last executing test programs: 6.469373945s ago: executing program 3 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000011c0)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 4.323781306s ago: executing program 2 (id=240): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 4.323520586s ago: executing program 3 (id=241): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) 3.785158154s ago: executing program 2 (id=243): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x2, 0x0, 0x8}, 0x20) io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r4, 0x3, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x0, 0x3938700}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff39}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xc0d0}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x76}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010004}, 0x44000) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r6 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7ff, 0x20000) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) 3.742938026s ago: executing program 0 (id=246): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x800}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000380)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 2.931881772s ago: executing program 2 (id=247): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000240)="020000", 0x3}, {&(0x7f00000001c0)="00eff7f3a1c922959f4d144c871805b511b33c57ddc4b44353e5f1bb255d4d1cddb10971ab47", 0x26}], 0x2, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r3}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 2.931405452s ago: executing program 3 (id=248): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000000940)={[{@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) 2.892165494s ago: executing program 4 (id=249): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/243) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x801, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3062c}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_BROADCAST={0xa}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @loopback, 0x400}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x3, 0x2}, @timestamp, @timestamp, @timestamp, @sack_perm, @timestamp, @mss={0x2, 0x16c}, @window={0x3, 0x3, 0x42}], 0x20000041) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) 2.770121398s ago: executing program 1 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 2.172420808s ago: executing program 1 (id=251): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000240)=""/242) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @local, {[], @dest_unreach={0x1, 0x5, 0x0, 0x2, '\x00', {0xf, 0x6, "c897df", 0x101, 0x33, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, [@srh={0x29, 0x0, 0x4, 0x0, 0x1, 0x30, 0x2}], "f1a96e3d0e3a608a"}}}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r4, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c000280050007004000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r2, &(0x7f0000000200)="001adefeae804b4d45f3003b3100", 0xe, 0x44, &(0x7f0000000280)={0x11, 0x8100, r4, 0x1, 0x7, 0x6, @remote}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)=r5) 1.973060864s ago: executing program 4 (id=252): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4002}, 0x8004) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000400)="370c099069effa43de3e1404db2316447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b398aa9572540dd950307987eef2115e1bcb512bea3410ca5a9e9f827e4b13490dbbd45fc37bcd8c5527e7119bdb3043a34efc5a45e0738b959acafd2c12863045265bcbc2c1426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd00060000008056ab4bea4c825b69a7a7040000008684872b1bb9ebe0982c1bf5497091f038122d4aae27f84f", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r2}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'sha256\x00'}}) getsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f0000000040)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={0x0, 0x3, 0xff3e}) 1.838120709s ago: executing program 3 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="331e353438"], 0x138) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.772831851s ago: executing program 1 (id=254): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 1.683228614s ago: executing program 0 (id=255): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lc\x00', 0x5, 0x808, 0x80000074}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.649527695s ago: executing program 2 (id=256): clock_gettime(0x0, 0x0) setitimer(0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x803, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x4}, 0x6f) 1.588777037s ago: executing program 1 (id=257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0xe, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0xfffffffc}}, @TCA_NETEM_RATE={0x14, 0x6, {0x7f5f, 0x3, 0x5b59, 0x2}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24000000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.588042868s ago: executing program 4 (id=258): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x1000, &(0x7f0000000a80)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c944948b5b7f94b418b396b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc6cf985c884c47253cb5628f048564c7787b983a12178a341665625209818726319e89e415635023212f6a54a54c0f7f9e07eda80181d8825e410d5d76bc557dc6b0930cb490dcc224f69a72a8dd053fb5a41b78f89616c6ede820bf47c04e1a809c23ce5936017d049c810c06e6256953636dfb77cfb97622dc8ea21629a6104990e10f55730b8f92e183394275abcc78c4e403fd457d42cecf30962d3512decb1628547edfe435bf978edf2837c01ec65240537813d6f90be7e4d801a5e3c1b0a9296e7488ffcc7069137032c211d4cf6a98d52827c805b4161dde4b70e3f3549902822fb726c793f12ae28c59ff4ad0a7798d91a65f0e38e7b3f0a"], 0x1, 0x181, &(0x7f0000000580)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(0x0, 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) pipe2$9p(&(0x7f0000000080), 0x80800) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 1.51810606s ago: executing program 3 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) 1.51269588s ago: executing program 1 (id=260): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x400000000010, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) 1.496257251s ago: executing program 2 (id=261): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write(r0, &(0x7f0000000280)="0f", 0x1) openat$random(0xffffff9c, 0x0, 0x2000, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000004c0)) 1.451826182s ago: executing program 0 (id=262): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x2003}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 1.408171083s ago: executing program 0 (id=263): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x84040) epoll_create1(0x80000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}], 0x2, 0x20008000) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) socket$inet6_sctp(0xa, 0x1, 0x84) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) 1.327004116s ago: executing program 0 (id=264): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000000940)={[{@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) 1.155975322s ago: executing program 4 (id=265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) listen(r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e23, [0x3, 0xf5, 0x4, 0xc3], [0x6, 0x0, 0x10004, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xecd6}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x20044000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r3, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) accept4(r0, 0x0, 0x0, 0x0) 1.060654155s ago: executing program 4 (id=266): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r1 = io_uring_setup(0x27, &(0x7f0000000040)={0x0, 0x400c8a1, 0xc000, 0x8, 0x3a8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x3) 908.24626ms ago: executing program 4 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r3, &(0x7f0000000040)="245f9200204f8e0b", 0xdd86, 0x80804, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x1d) 807.926854ms ago: executing program 1 (id=268): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmmsg$sock(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x1}, 0xfd}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 123.464356ms ago: executing program 0 (id=269): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xffffffffffffff5b, 0xb67387bf2abb21f7}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x18, 0xff80, 0x2}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x19) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r3, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004140)={0x10, 