last executing test programs: 2m38.10982466s ago: executing program 0 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m37.102501302s ago: executing program 0 (id=435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) syz_open_dev$dvb_frontend(0x0, 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m30.863796051s ago: executing program 0 (id=440): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 2m29.870641413s ago: executing program 0 (id=441): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$eJzs3b9vW1sdAPDvdeImL8996YM3AAJeeRQKqur8aBtVZaBdQKiqhKiYGNqQuFEUu47ipDShQzqyI1GJCf4ENgakTgxsbLCxlAGpQAVqkBiM7vVt6iZxYl5+uLU/H+nm3nOu4+85ds85vqe5PgEMrLMRsRkRpyLibkSM5/lJvsX11pY+7uWLR3NbLx7NJdFs3v5Hkp1P86Ltd1Lv5885GhE/+G7Ej5PdcRvrG0uz1WplJU9PrNaWJxrrGxcXC3nO9MzUzOTVS1emj6yuH9d+8/w7izd/+LvffunZHze/+dO0WKWfnc7OtdfjKLWqXoxSW95wRNw8jmA9Mpz/++Hdk7a2z0TEJ1n7H4+h7N0EAPpZszkezfH2NADQ79Lr/1IkhXI+F1CKQqFcbs3hfRRjhWq9sXphvL52fz6yOawzUSzcW6xWJvO5wjNRTNL0VHb8Oj0dm2+kL0XEhxHx85H3snR5rl6d7+UHHwAYYO/vGP//PdIa/wGAPjfa6wIAACfO+A8Ag8f4DwCD5/8Y/90dCAB9wvU/AAwe4z8ADJ4Dx//HJ1MOAOBEfP/WrXRrbuXffz3/YH3tW6UHF+crjaVybW2uPFdfWS4v1OsL1Up5rtnMf63j1z1X6/Xlqcvbycb6xp1afe3+6p3F2uxC5U6leAJ1AgD29+HHT/+cRMTmtfeyLdoGd2M19LdCrwsA9MxQrwsA9Iz7eWBwdXGNbxoA+tweS/S+oeOfCD2x+Cu8q85/3vw/DKpu5//dIgT959PN/3/7yMsBnDzz/zC4ms3Emv8AMGDM8QOH+v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGFClbEsK5Wwt8M30Z6FcjjgdEWeimNxbrFYmI+KDiPjTSHEkTU/1utAAwCEV/pbk63+dHz9X2nn2VPKfkWwfET/55e1fPJxdXV2ZSvP/uZ2/+iTPnz7ViwoAAO2u785qjdP5vu1C/uWLR3OvtpMs4vMbrcVF07hb+dY6MxzD2X40ihEx9q8kT7ekn1eGjiD+5uOI+Nzr+j9si1DK5kBaK5/ujJ/GPn0M8V+//jvjF96IX8jOpfti9lp89gjKAoPm6Y1WP5m3vbSJ5e2vEGez/d7tfzTroQ7vVf+3tav/K2z3f0O74idZmz+7nd6/JM8v//57uzKb461zjyO+MLxX/GQ7ftKh/z3XZR3/8sUvf9LpXPNXEedj7/gttaybnVitLU801jcuLtZmFyoLlfvT0zNTM5NXL12ZnsjmqFs//7BXjL9fu/BBp/hp/cc6xB89oP5f67L+v/7v3R99ZZ/43/jq3u//R/vET8fEr3cZf3bsesflu9P48x3qf9D7f6HL+M/+ujHf5UMBgBPQWN9Ymq1WKysHHKSfNQ96jIOeHEQc8nliM6LntejLg2LX7evtO+h1zwQct/ZhBAAAAAAAAAAAAAAAeDs11jeWRqLDbUClo7pBDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7H/wIAAP//L93NTg==") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 2m27.087096373s ago: executing program 0 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r1, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 2m24.526785854s ago: executing program 0 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 2m23.72337564s ago: executing program 32 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 22.398979108s ago: executing program 4 (id=804): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000) 15.405946042s ago: executing program 5 (id=816): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 12.975719512s ago: executing program 2 (id=822): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x8, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001ac0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) 12.487087526s ago: executing program 1 (id=823): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) open(0x0, 0x24a041, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) 12.484945706s ago: executing program 3 (id=824): r0 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r0, 0x0, 0x66) r1 = socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14, 0x3ed, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3ed, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12.168091856s ago: executing program 5 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x3) 11.350165189s ago: executing program 3 (id=826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x81, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, 0x0) r2 = fsopen(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x400c000) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) 11.251611452s ago: executing program 1 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 9.802806635s ago: executing program 2 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r5, r3, 0x0) 9.759076616s ago: executing program 5 (id=829): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f0000000200)=@generic, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/237}], 0x0, &(0x7f00000004c0)=""/108}, 0xf29d}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r5, @broadcast, @local}, 0xc) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 9.739651176s ago: executing program 1 (id=830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r7, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 9.61580932s ago: executing program 4 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0xc00000000000018, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 8.433967854s ago: executing program 2 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r4, 0x29, 0x1a, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7f03) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) 8.433807744s ago: executing program 5 (id=833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 8.429758094s ago: executing program 4 (id=834): syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.367771014s ago: executing program 1 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0xf00, 0x1000) fanotify_mark(r3, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 6.365095164s ago: executing program 3 (id=836): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000004c0)='.\x00', 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 6.364695854s ago: executing program 5 (id=837): r0 = socket$inet6(0xa, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 6.364533964s ago: executing program 2 (id=838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 6.17099578s ago: executing program 4 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.832901919s ago: executing program 1 (id=840): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 4.831848849s ago: executing program 4 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4.720907202s ago: executing program 3 (id=842): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x7}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00') 4.717798023s ago: executing program 2 (id=843): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80}, 0x2c) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 1.111717747s ago: executing program 3 (id=844): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) recvfrom(r0, 0x0, 0x0, 0x40000073, 0x0, 0x0) 953.975192ms ago: executing program 3 (id=845): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000200)="00b247", 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00e607"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 928.021082ms ago: executing program 4 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r4, 0x29, 0x1a, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7f03) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) 921.269553ms ago: executing program 1 (id=856): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103840) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a0677bc45ff810500004277000058000b480400945f64009400050028925a01000000020000008000f07ffeffe809000000fff5dd000000100001000c081000418e0000070031d0", 0x58}], 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x8000005, 0x4) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffff6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000540)=""/17, 0xb}, {&(0x7f0000000ac0)=""/129, 0x81}], 0x3, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/125, 0x7d}, {0x0}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/248, 