last executing test programs: 35.461288326s ago: executing program 3 (id=175): syz_usb_connect$hid(0x2, 0xfffffe85, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="588addb04cdce416", 0x8}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@deltaction={0x14, 0x31, 0x2, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8009}, 0x20068884) 33.72208396s ago: executing program 3 (id=203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x3e68, 0x0, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8081, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x405, 0xb, 0x5, 0xbfc3, 0x3, 0x8, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x1ff, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x7e, 0x6, 0xfffffff2, 0x2b1f, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x3ff, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x0, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x4, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 33.682513213s ago: executing program 3 (id=205): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) accept4$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', &(0x7f0000000000)=""/113, 0x71) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) 33.548036325s ago: executing program 3 (id=209): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0xa, {0x0, 0xfa}, 0x5, 0xd0aa}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x8bc6bfab9230d34f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x3, &(0x7f0000000340)=0x0) io_pgetevents(r9, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) r10 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x3f}) syz_emit_ethernet(0x4a, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7f, &(0x7f00000000c0)={[0x8]}, 0x8) 31.662445763s ago: executing program 3 (id=225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x4100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 31.289973466s ago: executing program 3 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)={0x33, 0x0, 0x1, 0xcf}, 0x8) 31.198043924s ago: executing program 32 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000180)={0x33, 0x0, 0x1, 0xcf}, 0x8) 2.432487054s ago: executing program 0 (id=573): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) 1.738140026s ago: executing program 2 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}]}]}, 0x54}}, 0x0) 1.681904381s ago: executing program 2 (id=594): bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.58235262s ago: executing program 5 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}]}]}, 0x13c}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 1.537730844s ago: executing program 0 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r1, 0x1, 0x4, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.449584571s ago: executing program 0 (id=597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1, @ANYBLOB="080026006c0900000800a0000900000008005700881300000800a10000100000080027"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 1.390483346s ago: executing program 1 (id=598): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0e", 0x1}], 0x1}}], 0x1, 0x4048884) 1.390263977s ago: executing program 0 (id=599): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x30, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) 1.382739378s ago: executing program 5 (id=600): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.293873285s ago: executing program 0 (id=602): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x440b0) 1.194397754s ago: executing program 5 (id=603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xdd0d}, @IFLA_BRPORT_GUARD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x40) 974.513034ms ago: executing program 5 (id=607): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10) sendto$inet(r1, &(0x7f0000000340)="fb", 0x1, 0x20008040, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) splice(r1, 0x0, r0, 0x0, 0x82, 0xa) 974.195154ms ago: executing program 5 (id=608): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 890.268801ms ago: executing program 5 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) close(0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 766.427502ms ago: executing program 2 (id=611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 766.156032ms ago: executing program 0 (id=612): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f0000000440)) 732.073205ms ago: executing program 4 (id=613): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x1, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 652.348492ms ago: executing program 4 (id=614): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x8044, @remote}, {0x2, 0x4e2f, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 485.515857ms ago: executing program 4 (id=615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0xa0, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x3, 0xe8, 0x24, 0x401}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x31, 0x91, "d68317263e8c60a66fdb8136d7df53a7ae64f453e61714f1921729b06b1ea480c9e8f4f19453b459c620834f98"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) 485.273517ms ago: executing program 1 (id=616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 381.205256ms ago: executing program 2 (id=617): syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x8}}}}}, 0x0) 338.48281ms ago: executing program 1 (id=618): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 282.480715ms ago: executing program 4 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0xb65cdc64cfd76af1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc041}, 0x0) 282.205395ms ago: executing program 2 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x20000002, 0x25dfdc02, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 214.199071ms ago: executing program 4 (id=621): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) 212.953481ms ago: executing program 2 (id=622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='I', 0x1, 0x4c001, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x1120, 0x0, 0x0) 191.756763ms ago: executing program 1 (id=623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) close(0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x20008000) 58.416865ms ago: executing program 4 (id=624): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x4b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x8000, 0x0, 0x54}, 0x9c) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900676c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00"], 0xfc}}, 0x0) 58.132125ms ago: executing program 1 (id=625): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x20, @random="a380e37b9489", 'vcan0\x00'}}, 0x1e) socket(0x10, 0x3, 0x9) close(0x4) 0s ago: executing program 1 (id=626): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 48.163125][ T4171] cgroup: Unknown subsys name 'net' [ 48.277415][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.583567][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.534581][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.601187][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.614242][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.650045][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.718188][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.773318][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.780576][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.789812][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.808399][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.815579][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.823846][ T4185] device bridge_slave_0 entered promiscuous mode [ 51.839781][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.846923][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.854731][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.872660][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.879727][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.888050][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.915112][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.922378][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.930314][ T4186] device bridge_slave_0 entered promiscuous mode [ 51.958320][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.965494][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.973489][ T4186] device bridge_slave_1 entered promiscuous mode [ 51.987968][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.005331][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.021981][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.029032][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.037194][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.046354][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.065154][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.080177][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.087461][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.095253][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.109436][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.116696][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.124727][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.139506][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.151405][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.175502][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.182707][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.190770][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.226365][ T4185] team0: Port device team_slave_0 added [ 52.234219][ T4185] team0: Port device team_slave_1 added [ 52.248253][ T4188] team0: Port device team_slave_0 added [ 52.263430][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.281846][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.299413][ T4188] team0: Port device team_slave_1 added [ 52.305992][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.313107][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.339210][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.353033][ T4186] team0: Port device team_slave_0 added [ 52.359279][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.366254][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.392329][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.405101][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.418980][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.434261][ T4186] team0: Port device team_slave_1 added [ 52.462145][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.469108][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.495211][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.533556][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.540515][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.566863][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.585256][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.592342][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.619063][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.632033][ T4189] team0: Port device team_slave_0 added [ 52.647344][ T4182] team0: Port device team_slave_0 added [ 52.670294][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.677321][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.703472][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.727835][ T4189] team0: Port device team_slave_1 added [ 52.734615][ T4182] team0: Port device team_slave_1 added [ 