last executing test programs: 1m41.575752946s ago: executing program 4 (id=280): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendfile(r1, r1, 0x0, 0x80000003f) 1m41.180481624s ago: executing program 4 (id=292): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1m40.782615221s ago: executing program 4 (id=296): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x7fff}}, 0x2, 0x2, 0x614, 0x1, 0x94, 0x7, 0x4}, 0x9c) 1m29.554436446s ago: executing program 4 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m28.989842367s ago: executing program 4 (id=317): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xa) 1m28.924702808s ago: executing program 4 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m13.407425395s ago: executing program 32 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.858926465s ago: executing program 5 (id=528): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000500)='batadv_slave_0\x00', 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 1.769941246s ago: executing program 5 (id=532): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) 1.716402907s ago: executing program 5 (id=534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(r1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) 1.253549546s ago: executing program 0 (id=551): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.130303858s ago: executing program 0 (id=553): epoll_create1(0x80000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x181400, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000e500000008000000060000", @ANYRES32=r2, @ANYBLOB="0600003e79d9bc2179ee2b000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000100"/28], 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0xfff, 0x0, 0x0, 0x9, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0xda4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x1, 0x409, 0x1, 0x9f, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x2, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x81, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x2, 0xd5d, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x8000007, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x7, 0x0, 0x5, 0x2, 0x7, 0x4, 0x40, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x6, 0x0, 0x6, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0x80000001, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x2, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x1, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0xaa25, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 1.072541979s ago: executing program 3 (id=554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008081}, 0x4008000) 1.062765509s ago: executing program 3 (id=555): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 885.690393ms ago: executing program 3 (id=560): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000380)="d2d12d79", 0x4, 0x0, 0x0, 0x0) 846.668464ms ago: executing program 5 (id=563): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 820.591114ms ago: executing program 1 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, r5, 0x1, 0xffffffff, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 819.564194ms ago: executing program 3 (id=565): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 740.501046ms ago: executing program 1 (id=567): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000500)='batadv_slave_0\x00', 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 716.341916ms ago: executing program 1 (id=568): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000240)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) 715.554946ms ago: executing program 5 (id=569): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x7, 0x3, {"564345b82353398074cdaef069d5546e"}, 0x9, 0x19, 0x7}, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x3}}}, 0x118) read$snapshot(r0, 0x0, 0x0) 697.391427ms ago: executing program 5 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) pselect6(0x40, &(0x7f0000001780)={0x3, 0x6, 0x7f, 0x8000000000000000, 0x6e, 0x1000, 0x3, 0x240000000000000}, 0x0, &(0x7f0000001140)={0x8, 0x1, 0x3, 0x6, 0x5, 0x9, 0x8}, 0x0, 0x0) 596.554669ms ago: executing program 1 (id=571): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 586.717199ms ago: executing program 3 (id=572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 560.009249ms ago: executing program 3 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 460.433001ms ago: executing program 2 (id=575): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000480)={0xa, 0x4e24, 0x8000, @local, 0x2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000640)="c9c59e6712f9caa1ef0232f298fa18228fbad10390c1c8a75b69ff281d3009fef67b45548d5a35554a053ebff3ec3e7afa1b05efd2d0ca6b21f9f5234a5cced22eaa1fd9ee05c2c4177fbf5a9d2edf", 0x4f}, {&(0x7f0000000900)="2bc6555380752e35ae5f6a3beb33178a8d4319027266798da626c66401848523493688f34b3c651710dc8abc7c6bf1c97c5aec68adc95afa598618ecd834732f33076278215a00acdfeec6a5dae50305cbb5e2db9754892dbdf330f158318318dbfaa0b6735bd1336dcce199f22cdb", 0x6f}, {&(0x7f0000000a00)="b31281dbef1a2e5cda5fcdc816db952461b388042ac341ae1f0802b7730d8305dce70273b925c9aed4ce7e3c0497af8473f2ec835b786f5a1879e5ebff482feb11faa182d6ab56da92ae21e82f1105f182bf0c6f64f2c56fd0d395adfa5d4a136ba9633c97a14b0dc95081a9e335ed8998d228b4d731a6fb3512ffa9873583b8c52cecfa2106f6cb9b6ace19fb9dfe90821d78ee9fb0484e7290f5d05b00f3984403096479e9c02af9ccb53abaf19ce9cace7cc863ac956f746fac35676b7906f86390ef4e", 0xc5}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1400000000000000290000004304000054f0ffff0000000024000000000000fe8000000000000000000000000000bb000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000014000000000000002900000043000000ff00000000000000"], 0x58}, 0x20000080) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000019b33a56a77cc579a940b7b52e3d6254b8009b0aaaace79ad66dac755e6eea642ce156713f591417b69b8f17a5ae3813ebc34871577eaeead3fa"], 0x50) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010"], 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 443.156802ms ago: executing program 2 (id=576): socket$kcm(0x11, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x1000000000000010, 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 363.675033ms ago: executing program 1 (id=577): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000380)="d2d12d79", 0x4, 0x0, 0x0, 0x0) 352.645503ms ago: executing program 2 (id=578): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x7f, 0x2, 0x800, 0x59}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000"], 0x50) 288.501125ms ago: executing program 2 (id=579): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000500)='batadv_slave_0\x00', 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 237.945195ms ago: executing program 0 (id=580): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 200.052306ms ago: executing program 1 (id=581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 132.361067ms ago: executing program 2 (id=582): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 91.798008ms ago: executing program 0 (id=583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) 32.505219ms ago: executing program 2 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.86654ms ago: executing program 0 (id=585): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000880)=@ethtool_test={0x1a, 0xd, 0x7, 0x5, [0x9, 0xffff, 0x7, 0x1a0, 0xffffffffffffff25]}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 0s ago: executing program 0 (id=586): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 31.118385][ T4309] cgroup: Unknown subsys name 'net' [ 31.355473][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.622369][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.314808][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.316314][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.317798][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.318094][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.319835][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.320463][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.321555][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.322641][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.324143][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.324789][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.325801][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.327005][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.328541][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.329194][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.330364][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.331762][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.333313][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.333496][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.334709][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.336056][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.336888][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.337690][ T4331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.338908][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.339917][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.341001][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.342227][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.343252][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.345813][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.357840][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.359952][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.464684][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 32.485083][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 32.545385][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 32.548513][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.549708][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.551445][ T4320] device bridge_slave_0 entered promiscuous mode [ 32.555884][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.557083][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.558635][ T4325] device bridge_slave_0 entered promiscuous mode [ 32.567246][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.568377][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.569932][ T4320] device bridge_slave_1 entered promiscuous mode [ 32.574697][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.575839][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.577359][ T4325] device bridge_slave_1 entered promiscuous mode [ 32.582242][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 32.597985][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.607802][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.608974][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.610401][ T4319] device bridge_slave_0 entered promiscuous mode [ 32.614233][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.616802][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.618314][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 32.620996][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.622581][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.624178][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.625722][ T4319] device bridge_slave_1 entered promiscuous mode [ 32.658794][ T4320] team0: Port device team_slave_0 added [ 32.660777][ T4325] team0: Port device team_slave_0 added [ 