0xf8}, {&(0x7f0000004fc0)=""/4113, 0x1009}, {0x0}], 0x7, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000002000)=""/183, 0xb7}], 0x4, &(0x7f0000000d80)=""/188, 0xbc}, 0x5}, {{0x0, 0x0, &(0x7f0000002d40), 0x58}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/53, 0x35}], 0x1, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_clone(0xa8140180, 0x0, 0x0, 0x0, 0x0, 0x0) 920.600523ms ago: executing program 5 (id=847): r0 = socket(0x10, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000400)={0x0}}, 0x40000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%+9llu \x00'}, 0x20) ioctl(r2, 0x9, &(0x7f00000005c0)="491b06265dfe621d6f33a98f") bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x9100}, [@IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINKMODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 0s ago: executing program 2 (id=848): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 40.573760][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.583519][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. syzkaller login: [ 63.677792][ T4176] cgroup: Unknown subsys name 'net' [ 63.795358][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.312731][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.814339][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.853767][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.863884][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.924430][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.043987][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 67.074626][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.081914][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.090867][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.100255][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.107339][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.115416][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.143367][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.150603][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.158641][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.166573][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.174749][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.183348][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.207851][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.218184][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.225688][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.234138][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.242168][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.250371][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.258593][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.266034][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.276849][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.284848][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.303057][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.312469][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.320093][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.328093][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.389956][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.413476][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.424388][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.435704][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.448133][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.461639][ T4191] team0: Port device team_slave_0 added [ 67.481848][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.515783][ T4191] team0: Port device team_slave_1 added [ 67.530060][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.537161][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.545798][ T4200] device bridge_slave_0 entered promiscuous mode [ 67.562579][ T4189] team0: Port device team_slave_0 added [ 67.588157][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.595554][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.604404][ T4200] device bridge_slave_1 entered promiscuous mode [ 67.612983][ T4189] team0: Port device team_slave_1 added [ 67.628442][ T4190] team0: Port device team_slave_0 added [ 67.636654][ T4190] team0: Port device team_slave_1 added [ 67.645625][ T4192] team0: Port device team_slave_0 added [ 67.653111][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.660384][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.686699][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.705595][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.712744][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.738890][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.764704][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.775601][ T4192] team0: Port device team_slave_1 added [ 67.801939][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.818863][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.826221][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.852648][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.865448][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.872509][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.898615][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.911097][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.918160][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.944979][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.988155][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.002806][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.029296][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.047163][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.054297][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.080291][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.104129][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.111293][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.124842][ T4200] team0: Port device team_slave_0 added [ 68.132276][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.139840][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.167027][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.197379][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.204270][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.211402][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.219655][ T4189] Cannot create hsr debugfs directory [ 68.226467][ T4200] team0: Port device team_slave_1 added [ 68.321540][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.328545][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.354629][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.367589][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.374768][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.400954][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.427570][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.434636][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.441798][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.449476][ T4190] Cannot create hsr debugfs directory [ 68.462744][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.469934][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 68.469934][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 68.471492][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 68.476222][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 