last executing test programs: 36.023186384s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='M', 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000240), &(0x7f0000000280)=@udp=r3}, 0x20) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in={0x2, 0x2382, @loopback}, 0x80) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 35.583439234s ago: executing program 3 (id=15): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x4c, 0x12, 0x905, 0x70bd28, 0xa5dfdc03, {0x21, 0x2, 0xb, 0x0, {0x4e20, 0x4e66, [0x1, 0x923, 0x0, 0x1000], [0x10401, 0x3ff, 0x3, 0x2], 0x0, [0xffff, 0x2005]}, 0x1, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c8d4}, 0x20040000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) openat(0xffffffffffffff9c, 0x0, 0xe2242, 0xfb) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 35.127437275s ago: executing program 3 (id=21): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 34.884352651s ago: executing program 32 (id=21): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 9.696498252s ago: executing program 2 (id=317): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file7\x00', 0x2000c12, &(0x7f00000007c0)={[{@overriderock}, {@session={'session', 0x3d, 0x1b}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {}, {@map_acorn}, {@map_off}, {@session={'session', 0x3d, 0x41}}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@mode={'mode', 0x3d, 0x1000000000001ff}}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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") 9.460589558s ago: executing program 2 (id=320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e40)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1522c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 9.248266363s ago: executing program 2 (id=325): socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.163202895s ago: executing program 2 (id=327): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 8.353077814s ago: executing program 2 (id=337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000000008018010000646c6c2500000000002020207b1af8fd00000000bfa100000000000007010000f8ffffffb702000008000000b70300000101000085000000060000001801000020696c2500000000002020207b07000000000000bfa100000000000007010000f8ffffffb702000008000000b703000087000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcbb}, 0x94) 7.968222113s ago: executing program 1 (id=347): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000180), &(0x7f0000000300)='%pI4 \x00'}, 0x20) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x0) 7.000821556s ago: executing program 1 (id=353): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.81022852s ago: executing program 2 (id=356): r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000880}, 0x80) 6.617999795s ago: executing program 33 (id=356): r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000880}, 0x80) 6.612701595s ago: executing program 1 (id=360): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {0x0, 0xfff3}, {0xe, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7ff}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000) 6.39768686s ago: executing program 1 (id=365): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) 6.144492816s ago: executing program 1 (id=369): r0 = socket$kcm(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 5.235985127s ago: executing program 1 (id=379): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x7fffffe, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 4.30123195s ago: executing program 5 (id=385): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private1, @in=@broadcast, 0x4e22, 0xfff8, 0x4e20, 0x6, 0xa, 0xa0, 0x80, 0x3c}, {0x6, 0x5, 0x0, 0x9, 0x4, 0x9, 0xffffffffffffffff, 0xe}, {0x4, 0x1, 0x1, 0xbb4}, 0x6, 0x6e6bb4, 0x2, 0x0, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x32}, 0x2, @in=@local, 0x0, 0x5, 0xc515c9252d28698, 0x3, 0x2, 0x80000001, 0x7}}, 0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 1.904405186s ago: executing program 0 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x2) 1.904203886s ago: executing program 5 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x64, 0x2c, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_nat={0x2c, 0x21, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x64}}, 0x0) 1.136438024s ago: executing program 5 (id=402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x800}, &(0x7f0000000100)=0x8) 1.127369774s ago: executing program 4 (id=403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x4d6, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0xffffffffffffffff, 0xfffffffffffffffe, 0x97c2, 0xffffffffffffffff}, {}, {}, 0x70bd2d, 0x0, 0xa, 0x0, 0x2, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}]}, 0x154}}, 0x0) 1.081865295s ago: executing program 0 (id=404): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) 944.555158ms ago: executing program 4 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 858.5896ms ago: executing program 0 (id=406): capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x8000000000000000, 0x8000) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 759.482082ms ago: executing program 4 (id=407): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[@ANYBLOB="e33110495bfdbbbbbbbbbbbb86dd60cb653e00033afffe6e0000000000000000000000000015ff020000000000000000000000000001"], 0x0) 652.487125ms ago: executing program 0 (id=408): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) 517.105748ms ago: executing program 5 (id=409): socket$xdp(0x2c, 0x3, 0x0) socket(0x1e, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="800000001000030427bd70000300000000000000", @ANYRES16, @ANYBLOB="46040900000000005800128009000100766c616e000000004800028006000100010000000400048006000500810000000600050088a800000c00020007000000000000001c0003800c0001000a000000000000380c00010044bf"], 0x80}, 0x1, 0x0, 0x0, 0x20000600}, 0x440c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bfff"], 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x40084) 467.19948ms ago: executing program 4 (id=410): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 372.929702ms ago: executing program 0 (id=411): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000100)=0xfffffffe, 0x4) 303.699793ms ago: executing program 5 (id=412): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) 236.527535ms ago: executing program 4 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='3\n', 0x2) 147.189887ms ago: executing program 0 (id=414): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r3}, &(0x7f0000000880)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha224\x00'], 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, 0x0) close(0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8114}, 0x8840) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 113.298397ms ago: executing program 4 (id=415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x57, 0x2, {{'cbc(twofish)\x00'}, 0x78, "72f01afe02000000366a6a849a7390"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 0s ago: executing program 5 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x8}}, @TCA_CT_MARK={0x8, 0x10, 0x7fffffff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0xc8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r1, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x160, 0x1f8, 0x290, 0x328, 0xc8, 0x160, 0x1f8, 0x290, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 61.968336][ T4172] cgroup: Unknown subsys name 'net' [ 62.082913][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.616535][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.030116][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 65.114441][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 65.181313][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 65.209354][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.216723][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.224749][ T4192] device bridge_slave_0 entered promiscuous mode [ 65.233512][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.250981][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 65.264259][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.271586][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.280024][ T4192] device bridge_slave_1 entered promiscuous mode [ 65.334291][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.361635][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.407644][ T4192] team0: Port device team_slave_0 added [ 65.443760][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.451231][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.459535][ T4198] device bridge_slave_0 entered promiscuous mode [ 65.468382][ T4192] team0: Port device team_slave_1 added [ 65.474244][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.481495][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.490178][ T4198] device bridge_slave_1 entered promiscuous mode [ 65.501494][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.508826][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.516985][ T4184] device bridge_slave_0 entered promiscuous mode [ 65.530990][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.538327][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.546759][ T4184] device bridge_slave_1 entered promiscuous mode [ 65.590500][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.597840][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.605648][ T4185] device bridge_slave_0 entered promiscuous mode [ 65.622155][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.643568][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.650868][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.659212][ T4185] device bridge_slave_1 entered promiscuous mode [ 