0x3e8, 0x800, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 122.747916ms ago: executing program 3 (id=270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0xe, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0xfffffffc}}, @TCA_NETEM_RATE={0x14, 0x6, {0x7f5f, 0x3, 0x5b59, 0x2}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24000000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 2 (id=271): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 48.021540][ T4175] cgroup: Unknown subsys name 'net' [ 48.145458][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.396909][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.176770][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 51.232922][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.291132][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.331639][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.338725][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.347113][ T4192] device bridge_slave_0 entered promiscuous mode [ 51.365381][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 51.380855][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.388050][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.396513][ T4192] device bridge_slave_1 entered promiscuous mode [ 51.458536][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.465857][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.473653][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.481400][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 51.500580][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.512958][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.522150][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.529293][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.538013][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.592744][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.599961][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.607597][ T4189] device bridge_slave_0 entered promiscuous mode [ 51.622057][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.640510][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.661864][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.668948][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.677484][ T4189] device bridge_slave_1 entered promiscuous mode [ 51.686808][ T4192] team0: Port device team_slave_0 added [ 51.701760][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.708851][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.717279][ T4194] device bridge_slave_0 entered promiscuous mode [ 51.726489][ T4192] team0: Port device team_slave_1 added [ 51.742458][ T4188] team0: Port device team_slave_0 added [ 51.752747][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.760000][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.767787][ T4194] device bridge_slave_1 entered promiscuous mode [ 51.795748][ T4188] team0: Port device team_slave_1 added [ 51.817868][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.827980][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.835617][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.862044][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.880407][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.887484][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.895883][ T4193] device bridge_slave_0 entered promiscuous mode [ 51.909756][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.919356][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.926508][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.952900][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.970184][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.977268][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.985201][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.001759][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.018952][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.032121][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.039082][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.065250][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.096775][ T4189] team0: Port device team_slave_0 added [ 52.105556][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.112713][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.138703][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.155129][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.165902][ T4189] team0: Port device team_slave_1 added [ 52.190816][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.224258][ T4194] team0: Port device team_slave_0 added [ 52.238618][ T4194] team0: Port device team_slave_1 added [ 52.252229][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.259196][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.285535][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.316802][ T4192] device hsr_slave_0 entered promiscuous mode [ 52.323817][ T4192] device hsr_slave_1 entered promiscuous mode [ 52.334539][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.341753][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.349037][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.356902][ T4188] Cannot create hsr debugfs directory [ 52.364925][ T4193] team0: Port device team_slave_0 added [ 52.371267][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.378225][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.404675][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.432430][ T4193] team0: Port device team_slave_1 added [ 52.441638][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.448597][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.474853][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.507731][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.514735][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.540994][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.553057][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.560118][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.586638][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.621187][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.628162][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.654650][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.720813][ T4194] device hsr_slave_0 entered promiscuous mode [ 52.728008][ T4194] device hsr_slave_1 entered promiscuous mode [ 52.734973][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.742713][ T4194] Cannot create hsr debugfs directory [ 52.766673][ T4193] device hsr_slave_0 entered promiscuous mode [ 52.773612][ T4193] device hsr_slave_1 entered promiscuous mode [ 52.780274][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.787841][ T4193] Cannot create hsr debugfs directory [ 52.799997][ T4189] device hsr_slave_0 entered promiscuous mode [ 52.806685][ T4189] device hsr_slave_1 entered promiscuous mode [ 52.813237][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.821058][ T4189] Cannot create hsr debugfs directory [ 52.959899][ T4198] Bluetooth: hci4: command 0x0409 tx timeout [ 52.966654][ T4198] Bluetooth: hci3: command 0x0409 tx timeout [ 52.989890][ T4198] Bluetooth: hci1: command 0x0409 tx timeout [ 52.997880][ T4198] Bluetooth: hci2: command 0x0409 tx timeout [ 53.004805][ T4198] Bluetooth: hci0: command 0x0409 tx timeout [ 53.120235][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.131118][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.144267][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.153913][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.187372][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.213505][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.223303][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.242028][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.252123][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.275437][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.295422][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.304102][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.396864][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.403988][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.413495][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.441955][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.452248][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.475298][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.484583][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.508231][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.523272][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.542406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.552146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.561378][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.568547][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.578114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.587596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.596186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.610871][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.627159][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.637428][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.647016][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.657140][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.664255][ T1562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.674672][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.694665][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.704835][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.715358][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.728189][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.758463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.767377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.776120][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.783228][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.792263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.801044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.809624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.818615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.827355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.835577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.844387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.852911][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.860014][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.867908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.876560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.888538][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.901726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.911459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.937463][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.948470][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.972166][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.982718][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.992337][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.001390][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.010503][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.019113][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.027726][ T1562] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.034808][ T1562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.042680][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.051888][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.062008][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.069844][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.121574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.132866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.142262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.153032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.161647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.170389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.178705][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.185792][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.193788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.206522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.216088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.224693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.236796][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.282396][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.291771][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.300159][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.309045][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.318379][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.333414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.343615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.352738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.361586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.373852][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.385139][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.399016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.408109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.417240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.425846][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.432941][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.441075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.461480][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.472903][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.493476][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.502688][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.512468][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.523326][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.537601][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.545493][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.553792][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.562849][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.572469][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.579531][ T1562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.587379][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.598591][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.614424][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.624535][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.660724][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.693629][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.711009][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.731399][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.740573][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.749426][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.758162][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.766757][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.775606][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.783790][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.791967][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.802979][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.812497][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.839071][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.851579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.870675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.885665][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.892784][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.904011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.911657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.933367][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.955593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.966788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.977009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.992001][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.999092][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.008300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.017250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.026019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.035729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.043920][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 55.050320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.050489][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 55.065647][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 55.072889][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 55.078995][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 