68.495218][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.502193][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.509958][ T4192] Cannot create hsr debugfs directory [ 68.549066][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 68.639843][ T4200] device hsr_slave_0 entered promiscuous mode [ 68.646850][ T4200] device hsr_slave_1 entered promiscuous mode [ 68.653723][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.661482][ T4200] Cannot create hsr debugfs directory [ 68.871898][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.884658][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.894988][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.905794][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.967971][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.982544][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.997342][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.025978][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.078490][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.090224][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.107019][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.128547][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.139661][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.167921][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.200148][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.208788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.221488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.229816][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.253720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.263705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.273836][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.281201][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.295051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.310941][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.329826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.338683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.352201][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.359472][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.370476][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.401681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.447365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.457154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.466999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.477497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.491351][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.504240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.514797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.534224][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.548663][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.563108][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.572617][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.583370][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.592619][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.605221][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.616923][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.634023][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.663308][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.682337][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.691067][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.701126][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.709179][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.719423][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.747498][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.793736][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.810501][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.819466][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.826808][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.852799][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.861644][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.873330][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.882413][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.889555][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.902954][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.914820][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.927429][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.934584][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.948468][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.983417][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.992220][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.004360][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.014381][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.021541][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.033970][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.051140][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.066898][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.103043][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.118560][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.128711][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.138288][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.147364][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.156931][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.166137][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.175297][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.185634][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.193866][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.203477][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.211611][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.219720][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.228275][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.237353][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.245804][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.264331][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.276259][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.288184][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.301139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.311234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.320800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.329791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.339452][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.353130][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.362051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.375713][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.401175][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.417918][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.426463][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.442768][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.455609][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.462774][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.477420][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.486304][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.495048][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.502202][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.511919][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.520986][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.531301][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.538405][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.546391][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.555040][ T2285] Bluetooth: hci1: command 0x041b tx timeout [ 70.561502][ T2285] Bluetooth: hci0: command 0x041b tx timeout [ 70.570300][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.578045][ T2285] Bluetooth: hci3: command 0x041b tx timeout [ 70.585765][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.593671][ T2285] Bluetooth: hci2: command 0x041b tx timeout [ 70.614609][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.629424][ T2285] Bluetooth: hci4: command 0x041b tx timeout [ 70.640448][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.655737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.665350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.676557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.685902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.695132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.704751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.715382][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.722539][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.771736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.781708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.799909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.815913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.825468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.841778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.855948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.911572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.920959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.931514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.940677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.950556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.959209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.969433][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.979382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.989689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.000115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.008780][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.017591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.025674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.034228][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.044087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.053037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.062153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.070546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.082496][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.090356][ T4189] device veth0_vlan entered promiscuous mode [ 71.101989][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.128038][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.136929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.148362][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.168303][ T4189] device veth1_vlan entered promiscuous mode [ 71.219827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.230509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.296597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.309760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.331095][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.345236][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.357093][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.357243][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.384906][ T4189] device veth0_macvtap entered promiscuous mode [ 71.399876][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.410070][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.417939][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.434475][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.445815][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.460810][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.476365][ T4191] device veth0_vlan entered promiscuous mode [ 71.521795][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.535076][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.546703][ T4189] device veth1_macvtap entered promiscuous mode [ 71.557300][ T4191] device veth1_vlan entered promiscuous mode [ 71.596532][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.607364][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.617833][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.626503][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.635553][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.652884][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.671135][ T4190] device veth0_vlan entered promiscuous mode [ 71.680261][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.687804][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.698505][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.706810][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.716329][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.725890][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.734980][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.747222][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.755418][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.780302][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.789416][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.798244][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.807474][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.827001][ T4190] device veth1_vlan entered promiscuous mode [ 71.841010][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.850518][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.860694][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.869838][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.877295][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.900079][ T4191] device veth0_macvtap entered promiscuous mode [ 71.916107][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.930112][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.951583][ T4191] device veth1_macvtap entered promiscuous mode [ 72.023498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.032833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.042637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.053614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.062941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.075848][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.087538][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.100669][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.126942][ T4190] device veth0_macvtap entered promiscuous mode [ 72.146760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.156212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.166834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.176524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.186793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.197808][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.215673][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.227507][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.253242][ T4190] device veth1_macvtap entered promiscuous mode [ 