65.673594][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.680911][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.707285][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.722070][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.737861][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.745018][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.753387][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.762551][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.780298][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.787471][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.813773][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.835233][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.842657][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.850934][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.859626][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.871093][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.889122][ T4198] team0: Port device team_slave_0 added [ 65.903706][ T4198] team0: Port device team_slave_1 added [ 65.923861][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.984674][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.991827][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.017939][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.034526][ T4192] device hsr_slave_0 entered promiscuous mode [ 66.041472][ T4192] device hsr_slave_1 entered promiscuous mode [ 66.049980][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.061613][ T4184] team0: Port device team_slave_0 added [ 66.070683][ T4185] team0: Port device team_slave_0 added [ 66.077196][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.084172][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.110407][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.131364][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.149410][ T4184] team0: Port device team_slave_1 added [ 66.161698][ T4185] team0: Port device team_slave_1 added [ 66.192210][ T4186] team0: Port device team_slave_0 added [ 66.230685][ T4186] team0: Port device team_slave_1 added [ 66.250670][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.257919][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.284205][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.297038][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.304160][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.330340][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.345929][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.353037][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.379075][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.404222][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.411632][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.437749][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.458065][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.465060][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.491599][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.506518][ T4198] device hsr_slave_0 entered promiscuous mode [ 66.513675][ T4198] device hsr_slave_1 entered promiscuous mode [ 66.524181][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.532051][ T4198] Cannot create hsr debugfs directory [ 66.548682][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.555671][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.581973][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.663430][ T4185] device hsr_slave_0 entered promiscuous mode [ 66.671132][ T4185] device hsr_slave_1 entered promiscuous mode [ 66.678198][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.685787][ T4185] Cannot create hsr debugfs directory [ 66.712263][ T4184] device hsr_slave_0 entered promiscuous mode [ 66.719410][ T4184] device hsr_slave_1 entered promiscuous mode [ 66.725920][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.733620][ T4184] Cannot create hsr debugfs directory [ 66.757046][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 66.757151][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 66.776273][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 66.786282][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 66.825866][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.832741][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.840064][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.847839][ T4186] Cannot create hsr debugfs directory [ 66.848109][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 67.061617][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.084322][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.093600][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.114283][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.157877][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.190687][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.200211][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.213310][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.256700][ T4198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.291314][ T4198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.319102][ T4198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.342384][ T4198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.354697][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.368381][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.393825][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.411342][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.426769][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.437222][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.448796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.458959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.467766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.475546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.497391][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.505310][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.532738][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.545441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.554943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.564919][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.572218][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.603214][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.613146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.621423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.632023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.642924][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.650038][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.659245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.668406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.677979][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.685065][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.693069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.702330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.713273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.721942][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.729032][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.740565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.757176][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.770016][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.786740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.795851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.808014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.825433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.834351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.873522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.882812][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.893413][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.902428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.911542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.920507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.931131][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.940203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.960482][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.972406][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.988642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.002981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.013865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.029358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.041514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.050538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.070920][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.083078][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.094553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.104421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.151911][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.175928][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.223639][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.251796][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.262170][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.272522][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.283069][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.295152][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.302283][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.345652][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.354397][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.363967][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.374171][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.383350][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.390485][ T1238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.400136][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.412599][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.423441][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.440727][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.454403][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.463245][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.471832][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.483737][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.492290][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.502945][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.512112][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.529064][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.541087][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.570888][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.585312][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.603842][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.617546][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.625890][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.641352][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.654001][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.666023][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.673171][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.684986][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.694002][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.702931][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.710122][ T1238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.718869][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.726552][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.733996][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.742837][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.751708][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.761774][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.771699][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.780288][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.790736][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.809211][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.836440][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 68.842807][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.851000][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 68.863408][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 68.869974][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 68.870586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.898229][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.916924][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 68.931565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.948219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.967008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.981063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.995137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.004722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.014612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.023368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.033186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.042801][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.049940][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.058573][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.081196][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.093279][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.107234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.116812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.125569][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.132726][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.143353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.152465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.162879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.181239][ T4185] device veth0_vlan entered promiscuous mode [ 69.207432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.215793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.239224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.273215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.297198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.309991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.318604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.327031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.339638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.348678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.372082][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.379702][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.412394][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.423367][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.450554][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.463497][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.474337][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.491936][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.500761][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.509704][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.518811][ T4185] device veth1_vlan entered promiscuous mode [ 69.556353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.564699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.580746][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.621010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.635886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.649414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.661274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.669300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.683322][ T4192] device veth0_vlan entered promiscuous mode [ 69.698802][ T4185] device veth0_macvtap entered promiscuous mode [ 69.713105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.723896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.738354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.750248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.760132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.768506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.778020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.790832][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.809775][ T4192] device veth1_vlan entered promiscuous mode [ 69.821450][ T4185] device veth1_macvtap entered promiscuous mode [ 69.843191][ T4184] device veth0_vlan entered promiscuous mode [ 69.854264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.863218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.872340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.882127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.900388][ T4184] device veth1_vlan entered promiscuous mode [ 69.913254][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.925992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.935025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.946355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.954154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.964202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.973189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.002876][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.025265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.034456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.044176][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.053350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.062766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.071995][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.079679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.088128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.096886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.108213][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.118605][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.129078][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.138382][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.152645][ T4192] device veth0_macvtap entered promiscuous mode [ 70.163163][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.179562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.209551][ T4192] device veth1_macvtap entered promiscuous mode [ 70.222515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.232060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.245081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.254886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.285068][ T4198] device veth0_vlan entered promiscuous mode [ 70.301640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.311718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.328257][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.344895][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.358789][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.379299][ T4184] device veth0_macvtap entered promiscuous mode [ 70.391721][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.401992][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.411496][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.424804][ T4198] device veth1_vlan entered promiscuous mode [ 70.432375][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.444745][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.457418][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.473094][ T4184] device veth1_macvtap entered promiscuous mode [ 70.490700][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.501235][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.509735][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.519469][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.529634][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.538870][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.561810][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.570754][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.580008][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.590418][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.626815][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.634401][ T4186] device veth0_vlan entered promiscuous mode [ 70.634835][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.672521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.682428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.692114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.700721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.711973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.720347][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.744210][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.754907][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.765991][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.776659][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.789335][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.800750][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.812165][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.826355][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.839349][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.851371][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.869533][ T4186] device veth1_vlan entered promiscuous mode [ 70.881228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.890288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.899791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.909224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.917424][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 70.917465][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 70.917488][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 70.917510][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 70.944168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.953360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.964988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.975918][ T4198] device veth0_macvtap entered promiscuous mode [ 70.996273][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.999079][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 71.012531][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.023092][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.031990][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.040780][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.044322][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.061145][ T4198] device veth1_macvtap entered promiscuous mode [ 71.103405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.111969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.124893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.133425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.152980][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.164785][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.175085][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.185636][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.196526][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.207090][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.219164][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.238864][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.245456][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.276463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.288176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.319153][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.330420][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.341574][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.352189][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.362055][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.372860][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.384058][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.399923][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.408876][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.417864][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.427061][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.451045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.462795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.509813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.520736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.542216][ T4186] device veth0_macvtap entered promiscuous mode [ 71.566796][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.574672][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.588909][ T4186] device veth1_macvtap entered promiscuous mode [ 71.724005][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.749769][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.785455][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.801109][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.835086][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.852170][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.862459][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.872962][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.890934][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.903786][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.913838][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.924779][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.224730][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.642468][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.731939][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.760021][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.778154][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.786350][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.794380][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.803373][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.863253][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.875200][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.885057][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.892526][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.902889][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.913401][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.924113][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.934851][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.944974][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.955720][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.967274][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.980350][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.992845][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.002262][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 73.014240][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 73.020466][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.034934][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 73.041090][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.055333][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 73.086390][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.100986][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.128547][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 73.146807][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.154878][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.164143][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.174976][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.263136][ T4283] loop1: detected capacity change from 0 to 512 [ 73.315258][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.332124][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.422462][ T4283] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.429358][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.451970][ T4283] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.502473][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.534397][ T4283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 217: padding at end of block bitmap is not set [ 73.557374][ T4283] Quota error (device loop1): write_blk: dquota write failed [ 73.569462][ T4283] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 73.577099][ T4291] device syzkaller0 entered promiscuous mode [ 73.586598][ T4283] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2: Failed to acquire dquot type 1 [ 73.596226][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.642057][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.667318][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.677063][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.742065][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.803873][ T4298] loop4: detected capacity change from 0 to 1764 [ 73.977834][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 74.083059][ T4310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 74.114903][ T4304] ======================================================= [ 74.114903][ T4304] WARNING: The mand mount option has been deprecated and [ 74.114903][ T4304] and is ignored by this kernel. Remove the mand [ 74.114903][ T4304] option from the mount to silence this warning. [ 74.114903][ T4304] ======================================================= [ 74.250956][ T4313] loop4: detected capacity change from 0 to 128 [ 74.352141][ T4313] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 74.379869][ T4313] FAT-fs (loop4): Filesystem has been set read-only [ 74.413876][ T4319] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 74.490968][ T4320] loop2: detected capacity change from 0 to 128 [ 74.713067][ T4328] capability: warning: `syz.1.20' uses 32-bit capabilities (legacy support in use) [ 