32.661833][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.663011][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.664449][ T4324] device bridge_slave_0 entered promiscuous mode [ 32.667265][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.672036][ T4325] team0: Port device team_slave_1 added [ 32.676099][ T4320] team0: Port device team_slave_1 added [ 32.679298][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.680516][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.682075][ T4324] device bridge_slave_1 entered promiscuous mode [ 32.684372][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.686035][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.687114][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.688634][ T4332] device bridge_slave_0 entered promiscuous mode [ 32.700292][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.701533][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.705491][ T4332] device bridge_slave_1 entered promiscuous mode [ 32.709269][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.710423][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.714324][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.726681][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.727879][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.731918][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.734365][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.735518][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.739649][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.743239][ T4319] team0: Port device team_slave_0 added [ 32.745216][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.747175][ T4319] team0: Port device team_slave_1 added [ 32.750610][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.751753][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.756336][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.760204][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.765114][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.767556][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.781227][ T4332] team0: Port device team_slave_0 added [ 32.793597][ T4332] team0: Port device team_slave_1 added [ 32.797063][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.798248][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.802320][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.807618][ T4324] team0: Port device team_slave_0 added [ 32.853728][ T4325] device hsr_slave_0 entered promiscuous mode [ 32.892986][ T4325] device hsr_slave_1 entered promiscuous mode [ 32.933138][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.934306][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.938285][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.973749][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.012900][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.072753][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.074071][ T4320] Cannot create hsr debugfs directory [ 33.075593][ T4324] team0: Port device team_slave_1 added [ 33.086091][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.087274][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.091535][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.101899][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.103160][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.107410][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.109687][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.110802][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.115020][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.125078][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.126133][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.129932][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.194173][ T4319] device hsr_slave_0 entered promiscuous mode [ 33.235148][ T4319] device hsr_slave_1 entered promiscuous mode [ 33.272760][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.273861][ T4319] Cannot create hsr debugfs directory [ 33.343608][ T4332] device hsr_slave_0 entered promiscuous mode [ 33.382911][ T4332] device hsr_slave_1 entered promiscuous mode [ 33.432753][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.434053][ T4332] Cannot create hsr debugfs directory [ 33.473661][ T4324] device hsr_slave_0 entered promiscuous mode [ 33.542984][ T4324] device hsr_slave_1 entered promiscuous mode [ 33.582828][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.584084][ T4324] Cannot create hsr debugfs directory [ 33.676323][ T4325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.713916][ T4325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.754173][ T4325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.793889][ T4325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.847808][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.893713][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.948736][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.986799][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.048204][ T4332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.085966][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.126903][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.178183][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.223946][ T4324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.264821][ T4324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.304828][ T4324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.350172][ T4324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.396924][ T4319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.413293][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 34.413299][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 34.414252][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 34.415254][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 34.416092][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 34.436091][ T4319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.463703][ T4319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.506849][ T4319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.551431][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.564906][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.566816][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.569899][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.576639][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.583947][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.586687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.588621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.590078][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.591344][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.595423][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.605480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.607239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.608862][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.609973][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.611340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.617670][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.619296][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.620629][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.622269][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.624824][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.628838][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.636572][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.639131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.640841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.643975][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.648498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.650161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.651573][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.652855][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.655670][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.665502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.667091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.668545][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.669642][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.671072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.675641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.677147][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.678298][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.679925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.681565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.684137][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.689046][ T4320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.690670][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.695533][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.697780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.699748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.701628][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.703667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.705098][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.710667][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.712292][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.715085][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.716542][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.717664][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.731198][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.733832][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.735449][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.737376][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.738976][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.740845][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.742303][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.744830][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.746154][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.747586][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.749237][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.750691][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.752322][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.756719][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.758221][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.759703][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.761176][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.764570][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.770141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.771659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.776029][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.777186][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.778542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.780425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.781882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.783680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.791102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.792636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.795442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.796977][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.798132][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.799481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.801052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.803087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.804890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.806440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.808189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.809775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.811234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.818400][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.820313][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.822378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.823940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.825313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.827533][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.838389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.839860][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.845712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.847022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.848485][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.856412][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.861289][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.870487][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.871901][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.877138][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.891595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.893246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.896595][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.898109][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.899511][ T1851] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.900640][ T1851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.915432][ T4320] device veth0_vlan entered promiscuous mode [ 34.918302][ T4320] device veth1_vlan entered promiscuous mode [ 34.924106][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.925631][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.927086][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.928677][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.930085][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.931498][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.934753][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.945796][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.948903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.950374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.951824][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.952979][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.955241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.956444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.957593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.971658][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.980488][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.986256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.987813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.989461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.990970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.992540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.000831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.002457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.004322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.005780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.007384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.009012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.010566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.012002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.015471][ T4320] device veth0_macvtap entered promiscuous mode [ 35.017848][ T4320] device veth1_macvtap entered promiscuous mode [ 35.021338][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.024496][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.026698][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.030431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.031840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.033837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.035112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.036426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.038142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.039815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.041371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.046933][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.048224][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.049504][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.050802][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.068434][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.071880][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.073764][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.108012][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.109686][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.111321][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.113984][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.138733][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.138781][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.139998][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.146051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.147305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.148565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.150040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.151506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.154786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.156299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.161085][ T4324] device veth0_vlan entered promiscuous mode [ 35.167683][ T4325] device veth0_vlan entered promiscuous mode [ 35.170049][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.171515][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.173408][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.174736][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.180991][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.182152][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.184672][ T4324] device veth1_vlan entered promiscuous mode [ 35.188231][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.189646][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.192280][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.194031][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.196367][ T4325] device veth1_vlan entered promiscuous mode [ 35.206748][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.208181][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.209584][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.211101][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.229997][ T4324] device veth0_macvtap entered promiscuous mode [ 35.233629][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.235129][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.236926][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.238835][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.240221][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.241784][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.243391][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.244827][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.248725][ T4324] device veth1_macvtap entered promiscuous mode [ 35.250401][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.251772][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.254155][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.255766][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.257258][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.258849][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.260275][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.262476][ T4319] device veth0_vlan entered promiscuous mode [ 35.266011][ T4325] device veth0_macvtap entered promiscuous mode [ 35.268013][ T4332] device veth0_vlan entered promiscuous mode [ 35.282021][ T4325] device veth1_macvtap entered promiscuous mode [ 35.296806][ T4319] device veth1_vlan entered promiscuous mode [ 35.299223][ T27] audit: type=1326 audit(35.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.300207][ T4332] device veth1_vlan entered promiscuous mode [ 35.305627][ T27] audit: type=1326 audit(35.290:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.309101][ T27] audit: type=1326 audit(35.290:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.310165][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.312515][ T27] audit: type=1326 audit(35.290:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.314997][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.318887][ T27] audit: type=1326 audit(35.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.319801][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.327124][ T27] audit: type=1326 audit(35.310:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.330652][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.332134][ T27] audit: type=1326 audit(35.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.335657][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.337194][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.338664][ T27] audit: type=1326 audit(35.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.342275][ T27] audit: type=1326 audit(35.310:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.352090][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.354027][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.355511][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.356999][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.358493][ T27] audit: type=1326 audit(35.310:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 35.361864][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.366362][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.367891][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.369305][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.370883][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.373732][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.376509][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.378161][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.380393][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.389360][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.390828][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.392456][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.395018][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.399975][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.401695][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.404119][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.408192][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.410513][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.415624][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.417017][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.418343][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.419894][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.428023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.429559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.437129][ T4324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.438553][ T4324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.440043][ T4324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.441529][ T4324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.445444][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.447051][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.448488][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.450471][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.456107][ T4332] device veth0_macvtap entered promiscuous mode [ 35.458651][ T4319] device veth0_macvtap entered promiscuous mode [ 35.467920][ T4319] device veth1_macvtap entered promiscuous mode [ 35.472155][ T4332] device veth1_macvtap entered promiscuous mode [ 35.496882][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.498825][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.500449][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.502102][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.504355][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.506086][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.508319][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.509748][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.511504][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.514241][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.516122][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.517666][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.519338][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.520868][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.522458][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.524969][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.527291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.528919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.530422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.531914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.533881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.535489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.537193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.538718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.542297][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.545354][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.547141][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.548762][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.550427][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.552058][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.554802][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.559915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.561639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.565374][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.566761][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.568200][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.569591][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.571753][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.573735][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.575354][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.577159][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.578925][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.580659][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.582162][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.586782][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.588947][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.596638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.598665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.602058][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.604005][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.608049][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.609463][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.610808][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.612119][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.618951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.634296][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.635522][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.641006][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.645368][ T1851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.646693][ T1851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.648933][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.656451][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.658022][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.663903][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.698848][ T1851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.700147][ T1851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.704838][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.710793][ T1851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.712196][ T1851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.715319][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.716545][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.719238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.720601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.726864][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.728275][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.730078][ T1851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.840403][ T4449] loop2: detected capacity change from 0 to 1024 [ 35.842059][ T4450] Zero length message leads to an empty skb [ 35.849999][ T4449] EXT4-fs: Ignoring removed bh option [ 35.851778][ T4449] EXT4-fs: inline encryption not supported [ 35.888668][ T4449] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.9: lblock 2 mapped to illegal pblock 2 (length 1) [ 35.892328][ T4449] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.9: lblock 0 mapped to illegal pblock 48 (length 1) [ 35.897897][ T4449] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.9: Failed to acquire dquot type 0 [ 35.902284][ T4449] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 35.905771][ T4449] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.9: mark_inode_dirty error [ 35.908340][ T4449] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 35.910099][ T4449] EXT4-fs (loop2): 1 orphan inode deleted [ 35.910966][ T4449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.965840][ T11] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.968553][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6852: comm kworker/u4:1: Failed to release dquot type 0 [ 35.971217][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 35.972430][ T4324] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 35.976014][ T4324] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 35.978729][ T4324] EXT4-fs error (device loop2): ext4_quota_off:7122: inode #3: comm syz-executor: mark_inode_dirty error [ 36.118153][ T4466] loop4: detected capacity change from 0 to 512 [ 36.119837][ T4466] EXT4-fs: Ignoring removed orlov option [ 36.124815][ T4466] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 36.137982][ T4466] EXT4-fs (loop4): 1 truncate cleaned up [ 36.138930][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.186723][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 36.491172][ T4483] loop0: detected capacity change from 0 to 8192 [ 36.493167][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 36.493366][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 36.494126][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 36.495120][ T4334] Bluetooth: hci3: command 0x041b tx timeout [ 36.496045][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 36.523617][ T4483] FAT-fs (loop0): Unrecognized mount option "A" or missing value [ 36.833102][ T4374] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.860357][ T4510] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 36.982894][ T4374] usb 1-1: device descriptor read/64, error -71 [ 37.252917][ T4374] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.289074][ T4546] loop1: detected capacity change from 0 to 512 [ 37.291353][ T4546] ======================================================= [ 37.291353][ T4546] WARNING: The mand mount option has been deprecated and [ 37.291353][ T4546] and is ignored by this kernel. Remove the mand [ 37.291353][ T4546] option from the mount to silence this warning. [ 37.291353][ T4546] ======================================================= [ 37.299594][ T4548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 37.302199][ T4548] ksmbd: Unknown IPC event: 0, ignore. [ 37.304709][ T4546] ext4: Unknown parameter 'rootcontext' [ 37.402754][ T4374] usb 1-1: device descriptor read/64, error -71 [ 37.411306][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 37.429519][ T4554] process 'syz.4.50' launched './file0' with NULL argv: empty string added [ 37.480819][ T4560] loop3: detected capacity change from 0 to 1024 [ 37.523590][ T4374] usb usb1-port1: attempt power cycle [ 37.539455][ T4560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.634210][ T39] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 15) [ 37.637517][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 37.639600][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.639600][ T39] [ 37.652465][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 37.854135][ T4590] loop4: detected capacity change from 0 to 512 [ 37.859830][ T4590] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.869242][ T4590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.880157][ T4590] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.887545][ T4590] EXT4-fs (loop4): 1 truncate cleaned up [ 37.888691][ T4590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.908055][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 37.933203][ T4374] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.963588][ T4374] usb 1-1: device descriptor read/8, error -71 [ 37.975416][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 37.984245][ T4600] loop4: detected capacity change from 0 to 128 [ 38.242894][ T4374] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.283929][ T4374] usb 1-1: device descriptor read/8, error -71 [ 38.403047][ T4374] usb usb1-port1: unable to enumerate USB device [ 38.582770][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 38.583930][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 38.584989][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 38.585822][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 38.634115][ T4598] team0 (unregistering): Port device team_slave_0 removed [ 38.640588][ T4598] team0 (unregistering): Port device team_slave_1 removed [ 39.091455][ T4648] hub 9-0:1.0: USB hub found [ 39.092490][ T4648] hub 9-0:1.0: 8 ports detected [ 39.271309][ T4609] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 39.293545][ T4671] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 39.539722][ T4696] device bond0 entered promiscuous mode [ 39.540723][ T4696] device bond_slave_0 entered promiscuous mode [ 39.541762][ T4696] device bond_slave_1 entered promiscuous mode [ 39.567866][ T4696] device batadv1 entered promiscuous mode [ 39.638093][ T4707] loop2: detected capacity change from 0 to 512 [ 39.643869][ T4707] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.114: bg 