72.273449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.288431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.298839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.307614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.317407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.325861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.335370][ T4200] device veth0_vlan entered promiscuous mode [ 72.344997][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.354441][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.364295][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.373368][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.409914][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.417951][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.432153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.447112][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.459509][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.475865][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.488669][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.505182][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.533603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.546608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.575431][ T4200] device veth1_vlan entered promiscuous mode [ 72.588552][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.598100][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.607128][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.620817][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.633806][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 72.640040][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 72.646078][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.646226][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 72.655955][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.656003][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.681671][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.685762][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 72.702578][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.711660][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 72.718314][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.729179][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.740188][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.768272][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.782390][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.793701][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.804498][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.820268][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.855602][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.907046][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.921080][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.943764][ T4192] device veth0_vlan entered promiscuous mode [ 72.962619][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.975293][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.984755][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.995269][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.005185][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.027449][ T4200] device veth0_macvtap entered promiscuous mode [ 73.069315][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.077592][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.106292][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.120102][ T4200] device veth1_macvtap entered promiscuous mode [ 73.157477][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.176521][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.218311][ T4192] device veth1_vlan entered promiscuous mode [ 73.277544][ T4192] device veth0_macvtap entered promiscuous mode [ 73.295291][ T4192] device veth1_macvtap entered promiscuous mode [ 73.340377][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.352349][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.362672][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.374279][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.384587][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.395100][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.406815][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.421157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.725484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.777121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.858183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.905802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.014209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.026657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.039035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.048026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.081849][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.096074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.105301][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.123738][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.141565][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.154726][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.170939][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.188286][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.218646][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.231440][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.285311][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.302758][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.324126][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.337561][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.347531][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.356607][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.365557][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.379562][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.391674][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.402633][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.414853][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.425284][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.436591][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.446757][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.458089][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.470612][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.497931][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.507278][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.519130][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.537411][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.573786][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.583786][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.596010][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.605945][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.618454][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.628723][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.644735][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.655015][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.665774][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.680096][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.703294][ T4282] device bridge1 entered promiscuous mode [ 74.709611][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 