74.886707][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.041805][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.118799][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.422391][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.661303][ T4353] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 76.010622][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 76.251485][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.260161][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.268563][ T4342] device bridge_slave_0 entered promiscuous mode [ 76.307220][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.328307][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.372001][ T4342] device bridge_slave_1 entered promiscuous mode [ 76.470945][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.489630][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.580161][ T4342] team0: Port device team_slave_0 added [ 76.611012][ T4342] team0: Port device team_slave_1 added [ 76.777618][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.784848][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.866441][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.910011][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.943220][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.037756][ T4401] Zero length message leads to an empty skb [ 77.074285][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.234938][ T4342] device hsr_slave_0 entered promiscuous mode [ 77.291901][ T4342] device hsr_slave_1 entered promiscuous mode [ 77.312526][ T4342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.342652][ T4342] Cannot create hsr debugfs directory [ 77.476869][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 77.660314][ T4416] loop2: detected capacity change from 0 to 512 [ 77.725498][ T4418] sock: sock_timestamping_bind_phc: sock not bind to device [ 77.754030][ T4416] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 77.804604][ T155] device hsr_slave_0 left promiscuous mode [ 77.820648][ T4416] EXT4-fs (loop2): group descriptors corrupted! [ 77.846006][ T155] device hsr_slave_1 left promiscuous mode [ 77.917363][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.924941][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.986284][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.993774][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.074276][ T155] device bridge_slave_1 left promiscuous mode [ 78.107409][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.154225][ T4435] loop0: detected capacity change from 0 to 512 [ 78.231966][ T155] device bridge_slave_0 left promiscuous mode [ 78.253083][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.267176][ T4435] EXT4-fs (loop0): Ignoring removed orlov option [ 78.333647][ T4448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.61'. [ 78.360747][ T4435] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,init_itable,sysvgroups,orlov,,errors=continue. Quota mode: writeback. [ 78.436249][ T4448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.61'. [ 78.473337][ T155] device veth1_macvtap left promiscuous mode [ 78.515560][ T155] device veth0_macvtap left promiscuous mode [ 78.557965][ T155] device veth1_vlan left promiscuous mode [ 78.564069][ T155] device veth0_vlan left promiscuous mode [ 78.778352][ T4463] loop2: detected capacity change from 0 to 2048 [ 78.914117][ T4463] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000fff,abort,,errors=continue. Quota mode: none. [ 78.954792][ T4194] Process accounting resumed [ 78.966878][ T4453] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 78.985563][ T4453] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.006694][ T4453] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.006694][ T4453] [ 79.020021][ T4453] EXT4-fs (loop2): Total free blocks count 0 [ 79.026233][ T4453] EXT4-fs (loop2): Free/Dirty block details [ 79.032330][ T4453] EXT4-fs (loop2): free_blocks=4096 [ 79.037698][ T4453] EXT4-fs (loop2): dirty_blocks=16 [ 79.042953][ T4453] EXT4-fs (loop2): Block reservation details [ 79.049026][ T4453] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 79.059783][ T4463] EXT4-fs error (device loop2): ext4_remount:6062: comm syz.2.66: Abort forced by user [ 79.070524][ T4463] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 79.232010][ T155] team0 (unregistering): Port device team_slave_1 removed [ 79.251704][ T155] team0 (unregistering): Port device team_slave_0 removed [ 79.265951][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.283866][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.361911][ T155] bond0 (unregistering): Released all slaves [ 79.556927][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 79.664526][ T4342] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.495430][ T4342] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.543047][ T4342] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.585997][ T4342] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.655762][ T4511] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.723035][ T4518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.81'. [ 80.918313][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 80.943011][ T4528] loop4: detected capacity change from 0 to 512 [ 80.994697][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.112683][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.129473][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.170393][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.227532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.237062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.253193][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.260400][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.436462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.444597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.484946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.552601][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.559809][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.634746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.643236][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 81.673194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.752489][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.778565][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.835543][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.865495][ T4563] loop2: detected capacity change from 0 to 1024 [ 81.878415][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.888480][ T4564] loop4: detected capacity change from 0 to 512 [ 81.914086][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.929669][ T4564] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 81.952179][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.957833][ T4563] EXT4-fs (loop2): Ignoring removed bh option [ 81.976260][ T4564] EXT4-fs (loop4): inline encryption not supported [ 81.990183][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.999497][ T4564] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.027036][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.049468][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.094267][ T4563] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,noquota,auto_da_alloc,block_validity,nodioread_nolock,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 82.105356][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.226749][ T4564] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.97: bad orphan inode 13 [ 82.247541][ T4564] ext4_test_bit(bit=12, block=18) = 1 [ 82.253183][ T4564] is_bad_inode(inode)=0 [ 82.267322][ T4575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.100'. [ 82.304443][ T4564] NEXT_ORPHAN(inode)=10485760 [ 82.358910][ T4564] max_ino=32 [ 82.362564][ T4564] i_nlink=1 [ 82.397073][ T4564] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 82.712146][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.801823][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.864345][ T4593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.876338][ T4593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.035623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.052192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.120452][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.344026][ T4619] device syzkaller0 entered promiscuous mode [ 83.716950][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 83.802214][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.833680][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.904510][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.914338][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.947681][ T4342] device veth0_vlan entered promiscuous mode [ 83.960279][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.961729][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807ddd8000: rx timeout, send abort [ 83.981263][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.025156][ T4342] device veth1_vlan entered promiscuous mode [ 84.060815][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.161193][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.181856][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.207072][ T4342] device veth0_macvtap entered promiscuous mode [ 84.255345][ T4342] device veth1_macvtap entered promiscuous mode [ 84.294144][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.330326][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.340706][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.370820][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.410403][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.443438][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.477021][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807ddd8000: abort rx timeout. Force session deactivation [ 