52.762505][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.769154][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.789569][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.796587][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.822705][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.836960][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.843773][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.850428][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.858494][ T4188] Cannot create hsr debugfs directory [ 52.867701][ T4186] device hsr_slave_0 entered promiscuous mode [ 52.874547][ T4186] device hsr_slave_1 entered promiscuous mode [ 52.880992][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.888631][ T4186] Cannot create hsr debugfs directory [ 52.903085][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.910034][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.936255][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.969367][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.976606][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.003008][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.033591][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.040542][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.066541][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.132026][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.138627][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.145097][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.152780][ T4189] Cannot create hsr debugfs directory [ 53.181511][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.188303][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.194938][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.202784][ T4182] Cannot create hsr debugfs directory [ 53.252584][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 53.259216][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 53.261745][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 53.270998][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 53.275024][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 53.468669][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.481807][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.490486][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.503647][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.527605][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.539733][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.552979][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.561917][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.613263][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.624321][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.645108][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.655566][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.751381][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.776061][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.792797][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.804663][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.829931][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.844986][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.858154][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.865821][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.876556][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.886341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.896137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.903884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.911593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.922085][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.933043][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.944445][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.956266][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.966164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.975657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.986365][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.993619][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.004953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.013856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.022330][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.029365][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.037084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.046106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.058206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.068154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.077196][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.084280][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.094201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.102155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.115301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.124107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.133485][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.140531][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.151808][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.162974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.172179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.180690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.189643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.198212][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.205301][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.241335][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.254249][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.267136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.275485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.284867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.294252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.302907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.311165][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.318253][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.326729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.335576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.344498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.353143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.361399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.370355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.379007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.388129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.397086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.405798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.434029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.446144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.458600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.467257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.476254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.485910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.495175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.548216][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.558397][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.568126][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.577693][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.586244][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.595014][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.604033][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.614128][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.626158][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.634313][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.643299][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.665286][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.674770][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.686211][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.695872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.704618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.730047][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.754373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.772105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.793471][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.820601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.834841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.849087][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.899163][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.925753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.936849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.946697][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.953806][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.963201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.972269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.980680][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.987781][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.996657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.006116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.015145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.027223][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.043971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.052520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.074628][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.089573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.097648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.106565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.116112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.123797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.131436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.139341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.147947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.156968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.165927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.175214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.184208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.197226][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.207620][ T4185] device veth0_vlan entered promiscuous mode [ 55.220023][ T4185] device veth1_vlan entered promiscuous mode [ 55.230781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.241152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.249980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.263756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.271258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.294563][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.305813][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.317299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.326072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.334689][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 55.339798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.341232][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 55.349225][ T4238] Bluetooth: hci2: command 0x041b tx timeout [ 55.355140][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 55.361220][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.367244][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 55.374084][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.388754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.397483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.406063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.422389][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.447220][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.457075][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.472926][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.480025][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.496004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.531852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.540869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.571318][ T4185] device veth0_macvtap entered promiscuous mode [ 55.579044][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.587745][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.596405][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.607208][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.614965][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.622689][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.630942][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.640266][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.648970][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.673816][ T4188] device veth0_vlan entered promiscuous mode [ 55.682928][ T4185] device veth1_macvtap entered promiscuous mode [ 55.695658][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.706703][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.715349][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.730240][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.740912][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.750115][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.759505][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.768349][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.776959][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.786653][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.800822][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.813645][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.837471][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.845667][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.859555][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.869634][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.883551][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.895500][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.904787][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.914548][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.934101][ T4186] device veth0_vlan entered promiscuous mode [ 55.949853][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.958886][ T4188] device veth1_vlan entered promiscuous mode [ 55.973195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.983224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.992074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.000751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.009896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.018019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.030317][ T4186] device veth1_vlan entered promiscuous mode [ 56.048558][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.059292][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.068667][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.078012][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.141320][ T4186] device veth0_macvtap entered promiscuous mode [ 56.169064][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.177624][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.186609][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.198615][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.207507][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.227092][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.237775][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.253812][ T4186] device veth1_macvtap entered promiscuous mode [ 56.269902][ T4188] device veth0_macvtap entered promiscuous mode [ 56.285257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.294148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.302591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.311042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.328894][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.339976][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.351193][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.366018][ T4188] device veth1_macvtap entered promiscuous mode [ 56.389822][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.398329][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.406654][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.414631][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.423510][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.435462][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.469834][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.480446][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.492414][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.506433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.515423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.524801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.534717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.552843][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.566209][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.573600][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.573654][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.593791][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.603019][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.624469][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.635751][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.647371][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.657890][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.668919][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.678000][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.686052][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.695467][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.705072][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.713722][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.723816][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.732695][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.741294][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.749741][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.757909][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.765793][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.779265][ T4182] device veth0_vlan entered promiscuous mode [ 56.779555][ T3081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.795459][ T3081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.811924][ T4189] device veth0_vlan entered promiscuous mode [ 56.826951][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.837543][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.848609][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.859499][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.879414][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.892750][ T4182] device veth1_vlan entered promiscuous mode [ 56.900398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.909462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.919343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.935208][ T4189] device veth1_vlan entered promiscuous mode [ 56.969561][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.990401][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.999883][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.015393][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.061952][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.070466][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.090178][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.100645][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.115498][ T4292] loop0: detected capacity change from 0 to 512 [ 57.119307][ T4182] device veth0_macvtap entered promiscuous mode [ 57.137525][ T4189] device veth0_macvtap entered promiscuous mode [ 57.154711][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.163384][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.170853][ T4182] device veth1_macvtap entered promiscuous mode [ 57.204516][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.218022][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.234448][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.243169][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.258646][ T4189] device veth1_macvtap entered promiscuous mode [ 57.280093][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.312718][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.317502][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.336949][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.341424][ T4292] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 57.347284][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.366597][ T4292] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.370861][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.413067][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 57.422205][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.423304][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 57.446077][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 57.452353][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 57.454016][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.458410][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 57.477237][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.499240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.508520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.518254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.527086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.546870][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.558801][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.568933][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.580117][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.592876][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.603549][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.620341][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.641222][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.658399][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.669154][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.685278][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.697398][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.708590][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.719086][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.729836][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.743420][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.750788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.760422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.769547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.780064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.795262][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.809201][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.819989][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.836190][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.846176][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.856672][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.898569][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.919228][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.929964][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.940639][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.957607][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.968087][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.979463][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.992471][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.004228][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.018883][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.032732][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.041456][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.062725][ T4298] device syzkaller0 entered promiscuous mode [ 58.074444][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.086439][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.096599][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.107612][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.187370][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.197321][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.206366][ T26] audit: type=1326 audit(1767681830.249:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.244569][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.285881][ T26] audit: type=1326 audit(1767681830.249:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.317126][ T26] audit: type=1326 audit(1767681830.249:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.347525][ T26] audit: type=1326 audit(1767681830.249:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.403041][ T26] audit: type=1326 audit(1767681830.249:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.439957][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.464452][ T26] audit: type=1326 audit(1767681830.249:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.487850][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.497165][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.509094][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.537521][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.542079][ T26] audit: type=1326 audit(1767681830.299:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.586106][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.610449][ T26] audit: type=1326 audit(1767681830.299:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.643744][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.674712][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.696732][ T3081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.701297][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.724643][ T3081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.743376][ T26] audit: type=1326 audit(1767681830.309:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.793473][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.826057][ T26] audit: type=1326 audit(1767681830.309:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 58.945472][ T4332] loop3: detected capacity change from 0 to 512 [ 58.977568][ T4333] loop1: detected capacity change from 0 to 1024 [ 59.019539][ T4332] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.047624][ T4332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.107207][ T4333] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.2: bad orphan inode 134217728 [ 59.121730][ T4332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 59.123530][ T4333] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.130147][ T4332] System zones: 1-12 [ 59.153619][ T4332] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 59.202860][ T4332] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.220100][ T4332] EXT4-fs (loop3): 1 truncate cleaned up [ 59.235510][ T4332] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,debug,,errors=continue. Quota mode: none. [ 59.360240][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.385910][ T4354] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET) [ 59.394786][ T4333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.457023][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 59.506648][ T4173] Bluetooth: hci3: command 0x0419 tx timeout [ 59.537395][ T4173] Bluetooth: hci1: command 0x0419 tx timeout [ 59.543688][ T4334] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 59.549437][ T4365] loop3: detected capacity change from 0 to 128 [ 59.562944][ T4173] Bluetooth: hci0: command 0x0419 tx timeout [ 59.566849][ T4365] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.576862][ T4173] Bluetooth: hci4: command 0x0419 tx timeout [ 59.599094][ T4173] Bluetooth: hci2: command 0x0419 tx timeout [ 59.624614][ T4365] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.871565][ T4376] loop0: detected capacity change from 0 to 1024 [ 59.934980][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 59.988441][ T4376] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 60.010060][ T4376] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 60.022083][ T4376] EXT4-fs (loop0): invalid journal inode [ 60.029025][ T4376] EXT4-fs (loop0): can't get journal size [ 60.038080][ T4376] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.25: blocks 2-2 from inode overlap system zone [ 60.064409][ T4376] EXT4-fs (loop0): failed to initialize system zone (-117) [ 60.072406][ T4376] EXT4-fs (loop0): mount failed [ 60.334528][ T4394] sd 0:0:1:0: device reset [ 60.456873][ T4398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 60.466234][ T4398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.35'. [ 60.479646][ T4398] bridge0: port 3(vlan2) entered blocking state [ 60.486589][ T4398] bridge0: port 3(vlan2) entered disabled state [ 60.498690][ T4268] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.676990][ T4401] device syzkaller0 entered promiscuous mode [ 60.763273][ T4407] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.41'. [ 60.860313][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 60.917279][ T4419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.46'. [ 61.027284][ T4422] loop2: detected capacity change from 0 to 2048 [ 61.138592][ T4422] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,discard,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: none. [ 61.200551][ T4422] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.388434][ T4442] loop3: detected capacity change from 0 to 128 [ 62.135988][ T4438] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.47: bg 0: block 345: padding at end of block bitmap is not set [ 62.159752][ T4449] loop4: detected capacity change from 0 to 512 [ 62.216684][ T4438] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 219 with error 117 [ 62.229841][ T4438] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.229841][ T4438] [ 62.268672][ T4452] loop1: detected capacity change from 0 to 2048 [ 62.274912][ T4449] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.333435][ T4449] EXT4-fs (loop4): 1 truncate cleaned up [ 62.380429][ T4268] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 235 with max blocks 1 with error 117 [ 62.381979][ T4449] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 62.450989][ T4268] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.450989][ T4268] [ 62.466958][ T4452] Alternate GPT is invalid, using primary GPT. [ 62.486869][ T4449] mmap: syz.4.58 (4449) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 62.518055][ T4452] loop1: p2 p3 p7 [ 62.773213][ T4473] program syz.1.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.798710][ T4475] binfmt_misc: register: failed to install interpreter file ./bus [ 62.827808][ T4479] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.841049][ T4475] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.915112][ T4482] netlink: 96 bytes leftover after parsing attributes in process `syz.1.73'. [ 62.931005][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 62.951339][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 62.951527][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 63.049527][ T4486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.147741][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 63.187137][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 63.288664][ T4497] device  entered promiscuous mode [ 63.339646][ T26] kauditd_printk_skb: 147 callbacks suppressed [ 63.339659][ T26] audit: type=1326 audit(1767681835.369:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 63.449677][ T4510] loop4: detected capacity change from 0 to 512 [ 63.457191][ T26] audit: type=1326 audit(1767681835.449:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 63.481172][ T26] audit: type=1326 audit(1767681835.449:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 63.541587][ T26] audit: type=1326 audit(1767681835.449:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 63.924799][ T4510] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.84: bg 0: block 248: padding at end of block bitmap is not set [ 64.103309][ T26] audit: type=1326 audit(1767681835.449:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 64.180084][ T26] audit: type=1326 audit(1767681835.449:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 64.204545][ T26] audit: type=1326 audit(1767681835.449:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 64.223885][ T4510] Quota error (device loop4): write_blk: dquota write failed [ 64.269411][ T4510] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 64.279852][ T4510] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.84: Failed to acquire dquot type 1 [ 64.292461][ T26] audit: type=1326 audit(1767681835.449:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4508 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 64.329897][ T4510] EXT4-fs (loop4): 1 truncate cleaned up [ 64.334847][ T4526] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 64.335685][ T4510] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.356050][ T4510] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.612824][ T4533] netlink: 'syz.0.94': attribute type 3 has an invalid length. [ 64.647795][ T4533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 66.184018][ T4581] serio: Serial port ptm0 [ 66.210666][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 66.483251][ T4598] loop1: detected capacity change from 0 to 2048 [ 66.553988][ T4598] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 66.581009][ T4598] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.739907][ T4610] syz.3.122 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 66.895717][ T4618] loop1: detected capacity change from 0 to 1024 [ 66.956098][ T4618] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 66.976734][ T4618] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 66.996652][ T4618] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,abort,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,usrquota,nodioread_nolock,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 67.044713][ T23] cfg80211: failed to load regulatory.db [ 67.222435][ T4627] program syz.0.129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.623864][ T4650] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 67.736580][ T4661] loop3: detected capacity change from 0 to 2048 [ 67.754723][ T4662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 67.827543][ T4174] Alternate GPT is invalid, using primary GPT. [ 67.841801][ T4174] loop3: p1 p2 p3 [ 67.866285][ T4650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 67.899249][ T4667] Zero length message leads to an empty skb [ 67.918345][ T4661] Alternate GPT is invalid, using primary GPT. [ 67.958189][ T4661] loop3: p1 p2 p3 [ 68.004407][ T3560] Alternate GPT is invalid, using primary GPT. [ 68.010657][ T3560] loop3: p1 p2 p3 [ 68.025839][ T4669] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.031092][ T4664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.263574][ T4664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.341809][ T26] kauditd_printk_skb: 96 callbacks suppressed [ 68.341822][ T26] audit: type=1326 audit(1767681840.369:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 68.394771][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 68.394795][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 68.407268][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 68.468753][ T26] audit: type=1326 audit(1767681840.379:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 68.580016][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 68.644473][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 68.649314][ T4664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.661968][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 68.737500][ T26] audit: type=1326 audit(1767681840.469:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bb2b6e749 code=0x7ffc0000 [ 69.311908][ T26] audit: type=1107 audit(1767681840.749:266): pid=4677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 69.350167][ T4683] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 69.381980][ T4683] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 69.428857][ T4664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.465904][ T4683] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 69.708872][ T4664] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.779277][ T4664] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.820885][ T4664] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.849061][ T4664] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.879513][ T4706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'. [ 69.955507][ T4712] loop3: detected capacity change from 0 to 512 [ 69.977791][ T26] audit: type=1326 audit(1767681842.009:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 70.038518][ T26] audit: type=1326 audit(1767681842.009:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 70.225385][ T26] audit: type=1326 audit(1767681842.039:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 70.481312][ T4712] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.161: bg 0: block 248: padding at end of block bitmap is not set [ 70.944899][ T4712] Quota error (device loop3): write_blk: dquota write failed [ 71.000312][ T26] audit: type=1326 audit(1767681842.039:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4714 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 71.027739][ T4712] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 71.084183][ T4712] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.161: Failed to acquire dquot type 1 [ 71.130011][ T4712] EXT4-fs (loop3): 1 truncate cleaned up [ 71.135854][ T4712] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.164396][ T4712] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.178838][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.178971][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.306526][ T4742] loop4: detected capacity change from 0 to 512 [ 71.408423][ T4747] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 71.431030][ T4742] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.172: iget: bad i_size value: 38620345925642 [ 71.444163][ T4747] netlink: 224 bytes leftover after parsing attributes in process `syz.0.173'. [ 71.583430][ T4742] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.172: couldn't read orphan inode 15 (err -117) [ 71.651485][ T4742] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 72.165630][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 72.176491][ T144] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 72.221860][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 36 with max blocks 2048 with error 28 [ 72.235642][ T4777] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.188' sets config #0 [ 72.265627][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.265627][ T144] [ 72.306092][ T144] EXT4-fs (loop4): Total free blocks count 0 [ 72.326313][ T144] EXT4-fs (loop4): Free/Dirty block details [ 72.351099][ T144] EXT4-fs (loop4): free_blocks=0 [ 72.371743][ T144] EXT4-fs (loop4): dirty_blocks=2188 [ 72.387390][ T144] EXT4-fs (loop4): Block reservation details [ 72.407708][ T144] EXT4-fs (loop4): i_reserved_data_blocks=2188 [ 72.510585][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 2088 with max blocks 136 with error 28 [ 72.552359][ T4787] ALSA: seq fatal error: cannot create timer (-19) [ 72.559266][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 72.559266][ T144] [ 72.744216][ T4793] ALSA: seq fatal error: cannot create timer (-19) [ 73.248717][ T4818] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 73.515848][ T4827] loop3: detected capacity change from 0 to 512 [ 73.548525][ T4827] ======================================================= [ 73.548525][ T4827] WARNING: The mand mount option has been deprecated and [ 73.548525][ T4827] and is ignored by this kernel. Remove the mand [ 73.548525][ T4827] option from the mount to silence this warning. [ 73.548525][ T4827] ======================================================= [ 74.026636][ T4834] lo speed is unknown, defaulting to 1000 [ 74.032989][ T4834] lo speed is unknown, defaulting to 1000 [ 74.048426][ T4834] lo speed is unknown, defaulting to 1000 [ 74.074761][ T4834] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.116295][ T4834] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.261412][ T4834] lo speed is unknown, defaulting to 1000 [ 74.268277][ T4834] lo speed is unknown, defaulting to 1000 [ 74.275047][ T4834] lo speed is unknown, defaulting to 1000 [ 74.283247][ T4834] lo speed is unknown, defaulting to 1000 [ 74.290027][ T4834] lo speed is unknown, defaulting to 1000 [ 74.297034][ T4834] lo speed is unknown, defaulting to 1000 [ 74.312553][ T4834] lo speed is unknown, defaulting to 1000 [ 74.421780][ T4837] netlink: 14 bytes leftover after parsing attributes in process `syz.0.206'. [ 74.422664][ T4827] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.430632][ T4827] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.209: bad orphan inode 13 [ 74.431423][ T4827] ext4_test_bit(bit=12, block=18) = 1 [ 74.431441][ T4827] is_bad_inode(inode)=0 [ 74.431448][ T4827] NEXT_ORPHAN(inode)=2130706432 [ 74.431458][ T4827] max_ino=32 [ 74.431465][ T4827] i_nlink=1 [ 74.431960][ T4827] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.481370][ T4844] netlink: 60 bytes leftover after parsing attributes in process `syz.4.211'. [ 74.487921][ T4828] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 74.628794][ T4828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.209: bg 0: block 248: padding at end of block bitmap is not set [ 74.672525][ T4837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.709737][ T4828] __quota_error: 51 callbacks suppressed [ 74.709754][ T4828] Quota error (device loop3): write_blk: dquota write failed [ 74.728381][ T26] audit: type=1326 audit(1767681846.759:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 74.760832][ T4828] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 74.781217][ T4837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.788088][ T26] audit: type=1326 audit(1767681846.789:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 74.790188][ T4828] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.209: Failed to acquire dquot type 1 [ 74.855022][ T4837] bond0 (unregistering): Released all slaves [ 74.878351][ T26] audit: type=1326 audit(1767681846.799:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 74.911709][ T4854] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 74.912416][ T4829] syz.0.206 (4829) used greatest stack depth: 17216 bytes left [ 74.942698][ T4828] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.009565][ T26] audit: type=1326 audit(1767681846.799:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 75.034200][ T4866] netlink: 'syz.1.221': attribute type 3 has an invalid length. [ 75.087689][ T26] audit: type=1326 audit(1767681846.799:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 75.140580][ T4188] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 75.172548][ T26] audit: type=1326 audit(1767681846.799:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 75.208480][ T4188] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 75.222475][ T26] audit: type=1326 audit(1767681846.799:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 75.245224][ T26] audit: type=1326 audit(1767681846.799:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4857 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 75.370967][ T4885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'. [ 75.841520][ T4905] sctp: [Deprecated]: syz.0.240 (pid 4905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.841520][ T4905] Use struct sctp_sack_info instead [ 76.021814][ T4245] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.090853][ T4907] lo speed is unknown, defaulting to 1000 [ 76.101828][ T4912] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 76.108564][ T4912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.159354][ T4912] vhci_hcd vhci_hcd.0: Device attached [ 76.190020][ T4913] vhci_hcd: connection closed [ 76.196882][ T4544] vhci_hcd: stop threads [ 76.231431][ T4544] vhci_hcd: release socket [ 76.250652][ T4544] vhci_hcd: disconnect device [ 76.262187][ T4245] usb 2-1: device descriptor read/64, error -71 [ 76.357732][ T4907] chnl_net:caif_netlink_parms(): no params data found [ 76.452942][ T4907] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.460079][ T4907] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.469189][ T4907] device bridge_slave_0 entered promiscuous mode [ 76.477404][ T4907] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.485124][ T4907] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.493310][ T4907] device bridge_slave_1 entered promiscuous mode [ 76.532034][ T4245] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 76.540918][ T4545] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.559764][ T4907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.572649][ T4907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.600866][ T4907] team0: Port device team_slave_0 added [ 76.610772][ T4545] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.624128][ T4907] team0: Port device team_slave_1 added [ 76.645481][ T4907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.652652][ T4907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.678901][ T4907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.695248][ T4907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.708524][ T4907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.735617][ T4907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.746917][ T4245] usb 2-1: device descriptor read/64, error -71 [ 76.761019][ T4545] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.781181][ T4929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.832251][ T4907] device hsr_slave_0 entered promiscuous mode [ 76.842281][ T4907] device hsr_slave_1 entered promiscuous mode [ 76.849313][ T4907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.858480][ T4907] Cannot create hsr debugfs directory [ 76.887660][ T4245] usb usb2-port1: attempt power cycle [ 76.891903][ T4545] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.032777][ T4935] netlink: 'syz.0.249': attribute type 29 has an invalid length. [ 77.059129][ T4935] netlink: 'syz.0.249': attribute type 29 has an invalid length. [ 77.070674][ T4933] lo speed is unknown, defaulting to 1000 [ 77.100227][ T4935] netlink: 'syz.0.249': attribute type 29 has an invalid length. [ 77.119892][ T4936] loop4: detected capacity change from 0 to 128 [ 77.208181][ T4936] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 77.267267][ T4936] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.319525][ T4245] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 77.345167][ T4907] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.371127][ T4907] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.407129][ T4907] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.423127][ T4245] usb 2-1: device descriptor read/8, error -71 [ 77.450336][ T4907] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.051921][ T2134] Bluetooth: hci3: command 0x0409 tx timeout [ 78.413779][ T4245] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 78.433619][ T4963] lo speed is unknown, defaulting to 1000 [ 78.512793][ T4965] device ip6gre0 entered promiscuous mode [ 78.521914][ T4245] usb 2-1: device descriptor read/8, error -71 [ 78.550363][ T4965] team0: Device ip6gre0 is of different type [ 78.641979][ T4245] usb usb2-port1: unable to enumerate USB device [ 78.794017][ T4974] bridge0: port 3(batadv1) entered blocking state [ 78.822985][ T4974] bridge0: port 3(batadv1) entered disabled state [ 78.830646][ T4974] device batadv1 entered promiscuous mode [ 78.943109][ T4907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.005984][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.022747][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.047992][ T4907] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.121143][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.132968][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.141425][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.148544][ T4268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.172042][ T4999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.198059][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.207410][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.216673][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.226132][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.233232][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.244872][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.254064][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.263347][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.273350][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.277940][ T4546] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 79.287354][ T4999] device batadv0 entered promiscuous mode [ 79.291575][ T4546] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 79.297414][ T4999] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.315437][ T4999] bond1: (slave macvlan2): making interface the new active one [ 79.325354][ T4999] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 79.348952][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.362945][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 79.371081][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.390145][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.399879][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.409928][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.423554][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.432364][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.489918][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.780538][ T26] kauditd_printk_skb: 172 callbacks suppressed [ 79.780553][ T26] audit: type=1107 audit(1767681851.809:502): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 79.829148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.843732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.870669][ T26] audit: type=1326 audit(1767681851.899:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 79.897860][ T4907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.949509][ T5031] loop4: detected capacity change from 0 to 512 [ 80.015110][ T26] audit: type=1326 audit(1767681851.949:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 80.038960][ T5031] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.086733][ T5031] EXT4-fs (loop4): 1 truncate cleaned up [ 80.098399][ T5031] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 80.124175][ T26] audit: type=1326 audit(1767681851.959:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddbba99f90 code=0x7ffc0000 [ 80.147397][ T4301] Bluetooth: hci3: command 0x041b tx timeout [ 80.160062][ T26] audit: type=1326 audit(1767681851.959:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddbba99f90 code=0x7ffc0000 [ 80.274879][ T26] audit: type=1326 audit(1767681851.959:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 80.300815][ T4545] device hsr_slave_0 left promiscuous mode [ 80.320989][ T4545] device hsr_slave_1 left promiscuous mode [ 80.347999][ T26] audit: type=1326 audit(1767681851.959:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 80.377169][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.393110][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.416059][ T26] audit: type=1326 audit(1767681851.959:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 80.439586][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.450732][ T4545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.467198][ T4545] device bridge_slave_1 left promiscuous mode [ 80.477554][ T26] audit: type=1326 audit(1767681851.959:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 80.481977][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.518091][ T26] audit: type=1326 audit(1767681851.959:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbba9b749 code=0x7ffc0000 [ 80.527998][ T5053] loop4: detected capacity change from 0 to 8192 [ 80.557267][ T4545] device bridge_slave_0 left promiscuous mode [ 80.572797][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.600156][ T5053] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.629920][ T4545] device veth1_macvtap left promiscuous mode [ 80.637146][ T4545] device veth0_macvtap left promiscuous mode [ 80.644031][ T4545] device veth1_vlan left promiscuous mode [ 80.665229][ T4545] device veth0_vlan left promiscuous mode [ 80.768534][ T4545] bond1 (unregistering): Released all slaves [ 80.889923][ T4545] team0 (unregistering): Port device team_slave_1 removed [ 80.905592][ T4545] team0 (unregistering): Port device team_slave_0 removed [ 80.917212][ T4545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.934021][ T4545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.997188][ T4545] bond0 (unregistering): Released all slaves [ 81.086387][ T5047] batman_adv: batadv0: Adding interface: dummy0 [ 81.102463][ T5047] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.156463][ T5047] batman_adv: batadv0: Interface activated: dummy0 [ 81.183942][ T5054] batadv0: mtu less than device minimum [ 81.191679][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.204456][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.216008][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.228256][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.239960][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.251406][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.263783][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.275311][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.287671][ T5054] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.343854][ T5067] device bridge0 entered promiscuous mode [ 81.349978][ T5067] device macsec1 entered promiscuous mode [ 81.376068][ T5067] bridge0: port 3(macsec1) entered blocking state [ 81.396286][ T5067] bridge0: port 3(macsec1) entered disabled state [ 81.414092][ T5067] device bridge0 left promiscuous mode [ 81.472697][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.489643][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.525121][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.555337][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.582729][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.599132][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.612194][ T4907] device veth0_vlan entered promiscuous mode [ 81.681050][ T4907] device veth1_vlan entered promiscuous mode [ 81.752376][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.770841][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.818631][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.850707][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.871289][ T4907] device veth0_macvtap entered promiscuous mode [ 81.894471][ T4907] device veth1_macvtap entered promiscuous mode [ 81.911405][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.923394][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.964498][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.998421][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.030998][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.068056][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.103949][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.141640][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.173265][ T4907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.211980][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.220928][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 82.241020][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.271522][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.303813][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.343359][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.371741][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.412067][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.441790][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.471806][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.491690][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.511650][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.542182][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.564441][ T4907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.600605][ T4907] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.660776][ T4907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.696819][ T4907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.735205][ T4907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.755806][ T5118] netlink: 36 bytes leftover after parsing attributes in process `syz.1.295'. [ 82.791580][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.825163][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.043828][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.084869][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.101143][ T3081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.125504][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.161444][ T3081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.195341][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.396958][ T5139] device syzkaller1 entered promiscuous mode [ 83.454677][ T5145] process 'syz.2.305' launched '/dev/fd/3' with NULL argv: empty string added [ 84.156324][ T5178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.316'. [ 84.292453][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 84.790619][ T5198] Cannot find add_set index 0 as target [ 85.234942][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.291570][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.337427][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.348480][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.358393][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.398921][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.614167][ T5224] siw: device registration