55.102921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.114156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.128820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.137769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.154101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.162091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.169532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.178426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.187145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.196022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.208969][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.221512][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.231111][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.261530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.271014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.279435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.289569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.305451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.315065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.329710][ T4188] device veth0_vlan entered promiscuous mode [ 55.343732][ T4192] device veth0_vlan entered promiscuous mode [ 55.365655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.374717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.391014][ T4188] device veth1_vlan entered promiscuous mode [ 55.412135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.420383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.471362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.486710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.496544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.508891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.518063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.525878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.536602][ T4188] device veth0_macvtap entered promiscuous mode [ 55.545580][ T4192] device veth1_vlan entered promiscuous mode [ 55.554925][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.568339][ T4193] device veth0_vlan entered promiscuous mode [ 55.583107][ T4188] device veth1_macvtap entered promiscuous mode [ 55.591661][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.601660][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.609637][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.617626][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.626844][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.635410][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.643472][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.659982][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.679474][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.696374][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.705320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.714081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.723737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.731690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.740445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.748994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.758085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.779380][ T4192] device veth0_macvtap entered promiscuous mode [ 55.790367][ T4192] device veth1_macvtap entered promiscuous mode [ 55.798836][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.808776][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.817741][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.827258][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.843296][ T4193] device veth1_vlan entered promiscuous mode [ 55.852578][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.862165][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.871285][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.880975][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.901389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.909959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.918535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.929311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.938107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.978758][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.992010][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.003024][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.018499][ T4194] device veth0_vlan entered promiscuous mode [ 56.043716][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.052180][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.065772][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.075931][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.084622][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.093265][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.104316][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.113176][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.121400][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.129093][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.137405][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.147382][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.158675][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.170984][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.182750][ T4194] device veth1_vlan entered promiscuous mode [ 56.203202][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.212343][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.222563][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.232126][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.241418][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.253162][ T4193] device veth0_macvtap entered promiscuous mode [ 56.263067][ T4189] device veth0_vlan entered promiscuous mode [ 56.272434][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.282238][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.291128][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.301187][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.334450][ T4193] device veth1_macvtap entered promiscuous mode [ 56.342228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.351244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.359259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.408547][ T4194] device veth0_macvtap entered promiscuous mode [ 56.417324][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.423457][ T4189] device veth1_vlan entered promiscuous mode [ 56.432280][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.460459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.468391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.478280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.489956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.510258][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.521529][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.531721][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.543532][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.555027][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.571346][ T4194] device veth1_macvtap entered promiscuous mode [ 56.587703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.598678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.607618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.619382][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.633010][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.642947][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.653908][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.665201][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.675441][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.700012][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.700504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.719129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.728300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.745043][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.754121][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.763904][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.772995][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.795525][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.797573][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.806466][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.823996][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.825659][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.842367][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.852578][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.863331][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.875987][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.887235][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.898200][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.908328][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.919430][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.929482][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.941235][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.952790][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.968824][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.977958][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.986983][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.996426][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.014356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.032845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.048865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.058444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.068072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.077576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.086509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.121184][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 