84.522486][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.542891][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.563562][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.621457][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.651919][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.675966][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.712947][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.736268][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.763506][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.804234][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.849729][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.888732][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.922111][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.939913][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.981908][ T4342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.010557][ T4342] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.045821][ T4342] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.100485][ T4342] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.406797][ T1108] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.466186][ T4453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.488099][ T4453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.503538][ T4684] loop4: detected capacity change from 0 to 1764 [ 85.535081][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.550085][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.570778][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.598506][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.836218][ T1108] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 85.844335][ T1108] usb 3-1: can't read configurations, error -71 [ 86.306551][ T4712] device syzkaller0 entered promiscuous mode [ 86.363562][ T4716] loop2: detected capacity change from 0 to 512 [ 86.450165][ T4716] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 86.520189][ T4716] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.601310][ T13] cfg80211: failed to load regulatory.db [ 88.081741][ T4770] loop0: detected capacity change from 0 to 512 [ 88.200350][ T4770] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.300432][ T4770] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.327437][ T4782] netlink: 'syz.5.169': attribute type 4 has an invalid length. [ 88.419564][ T4770] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.165: corrupted in-inode xattr [ 88.494781][ T4770] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.165: couldn't read orphan inode 15 (err -117) [ 88.516753][ T4770] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,minixdf,nombcache,,errors=continue. Quota mode: none. [ 88.589109][ T4786] netlink: 'syz.5.169': attribute type 4 has an invalid length. [ 88.923248][ T4810] loop0: detected capacity change from 0 to 128 [ 89.004753][ T4810] EXT4-fs (loop0): Unrecognized mount option "measure" or missing value [ 89.016193][ T4813] device sit0 entered promiscuous mode [ 89.062858][ T4813] netlink: 'syz.5.180': attribute type 1 has an invalid length. [ 89.146457][ T4813] netlink: 9 bytes leftover after parsing attributes in process `syz.5.180'. [ 90.108004][ T26] audit: type=1326 audit(1788041274.492:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4835 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6d96be159 code=0x0 [ 90.539766][ T4855] loop5: detected capacity change from 0 to 2048 [ 90.590430][ T4176] loop5: p1 < > [ 90.656771][ T4855] loop5: p1 < > [ 90.878085][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 90.979422][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 91.000971][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 91.781423][ T4890] loop4: detected capacity change from 0 to 8192 [ 91.873434][ T4908] binfmt_misc: register: failed to install interpreter file ./file0 [ 91.914940][ T4890] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.009624][ T4912] program syz.5.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.354626][ T4920] tmpfs: Unknown parameter '' [ 92.632291][ T4930] loop5: detected capacity change from 0 to 1024 [ 92.781971][ T4930] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,noauto_da_alloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 92.867897][ T4940] loop4: detected capacity change from 0 to 512 [ 92.939303][ T4940] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 92.973714][ T4940] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 93.014634][ T4940] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.077508][ T4940] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 93.085720][ T4940] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 93.169007][ T4946] loop5: detected capacity change from 0 to 2048 [ 93.194055][ T4940] EXT4-fs (loop4): 1 truncate cleaned up [ 93.265275][ T4940] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 93.297734][ T4946] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 93.341030][ T4946] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:163: inode #12: comm syz.5.223: inline data xattr refers to an external xattr inode [ 93.415903][ T4940] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 93.741571][ T4967] loop1: detected capacity change from 0 to 512 [ 93.923300][ T4967] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 93.965615][ T4967] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.537908][ T4894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.695465][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 94.922927][ T26] audit: type=1326 audit(1788041279.302:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.2.252" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d5de6b159 code=0x0 [ 95.510239][ T5042] capability: warning: `syz.4.262' uses deprecated v2 capabilities in a way that may be insecure [ 95.743768][ T5051] loop4: detected capacity change from 0 to 2048 [ 95.872544][ T4176] GPT:first_usable_lbas don't match. [ 95.892858][ T4176] GPT:34 != 290 [ 95.902572][ T4176] GPT: Use GNU Parted to correct GPT errors. [ 95.913484][ T4176] loop4: p1 p2 p3 [ 95.975134][ T5051] GPT:first_usable_lbas don't match. [ 96.000594][ T5051] GPT:34 != 290 [ 96.004122][ T5051] GPT: Use GNU Parted to correct GPT errors. [ 96.063289][ T5039] syz.1.245 (5039) used greatest stack depth: 18640 bytes left [ 96.089663][ T5051] loop4: p1 p2 p3 [ 96.318158][ T5032] loop5: detected capacity change from 0 to 8192 [ 96.368156][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 96.380566][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 96.395725][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 96.416961][ T26] audit: type=1800 audit(1788041280.792:4): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.258" name="bus" dev="loop5" ino=1048595 res=0 errno=0 [ 96.525073][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 96.539375][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 96.568434][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 96.820527][ T5083] netlink: 'syz.0.273': attribute type 21 has an invalid length. [ 96.852271][ T5083] netlink: 164 bytes leftover after parsing attributes in process `syz.0.273'. [ 96.895303][ T5087] program syz.4.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.148481][ T26] audit: type=1326 audit(1788041281.532:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.2.279" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5de6b159 code=0x7ffc0000 [ 97.189496][ T26] audit: type=1326 audit(1788041281.532:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.2.279" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5de6b159 code=0x7ffc0000 [ 97.235029][ T26] audit: type=1326 audit(1788041281.532:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.2.279" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5de6b159 code=0x7ffc0000 [ 97.279211][ T26] audit: type=1326 audit(1788041281.532:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.2.279" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2d5de6b159 code=0x7ffc0000 [ 97.330427][ T26] audit: type=1326 audit(1788041281.562:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.2.279" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5de6b159 code=0x7ffc0000 [ 97.442797][ T26] audit: type=1326 audit(1788041281.562:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.2.279" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5de6b159 code=0x7ffc0000 [ 97.470302][ T5105] loop0: detected capacity change from 0 to 512 [ 97.478113][ T26] audit: type=1326 audit(1788041281.562:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.2.279" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5de6b159 code=0x7ffc0000 [ 97.478157][ T26] audit: type=1326 audit(1788041281.572:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.2.279" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f2d5de6b159 code=0x7ffc0000 [ 97.478193][ T26] audit: type=1326 audit(1788041281.572:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5099 comm="syz.2.279" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d5de2b98e code=0x7ffc0000 [ 97.575842][ T5107] loop5: detected capacity change from 0 to 128 [ 97.621681][ T5105] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.645364][ T5105] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.668340][ T5107] FAT-fs (loop5): Directory bread(block 1048) failed [ 97.675121][ T5107] FAT-fs (loop5): Directory bread(block 1049) failed [ 97.737292][ T5107] FAT-fs (loop5): Directory bread(block 1050) failed [ 97.744070][ T5107] FAT-fs (loop5): Directory bread(block 1051) failed [ 97.810697][ T5105] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.282: Failed to acquire dquot type 0 [ 97.846267][ T5107] FAT-fs (loop5): Directory bread(block 1052) failed [ 97.853137][ T5107] FAT-fs (loop5): Directory bread(block 1053) failed [ 97.930494][ T5107] FAT-fs (loop5): Directory bread(block 1054) failed [ 