74.715649][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 74.727392][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 74.734172][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 74.744864][ T4282] team0: Port device bridge1 added [ 74.756444][ T4283] device bridge2 entered promiscuous mode [ 74.771037][ T4283] team0: Port device bridge2 added [ 74.776734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.788749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.797700][ T4245] Bluetooth: hci4: command 0x0419 tx timeout [ 74.815485][ T4284] bridge0: port 3(team0) entered blocking state [ 74.822263][ T4284] bridge0: port 3(team0) entered disabled state [ 74.831496][ T4284] device team0 entered promiscuous mode [ 74.837065][ T4284] device team_slave_0 entered promiscuous mode [ 74.846326][ T4284] device team_slave_1 entered promiscuous mode [ 74.855608][ T4284] bridge0: port 3(team0) entered blocking state [ 74.862232][ T4284] bridge0: port 3(team0) entered forwarding state [ 74.888267][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.918989][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.928107][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.945452][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.084874][ T4288] device syzkaller0 entered promiscuous mode [ 75.112999][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.125143][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.268624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.367940][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.386198][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.448291][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.452925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.488768][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.493937][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.505187][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.567451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.600547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.609703][ T4348] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 79.678532][ T4319] loop1: detected capacity change from 0 to 32768 [ 79.798062][ T4319] jfs_lookup: dtSearch returned -5 [ 79.967207][ T4354] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 79.983612][ T4353] IPVS: stopping master sync thread 4354 ... [ 80.377135][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 80.394550][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 80.524738][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 81.411465][ T4367] loop1: detected capacity change from 0 to 2048 [ 81.488269][ T4372] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.034988][ T4367] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 82.444672][ T4383] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 82.926976][ T4389] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.29'. [ 83.233085][ T4387] binder: 4386:4387 ioctl c0306201 200000000080 returned -14 [ 83.689316][ T4392] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.711091][ T4391] loop0: detected capacity change from 0 to 2048 [ 83.925834][ T4391] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 83.981401][ T4370] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 83.995595][ T4391] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 84.048220][ T4391] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 84.088665][ T4391] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 84.133720][ T4391] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 84.177031][ T4391] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 84.239079][ T4391] UDF-fs: Scanning with blocksize 512 failed [ 84.260181][ T4391] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 84.309777][ T4391] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 84.357620][ T4391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.309507][ T4403] device syzkaller0 entered promiscuous mode [ 86.728097][ T1108] cfg80211: failed to load regulatory.db [ 86.890424][ T26] audit: type=1800 audit(1780546816.884:2): pid=4405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.41" name="bus" dev="ramfs" ino=32674 res=0 errno=0 [ 87.368947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 87.388944][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.324250][ T4418] loop4: detected capacity change from 0 to 4096 [ 88.378937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.388939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.398945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.418935][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.428941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.438939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.448941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.458949][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 88.572518][ T4418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.309556][ T4434] EXT4-fs error (device loop4): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.4.44: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 89.333510][ T4434] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.44: directory missing '..' [ 89.402645][ T4433] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.48'. [ 91.226726][ T4461] xt_TCPMSS: Only works on TCP SYN packets [ 92.247531][ T4455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.552489][ T4455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.520611][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 93.691379][ T4455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.569153][ T4455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.299350][ T4455] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.318547][ T4455] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.335364][ T4455] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.355530][ T4455] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.498241][ T4505] sctp: [Deprecated]: syz.0.66 (pid 4505) Use of int in max_burst socket option. [ 95.498241][ T4505] Use struct sctp_assoc_value instead [ 101.698910][ C0] sched: RT throttling activated [ 101.745653][ T26] audit: type=1800 audit(1780546831.734:3): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.73" name="/" dev="fuse" ino=1 res=0 errno=0 [ 101.786314][ T4529] ======================================================= [ 101.786314][ T4529] WARNING: The mand mount option has been deprecated and [ 101.786314][ T4529] and is ignored by this kernel. Remove the mand [ 101.786314][ T4529] option from the mount to silence this warning. [ 101.786314][ T4529] ======================================================= [ 102.062405][ T4545] netlink: 164 bytes leftover after parsing attributes in process `syz.4.77'. [ 102.140499][ T4549] loop0: detected capacity change from 0 to 512 [ 103.126167][ T4549] EXT4-fs (loop0): Ignoring removed nobh option [ 103.136304][ T4549] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.229370][ T4549] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.461831][ T4549] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.589473][ T4549] EXT4-fs (loop0): 1 truncate cleaned up [ 103.680783][ T4549] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 103.713122][ T4570] tipc: Started in network mode [ 103.912537][ T4570] tipc: Node identity 4, cluster identity 4711 [ 104.344139][ T4570] tipc: Node number set to 4 [ 106.142264][ T4592] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.180134][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.197148][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.204904][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.610851][ T4620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 110.673538][ T4620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 110.720798][ T4620] device bridge0 entered promiscuous mode [ 110.753975][ T4629] loop3: detected capacity change from 0 to 4096 [ 110.769545][ T4620] device ip6gretap0 entered promiscuous mode [ 110.793514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 110.807478][ T4629] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 110.825357][ T4630] netlink: 'syz.4.96': attribute type 10 has an invalid length. [ 110.834488][ T4630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.96'. [ 110.836743][ T4629] EXT4-fs (loop3): inline encryption not supported [ 110.855815][ T4629] EXT4-fs (loop3): Test dummy encryption mode enabled [ 110.878583][ T4629] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 110.889471][ T4629] System zones: 0-5 [ 110.897344][ T4629] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 110.953419][ T4630] team0: Port device geneve0 added [ 110.980812][ T4638] device syzkaller0 entered promiscuous mode [ 113.226526][ T4661] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 113.315715][ T4665] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 113.500315][ T4667] netlink: 56 bytes leftover after parsing attributes in process `syz.2.104'. [ 113.627222][ T4669] capability: warning: `syz.2.105' uses deprecated v2 capabilities in a way that may be insecure [ 116.066329][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.382548][ T4698] syz.1.111 (4698) used greatest stack depth: 18096 bytes left [ 116.556895][ T4703] netlink: 79 bytes leftover after parsing attributes in process `syz.3.114'. [ 116.606581][ T4702] tipc: Started in network mode [ 116.612022][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 116.618605][ T4702] tipc: Node identity 12d8aab0262e, cluster identity 4711 [ 116.651001][ T4702] tipc: Enabled bearer , priority 0 [ 116.657939][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 116.687038][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 116.939378][ T1108] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.959950][ T4703] netlink: 'syz.3.114': attribute type 11 has an invalid length. [ 117.735314][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.787787][ T4707] device syzkaller0 entered promiscuous mode [ 117.849989][ T1108] usb 1-1: string descriptor 0 read error: -71 [ 117.857731][ T1108] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 117.895181][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.909144][ T4245] tipc: Node number set to 888580784 [ 118.011955][ T1108] usb 1-1: config 0 descriptor?? [ 118.090432][ T1108] usb 1-1: can't set config #0, error -71 [ 118.152292][ T1108] usb 1-1: USB disconnect, device number 2 [ 118.272678][ T4718] tipc: Resetting bearer [ 118.379202][ T4718] tipc: Disabling bearer [ 118.870979][ T4727] loop3: detected capacity change from 0 to 40427 [ 118.953759][ T4727] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 119.286557][ T4741] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 119.312860][ T4741] CIFS mount error: No usable UNC path provided in device string! [ 119.312860][ T4741] [ 119.323274][ T4741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.934480][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.943169][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.284036][ T2285] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.532533][ T2285] usb 3-1: Using ep0 maxpacket: 32 [ 124.754067][ T4736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.802000][ T4736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.317396][ T4736] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.327635][ T4736] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.336920][ T4736] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.346129][ T4736] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.472820][ T4748] netlink: 14 bytes leftover after parsing attributes in process `syz.1.124'. [ 125.549074][ T2285] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.841624][ T2285] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 125.851237][ T2285] usb 3-1: can't read configurations, error -71 [ 129.452288][ T4788] misc userio: Invalid payload size [ 129.464547][ T4788] misc userio: Invalid payload size [ 130.535114][ T4778] netlink: 'syz.4.132': attribute type 10 has an invalid length. [ 130.929876][ T4778] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.005301][ T4805] netlink: 'syz.2.139': attribute type 12 has an invalid length. [ 131.021228][ T4805] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 132.169851][ T4812] team0: Port device bridge1 added [ 132.495127][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.146'. [ 132.567650][ T4828] device geneve2 entered promiscuous mode [ 132.801638][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.814515][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.845911][ T4835] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 133.384606][ T4835] netlink: 'syz.2.148': attribute type 2 has an invalid length. [ 134.359604][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.379078][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 135.401823][ T26] audit: type=1804 audit(1780546865.394:4): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.157" name="bus" dev="ramfs" ino=35177 res=1 errno=0 [ 135.448684][ T4869] loop2: detected capacity change from 0 to 512 [ 135.471535][ T4869] EXT4-fs: Invalid sb specification: sb=0x000000000000000eJdebug,jqfmt=vfsold,nobh,barrier,usrjquota="block_validity,errors=remount-ro,, [ 135.474105][ T26] audit: type=1804 audit(1780546865.414:5): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.157" name="bus" dev="ramfs" ino=35177 res=1 errno=0 [ 135.506312][ T4232] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 135.519222][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.537818][ T4232] usb 1-1: config 0 descriptor?? [ 135.579297][ T4869] EXT4-fs (loop2): Unrecognized mount option "sb=0x000000000000000eJdebug" or missing value [ 135.587806][ T4232] gspca_main: sq930x-2.14.0 probing 041e:403c [ 135.755382][ T4869] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 135.799088][ T4232] gspca_sq930x: reg_r 001f failed -71 [ 135.804700][ T4232] sq930x: probe of 1-1:0.0 failed with error -71 [ 135.814928][ T4232] usb 1-1: USB disconnect, device number 3 [ 136.827768][ T4875] loop2: detected capacity change from 0 to 131072 [ 138.035541][ T4875] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.700142][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 140.563403][ T4919] loop0: detected capacity change from 0 to 512 [ 140.643485][ T4921] loop3: detected capacity change from 0 to 256 [ 140.685703][ T4919] EXT4-fs (loop0): Ignoring removed nobh option [ 140.702445][ T4921] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 140.717117][ T4919] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.763823][ T26] audit: type=1804 audit(1780546870.754:6): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.175" name="/newroot/36/file0/bus" dev="loop3" ino=1048590 res=1 errno=0 [ 140.937072][ T4919] EXT4-fs (loop0): 1 truncate cleaned