0: block 131: padding at end of block bitmap is not set [ 39.655217][ T4707] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 39.657345][ T4707] EXT4-fs (loop2): 1 truncate cleaned up [ 39.658259][ T4707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.692632][ T4708] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 39.706479][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 39.972423][ T4739] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.275163][ T4755] loop2: detected capacity change from 0 to 512 [ 40.279012][ T4755] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.280315][ T4755] ext4: Unknown parameter 'obj_type' [ 40.485950][ T4311] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.613789][ T14] cfg80211: failed to load regulatory.db [ 40.652726][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 40.654142][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 40.654152][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 40.664182][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 40.670731][ T4778] loop4: detected capacity change from 0 to 2048 [ 40.702449][ T4778] EXT4-fs (loop4): failed to initialize system zone (-117) [ 40.703781][ T4778] EXT4-fs (loop4): mount failed [ 40.797918][ T4792] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 40.799255][ T4792] netlink: 224 bytes leftover after parsing attributes in process `syz.3.143'. [ 40.865344][ T4795] loop3: detected capacity change from 0 to 2048 [ 40.934540][ T4797] loop4: detected capacity change from 0 to 512 [ 40.948670][ T4795] Alternate GPT is invalid, using primary GPT. [ 40.949267][ T27] kauditd_printk_skb: 182 callbacks suppressed [ 40.949275][ T27] audit: type=1326 audit(40.930:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 40.949983][ T4795] loop3: p2 p3 p7 [ 40.950625][ T27] audit: type=1326 audit(40.930:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 40.964401][ T27] audit: type=1326 audit(40.930:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 40.967830][ T27] audit: type=1326 audit(40.930:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 40.968093][ T4797] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.971447][ T27] audit: type=1326 audit(40.930:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 40.992192][ T27] audit: type=1326 audit(40.940:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 41.004102][ T4797] EXT4-fs (loop4): 1 truncate cleaned up [ 41.005012][ T4797] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.006230][ T27] audit: type=1326 audit(40.940:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 41.014277][ T27] audit: type=1326 audit(40.940:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 41.017583][ T27] audit: type=1326 audit(40.940:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=213 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 41.029993][ T27] audit: type=1326 audit(40.940:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 41.059954][ T4797] lo speed is unknown, defaulting to 1000 [ 41.060992][ T4797] lo speed is unknown, defaulting to 1000 [ 41.062436][ T4797] lo speed is unknown, defaulting to 1000 [ 41.077208][ T4311] I/O error, dev loop3, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.077237][ T4325] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 41.078887][ T4311] I/O error, dev loop3, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.081517][ T4311] Buffer I/O error on dev loop3p7, logical block 8, async page read [ 41.085304][ T4311] I/O error, dev loop3, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.086679][ T4311] Buffer I/O error on dev loop3p7, logical block 9, async page read [ 41.087877][ T4311] I/O error, dev loop3, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.089328][ T4311] Buffer I/O error on dev loop3p7, logical block 10, async page read [ 41.090784][ T4311] I/O error, dev loop3, sector 411 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.092485][ T4311] Buffer I/O error on dev loop3p7, logical block 11, async page read [ 41.092628][ T4313] I/O error, dev loop3, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.100801][ T4797] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.101572][ T4311] I/O error, dev loop3, sector 412 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.103548][ T4311] Buffer I/O error on dev loop3p7, logical block 12, async page read [ 41.104852][ T4311] I/O error, dev loop3, sector 413 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.106373][ T4311] Buffer I/O error on dev loop3p7, logical block 13, async page read [ 41.107565][ T4311] I/O error, dev loop3, sector 414 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.108904][ T4311] Buffer I/O error on dev loop3p7, logical block 14, async page read [ 41.110167][ T4311] Buffer I/O error on dev loop3p7, logical block 15, async page read [ 41.111203][ T4313] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 41.119789][ T4768] Buffer I/O error on dev loop3p2, logical block 8, async page read [ 41.124624][ T4797] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 41.131808][ T4797] lo speed is unknown, defaulting to 1000 [ 41.134094][ T4797] lo speed is unknown, defaulting to 1000 [ 41.135339][ T4797] lo speed is unknown, defaulting to 1000 [ 41.140064][ T4797] lo speed is unknown, defaulting to 1000 [ 41.150972][ T4797] lo speed is unknown, defaulting to 1000 [ 41.152114][ T4797] lo speed is unknown, defaulting to 1000 [ 41.173936][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 41.178160][ T4806] udevd[4806]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 41.189817][ T4819] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.198533][ T4768] udevd[4768]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 41.228025][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 41.280996][ T4827] loop0: detected capacity change from 0 to 1024 [ 41.298953][ T4827] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.300638][ T4827] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.313457][ T4827] JBD2: no valid journal superblock found [ 41.314386][ T4827] EXT4-fs (loop0): error loading journal [ 41.389714][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 41.640855][ T4863] loop3: detected capacity change from 0 to 128 [ 41.649394][ T4863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 41.650873][ T4863] System zones: 1-3, 19-19, 35-36 [ 41.652541][ T4863] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.669556][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 42.175626][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 42.343926][ T4908] netlink: 56 bytes leftover after parsing attributes in process `syz.2.190'. [ 42.352775][ T4908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 42.499263][ T4925] 9pnet_fd: Insufficient options for proto=fd [ 42.721346][ T4927] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.837449][ T4944] lo speed is unknown, defaulting to 1000 [ 42.845099][ T4944] lo speed is unknown, defaulting to 1000 [ 42.847782][ T4944] lo speed is unknown, defaulting to 1000 [ 42.946061][ T4944] infiniband sz1: set active [ 42.946918][ T4944] infiniband sz1: added lo [ 42.970172][ T4382] lo speed is unknown, defaulting to 1000 [ 43.129281][ T4944] RDS/IB: sz1: added [ 43.130208][ T4944] smc: adding ib device sz1 with port count 1 [ 43.131223][ T4944] smc: ib device sz1 port 1 has pnetid [ 43.133008][ T4944] lo speed is unknown, defaulting to 1000 [ 43.150232][ T4944] lo speed is unknown, defaulting to 1000 [ 43.167045][ T4944] lo speed is unknown, defaulting to 1000 [ 43.184332][ T4944] lo speed is unknown, defaulting to 1000 [ 43.201256][ T4944] lo speed is unknown, defaulting to 1000 [ 43.223478][ T4382] lo speed is unknown, defaulting to 1000 [ 43.360854][ T4965] loop2: detected capacity change from 0 to 4096 [ 43.371441][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.386040][ T4965] EXT4-fs (loop2): shut down requested (2) [ 43.425748][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 43.536690][ T4980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 43.560741][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 43.576013][ T4980] device team0 entered promiscuous mode [ 43.655059][ T4987] 9pnet_fd: Insufficient options for proto=fd [ 43.666814][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 43.892654][ T5001] loop2: detected capacity change from 0 to 512 [ 43.930614][ T5001] EXT4-fs warning (device loop2): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.934961][ T5001] EXT4-fs (loop2): mount failed [ 44.137196][ T5016] 9pnet_fd: Insufficient options for proto=fd [ 44.228614][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 44.368722][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.371867][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.376938][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.379037][ T5027] device bridge_slave_0 left promiscuous mode [ 44.380655][ T5027] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.423863][ T5027] device bridge_slave_1 left promiscuous mode [ 44.425022][ T5027] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.482075][ T5027] bond0: (slave bond_slave_0): Releasing backup interface [ 44.533614][ T5027] device bond_slave_0 left promiscuous mode [ 44.545957][ T5027] bond0: (slave bond_slave_1): Releasing backup interface [ 44.576771][ T5027] device bond_slave_1 left promiscuous mode [ 44.599037][ T5027] team0: Port device team_slave_0 removed [ 44.606606][ T5027] team0: Port device team_slave_1 removed [ 44.607889][ T5027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.609150][ T5027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.611096][ T5027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.612327][ T5027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.695817][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 44.745388][ T5051] 9pnet_fd: Insufficient options for proto=fd [ 44.748412][ T5049] netlink: 'syz.4.236': attribute type 4 has an invalid length. [ 44.787502][ T4382] lo speed is unknown, defaulting to 1000 [ 44.857506][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 44.859483][ T5065] IPVS: Error joining to the multicast group [ 44.893681][ T5067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.244'. [ 44.932396][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 44.977536][ T5081] netlink: '+}[@': attribute type 1 has an invalid length. [ 44.996018][ T5081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.634037][ T5081] bond1 (unregistering): Released all slaves [ 45.663302][ T5094] netlink: 'syz.2.257': attribute type 3 has an invalid length. [ 45.694415][ T5097] 9pnet_fd: Insufficient options for proto=fd [ 45.814490][ T5110] loop2: detected capacity change from 0 to 512 [ 45.834131][ T5110] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.841999][ T5117] device syzkaller0 entered promiscuous mode [ 45.844493][ T5110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.854785][ T5110] EXT4-fs (loop2): 1 truncate cleaned up [ 45.855706][ T5110] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.891845][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 45.922484][ T5122] device syzkaller0 entered promiscuous mode [ 46.094835][ T5144] loop1: detected capacity change from 0 to 512 [ 46.111527][ T5144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.275: bg 0: block 131: padding at end of block bitmap is not set [ 46.115733][ T5144] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 46.117452][ T5144] EXT4-fs (loop1): 1 truncate cleaned up [ 46.118375][ T5144] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.121910][ T27] kauditd_printk_skb: 77 callbacks suppressed [ 46.121929][ T27] audit: type=1326 audit(46.100:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 46.126476][ T27] audit: type=1326 audit(46.100:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 46.133082][ T27] audit: type=1326 audit(46.100:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 46.136853][ T27] audit: type=1326 audit(46.100:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 46.140687][ T27] audit: type=1326 audit(46.100:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 46.144775][ T27] audit: type=1326 audit(46.100:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 46.148567][ T27] audit: type=1326 audit(46.110:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 46.152109][ T27] audit: type=1326 audit(46.110:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb375c0a8 code=0x7ffc0000 [ 57.046295][ T5148] loop4: detected capacity change from 0 to 1024 [ 57.047756][ T5148] EXT4-fs: Ignoring removed orlov option [ 57.051714][ T5148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.069418][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 57.096744][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 57.123465][ T27] audit: type=1326 audit(57.110:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.127651][ T27] audit: type=1326 audit(57.110:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.138701][ T27] audit: type=1326 audit(57.120:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.142315][ T27] audit: type=1326 audit(57.120:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.154707][ T5157] loop1: detected capacity change from 0 to 4096 [ 57.167585][ T5157] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.176616][ T5164] 9pnet_fd: Insufficient options for proto=fd [ 57.177761][ T27] audit: type=1326 audit(57.120:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.180867][ T27] audit: type=1326 audit(57.140:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.201567][ T27] audit: type=1326 audit(57.140:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.209766][ T27] audit: type=1326 audit(57.140:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.211150][ T5159] loop4: detected capacity change from 0 to 8192 [ 57.212997][ T27] audit: type=1326 audit(57.140:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.217064][ T27] audit: type=1326 audit(57.140:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.279" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 57.218882][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 57.319172][ T5172] device veth0_to_team entered promiscuous mode [ 57.344685][ T5176] loop3: detected capacity change from 0 to 1024 [ 57.409525][ T5176] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.520891][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 57.854887][ T5198] __nla_validate_parse: 1 callbacks suppressed [ 57.854897][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 57.859714][ T5196] device syzkaller0 entered promiscuous mode [ 58.014851][ T5201] device syzkaller0 entered promiscuous mode [ 58.898204][ T5230] 9pnet_fd: Insufficient options for proto=fd [ 69.088837][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 69.122035][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 69.156707][ T5241] device syzkaller0 entered promiscuous mode [ 70.082103][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 70.082112][ T27] audit: type=1326 audit(70.060:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 70.090206][ T27] audit: type=1326 audit(70.070:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9415a5d4 code=0x7ffc0000 [ 70.114614][ T27] audit: type=1326 audit(70.070:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 70.114635][ T27] audit: type=1326 audit(70.100:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=62 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 70.114649][ T27] audit: type=1326 audit(70.100:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 70.114662][ T27] audit: type=1326 audit(70.100:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 70.114676][ T27] audit: type=1326 audit(70.100:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 70.114689][ T27] audit: type=1326 audit(70.100:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 70.114702][ T27] audit: type=1326 audit(70.100:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 70.114715][ T27] audit: type=1326 audit(70.100:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 70.502185][ T5285] loop2: detected capacity change from 0 to 512 [ 70.650588][ T5285] loop2: detected capacity change from 0 to 32768 [ 70.656937][ T5285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.321 (5285) [ 70.663013][ T5285] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.664985][ T5285] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 70.666474][ T5285] BTRFS info (device loop2): using free space tree [ 70.730417][ T5285] BTRFS info (device loop2): enabling ssd optimizations [ 70.736796][ T9] BTRFS warning (device loop2): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9913e172 level 0 [ 70.741478][ T5289] loop1: detected capacity change from 0 to 32768 [ 70.761454][ T5289] (syz.1.323,5289,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 70.767416][ T5289] (syz.1.323,5289,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 70.828617][ T5289] JBD2: Ignoring recovery information on journal [ 70.862144][ T5289] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 70.909514][ T5233] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5233) [ 70.958715][ T5325] loop0: detected capacity change from 0 to 512 [ 70.960403][ T5325] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.995060][ T5325] EXT4-fs (loop0): 1 truncate cleaned up [ 70.996102][ T5325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.134914][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 71.159499][ T4320] ocfs2: Unmounting device (7,1) on (node local) [ 71.172602][ T5335] 9pnet_fd: Insufficient options for proto=fd [ 71.177542][ T5333] device syzkaller0 entered promiscuous mode [ 71.352125][ T5346] device syzkaller0 entered promiscuous mode [ 71.515630][ T5356] device veth0_to_team entered promiscuous mode [ 71.883569][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 71.906140][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 72.051134][ T5373] 9pnet_fd: Insufficient options for proto=fd [ 83.326460][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 83.335822][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 83.400583][ T5424] 9pnet_fd: Insufficient options for proto=fd [ 83.475113][ T5431] device veth0_to_team entered promiscuous mode [ 83.499565][ T5433] device syzkaller0 entered promiscuous mode [ 85.316809][ T4334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.318547][ T4334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.320127][ T4334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.322198][ T4334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.324031][ T4334] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.325382][ T4334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.372731][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 89.453074][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 91.533243][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 93.612798][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 94.864340][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 94.890567][ T5464] lo speed is unknown, defaulting to 1000 [ 94.892281][ T5464] lo speed is unknown, defaulting to 1000 [ 94.901799][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 94.943918][ T5479] 9pnet_fd: Insufficient options for proto=fd [ 95.068636][ T5464] chnl_net:caif_netlink_parms(): no params data found [ 95.421383][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 95.441107][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.444550][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.449358][ T5464] device bridge_slave_0 entered promiscuous mode [ 95.461629][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.465739][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.468772][ T5464] device bridge_slave_1 entered promiscuous mode [ 95.480995][ T5507] device syzkaller0 entered promiscuous mode [ 95.493774][ T5509] device syzkaller0 entered promiscuous mode [ 95.539283][ T5464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.542261][ T5464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.544969][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 95.630286][ T5464] team0: Port device team_slave_0 added [ 95.633092][ T5464] team0: Port device team_slave_1 added [ 95.648398][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.651072][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.665543][ T5464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.669399][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.670638][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.675319][ T5464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.694595][ T5519] 9pnet_fd: Insufficient options for proto=fd [ 95.717312][ T5464] device hsr_slave_0 entered promiscuous mode [ 95.763051][ T5464] device hsr_slave_1 entered promiscuous mode [ 95.802786][ T5464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.804777][ T5464] Cannot create hsr debugfs directory [ 95.935316][ T5530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 95.960288][ T5464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.974482][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 96.011531][ T5464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.074041][ T5464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.099335][ T5464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.175177][ T5551] 9pnet_fd: Insufficient options for proto=fd [ 96.186529][ T5542] device syzkaller0 entered promiscuous mode [ 107.332084][ T5464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.429881][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 107.443669][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.445169][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.447724][ T5464] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.461695][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.470024][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.471536][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.472647][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.476864][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.512363][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.517059][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.518627][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.519709][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.523415][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.532473][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.537809][ T5588] 9pnet_fd: Insufficient options for proto=fd [ 107.543099][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.547725][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.556495][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.583774][ T5464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.585595][ T5464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.632219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.633996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.636006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.637569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.639081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.640803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.644084][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.003566][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.004959][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.017932][ T5464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.039495][ T5607] device syzkaller0 entered promiscuous mode [ 118.912183][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 119.005935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.007712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.026855][ T5647] 9pnet_fd: Insufficient options for proto=fd [ 119.035116][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.036756][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.038373][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.039803][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.042266][ T5464] device veth0_vlan entered promiscuous mode [ 119.056525][ T5464] device veth1_vlan entered promiscuous mode [ 119.079471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.081035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.083734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.085333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.094917][ T5464] device veth0_macvtap entered promiscuous mode [ 119.103505][ T5464] device veth1_macvtap entered promiscuous mode [ 119.112362][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.115942][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.117395][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.119051][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.120588][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.122482][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.124726][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.126485][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.129063][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.130372][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.131819][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.136607][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.138176][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.140779][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.142349][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.144764][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.146442][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.147943][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.149388][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.150992][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.156101][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.158242][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.159561][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.161072][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.165633][ T5464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.167293][ T5464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.168862][ T5464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.170911][ T5464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.215620][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.216988][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.544723][ T843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.544793][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.549461][ T843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.551641][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.564501][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 119.619548][ T5666] device syzkaller0 entered promiscuous mode [ 119.999870][ T5691] 9pnet_fd: Insufficient options for proto=fd [ 130.502013][ T5697] device veth0_to_team entered promiscuous mode [ 130.663728][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 130.700984][ T5716] loop3: detected capacity change from 0 to 4096 [ 130.710068][ T5725] 9pnet_fd: Insufficient options for proto=fd [ 130.775537][ T5716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.785549][ T5729] device veth0_to_team entered promiscuous mode [ 130.807810][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 131.125448][ T5734] device syzkaller0 entered promiscuous mode [ 142.188628][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 142.222140][ T5780] 9pnet_fd: Insufficient options for proto=fd [ 142.335536][ T5795] loop2: detected capacity change from 0 to 2048 [ 142.346053][ T5790] loop1: detected capacity change from 0 to 4096 [ 142.366454][ T5790] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.422048][ T5795] Alternate GPT is invalid, using primary GPT. [ 142.423190][ T5795] loop2: p1 p2 p3 [ 142.455957][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 142.794545][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 142.814142][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 142.875787][ T5814] loop2: detected capacity change from 0 to 1024 [ 142.901574][ T5796] loop0: detected capacity change from 0 to 32768 [ 142.903497][ T5814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.908426][ T5796] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.463 (5796) [ 142.913188][ T5796] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.914826][ T5796] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 142.916268][ T5796] BTRFS info (device loop0): setting nodatacow, compression disabled [ 142.917872][ T5815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.929162][ T5796] BTRFS info (device loop0): setting datacow [ 142.930181][ T5796] BTRFS info (device loop0): doing ref verification [ 142.931300][ T5796] BTRFS info (device loop0): force clearing of disk cache [ 142.932583][ T5796] BTRFS info (device loop0): turning off barriers [ 142.942890][ T5796] BTRFS info (device loop0): enabling ssd optimizations [ 142.944087][ T5796] BTRFS info (device loop0): using spread ssd allocation scheme [ 142.952278][ T5796] BTRFS info (device loop0): using free space tree [ 142.987604][ T5796] BTRFS info (device loop0): rebuilding free space tree [ 143.021663][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 143.072409][ T5796] BTRFS info (device loop0): balance: start -d -m [ 143.105458][ T5796] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 143.169511][ T5840] BTRFS info (device loop0): scrub: started on devid 1 [ 143.173219][ T5840] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 143.174834][ T5840] BTRFS info (device loop0): space_info SYSTEM has 0 free, is not full [ 143.176073][ T5840] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 143.177992][ T5840] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 143.179363][ T5840] BTRFS info (device loop0): trans_block_rsv: size 262144 reserved 262144 [ 143.180517][ T5840] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 143.181616][ T5840] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 143.182914][ T5840] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 163840 [ 143.192938][ T5796] BTRFS info (device loop0): left=0, need=98304, flags=5 [ 143.194837][ T5796] BTRFS info (device loop0): space_info SYSTEM has 0 free, is not full [ 143.196255][ T5796] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 143.198394][ T5796] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 143.199710][ T5796] BTRFS info (device loop0): trans_block_rsv: size 262144 reserved 262144 [ 143.201021][ T5796] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 143.202313][ T5796] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 143.203716][ T5796] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 163840 [ 143.255552][ T5840] BTRFS info (device loop0): unable to make block group 8519680 ro [ 143.257609][ T5840] BTRFS info (device loop0): space_info DATA+METADATA has 7962624 free, is not full [ 143.259099][ T5840] BTRFS info (device loop0): space_info total=11534336, used=61440, pinned=0, reserved=8192, may_use=1863680, readonly=1638400 zone_unusable=0 [ 143.261222][ T5840] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1437696 [ 143.262731][ T5840] BTRFS info (device loop0): trans_block_rsv: size 262144 reserved 262144 [ 143.264063][ T5840] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 143.265337][ T5840] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 143.266512][ T5840] BTRFS info (device loop0): delayed_refs_rsv: size 524288 reserved 163840 [ 143.276740][ T5796] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 143.309576][ T5839] loop2: detected capacity change from 0 to 32768 [ 143.347599][ T5796] BTRFS info (device loop0): found 10 extents, stage: move data extents [ 143.360673][ T5839] XFS (loop2): Mounting V5 Filesystem [ 143.381026][ T5796] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 143.414854][ T5839] XFS (loop2): Ending clean mount [ 143.468929][ T5796] BTRFS info (device loop0): balance: ended with status: 0 [ 143.469578][ T5840] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 143.484089][ T4324] XFS (loop2): Unmounting Filesystem [ 143.579569][ T4319] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 143.615314][ T5815] bond1 (unregistering): Released all slaves [ 143.620754][ T5850] device syzkaller0 entered promiscuous mode [ 143.831738][ T5887] 9pnet_fd: Insufficient options for proto=fd [ 143.847222][ T5882] device syzkaller0 entered promiscuous mode [ 143.862729][ T27] kauditd_printk_skb: 255 callbacks suppressed [ 143.862737][ T27] audit: type=1326 audit(143.840:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 143.892857][ T27] audit: type=1326 audit(143.840:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 143.896187][ T27] audit: type=1326 audit(143.860:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 143.913765][ T27] audit: type=1326 audit(143.860:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 143.916783][ T27] audit: type=1326 audit(143.860:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 143.919605][ T27] audit: type=1326 audit(143.860:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 143.922447][ T27] audit: type=1326 audit(143.860:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 143.961649][ T27] audit: type=1326 audit(143.860:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955c0a8 code=0x7ffc0000 [ 144.081553][ T5892] loop2: detected capacity change from 0 to 32768 [ 144.087366][ T5896] loop1: detected capacity change from 0 to 32768 [ 144.112018][ T5896] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.480 (5896) [ 144.118280][ T5896] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 144.121223][ T5896] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 144.125765][ T5892] XFS (loop2): Mounting V5 Filesystem [ 144.128184][ T5896] BTRFS info (device loop1): enabling auto defrag [ 144.129507][ T5896] BTRFS info (device loop1): doing ref verification [ 144.130947][ T5896] BTRFS info (device loop1): use no compression [ 144.132084][ T5896] BTRFS info (device loop1): force clearing of disk cache [ 144.133504][ T5896] BTRFS info (device loop1): max_inline at 4096 [ 144.134654][ T5896] BTRFS info (device loop1): disabling