97.947299][ T5107] FAT-fs (loop5): Directory bread(block 1055) failed [ 98.062729][ T5107] FAT-fs (loop5): FAT read failed (blocknr 128) [ 98.172522][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 98.345291][ T5129] loop0: detected capacity change from 0 to 1024 [ 98.355736][ T5124] device syzkaller0 entered promiscuous mode [ 98.370206][ T5131] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.437971][ T5129] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 98.486804][ T5129] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 98.495911][ T5129] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.591749][ T5129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01c, mo2=0002] [ 98.636824][ T5129] System zones: 0-1, 3-36 [ 98.652669][ T5129] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,debug,,errors=continue. Quota mode: writeback. [ 98.994014][ T5153] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.131028][ T5161] loop4: detected capacity change from 0 to 128 [ 99.255732][ T5161] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,grpquota,max_dir_size_kb=0x0000000000000001,barrier,,errors=continue. Quota mode: writeback. [ 99.426340][ T5161] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.475417][ T5109] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 99.573202][ T5109] team0: Device wg1 is of different type [ 99.727795][ T5183] loop1: detected capacity change from 0 to 128 [ 99.811726][ T5183] attempt to access beyond end of device [ 99.811726][ T5183] loop1: rw=2049, want=250, limit=128 [ 100.244016][ T5209] loop2: detected capacity change from 0 to 1764 [ 100.483864][ T5224] autofs4:pid:5224:autofs_fill_super: called with bogus options [ 100.780042][ T5237] loop2: detected capacity change from 0 to 512 [ 100.823213][ T5237] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 100.900225][ T5237] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.988717][ T5237] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 101.023622][ T5237] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.151828][ T5237] FAULT_INJECTION: forcing a failure. [ 101.151828][ T5237] name failslab, interval 1, probability 0, space 0, times 1 [ 101.165296][ T5237] CPU: 0 PID: 5237 Comm: syz.2.327 Not tainted syzkaller #0 [ 101.172657][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.182791][ T5237] Call Trace: [ 101.186102][ T5237] [ 101.189061][ T5237] dump_stack_lvl+0x188/0x250 [ 101.193802][ T5237] ? show_regs_print_info+0x20/0x20 [ 101.199047][ T5237] ? load_image+0x410/0x410 [ 101.203596][ T5237] ? __might_sleep+0xf0/0xf0 [ 101.208221][ T5237] ? __lock_acquire+0x7b50/0x7b50 [ 101.213288][ T5237] ? account_kernel_stack+0x1b1/0x390 [ 101.218704][ T5237] ? lockdep_hardirqs_on+0x94/0x140 [ 101.223964][ T5237] should_fail+0x383/0x4b0 [ 101.228420][ T5237] should_failslab+0x5/0x20 [ 101.232956][ T5237] slab_pre_alloc_hook+0x51/0xc0 [ 101.237923][ T5237] ? prepare_creds+0x3c/0x610 [ 101.242638][ T5237] kmem_cache_alloc+0x3d/0x280 [ 101.247454][ T5237] prepare_creds+0x3c/0x610 [ 101.252010][ T5237] copy_creds+0x146/0xce0 [ 101.256384][ T5237] copy_process+0x8d7/0x3e70 [ 101.261071][ T5237] ? __pidfd_prepare+0x140/0x140 [ 101.266047][ T5237] ? verify_lock_unused+0x140/0x140 [ 101.271313][ T5237] kernel_clone+0x23f/0x990 [ 101.275857][ T5237] ? create_io_thread+0x180/0x180 [ 101.280943][ T5237] __x64_sys_clone+0x19a/0x210 [ 101.285774][ T5237] ? __ia32_sys_vfork+0x130/0x130 [ 101.290846][ T5237] ? lockdep_hardirqs_on+0x94/0x140 [ 101.296090][ T5237] do_syscall_64+0x4c/0xa0 [ 101.300538][ T5237] ? clear_bhb_loop+0x30/0x80 [ 101.305262][ T5237] ? clear_bhb_loop+0x30/0x80 [ 101.309983][ T5237] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.315923][ T5237] RIP: 0033:0x7f2d5de6b159 [ 101.320375][ T5237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.340014][ T5237] RSP: 002b:00007f2d5c0c2fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 101.348476][ T5237] RAX: ffffffffffffffda RBX: 00007f2d5e0f2fa0 RCX: 00007f2d5de6b159 [ 101.356492][ T5237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.364524][ T5237] RBP: 00007f2d5df02024 R08: 0000000000000000 R09: 0000000000000000 [ 101.372540][ T5237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.380548][ T5237] R13: 00007f2d5e0f3038 R14: 00007f2d5e0f2fa0 R15: 00007fff4ed42c28 [ 101.388571][ T5237] [ 101.445740][ T5255] loop5: detected capacity change from 0 to 512 [ 101.526239][ T5255] EXT4-fs (loop5): inline encryption not supported [ 101.606779][ T5255] EXT4-fs (loop5): 1 orphan inode deleted [ 101.618155][ T4185] EXT4-fs error (device loop2): ext4_lookup:1855: inode #11: comm syz-executor: ' ' linked to parent dir [ 101.633159][ T5255] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,nombcache,delalloc,dioread_lock,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 101.713111][ T4185] EXT4-fs error (device loop2): ext4_lookup:1855: inode #11: comm syz-executor: ' ' linked to parent dir [ 102.151137][ T5283] process 'syz.4.348' launched './file1' with NULL argv: empty string added [ 102.582083][ T5290] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 102.981708][ T5297] loop1: detected capacity change from 0 to 512 [ 103.028800][ T4251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.081142][ T5297] EXT4-fs (loop1): 1 truncate cleaned up [ 103.107605][ T5297] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 103.193724][ T4251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.335590][ T4251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.360390][ T5322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.362'. [ 103.518258][ T4251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.638768][ T5335] loop4: detected capacity change from 0 to 1024 [ 103.762271][ T5335] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 103.792957][ T5335] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: inode #32: comm syz.4.366: iget: special inode unallocated [ 103.852721][ T5335] EXT4-fs (loop4): no journal found [ 103.918689][ T5335] EXT4-fs (loop4): can't get journal size [ 103.998764][ T5335] EXT4-fs (loop4): filesystem is read-only [ 104.005377][ T5335] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,noload,noblock_validity,noblock_validity,grpjquota=,,errors=continue. Quota mode: none. [ 104.080126][ T5355] loop5: detected capacity change from 0 to 512 [ 104.148144][ T5355] EXT4-fs (loop5): 1 truncate cleaned up [ 104.153894][ T5355] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,. Quota mode: none. [ 104.172332][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 104.172346][ T26] audit: type=1800 audit(1788041288.552:59): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.372" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 104.261240][ T5355] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.372: bg 0: block 465: padding at end of block bitmap is not set [ 104.288066][ T5355] EXT4-fs (loop5): Remounting filesystem read-only [ 104.404870][ T5375] loop4: detected capacity change from 0 to 1024 [ 104.477259][ T5375] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 104.542389][ T5375] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 104.594414][ T5375] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.636814][ T5375] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01c, mo2=0002] [ 104.702731][ T5375] System zones: 0-1, 3-36 [ 104.713946][ T5375] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,debug,,errors=continue. Quota mode: writeback. [ 104.739997][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 104.814176][ T5393] loop5: detected capacity change from 0 to 128 [ 104.907263][ T5393] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.939023][ T5393] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.069313][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.077738][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.085890][ T5346] device bridge_slave_0 entered promiscuous mode [ 105.094578][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.101721][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.117437][ T5346] device bridge_slave_1 entered promiscuous mode [ 105.318821][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.365324][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.644324][ T4251] device hsr_slave_0 left promiscuous mode [ 105.685959][ T4251] device hsr_slave_1 left promiscuous mode [ 105.725609][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.761305][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.790461][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.806433][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.835365][ T4251] device bridge_slave_1 left promiscuous mode [ 105.869703][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.877509][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 105.914078][ T4251] device bridge_slave_0 left promiscuous mode [ 105.920954][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.979264][ T4251] device veth1_macvtap left promiscuous mode [ 105.985394][ T4251] device veth0_macvtap left promiscuous mode [ 106.010893][ T4251] device veth1_vlan left promiscuous mode [ 106.029716][ T4251] device veth0_vlan left promiscuous mode [ 107.374974][ T5436] loop0: detected capacity change from 0 to 164 [ 107.375495][ T4251] team0 (unregistering): Port device team_slave_1 removed [ 107.467194][ T5436] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 107.469722][ T4251] team0 (unregistering): Port device team_slave_0 removed [ 107.520188][ T4251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.576892][ T4251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.779522][ T5444] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 107.784692][ T4251] bond0 (unregistering): Released all slaves [ 107.859102][ T5346] team0: Port device team_slave_0 added [ 107.865285][ T5415] netlink: 'syz.5.385': attribute type 2 