error -23 [ 85.661089][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.026063][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.071727][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.107115][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.161186][ T5223] lo speed is unknown, defaulting to 1000 [ 86.287773][ T4517] net_ratelimit: 17 callbacks suppressed [ 86.287787][ T4517] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 86.772268][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 86.809069][ T5265] netlink: 56 bytes leftover after parsing attributes in process `syz.1.344'. [ 87.248641][ T26] kauditd_printk_skb: 121 callbacks suppressed [ 87.248655][ T26] audit: type=1326 audit(1767681859.279:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 87.320249][ T26] audit: type=1326 audit(1767681859.319:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 87.363399][ T5286] device  left promiscuous mode [ 87.405155][ T5289] lo speed is unknown, defaulting to 1000 [ 87.417999][ T26] audit: type=1326 audit(1767681859.319:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 87.447670][ T5289] lo speed is unknown, defaulting to 1000 [ 87.492847][ T5289] lo speed is unknown, defaulting to 1000 [ 87.531828][ T26] audit: type=1326 audit(1767681859.319:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 87.594068][ T4544] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 87.594573][ T5297] syz.1.354[5297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.635305][ T26] audit: type=1326 audit(1767681859.319:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 87.677944][ T5297] syz.1.354[5297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.881382][ T26] audit: type=1326 audit(1767681859.909:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 87.989338][ T26] audit: type=1326 audit(1767681859.909:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 88.027575][ T23] lo speed is unknown, defaulting to 1000 [ 88.026424][ T5289] infiniband syz1: set active [ 88.049195][ T5289] infiniband syz1: added lo [ 88.060758][ T26] audit: type=1326 audit(1767681859.929:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 88.212172][ T26] audit: type=1326 audit(1767681859.929:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 88.259105][ T5289] RDS/IB: syz1: added [ 88.292577][ T5289] smc: adding ib device syz1 with port count 1 [ 88.298951][ T5289] smc: ib device syz1 port 1 has pnetid [ 88.342879][ T26] audit: type=1326 audit(1767681859.929:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61006ee749 code=0x7ffc0000 [ 88.374570][ T2134] lo speed is unknown, defaulting to 1000 [ 88.386218][ T5289] lo speed is unknown, defaulting to 1000 [ 88.411830][ T5320] IPv6: Can't replace route, no match found [ 88.757475][ T5289] lo speed is unknown, defaulting to 1000 [ 88.854066][ T144] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 89.025692][ T5345] tipc: Started in network mode [ 89.064290][ T5345] tipc: Node identity , cluster identity 4711 [ 89.070400][ T5345] tipc: Failed to obtain node identity [ 89.087563][ T5345] tipc: Enabling of bearer rejected, failed to enable media [ 89.135740][ T5352] device syzkaller0 entered promiscuous mode [ 89.162447][ T5289] lo speed is unknown, defaulting to 1000 [ 89.483395][ T5289] lo speed is unknown, defaulting to 1000 [ 89.794309][ T5377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.374'. [ 89.835657][ T5289] lo speed is unknown, defaulting to 1000 [ 90.085239][ T144] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 90.343594][ T5289] lo speed is unknown, defaulting to 1000 [ 90.829297][ T5289] lo speed is unknown, defaulting to 1000 [ 91.430678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 91.803931][ T5289] lo speed is unknown, defaulting to 1000 [ 91.941730][ T4544] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 92.324062][ T26] kauditd_printk_skb: 126 callbacks suppressed [ 92.324075][ T26] audit: type=1326 audit(1767681864.359:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 92.408767][ T26] audit: type=1326 audit(1767681864.359:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 92.502762][ T26] audit: type=1326 audit(1767681864.389:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 92.590084][ T26] audit: type=1326 audit(1767681864.389:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 92.695456][ T26] audit: type=1326 audit(1767681864.389:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 92.765102][ T26] audit: type=1326 audit(1767681864.389:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 92.843190][ T26] audit: type=1326 audit(1767681864.389:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 92.936014][ T26] audit: type=1326 audit(1767681864.389:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 93.045758][ T26] audit: type=1326 audit(1767681864.389:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 93.131700][ T26] audit: type=1326 audit(1767681864.399:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f77d15e2749 code=0x7ffc0000 [ 93.152618][ T4517] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 93.571814][ C0] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 93.731761][ T4948] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.731857][ T2134] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.091874][ T4948] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 94.110515][ T4948] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 94.135398][ T4948] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.178376][ T2134] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 94.190104][ T2134] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 94.214282][ T2134] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.312892][ T4948] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.320170][ T5496] loop4: detected capacity change from 0 to 1024 [ 94.341838][ T4517] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 94.346800][ T4948] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.396123][ T5496] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 94.405120][ T4948] usb 2-1: Product: syz [ 94.410883][ T2134] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.419503][ T4948] usb 2-1: Manufacturer: syz [ 94.422830][ T5496] EXT4-fs (loop4): orphan cleanup on readonly fs [ 94.432555][ T4948] usb 2-1: SerialNumber: syz [ 94.438261][ T2134] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.447258][ T2134] usb 1-1: Product: syz [ 94.453885][ T5496] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.422: Freeing blocks not in datazone - block = 0, count = 4096 [ 94.458169][ T2134] usb 1-1: Manufacturer: syz [ 94.478912][ T2134] usb 1-1: SerialNumber: syz [ 94.493060][ T4948] usb 2-1: config 0 descriptor?? [ 94.494877][ T2134] usb 1-1: config 0 descriptor?? [ 94.517975][ T5496] EXT4-fs (loop4): 1 orphan inode deleted [ 94.530851][ T5496] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.559962][ T4948] hub 2-1:0.0: bad descriptor, ignoring hub [ 94.573150][ T2134] hub 1-1:0.0: bad descriptor, ignoring hub [ 94.579088][ T2134] hub: probe of 1-1:0.0 failed with error -5 [ 94.585499][ T4948] hub: probe of 2-1:0.0 failed with error -5 [ 94.595108][ T2134] usb 1-1: selecting invalid altsetting 0 [ 94.638380][ T4948] usb 2-1: selecting invalid altsetting 0 [ 94.778556][ T5506] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 94.803201][ T4948] usb 2-1: USB disconnect, device number 6 [ 94.979410][ T4451] udevd[4451]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 95.021035][ T4246] usb 1-1: USB disconnect, device number 2 [ 95.027124][ T4301] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 95.442813][ T4301] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 95.456127][ T4301] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 95.481676][ T4301] usb 6-1: config 0 interface 0 has no altsetting 0 [ 95.531908][ T4517] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 95.698303][ T4301] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 95.719414][ T4301] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 95.741851][ T4301] usb 6-1: Product: syz [ 95.746382][ T4301] usb 6-1: Manufacturer: syz [ 95.761197][ T4301] usb 6-1: SerialNumber: syz [ 95.776838][ T4301] usb 6-1: config 0 descriptor?? [ 95.839967][ T4301] hub 6-1:0.0: bad descriptor, ignoring hub [ 95.849452][ T4301] hub: probe of 6-1:0.0 failed with error -5 [ 95.869847][ T4301] usb 6-1: selecting invalid altsetting 0 [ 96.121061][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 96.161952][ T4301] usb 6-1: USB disconnect, device number 2 [ 96.701723][ T4544] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 96.894251][ T5634] netlink: 16 bytes leftover after parsing attributes in process `syz.5.485'. [ 97.228440][ T5656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.490'. [ 97.354937][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 97.682935][ T5681] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 97.885758][ T5693] netlink: 56 bytes leftover after parsing attributes in process `syz.5.500'. [ 97.895758][ T4517] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 97.929521][ C1] Unknown status report in ack skb [ 98.922177][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.930709][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.066108][ T4686] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 99.112295][ T5743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.511'. [ 99.630373][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.682611][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.050460][ T5710] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.058906][ T5710] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.067958][ T5710] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.076359][ T5710] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.125802][ T5736] netlink: 'syz.4.510': attribute type 5 has an invalid length. [ 100.232912][ T4544] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 100.817846][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.826675][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.217884][ T5819] smc: net device gre0 applied user defined pnetid SYZ1 [ 101.291870][ T5825] smc: net device gre0 erased user defined pnetid SYZ1 [ 101.373011][ T3081] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 101.744640][ T5842] netlink: 104 bytes leftover after parsing attributes in process `syz.2.545'. [ 102.003935][ T5861] device syzkaller0 entered promiscuous mode [ 102.076288][ T5863] device syzkaller0 entered promiscuous mode [ 102.511913][ T4686] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 102.785381][ T5888] netlink: 72 bytes leftover after parsing attributes in process `syz.5.560'. [ 103.674983][ T4544] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 103.744836][ T5893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.401063][ T5914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 104.500397][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807ab18c00: rx timeout, send abort [ 104.510789][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807ab1b400: rx timeout, send abort [ 104.519419][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807ab18c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.535220][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807ab1b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.667982][ T5936] device syzkaller0 entered promiscuous mode [ 104.730987][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 104.751470][ T5944] netlink: 'syz.2.580': attribute type 8 has an invalid length. [ 104.823074][ T4545] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 104.836968][ T5955] device syzkaller0 entered promiscuous mode [ 104.898827][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 104.926145][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 105.203508][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 105.632597][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 105.696138][ T6012] device bond0 entered promiscuous mode [ 105.748236][ T6012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.758353][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 105.771858][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 105.868117][ T6023] bond0: (slave xfrm1): refused to change device type [ 105.992709][ T144] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 106.853814][ T6040] ================================================================== [ 106.862403][ T6040] BUG: KASAN: use-after-free in rose_transmit_link+0x5b0/0x730 [ 106.869980][ T6040] Read of size 1 at addr ffff88807dd6d432 by task syz.5.609/6040 [ 106.877713][ T6040] [ 106.880042][ T6040] CPU: 0 PID: 6040 Comm: syz.5.609 Not tainted syzkaller #0 [ 106.884775][ T6094] __nla_validate_parse: 1 callbacks suppressed [ 106.884788][ T6094] netlink: 104 bytes leftover after parsing attributes in process `syz.1.626'. [ 106.887325][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.912256][ T6096] netlink: 68 bytes leftover after parsing attributes in process `syz.4.624'. [ 106.912903][ T6040] Call Trace: [ 106.925002][ T6040] [ 106.927931][ T6040] dump_stack_lvl+0x168/0x230 [ 106.932619][ T6040] ? show_regs_print_info+0x20/0x20 [ 106.937827][ T6040] ? _printk+0xcc/0x110 [ 106.941995][ T6040] ? rose_transmit_link+0x5b0/0x730 [ 106.947209][ T6040] ? load_image+0x3b0/0x3b0 [ 106.951713][ T6040] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 106.957092][ T6040] print_address_description+0x60/0x2d0 [ 106.962646][ T6040] ? rose_transmit_link+0x5b0/0x730 [ 106.967850][ T6040] kasan_report+0xdf/0x130 [ 106.972278][ T6040] ? rose_transmit_link+0x5b0/0x730 [ 106.977486][ T6040] ? __phys_addr+0xb6/0x170 [ 106.981996][ T6040] rose_transmit_link+0x5b0/0x730 [ 106.987030][ T6040] ? skb_put+0x117/0x210 [ 106.991288][ T6040] rose_write_internal+0x673/0x1e80 [ 106.996502][ T6040] ? rose_validate_nr+0x120/0x120 [ 107.001540][ T6040] ? del_timer+0x11a/0x1b0 [ 107.005965][ T6040] ? skb_queue_purge+0x62/0x290 [ 107.010833][ T6040] rose_release+0x22a/0x4e0 [ 107.015359][ T6040] sock_close+0xd5/0x240 [ 107.019609][ T6040] ? sock_mmap+0x90/0x90 [ 107.023858][ T6040] __fput+0x234/0x930 [ 107.027864][ T6040] task_work_run+0x125/0x1a0 [ 107.032470][ T6040] get_signal+0x1222/0x12c0 [ 107.037000][ T6040] arch_do_signal_or_restart+0xc1/0x1300 [ 107.042682][ T6040] ? kick_process+0xd4/0x140 [ 107.047285][ T6040] ? task_work_add+0x1a7/0x1d0 [ 107.052062][ T6040] ? get_sigframe_size+0x10/0x10 [ 107.057012][ T6040] ? __sys_connect+0x239/0x410 [ 107.061798][ T6040] ? exit_to_user_mode_loop+0x3b/0x130 [ 107.067274][ T6040] exit_to_user_mode_loop+0x9e/0x130 [ 107.072562][ T6040] exit_to_user_mode_prepare+0xee/0x180 [ 107.078118][ T6040] syscall_exit_to_user_mode+0x16/0x40 [ 107.083586][ T6040] do_syscall_64+0x58/0xa0 [ 107.088008][ T6040] ? clear_bhb_loop+0x30/0x80 [ 107.092690][ T6040] ? clear_bhb_loop+0x30/0x80 [ 107.097378][ T6040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.103286][ T6040] RIP: 0033:0x7f2a86b2e749 [ 107.107703][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.127306][ T6040] RSP: 002b:00007f2a84d95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 107.135702][ T6040] RAX: fffffffffffffe00 RBX: 00007f2a86d84fa0 RCX: 00007f2a86b2e749 [ 107.143659][ T6040] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000006 [ 107.151616][ T6040] RBP: 00007f2a86bb2f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.159573][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.167539][ T6040] R13: 00007f2a86d85038 R14: 00007f2a86d84fa0 R15: 00007ffd46baf288 [ 107.175522][ T6040] [ 107.178523][ T6040] [ 107.180824][ T6040] Allocated by task 5819: [ 107.185129][ T6040] __kasan_kmalloc+0xb5/0xf0 [ 107.189698][ T6040] rose_add_node+0x227/0xdb0 [ 107.194266][ T6040] rose_rt_ioctl+0x9db/0xe20 [ 107.198837][ T6040] rose_ioctl+0x27a/0x790 [ 107.203148][ T6040] sock_do_ioctl+0xd3/0x2f0 [ 107.207630][ T6040] sock_ioctl+0x4ed/0x6e0 [ 107.211946][ T6040] __se_sys_ioctl+0xfa/0x170 [ 107.216540][ T6040] do_syscall_64+0x4c/0xa0 [ 107.220953][ T6040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.226835][ T6040] [ 107.229135][ T6040] Freed by task 6083: [ 107.233091][ T6040] kasan_set_track+0x4b/0x70 [ 107.237658][ T6040] kasan_set_free_info+0x1f/0x40 [ 107.242574][ T6040] ____kasan_slab_free+0xd5/0x110 [ 107.247585][ T6040] slab_free_freelist_hook+0xea/0x170 [ 107.252933][ T6040] kfree+0xef/0x2a0 [ 107.256718][ T6040] rose_rt_device_down+0x4e2/0x530 [ 107.261816][ T6040] rose_device_event+0x5ec/0x680 [ 107.266752][ T6040] raw_notifier_call_chain+0xcb/0x160 [ 107.272122][ T6040] __dev_notify_flags+0x178/0x2d0 [ 107.277131][ T6040] dev_change_flags+0xe3/0x1a0 [ 107.281874][ T6040] dev_ifsioc+0x147/0xe70 [ 107.286179][ T6040] dev_ioctl+0x55f/0xe50 [ 107.290396][ T6040] sock_do_ioctl+0x222/0x2f0 [ 107.294963][ T6040] sock_ioctl+0x4ed/0x6e0 [ 107.299268][ T6040] __se_sys_ioctl+0xfa/0x170 [ 107.303840][ T6040] do_syscall_64+0x4c/0xa0 [ 107.308234][ T6040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.314111][ T6040] [ 107.316431][ T6040] The buggy address belongs to the object at ffff88807dd6d400 [ 107.316431][ T6040] which belongs to the cache kmalloc-512 of size 512 [ 107.330480][ T6040] The buggy address is located 50 bytes inside of [ 107.330480][ T6040] 512-byte region [ffff88807dd6d400, ffff88807dd6d600) [ 107.343649][ T6040] The buggy address belongs to the page: [ 107.349263][ T6040] page:ffffea0001f75b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807dd6ec00 pfn:0x7dd6c [ 107.360692][ T6040] head:ffffea0001f75b00 order:2 compound_mapcount:0 compound_pincount:0 [ 107.369000][ T6040] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 107.376991][ T6040] raw: 00fff00000010200 ffffea00018a9008 ffffea00017ee508 ffff888016841c80 [ 107.385645][ T6040] raw: ffff88807dd6ec00 000000000010000a 00000001ffffffff 0000000000000000 [ 107.394202][ T6040] page dumped because: kasan: bad access detected [ 107.400596][ T6040] page_owner tracks the page as allocated [ 107.406293][ T6040] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3558, ts 13904220275, free_ts 12131308000 [ 107.424588][ T6040] get_page_from_freelist+0x1b77/0x1c60 [ 107.430122][ T6040] __alloc_pages+0x1e1/0x470 [ 107.434706][ T6040] new_slab+0xc0/0x4b0 [ 107.438753][ T6040] ___slab_alloc+0x81e/0xdf0 [ 107.443322][ T6040] __kmalloc+0x1cd/0x330 [ 107.447543][ T6040] tomoyo_init_log+0x19b4/0x1e40 [ 107.452467][ T6040] tomoyo_supervisor+0x34e/0x10d0 [ 107.457477][ T6040] tomoyo_path_permission+0x25a/0x380 [ 107.462833][ T6040] tomoyo_path_perm+0x3d9/0x510 [ 107.467686][ T6040] security_inode_getattr+0xcf/0x120 [ 107.472974][ T6040] vfs_getattr+0x26/0x3a0 [ 107.477282][ T6040] __x64_sys_newfstat+0x104/0x1d0 [ 107.482293][ T6040] do_syscall_64+0x4c/0xa0 [ 107.486695][ T6040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.492566][ T6040] page last free stack trace: [ 107.497214][ T6040] free_unref_page_prepare+0x637/0x6c0 [ 107.502652][ T6040] free_unref_page+0x94/0x280 [ 107.507322][ T6040] free_contig_range+0x96/0xf0 [ 107.512085][ T6040] destroy_args+0x100/0xa20 [ 107.516590][ T6040] debug_vm_pgtable+0x318/0x370 [ 107.521524][ T6040] do_one_initcall+0x1ee/0x680 [ 107.526290][ T6040] do_initcall_level+0x137/0x1f0 [ 107.531223][ T6040] do_initcalls+0x4b/0x90 [ 107.535541][ T6040] kernel_init_freeable+0x3ce/0x560 [ 107.540720][ T6040] kernel_init+0x19/0x1b0 [ 107.545042][ T6040] ret_from_fork+0x1f/0x30 [ 107.549439][ T6040] [ 107.551738][ T6040] Memory state around the buggy address: [ 107.557605][ T6040] ffff88807dd6d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.565647][ T6040] ffff88807dd6d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 107.573701][ T6040] >ffff88807dd6d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.581743][ T6040] ^ [ 107.587361][ T6040] ffff88807dd6d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.595403][ T6040] ffff88807dd6d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.603440][ T6040] ================================================================== [ 107.611478][ T6040] Disabling lock debugging due to kernel taint [ 107.622232][ T6040] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.629440][ T6040] CPU: 0 PID: 6040 Comm: syz.5.609 Tainted: G B syzkaller #0 [ 107.638260][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.648308][ T6040] Call Trace: [ 107.651585][ T6040] [ 107.654513][ T6040] dump_stack_lvl+0x168/0x230 [ 107.659199][ T6040] ? show_regs_print_info+0x20/0x20 [ 107.664407][ T6040] ? load_image+0x3b0/0x3b0 [ 107.668914][ T6040] panic+0x2c9/0x7f0 [ 107.672810][ T6040] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 107.678963][ T6040] ? bpf_jit_dump+0xd0/0xd0 [ 107.683464][ T6040] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 107.689363][ T6040] ? _raw_spin_unlock+0x40/0x40 [ 107.694220][ T6040] ? rose_transmit_link+0x5b0/0x730 [ 107.699417][ T6040] check_panic_on_warn+0x80/0xa0 [ 107.704338][ T6040] ? rose_transmit_link+0x5b0/0x730 [ 107.709511][ T6040] end_report+0x6d/0xf0 [ 107.713662][ T6040] kasan_report+0x102/0x130 [ 107.718143][ T6040] ? rose_transmit_link+0x5b0/0x730 [ 107.723317][ T6040] ? __phys_addr+0xb6/0x170 [ 107.727794][ T6040] rose_transmit_link+0x5b0/0x730 [ 107.732799][ T6040] ? skb_put+0x117/0x210 [ 107.737041][ T6040] rose_write_internal+0x673/0x1e80 [ 107.742219][ T6040] ? rose_validate_nr+0x120/0x120 [ 107.747245][ T6040] ? del_timer+0x11a/0x1b0 [ 107.751637][ T6040] ? skb_queue_purge+0x62/0x290 [ 107.756466][ T6040] rose_release+0x22a/0x4e0 [ 107.760947][ T6040] sock_close+0xd5/0x240 [ 107.765164][ T6040] ? sock_mmap+0x90/0x90 [ 107.769381][ T6040] __fput+0x234/0x930 [ 107.773341][ T6040] task_work_run+0x125/0x1a0 [ 107.777924][ T6040] get_signal+0x1222/0x12c0 [ 107.782416][ T6040] arch_do_signal_or_restart+0xc1/0x1300 [ 107.788050][ T6040] ? kick_process+0xd4/0x140 [ 107.792618][ T6040] ? task_work_add+0x1a7/0x1d0 [ 107.797360][ T6040] ? get_sigframe_size+0x10/0x10 [ 107.802276][ T6040] ? __sys_connect+0x239/0x410 [ 107.807023][ T6040] ? exit_to_user_mode_loop+0x3b/0x130 [ 107.812468][ T6040] exit_to_user_mode_loop+0x9e/0x130 [ 107.817743][ T6040] exit_to_user_mode_prepare+0xee/0x180 [ 107.823272][ T6040] syscall_exit_to_user_mode+0x16/0x40 [ 107.828713][ T6040] do_syscall_64+0x58/0xa0 [ 107.833112][ T6040] ? clear_bhb_loop+0x30/0x80 [ 107.837791][ T6040] ? clear_bhb_loop+0x30/0x80 [ 107.842449][ T6040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.848321][ T6040] RIP: 0033:0x7f2a86b2e749 [ 107.852715][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.872297][ T6040] RSP: 002b:00007f2a84d95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 107.880696][ T6040] RAX: fffffffffffffe00 RBX: 00007f2a86d84fa0 RCX: 00007f2a86b2e749 [ 107.881829][ T4517] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: b2:ff:fc:89:46:a1 [ 107.888650][ T6040] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000006 [ 107.888664][ T6040] RBP: 00007f2a86bb2f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.918852][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.926809][ T6040] R13: 00007f2a86d85038 R14: 00007f2a86d84fa0 R15: 00007ffd46baf288 [ 107.934762][ T6040] [ 107.938045][ T6040] Kernel Offset: disabled [ 107.947168][ T6040] Rebooting in 86400 seconds..