free space tree [ 144.170067][ T5892] XFS (loop2): Ending clean mount [ 144.177797][ T5892] XFS (loop2): Quotacheck needed: Please wait. [ 144.199981][ T5892] XFS (loop2): Quotacheck: Done. [ 144.249669][ T5896] BTRFS info (device loop1): enabling ssd optimizations [ 144.251379][ T5896] BTRFS info (device loop1): rebuilding free space tree [ 144.261195][ T5896] BTRFS info (device loop1): disabling free space tree [ 144.262450][ T5896] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.268479][ T5896] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.325838][ T5896] BTRFS info (device loop1): balance: start -d -m [ 144.327328][ T5896] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 144.342643][ T5896] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 144.356581][ T4324] XFS (loop2): Unmounting Filesystem [ 144.357336][ T5896] BTRFS info (device loop1): found 9 extents, stage: move data extents [ 144.369264][ T5896] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 144.384439][ T5896] BTRFS info (device loop1): balance: ended with status: 0 [ 144.459441][ T4320] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.846171][ T5900] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 154.903779][ T27] audit: type=1326 audit(154.890:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 154.907132][ T27] audit: type=1326 audit(154.890:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 154.910385][ T27] audit: type=1326 audit(154.890:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 154.916495][ T27] audit: type=1326 audit(154.890:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 154.920059][ T27] audit: type=1326 audit(154.890:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9415c0a8 code=0x7ffc0000 [ 154.921755][ T5959] 9pnet_fd: Insufficient options for proto=fd [ 154.927681][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 154.943619][ T5935] bridge0: port 3(ip6gretap1) entered blocking state [ 154.945018][ T5935] bridge0: port 3(ip6gretap1) entered disabled state [ 154.946500][ T5935] device ip6gretap1 entered promiscuous mode [ 154.947725][ T5935] bridge0: port 3(ip6gretap1) entered blocking state [ 154.948762][ T5935] bridge0: port 3(ip6gretap1) entered forwarding state [ 155.208060][ T9] Bluetooth: hci6: Frame reassembly failed (-84) [ 155.209327][ T1851] Bluetooth: hci6: Frame reassembly failed (-84) [ 155.257944][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.500'. [ 155.259420][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 155.268758][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.270582][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.272384][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.277251][ T5990] device bridge_slave_0 left promiscuous mode [ 155.278294][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.289712][ T5986] loop5: detected capacity change from 0 to 32768 [ 155.315181][ T5990] device bridge_slave_1 left promiscuous mode [ 155.316323][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.317208][ T5986] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 155.347630][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.351849][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.356098][ T5990] bond0: (slave bond_slave_0): Releasing backup interface [ 155.386986][ T5990] bond0: (slave bond_slave_1): Releasing backup interface [ 155.437179][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.438470][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.440207][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.441338][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.515726][ T5998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.605565][ T5998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.819865][ T6001] loop1: detected capacity change from 0 to 32768 [ 155.834755][ T6001] XFS (loop1): Mounting V5 Filesystem [ 155.863230][ T6001] XFS (loop1): Ending clean mount [ 155.864839][ T6001] XFS (loop1): Quotacheck needed: Please wait. [ 155.883547][ T6001] XFS (loop1): Quotacheck: Done. [ 155.899530][ T5464] ocfs2: Unmounting device (7,5) on (node local) [ 155.985679][ T6011] 9pnet_fd: Insufficient options for proto=fd [ 156.029639][ T6014] device syzkaller0 entered promiscuous mode [ 156.448986][ T6038] 9pnet_fd: Insufficient options for proto=fd [ 156.481731][ T6036] loop5: detected capacity change from 0 to 8192 [ 156.586003][ T6048] device syzkaller0 entered promiscuous mode [ 156.619726][ T6001] syz.1.503 (6001): drop_caches: 2 [ 156.677021][ T6050] loop3: detected capacity change from 0 to 4096 [ 156.678218][ T4320] XFS (loop1): Unmounting Filesystem [ 156.709299][ T6050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 156.736907][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 156.847531][ T6065] 9pnet_fd: Insufficient options for proto=fd [ 156.850221][ T27] audit: type=1326 audit(156.830:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 156.854788][ T27] audit: type=1326 audit(156.840:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 156.860494][ T27] audit: type=1326 audit(156.840:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 156.872335][ T27] audit: type=1326 audit(156.840:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 156.890520][ T27] audit: type=1326 audit(156.840:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35c0a8 code=0x7ffc0000 [ 156.999145][ T6080] device syzkaller0 entered promiscuous mode [ 157.212816][ T4335] Bluetooth: hci6: command 0xfc11 tx timeout [ 157.214803][ T47] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 157.318336][ T6101] 9pnet_fd: Insufficient options for proto=fd [ 157.509793][ T6119] loop3: detected capacity change from 0 to 8192 [ 157.518919][ T6117] device syzkaller0 entered promiscuous mode [ 157.699183][ T6127] 9pnet_fd: Insufficient options for proto=fd [ 157.931171][ T6149] 9pnet_fd: Insufficient options for proto=fd [ 157.959350][ T6147] device syzkaller0 entered promiscuous mode [ 158.174243][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 158.225418][ T6168] vhci_hcd: invalid port number 96 [ 158.226359][ T6168] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 158.253144][ T6163] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.254986][ T6163] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 158.342405][ T6172] capability: warning: `syz.2.578' uses 32-bit capabilities (legacy support in use) [ 158.479674][ T6175] 9pnet_fd: Insufficient options for proto=fd [ 158.689431][ T6186] tipc: Enabling of bearer rejected, failed to enable media [ 158.702402][ T6180] [ 158.702788][ T6180] ====================================================== [ 158.703885][ T6180] WARNING: possible circular locking dependency detected [ 158.705059][ T6180] syzkaller #0 Not tainted [ 158.705726][ T6180] ------------------------------------------------------ [ 158.706787][ T6180] syz.1.581/6180 is trying to acquire lock: [ 158.707717][ T6180] ffff0000d3449450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 158.709599][ T6180] [ 158.709599][ T6180] but task is already holding lock: [ 158.710770][ T6180] ffff0000d3448130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 158.712299][ T6180] [ 158.712299][ T6180] which lock already depends on the new lock. [ 158.712299][ T6180] [ 158.714055][ T6180] [ 158.714055][ T6180] the existing dependency chain (in reverse order) is: [ 158.715504][ T6180] [ 158.715504][ T6180] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 158.716660][ T6180] lock_sock_nested+0x70/0x130 [ 158.717442][ T6180] smc_listen_out+0x114/0x3b0 [ 158.718197][ T6180] smc_listen_work+0x1d0/0xde0 [ 158.718994][ T6180] process_one_work+0x7f4/0x13a8 [ 158.719845][ T6180] worker_thread+0x8c8/0xfbc [ 158.720584][ T6180] kthread+0x250/0x2d8 [ 158.721293][ T6180] ret_from_fork+0x10/0x20 [ 158.722075][ T6180] [ 158.722075][ T6180] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 158.723606][ T6180] __lock_acquire+0x293c/0x6544 [ 158.724409][ T6180] lock_acquire+0x20c/0x644 [ 158.725140][ T6180] __flush_work+0xf4/0x1bc [ 158.725869][ T6180] __cancel_work_timer+0x2ec/0x448 [ 158.726658][ T6180] cancel_work_sync+0x24/0x38 [ 158.727443][ T6180] smc_clcsock_release+0x64/0xe8 [ 158.728297][ T6180] __smc_release+0x568/0x6c4 [ 158.729139][ T6180] smc_close_non_accepted+0xd8/0x260 [ 158.730066][ T6180] smc_close_active+0x954/0xcc8 [ 158.730960][ T6180] __smc_release+0x48c/0x6c4 [ 158.731826][ T6180] smc_release+0x258/0x51c [ 158.732621][ T6180] sock_close+0xb4/0x1f8 [ 158.733517][ T6180] __fput+0x1bc/0x7c0 [ 158.734274][ T6180] ____fput+0x20/0x30 [ 158.735026][ T6180] task_work_run+0x1ec/0x270 [ 158.735906][ T6180] do_notify_resume+0x1f70/0x2b0c [ 158.736877][ T6180] el0_svc+0x98/0x138 [ 158.737626][ T6180] el0t_64_sync_handler+0x84/0xf0 [ 158.738510][ T6180] el0t_64_sync+0x18c/0x190 [ 158.739257][ T6180] [ 158.739257][ T6180] other info that might help us debug this: [ 158.739257][ T6180] [ 158.740857][ T6180] Possible unsafe locking scenario: [ 158.740857][ T6180] [ 158.741947][ T6180] CPU0 CPU1 [ 158.742741][ T6180] ---- ---- [ 158.743500][ T6180] lock(sk_lock-AF_SMC/1); [ 158.744193][ T6180] lock((work_completion)(&new_smc->smc_listen_work)); [ 158.745548][ T6180] lock(sk_lock-AF_SMC/1); [ 158.746596][ T6180] lock((work_completion)(&new_smc->smc_listen_work)); [ 158.747677][ T6180] [ 158.747677][ T6180] *** DEADLOCK *** [ 158.747677][ T6180] [ 158.749052][ T6180] 2 locks held by syz.1.581/6180: [ 158.749874][ T6180] #0: ffff0000c064ee10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x7c/0x1f8 [ 158.751588][ T6180] #1: ffff0000d3448130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1e8/0x51c [ 158.753169][ T6186] device syzkaller0 entered promiscuous mode [ 158.753173][ T6180] [ 158.753173][ T6180] stack backtrace: [ 158.753180][ T6180] CPU: 1 PID: 6180 Comm: syz.1.581 Not tainted syzkaller #0 [ 158.756314][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 158.757870][ T6180] Call trace: [ 158.758339][ T6180] dump_backtrace+0x1c8/0x1f4 [ 158.759076][ T6180] show_stack+0x2c/0x3c [ 158.759720][ T6180] __dump_stack+0x30/0x40 [ 158.760468][ T6180] dump_stack_lvl+0xf8/0x160 [ 158.761186][ T6180] dump_stack+0x1c/0x5c [ 158.761815][ T6180] print_circular_bug+0x148/0x1b0 [ 158.762666][ T6180] check_noncircular+0x240/0x2d4 [ 158.763516][ T6180] __lock_acquire+0x293c/0x6544 [ 158.764325][ T6180] lock_acquire+0x20c/0x644 [ 158.765061][ T6180] __flush_work+0xf4/0x1bc [ 158.765781][ T6180] __cancel_work_timer+0x2ec/0x448 [ 158.766567][ T6180] cancel_work_sync+0x24/0x38 [ 158.767324][ T6180] smc_clcsock_release+0x64/0xe8 [ 158.768118][ T6180] __smc_release+0x568/0x6c4 [ 158.768806][ T6180] smc_close_non_accepted+0xd8/0x260 [ 158.769577][ T6180] smc_close_active+0x954/0xcc8 [ 158.770296][ T6180] __smc_release+0x48c/0x6c4 [ 158.771012][ T6180] smc_release+0x258/0x51c [ 158.771697][ T6180] sock_close+0xb4/0x1f8 [ 158.772320][ T6180] __fput+0x1bc/0x7c0 [ 158.772983][ T6180] ____fput+0x20/0x30 [ 158.773637][ T6180] task_work_run+0x1ec/0x270 [ 158.774345][ T6180] do_notify_resume+0x1f70/0x2b0c [ 158.775105][ T6180] el0_svc+0x98/0x138 [ 158.775752][ T6180] el0t_64_sync_handler+0x84/0xf0 [ 158.776604][ T6180] el0t_64_sync+0x18c/0x190 [ 158.778179][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 158.779317][ T4335] Bluetooth: hci4: command 0x0406 tx timeout [ 158.779316][ T4336] Bluetooth: hci3: command 0x0406 tx timeout [ 158.780317][ T47] Bluetooth: hci1: command 0x0406 tx timeout