has an invalid length. [ 107.878199][ T5415] netlink: 132 bytes leftover after parsing attributes in process `syz.5.385'. [ 107.906970][ T5346] team0: Port device team_slave_1 added [ 107.956186][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 107.992274][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.037465][ T5451] FAULT_INJECTION: forcing a failure. [ 108.037465][ T5451] name fail_futex, interval 1, probability 0, space 0, times 1 [ 108.059143][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.099803][ T5451] CPU: 1 PID: 5451 Comm: syz.0.396 Not tainted syzkaller #0 [ 108.107164][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.117259][ T5451] Call Trace: [ 108.120576][ T5451] [ 108.123533][ T5451] dump_stack_lvl+0x188/0x250 [ 108.128368][ T5451] ? futex_wait_queue_me+0x16e/0x440 [ 108.133699][ T5451] ? show_regs_print_info+0x20/0x20 [ 108.138940][ T5451] ? load_image+0x410/0x410 [ 108.143511][ T5451] should_fail+0x383/0x4b0 [ 108.147974][ T5451] get_futex_key+0x1a1/0x12d0 [ 108.152691][ T5451] ? futex_wait_restart+0x250/0x250 [ 108.157928][ T5451] ? __lock_acquire+0x13dc/0x7b50 [ 108.162999][ T5451] futex_wake+0x101/0x540 [ 108.167380][ T5451] ? futex_wait+0x680/0x680 [ 108.171923][ T5451] ? verify_lock_unused+0x140/0x140 [ 108.177163][ T5451] ? verify_lock_unused+0x140/0x140 [ 108.182410][ T5451] do_futex+0xd83/0x12b0 [ 108.186706][ T5451] ? vfs_write+0xaa6/0xd70 [ 108.191166][ T5451] ? futex_exit_release+0x1c0/0x1c0 [ 108.196413][ T5451] ? __context_tracking_exit+0x4c/0x80 [ 108.201931][ T5451] __se_sys_futex+0x389/0x420 [ 108.206647][ T5451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.212666][ T5451] ? __x64_sys_futex+0xf0/0xf0 [ 108.217594][ T5451] ? __x64_sys_futex+0x1d/0xf0 [ 108.222408][ T5451] do_syscall_64+0x4c/0xa0 [ 108.226877][ T5451] ? clear_bhb_loop+0x30/0x80 [ 108.231592][ T5451] ? clear_bhb_loop+0x30/0x80 [ 108.236329][ T5451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.242261][ T5451] RIP: 0033:0x7fef1750a159 [ 108.246718][ T5451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.266433][ T5451] RSP: 002b:00007fef15762028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.274921][ T5451] RAX: ffffffffffffffda RBX: 00007fef17791fa0 RCX: 00007fef1750a159 [ 108.282929][ T5451] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000000 [ 108.290940][ T5451] RBP: 00007fef175a1024 R08: 0000000000000000 R09: 0000000000000002 [ 108.299076][ T5451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.307082][ T5451] R13: 00007fef17792038 R14: 00007fef17791fa0 R15: 00007ffd98b95a88 [ 108.315232][ T5451] [ 108.330187][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.352180][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.360142][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.455193][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.472564][ T5463] program syz.4.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.572373][ T5346] device hsr_slave_0 entered promiscuous mode [ 108.585616][ T5346] device hsr_slave_1 entered promiscuous mode [ 108.609072][ T5346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.635132][ T5346] Cannot create hsr debugfs directory [ 108.996206][ T5485] netlink: 68 bytes leftover after parsing attributes in process `syz.4.405'. [ 109.126170][ T5346] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.178184][ T5346] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.217797][ T5346] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.264328][ T5346] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.279674][ T5493] loop0: detected capacity change from 0 to 512 [ 109.682459][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.782452][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.819166][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.892171][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.913377][ T5513] ------------[ cut here ]------------ [ 109.923620][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.927281][ T5513] kernel BUG at include/linux/scatterlist.h:143! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.977703][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.998006][ T5513] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 110.003468][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.004138][ T5513] CPU: 0 PID: 5513 Comm: syz.0.414 Not tainted syzkaller #0 [ 110.011339][ T4728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.018455][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.018469][ T5513] RIP: 0010:sg_init_one+0x14a/0x160 [ 110.041107][ T5513] Code: 80 c1 03 38 c1 7c cf e8 84 3a d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 6d 3a d8 fd eb c8 e8 e6 11 93 fd <0f> 0b e8 df 11 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 110.060761][ T5513] RSP: 0018:ffffc9000371f928 EFLAGS: 00010287 [ 110.066867][ T5513] RAX: ffffffff83e5fdba RBX: ffffc9000371fc40 RCX: 0000000000080000 [ 110.074971][ T5513] RDX: ffffc9000c051000 RSI: 0000000000001208 RDI: 0000000000001209 [ 110.082971][ T5513] RBP: 0000000000000000 R08: ffffc9000371fa9f R09: ffffc9000371fa88 [ 110.090962][ T5513] R10: dffffc0000000000 R11: fffff520006e3f54 R12: 1ffff920006e3f50 [ 110.098957][ T5513] R13: dffffc0000000000 R14: ffffc9000371fa80 R15: 0000000000000010 [ 110.106958][ T5513] FS: 00007fef157626c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 110.115912][ T5513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.122521][ T5513] CR2: 00007fef15740ff8 CR3: 000000005b97e000 CR4: 00000000003506f0 [ 110.130518][ T5513] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.138657][ T5513] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.146652][ T5513] Call Trace: [ 110.149950][ T5513] [ 110.152907][ T5513] software_key_eds_op+0x4f6/0xb30 [ 110.158044][ T5513] ? stack_depot_save+0x41b/0x460 [ 110.163109][ T5513] ? software_key_query+0x830/0x830 [ 110.168366][ T5513] ? asymmetric_key_eds_op+0xe9/0x130 [ 110.173781][ T5513] keyctl_pkey_e_d_s+0x208/0x300 [ 110.178751][ T5513] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 110.184449][ T5513] ? do_futex+0xdc2/0x12b0 [ 110.188889][ T5513] __se_sys_keyctl+0x6c6/0xa20 [ 110.193829][ T5513] ? __x64_sys_keyctl+0xc0/0xc0 [ 110.198721][ T5513] ? __context_tracking_exit+0x4c/0x80 [ 110.204213][ T5513] ? __lock_acquire+0x7b50/0x7b50 [ 110.209346][ T5513] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.215387][ T5513] ? lock_chain_count+0x20/0x20 [ 110.220278][ T5513] ? lockdep_hardirqs_on+0x94/0x140 [ 110.225511][ T5513] ? __x64_sys_keyctl+0x1c/0xc0 [ 110.230395][ T5513] do_syscall_64+0x4c/0xa0 [ 110.234836][ T5513] ? clear_bhb_loop+0x30/0x80 [ 110.239535][ T5513] ? clear_bhb_loop+0x30/0x80 [ 110.244246][ T5513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.250160][ T5513] RIP: 0033:0x7fef1750a159 [ 110.254608][ T5513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.274385][ T5513] RSP: 002b:00007fef15762028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 110.282832][ T5513] RAX: ffffffffffffffda RBX: 00007fef17791fa0 RCX: 00007fef1750a159 [ 110.290829][ T5513] RDX: 0000200000000880 RSI: 0000200000000780 RDI: 0000000000000019 [ 110.298825][ T5513] RBP: 00007fef175a1024 R08: 0000000000000000 R09: 0000000000000000 [ 110.306912][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.314907][ T5513] R13: 00007fef17792038 R14: 00007fef17791fa0 R15: 00007ffd98b95a88 [ 110.322909][ T5513] [ 110.325952][ T5513] Modules linked in: [ 110.332256][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 110.341361][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.161781][ T5513] ---[ end trace f036ede39dc9b2b2 ]--- [ 111.209434][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.248389][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.268309][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.275425][ T4728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.296467][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.305483][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.327175][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.348870][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.368420][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.388650][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.406962][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.426386][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.439436][ T5513] RIP: 0010:sg_init_one+0x14a/0x160 [ 111.444706][ T5513] Code: 80 c1 03 38 c1 7c cf e8 84 3a d8 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 6d 3a d8 fd eb c8 e8 e6 11 93 fd <0f> 0b e8 df 11 93 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 111.503347][ T5513] RSP: 0018:ffffc9000371f928 EFLAGS: 00010287 [ 111.526327][ T5513] RAX: ffffffff83e5fdba RBX: ffffc9000371fc40 RCX: 0000000000080000 [ 111.538392][ T5513] RDX: ffffc9000c051000 RSI: 0000000000001208 RDI: 0000000000001209 [ 111.551548][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.563613][ T5513] RBP: 0000000000000000 R08: ffffc9000371fa9f R09: ffffc9000371fa88 [ 111.573056][ T5513] R10: dffffc0000000000 R11: fffff520006e3f54 R12: 1ffff920006e3f50 [ 111.590062][ T5513] R13: dffffc0000000000 R14: ffffc9000371fa80 R15: 0000000000000010 [ 111.598409][ T5513] FS: 00007fef157626c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 111.614502][ T4251] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.652771][ T5513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.659725][ T5513] CR2: 000055cbf2caa950 CR3: 000000005b97e000 CR4: 00000000003506f0 [ 111.669625][ T5513] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.677924][ T5513] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 111.693964][ T4251] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.704376][ T5513] Kernel panic - not syncing: Fatal exception [ 111.710772][ T5513] Kernel Offset: disabled [ 111.715128][ T5513] Rebooting in 86400 seconds..