57.127423][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 57.134649][ T4189] device veth0_macvtap entered promiscuous mode [ 57.146004][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 57.152380][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 57.160309][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 57.179952][ T4189] device veth1_macvtap entered promiscuous mode [ 57.193434][ T1562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.211925][ T1562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.265181][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.283495][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.300781][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.312040][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.322174][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.333878][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.343974][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.355612][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.367065][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.374613][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.383866][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.392006][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.400265][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.408790][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.443243][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.454112][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.464842][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.475510][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.485451][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.496240][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.506318][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.517385][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.532736][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.556032][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.570483][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.579223][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.599585][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.629856][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.638559][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.791473][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.802061][ T1562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.829453][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.900690][ T1562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.951176][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.960786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.997630][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.138658][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.212402][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.499060][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.508782][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.516430][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.770524][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.785109][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.805624][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.863259][ T1562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.937984][ T4293] bridge0: port 3(syz_tun) entered blocking state [ 59.092788][ T1562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.137120][ T4293] bridge0: port 3(syz_tun) entered disabled state [ 59.193261][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 59.205291][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 59.339836][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 59.446824][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 59.530708][ T4293] device syz_tun entered promiscuous mode [ 59.538215][ T4293] bridge0: port 3(syz_tun) entered blocking state [ 59.545044][ T4293] bridge0: port 3(syz_tun) entered forwarding state [ 59.553630][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 59.584000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.711643][ T4301] netlink: 'syz.4.9': attribute type 8 has an invalid length. [ 59.768284][ T668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.797682][ T668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.807736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.704514][ T4328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 60.935127][ T4333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14'. [ 62.780144][ C1] sched: RT throttling activated [ 62.804556][ T4350] loop3: detected capacity change from 0 to 512 [ 63.616000][ T4350] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.696994][ T4350] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 63.820344][ T4350] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 63.835953][ T4350] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.18: Failed to acquire dquot type 1 [ 63.909331][ T4350] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 63.921629][ T4350] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 63.937642][ T4350] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.18: Failed to acquire dquot type 1 [ 64.104824][ T4350] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.18: bg 0: block 248: padding at end of block bitmap is not set [ 64.153777][ T4350] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 64.162243][ T4367] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.245896][ T4350] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 64.271257][ T4350] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 64.351877][ T4350] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.18: Failed to acquire dquot type 1 [ 64.392221][ T4350] EXT4-fs (loop3): 1 orphan inode deleted [ 64.410985][ T4350] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.549425][ T4372] overlayfs: bad mount option "redirect_dir=off:/" [ 65.174868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 65.196247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 65.217623][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 65.239005][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 65.260393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 65.335215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 65.356612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!! [ 65.377985][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!! [ 65.399367][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 65.420748][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 65.705385][ T4350] raw_sendmsg: syz.3.18 forgot to set AF_INET. Fix it! [ 66.154747][ T4384] device syzkaller0 entered promiscuous mode [ 66.716668][ T4393] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 67.598776][ T4400] loop0: detected capacity change from 0 to 512 [ 69.019819][ T25] audit: type=1800 audit(1780455662.087:2): pid=4380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.27" name="bus" dev="ramfs" ino=32652 res=0 errno=0 [ 69.159430][ T4400] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.546705][ T4412] process 'syz.2.38' launched './file0' with NULL argv: empty string added [ 69.572433][ T4400] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.26: corrupted inode contents [ 69.637236][ T4400] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #16: comm syz.0.26: mark_inode_dirty error [ 69.704481][ T4400] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.26: corrupted inode contents [ 69.776679][ T4400] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.26: mark_inode_dirty error [ 69.900406][ T4400] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.26: corrupted inode contents [ 69.967067][ T4400] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 70.129586][ T4400] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.26: corrupted inode contents [ 70.189727][ T4400] EXT4-fs error (device loop0): ext4_truncate:4286: inode #16: comm syz.0.26: mark_inode_dirty error [ 70.224197][ T4425] loop4: detected capacity change from 0 to 256 [ 70.268591][ T4400] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 70.441533][ T4400] EXT4-fs (loop0): 1 truncate cleaned up [ 70.526430][ T4400] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,errors=remount-ro,errors=continue,resgid=0x0000000000000000,nobarrier,. Quota mode: writeback. [ 70.583196][ T4425] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 70.723153][ T4400] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.214235][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.242114][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.954982][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 78.023340][ T26] cfg80211: failed to load regulatory.db [ 78.527377][ T4470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.150504][ T4470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.482848][ T4470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.510169][ T4490] ======================================================= [ 79.510169][ T4490] WARNING: The mand mount option has been deprecated and [ 79.510169][ T4490] and is ignored by this kernel. Remove the mand [ 79.510169][ T4490] option from the mount to silence this warning. [ 79.510169][ T4490] ======================================================= [ 79.553843][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 79.610084][ T4491] device team1 entered promiscuous mode [ 79.616142][ T4491] 8021q: adding VLAN 0 to HW filter on device team1 [ 79.710371][ T4491] Zero length message leads to an empty skb [ 79.817655][ T4470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.481745][ T25] audit: type=1326 audit(1780455672.807:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 80.606429][ T4497] loop1: detected capacity change from 0 to 1024 [ 80.615470][ T25] audit: type=1326 audit(1780455672.835:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 80.659281][ T25] audit: type=1326 audit(1780455672.844:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 80.688814][ T4470] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.694475][ T25] audit: type=1326 audit(1780455672.844:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 80.732687][ T4497] hfsplus: invalid btree flag [ 80.737194][ T4470] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.749740][ T4497] hfsplus: failed to load extents file [ 80.756250][ T25] audit: type=1326 audit(1780455672.882:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 80.784271][ T4470] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.800270][ T4470] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.808768][ T25] audit: type=1326 audit(1780455672.882:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 80.928472][ T25] audit: type=1326 audit(1780455672.882:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 81.086392][ T4505] device syzkaller0 entered promiscuous mode [ 81.131003][ T25] audit: type=1326 audit(1780455672.882:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 81.155521][ T25] audit: type=1326 audit(1780455672.882:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 81.180562][ T25] audit: type=1326 audit(1780455672.882:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.1.61" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f78a9691e59 code=0x7ffc0000 [ 81.190010][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.295757][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 83.552249][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.051654][ T4537] IPVS: Error joining to the multicast group [ 84.672188][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.683074][ T4231] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 84.692835][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.896517][ T4231] usb 4-1: config 0 descriptor?? [ 84.975580][ T4231] usb 4-1: can't set config #0, error -71 [ 85.048230][ T4231] usb 4-1: USB disconnect, device number 2 [ 85.223257][ T4556] loop2: detected capacity change from 0 to 4096 [ 85.707382][ T4564] loop0: detected capacity change from 0 to 256 [ 86.877064][ T4231] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 87.307247][ T4231] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 87.324515][ T4231] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 87.353500][ T4231] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 87.462779][ T4585] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 88.515690][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 88.566255][ T4231] usb 4-1: string descriptor 0 read error: -22 [ 88.586084][ T4231] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 88.641172][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.705156][ T4231] usb 4-1: config 0 descriptor?? [ 88.712496][ T4594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.221545][ T4231] hub 4-1:0.0: bad descriptor, ignoring hub [ 91.313191][ T4231] hub: probe of 4-1:0.0 failed with error -5 [ 91.368218][ T4231] usb 4-1: USB disconnect, device number 3 [ 91.387923][ T4612] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 92.347732][ T4613] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.493740][ T4629] loop0: detected capacity change from 0 to 256 [ 92.563479][ T4629] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.582071][ T4630] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 92.658326][ T4619] bond1 (unregistering): Released all slaves [ 92.673950][ T4629] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 92.925060][ T4629] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 93.370251][ T4638] netlink: 277 bytes leftover after parsing attributes in process `syz.4.103'. [ 93.649597][ T4646] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 93.725458][ T4653] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 94.914781][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 95.043696][ T4669] device syzkaller0 entered promiscuous mode [ 95.295383][ T4658] netlink: 132 bytes leftover after parsing attributes in process `syz.1.110'. [ 95.304763][ T4658] netlink: 132 bytes leftover after parsing attributes in process `syz.1.110'. [ 95.326096][ T4658] netlink: 39 bytes leftover after parsing attributes in process `syz.1.110'. [ 96.078238][ T4683] loop2: detected capacity change from 0 to 2048 [ 96.274932][ T4683] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 96.807239][ T4707] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.118'. [ 97.031896][ T4703] loop3: detected capacity change from 0 to 512 [ 97.218223][ T4703] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.257562][ T4703] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.123: invalid indirect mapped block 32768 (level 2) [ 97.325014][ T4718] tipc: Started in network mode [ 97.328381][ T4703] EXT4-fs (loop3): 1 orphan inode deleted [ 97.354168][ T4703] EXT4-fs (loop3): 1 truncate cleaned up [ 97.354780][ T4718] tipc: Node identity 080211000001, cluster identity 4711 [ 97.359849][ T4703] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,nolazytime,,errors=continue. Quota mode: none. [ 97.410010][ T4718] tipc: Enabled bearer , priority 0 [ 97.463309][ T4718] tipc: Enabled bearer , priority 10 [ 97.475171][ T4718] tipc: Enabled bearer , priority 27 [ 97.483095][ T4718] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 97.548016][ T4724] device syzkaller0 entered promiscuous mode [ 97.662079][ T4726] loop2: detected capacity change from 0 to 2048 [ 97.743694][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 97.785904][ T4728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.131'. [ 97.812933][ T4729] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.384316][ T7] tipc: Node number set to 134418688 [ 100.035615][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 100.141011][ T4750] syz.4.139 uses obsolete (PF_INET,SOCK_PACKET) [ 100.507002][ T7] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 100.568899][ T4762] loop4: detected capacity change from 0 to 256 [ 100.666697][ C1] sd 0:0:1:0: tag#7899 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 100.676640][ C1] sd 0:0:1:0: tag#7899 CDB: Verify(12) [ 100.682161][ C1] sd 0:0:1:0: tag#7899 CDB[00]: af 49 aa 3c 6b ca 7e 7d d0 6a bb ab a9 1b 89 c0 [ 100.691204][ C1] sd 0:0:1:0: tag#7899 CDB[10]: 9e 14 c4 4c 25 ce ec e4 4c 56 b5 12 9a bf 75 7a [ 100.700247][ C1] sd 0:0:1:0: tag#7899 CDB[20]: 6f [ 101.027188][ T4762] FAT-fs (loop4): Directory bread(block 64) failed [ 101.034152][ T4762] FAT-fs (loop4): Directory bread(block 65) failed [ 101.040785][ T4762] FAT-fs (loop4): Directory bread(block 66) failed [ 101.047418][ T4762] FAT-fs (loop4): Directory bread(block 67) failed [ 101.054089][ T4762] FAT-fs (loop4): Directory bread(block 68) failed [ 101.060641][ T4762] FAT-fs (loop4): Directory bread(block 69) failed [ 101.067328][ T4762] FAT-fs (loop4): Directory bread(block 70) failed [ 101.074280][ T4762] FAT-fs (loop4): Directory bread(block 71) failed [ 101.080873][ T4762] FAT-fs (loop4): Directory bread(block 72) failed [ 101.087575][ T4762] FAT-fs (loop4): Directory bread(block 73) failed [ 102.175395][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.278308][ T4767] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 102.330299][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 102.351483][ T7] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 102.388095][ T7] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 103.490146][ T7] usb 3-1: string descriptor 0 read error: -22 [ 103.503641][ T7] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 103.661100][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.832426][ T7] usb 3-1: can't set config #1, error -71 [ 103.839850][ T7] usb 3-1: USB disconnect, device number 2 [ 104.851009][ T4231] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 105.204967][ T4177] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.500046][ T4177] usb 4-1: Using ep0 maxpacket: 8 [ 105.651444][ T4177] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.907761][ T4177] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 105.942669][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.966427][ T4177] usb 4-1: Product: syz [ 105.970748][ T4177] usb 4-1: Manufacturer: syz [ 105.978740][ T4177] usb 4-1: SerialNumber: syz [ 105.992042][ T4231] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 106.002428][ T4177] usb 4-1: config 0 descriptor?? [ 106.005691][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.050740][ T4231] usb 1-1: config 0 has no interface number 0 [ 106.059785][ T4177] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 106.071374][ T4231] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.106303][ T4231] usb 1-1: config 0 interface 41 has no altsetting 0 [ 106.291302][ T4231] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 106.300435][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.315563][ T4177] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 106.328484][ T4231] usb 1-1: Product: syz [ 106.335690][ T4177] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 106.341329][ T4231] usb 1-1: Manufacturer: syz [ 106.369838][ T4231] usb 1-1: SerialNumber: syz [ 106.392357][ T4231] usb 1-1: config 0 descriptor?? [ 106.433191][ T4231] CoreChips: probe of 1-1:0.41 failed with error -22 [ 106.440845][ T4236] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 106.911273][ T4236] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.033308][ T4236] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 107.058329][ T4236] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 107.085325][ T4236] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 107.477935][ T4236] usb 5-1: string descriptor 0 read error: -22 [ 107.485519][ T4236] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 107.500217][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.568170][ T4236] usb 5-1: low speed audio streaming not supported [ 107.582438][ T4236] usb 5-1: low speed audio streaming not supported [ 107.633738][ T4843] device syzkaller0 entered promiscuous mode [ 108.761954][ T4198] usb 4-1: USB disconnect, device number 4 [ 109.019376][ T4236] usb 5-1: 6:0: cannot get min/max values for control 4 (id 6) [ 109.109137][ T4865] loop3: detected capacity change from 0 to 2048 [ 109.618778][ T4865] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 109.778892][ T7] usb 1-1: USB disconnect, device number 2 [ 109.788733][ T4236] usb 5-1: USB disconnect, device number 2 [ 109.968385][ T4879] loop0: detected capacity change from 0 to 256 [ 110.122764][ T4879] FAT-fs (loop0): Directory bread(block 64) failed [ 110.129442][ T4879] FAT-fs (loop0): Directory bread(block 65) failed [ 110.136069][ T4879] FAT-fs (loop0): Directory bread(block 66) failed [ 110.142691][ T4879] FAT-fs (loop0): Directory bread(block 67) failed [ 110.149394][ T4879] FAT-fs (loop0): Directory bread(block 68) failed [ 110.156113][ T4879] FAT-fs (loop0): Directory bread(block 69) failed [ 110.163250][ T4879] FAT-fs (loop0): Directory bread(block 70) failed [ 110.169796][ T4879] FAT-fs (loop0): Directory bread(block 71) failed [ 110.176477][ T4879] FAT-fs (loop0): Directory bread(block 72) failed [ 110.183068][ T4879] FAT-fs (loop0): Directory bread(block 73) failed [ 110.408076][ T4884] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.175'. [ 111.318212][ T4876] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 111.433673][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.534690][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 111.574435][ T25] kauditd_printk_skb: 68 callbacks suppressed [ 111.574449][ T25] audit: type=1800 audit(2000000022.973:81): pid=4894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.181" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 112.246848][ T4893] bridge1: port 1(veth3) entered blocking state [ 112.346087][ T4893] bridge1: port 1(veth3) entered disabled state [ 112.556543][ T4893] device veth3 entered promiscuous mode [ 112.674488][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 112.722747][ T4898] bridge1: port 2(veth5) entered blocking state [ 112.729384][ T4898] bridge1: port 2(veth5) entered disabled state [ 112.736838][ T4898] device veth5 entered promiscuous mode [ 114.461431][ T4942] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.194'. [ 115.373496][ T4945] loop3: detected capacity change from 0 to 256 [ 115.650083][ T4958] netlink: 'syz.4.201': attribute type 10 has an invalid length. [ 115.756564][ T4945] FAT-fs (loop3): Directory bread(block 64) failed [ 115.763766][ T4945] FAT-fs (loop3): Directory bread(block 65) failed [ 115.770406][ T4945] FAT-fs (loop3): Directory bread(block 66) failed [ 115.777031][ T4945] FAT-fs (loop3): Directory bread(block 67) failed [ 115.783626][ T4945] FAT-fs (loop3): Directory bread(block 68) failed [ 115.790280][ T4945] FAT-fs (loop3): Directory bread(block 69) failed [ 115.796949][ T4945] FAT-fs (loop3): Directory bread(block 70) failed [ 115.803483][ T4945] FAT-fs (loop3): Directory bread(block 71) failed [ 115.810151][ T4945] FAT-fs (loop3): Directory bread(block 72) failed [ 115.816727][ T4945] FAT-fs (loop3): Directory bread(block 73) failed [ 116.763437][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 118.841655][ T4997] loop2: detected capacity change from 0 to 2048 [ 119.048376][ T4997] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 119.091432][ T4997] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 119.158766][ T4997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.289088][ T5005] loop3: detected capacity change from 0 to 256 [ 119.296610][ T25] audit: type=1800 audit(2000000030.194:82): pid=4997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.211" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 119.501102][ T25] audit: type=1800 audit(2000000030.381:83): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.212" name="file1" dev="loop3" ino=1048601 res=0 errno=0 [ 119.533619][ T5005] exFAT-fs (loop3): hint_cluster is invalid (17) [ 119.599918][ T5005] exFAT-fs (loop3): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 119.619587][ T5005] exFAT-fs (loop3): Filesystem has been set read-only [ 119.630178][ T5005] exFAT-fs (loop3): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 119.648697][ T5011] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.047359][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 121.713924][ T5031] bridge1: port 1(erspan0) entered blocking state [ 121.755002][ T5031] bridge1: port 1(erspan0) entered disabled state [ 121.815431][ T5031] device erspan0 entered promiscuous mode [ 121.827264][ T5031] bridge1: port 1(erspan0) entered blocking state [ 121.834110][ T5031] bridge1: port 1(erspan0) entered forwarding state [ 122.574312][ T4231] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 122.981345][ T5049] device bridge1 entered promiscuous mode [ 122.991655][ T5049] team0: Port device bridge1 added [ 123.018175][ T5049] device bridge2 entered promiscuous mode [ 123.026937][ T5049] team0: Port device bridge2 added [ 123.043481][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.056847][ T5049] bridge0: port 3(team0) entered blocking state [ 123.063147][ T5049] bridge0: port 3(team0) entered disabled state [ 123.069910][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.084897][ T4231] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 123.087365][ T5049] device team0 entered promiscuous mode [ 123.094518][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.100100][ T5049] device team_slave_0 entered promiscuous mode [ 123.114670][ T5049] device team_slave_1 entered promiscuous mode [ 123.121935][ T4231] usb 3-1: config 0 descriptor?? [ 123.133638][ T5049] bridge0: port 3(team0) entered blocking state [ 123.139960][ T5049] bridge0: port 3(team0) entered forwarding state [ 127.117503][ T4231] usbhid 3-1:0.0: can't add hid device: -71 [ 127.123550][ T4231] usbhid: probe of 3-1:0.0 failed with error -71 [ 127.189432][ T4231] usb 3-1: USB disconnect, device number 3 [ 127.886540][ T5098] Error parsing options; rc = [-22] [ 128.001249][ T5094] tipc: Failed to remove unknown binding: 66,0,0/0:2752541303/2752541305 [ 128.535258][ T5094] tipc: Failed to remove unknown binding: 66,0,0/0:2752541303/2752541304 [ 128.558893][ T5094] tipc: Failed to remove unknown binding: 66,0,0/0:2752541303/2752541305 [ 128.622804][ T5094] tipc: Failed to remove unknown binding: 66,0,0/0:2752541303/2752541304 [ 128.639801][ T5103] loop3: detected capacity change from 0 to 2048 [ 128.675515][ T5105] loop4: detected capacity change from 0 to 512 [ 128.743795][ T5107] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.775506][ T5105] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.249: invalid block [ 128.784040][ T5107] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.800353][ T5107] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.804797][ T5105] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.249: invalid indirect mapped block 10 (level 1) [ 128.825929][ T5107] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.835846][ T5105] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.249: invalid indirect mapped block 8 (level 1) [ 128.836256][ T5107] device geneve2 entered promiscuous mode [ 128.871032][ T5105] EXT4-fs (loop4): 1 truncate cleaned up [ 128.878211][ T5105] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 128.878398][ T5107] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 128.914718][ T5107] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 128.978615][ T5107] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 128.985526][ T5103] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 129.072766][ T5107] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.724285][ T5123] device bridge2 entered promiscuous mode [ 129.938690][ T5132] syz.2.256 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.017900][ T5137] loop4: detected capacity change from 0 to 16 [ 130.158835][ T5147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.175521][ T4235] wlan1: authenticate with 08:02:11:00:00:00 [ 130.207976][ T4235] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 130.261346][ T5147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.276726][ T144] wlan1: authenticated [ 130.284000][ T4546] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 130.310318][ T5153] loop0: detected capacity change from 0 to 2048 [ 130.321105][ T5151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.322540][ T144] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 130.353252][ T144] wlan1: associated [ 130.517347][ T5153] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 130.785497][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 131.504370][ T5174] device syzkaller0 entered promiscuous mode [ 131.593390][ T5178] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 131.605141][ T5178] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 131.613570][ T5178] CPU: 1 PID: 5178 Comm: syz.2.271 Not tainted syzkaller #0 [ 131.620872][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.630946][ T5178] RIP: 0010:fq_codel_enqueue+0xd71/0x1600 [ 131.636693][ T5178] Code: 24 08 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 24 73 ab f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 01 73 ab f9 48 ba 00 00 00 00 00 fc [ 131.656310][ T5178] RSP: 0018:ffffc9000331f660 EFLAGS: 00010246 [ 131.662388][ T5178] RAX: 0000000000000000 RBX: 1ffff92000663f1c RCX: 1ffff1100c3d495a [ 131.670371][ T5178] RDX: dffffc0000000000 RSI: 0000000000000995 RDI: 0000000000000996 [ 131.678344][ T5178] RBP: ffffc9000331f7b8 R08: ffffffff901d818f R09: 1ffffffff203b031 [ 131.686323][ T5178] R10: dffffc0000000000 R11: fffffbfff203b032 R12: 0000000000000000 [ 131.694314][ T5178] R13: ffff8880606a6000 R14: 0000000000000000 R15: 0000000000000000 [ 131.702293][ T5178] FS: 00007fcaf38516c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 131.711234][ T5178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.717847][ T5178] CR2: 0000200000010000 CR3: 000000005391a000 CR4: 00000000003506e0 [ 131.725814][ T5178] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.733768][ T5178] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.741725][ T5178] Call Trace: [ 131.744986][ T5178] [ 131.747905][ T5178] ? INET_ECN_set_ce+0x950/0x950 [ 131.752838][ T5178] ? do_raw_spin_lock+0x128/0x2f0 [ 131.757855][ T5178] ? __rwlock_init+0x140/0x140 [ 131.762717][ T5178] ? ieee80211_monitor_select_queue+0x12e/0x240 [ 131.768980][ T5178] dev_qdisc_enqueue+0x48/0x210 [ 131.773849][ T5178] __dev_queue_xmit+0xc25/0x2f80 [ 131.778800][ T5178] ? exc_page_fault+0x88/0x100 [ 131.783579][ T5178] ? dev_queue_xmit+0x20/0x20 [ 131.788254][ T5178] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 131.793808][ T5178] ? packet_cached_dev_get+0x270/0x270 [ 131.799269][ T5178] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 131.805252][ T5178] packet_sendmsg+0x3dba/0x5060 [ 131.810113][ T5178] ? __might_sleep+0xf0/0xf0 [ 131.814710][ T5178] ? aa_sk_perm+0x7dc/0x910 [ 131.819211][ T5178] ? packet_getsockopt+0x9a0/0x9a0 [ 131.824324][ T5178] ? aa_sock_msg_perm+0x94/0x150 [ 131.829262][ T5178] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 131.834543][ T5178] ? security_socket_sendmsg+0x7c/0xa0 [ 131.840012][ T5178] __sys_sendto+0x46d/0x620 [ 131.844521][ T5178] ? __ia32_sys_getpeername+0x80/0x80 [ 131.849884][ T5178] ? __lock_acquire+0x7d10/0x7d10 [ 131.854890][ T5178] ? lock_chain_count+0x20/0x20 [ 131.859720][ T5178] ? vtime_user_exit+0x2c8/0x3e0 [ 131.864637][ T5178] __x64_sys_sendto+0xda/0xf0 [ 131.869296][ T5178] do_syscall_64+0x4c/0xa0 [ 131.873692][ T5178] ? clear_bhb_loop+0x30/0x80 [ 131.878378][ T5178] ? clear_bhb_loop+0x30/0x80 [ 131.883034][ T5178] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.888903][ T5178] RIP: 0033:0x7fcaf55f7e59 [ 131.893302][ T5178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.912888][ T5178] RSP: 002b:00007fcaf3851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 131.921283][ T5178] RAX: ffffffffffffffda RBX: 00007fcaf5870fa0 RCX: 00007fcaf55f7e59 [ 131.929234][ T5178] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 131.937207][ T5178] RBP: 00007fcaf568dd6f R08: 0000200000000140 R09: 0000000000000014 [ 131.945171][ T5178] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 131.953154][ T5178] R13: 00007fcaf5871038 R14: 00007fcaf5870fa0 R15: 00007ffe3595eb68 [ 131.961113][ T5178] [ 131.964121][ T5178] Modules linked in: [ 131.968120][ T5178] ---[ end trace 1efb83b48f3d3f8c ]--- [ 131.973581][ T5178] RIP: 0010:fq_codel_enqueue+0xd71/0x1600 [ 131.979286][ T5178] Code: 24 08 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 24 73 ab f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 01 73 ab f9 48 ba 00 00 00 00 00 fc [ 131.998889][ T5178] RSP: 0018:ffffc9000331f660 EFLAGS: 00010246 [ 132.004955][ T5178] RAX: 0000000000000000 RBX: 1ffff92000663f1c RCX: 1ffff1100c3d495a [ 132.012920][ T5178] RDX: dffffc0000000000 RSI: 0000000000000995 RDI: 0000000000000996 [ 132.020871][ T5178] RBP: ffffc9000331f7b8 R08: ffffffff901d818f R09: 1ffffffff203b031 [ 132.028838][ T5178] R10: dffffc0000000000 R11: fffffbfff203b032 R12: 0000000000000000 [ 132.036801][ T5178] R13: ffff8880606a6000 R14: 0000000000000000 R15: 0000000000000000 [ 132.044767][ T5178] FS: 00007fcaf38516c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 132.053696][ T5178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.060276][ T5178] CR2: 0000200000010000 CR3: 000000005391a000 CR4: 00000000003506e0 [ 132.068245][ T5178] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.076201][ T5178] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 132.084211][ T5178] Kernel panic - not syncing: Fatal exception in interrupt [ 132.091623][ T5178] Kernel Offset: disabled [ 132.095938][ T5178] Rebooting in 86400 seconds..