051e4 x21: 0000000000000000 [ 41.916515][ T4606] x20: 0000000000000000 x19: ffff0000d48051c0 x18: 0000000000000000 [ 41.917680][ T4606] x17: 0000000000000000 x16: ffff8000081d8a78 x15: 0000000000000000 [ 41.918817][ T4606] x14: 0000000000000000 x13: 1ffff0000282e06b x12: 0000000000ff0100 [ 41.920014][ T4606] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff [ 41.921194][ T4606] x8 : 0000000000000000 x7 : ffff800008750ed4 x6 : 0000000000000000 [ 41.922319][ T4606] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 41.923438][ T4606] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 41.924569][ T4606] Call trace: [ 41.925005][ T4606] __arm64_sys_getresgid+0x304/0x4b0 [ 41.925776][ T4606] invoke_syscall+0x98/0x2b8 [ 41.926446][ T4606] el0_svc_common+0x138/0x258 [ 41.927081][ T4606] do_el0_svc+0x58/0x14c [ 41.927702][ T4606] el0_svc+0x78/0x1e0 [ 41.928249][ T4606] el0t_64_sync_handler+0xcc/0xe4 [ 41.929050][ T4606] el0t_64_sync+0x1a0/0x1a4 [ 41.929703][ T4606] Code: d503229f 2a1f03f8 2a1f03e0 b8000955 (2a1803e1) [ 41.930668][ T4606] ---[ end trace ba5d949eb01cd255 ]--- [ 42.143373][ T4606] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 42.144472][ T4606] SMP: stopping secondary CPUs [ 42.145256][ T4606] Kernel Offset: disabled [ 42.145943][ T4606] CPU features: 0x8,000003c1,7d33ffd9 [ 42.146762][ T4606] Memory Limit: none [ 42.359309][ T4606] Rebooting in 86400 seconds..