up [ 140.962435][ T4919] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 140.974999][ T26] audit: type=1804 audit(1780546870.774:7): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.175" name="/newroot/36/file0/bus" dev="loop3" ino=1048590 res=1 errno=0 [ 141.037789][ T4905] loop1: detected capacity change from 0 to 32768 [ 141.864310][ T26] audit: type=1800 audit(1780546871.354:8): pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.173" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 141.933712][ T4936] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 141.948311][ T4905] XFS (loop1): Mounting V5 Filesystem [ 142.075347][ T4943] pit: kvm: requested 77104 ns i8254 timer period limited to 200000 ns [ 142.103824][ T4905] XFS (loop1): Ending clean mount [ 142.113249][ T4941] device syzkaller0 entered promiscuous mode [ 142.181624][ T4905] XFS (loop1): Quotacheck needed: Please wait. [ 142.256240][ T144] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x8 [ 142.375381][ T144] XFS (loop1): Unmount and run xfs_repair [ 142.413014][ T144] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 142.420662][ T144] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff 41 AB3B...........A [ 142.429613][ T144] 00000010: 0b 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 142.438501][ T144] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 142.474135][ T144] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 142.507870][ C1] hrtimer: interrupt took 339744 ns [ 143.071392][ T144] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 143.258013][ T4954] loop2: detected capacity change from 0 to 4096 [ 143.285981][ T144] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.321779][ T144] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.332878][ T144] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 143.342294][ T144] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 74 [ 143.376142][ T4905] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 143.389640][ T4954] EXT4-fs (loop2): Test dummy encryption mode enabled [ 143.826170][ T4954] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,noauto_da_alloc,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 144.850773][ T4190] XFS (loop1): Unmounting Filesystem [ 146.078957][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.909114][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 147.309268][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.329037][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.393515][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.434763][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.508341][ T23] usb 5-1: config 0 descriptor?? [ 147.572181][ T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 147.633052][ T5003] loop1: detected capacity change from 0 to 256 [ 147.665868][ T5003] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.697486][ T5003] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 148.381253][ T1108] usb 5-1: USB disconnect, device number 2 [ 148.436697][ T5003] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 148.550101][ T5010] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 149.961575][ T5018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.993910][ T5018] bond1: (slave bond2): making interface the new active one [ 150.004603][ T5018] bond1: (slave bond2): Enslaving as an active interface with an up link [ 150.021603][ T5009] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 150.035819][ T5031] loop1: detected capacity change from 0 to 1024 [ 150.040407][ T5010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.117619][ T5031] EXT4-fs (loop1): Ignoring removed orlov option [ 150.170136][ T5031] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,noinit_itable,grpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000005,orlov,. Quota mode: none. [ 150.233410][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806037c800: rx timeout, send abort [ 150.469404][ T5039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.733512][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f718400: rx timeout, send abort [ 151.261889][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f718400: abort rx timeout. Force session deactivation [ 151.362671][ T5039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.330795][ T5039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.732791][ T5039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.834482][ T5073] device syzkaller0 entered promiscuous mode [ 156.017093][ T5039] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.032250][ T5039] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.056667][ T5039] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.095496][ T5039] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.316385][ T5083] loop3: detected capacity change from 0 to 1024 [ 156.412865][ T5090] loop2: detected capacity change from 0 to 128 [ 156.453076][ T5088] Zero length message leads to an empty skb [ 157.689018][ T5083] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 157.689018][ T5083] [ 157.759398][ T5093] syz.4.216 uses obsolete (PF_INET,SOCK_PACKET) [ 158.027465][ T5096] netlink: 'syz.0.217': attribute type 4 has an invalid length. [ 158.107258][ T5086] loop1: detected capacity change from 0 to 4096 [ 158.165067][ T5086] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 158.348200][ T5086] ntfs: volume version 3.1. [ 158.808176][ T4463] attempt to access beyond end of device [ 158.808176][ T4463] loop2: rw=1, want=1041, limit=128 [ 159.757944][ T5083] loop3: detected capacity change from 0 to 1024 [ 160.149423][ T26] audit: type=1326 audit(1780546890.134:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5107 comm="syz.2.220" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2eb08ace59 code=0x0 [ 160.228098][ T5083] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.599421][ T5115] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by " [ 160.609209][ T5083] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 160.856180][ T5083] JBD2: no valid journal superblock found [ 160.870768][ T5083] EXT4-fs (loop3): error loading journal [ 160.975602][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 160.985995][ T5123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.225'. [ 161.028304][ T5123] device geneve2 entered promiscuous mode [ 161.321949][ T5127] device syzkaller0 entered promiscuous mode [ 163.217985][ T5156] netlink: 'syz.1.236': attribute type 12 has an invalid length. [ 164.220729][ T5171] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5171] [ 166.320371][ T5190] loop1: detected capacity change from 0 to 1024 [ 168.750790][ T5206] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 168.761391][ T5206] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.124805][ T5215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.249'. [ 169.659533][ T5268] device syzkaller0 entered promiscuous mode [ 169.690495][ T4462] hfsplus: b-tree write err: -5, ino 25 [ 169.696706][ T4462] hfsplus: b-tree write err: -5, ino 4 [ 169.748519][ T4462] hfsplus: b-tree write err: -5, ino 2 [ 169.765039][ T4462] hfsplus: b-tree write err: -5, ino 26 [ 169.949337][ T5272] netlink: 'syz.1.252': attribute type 2 has an invalid length. [ 169.996408][ T5274] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 171.231430][ T5296] process 'syz.2.258' launched './file0' with NULL argv: empty string added [ 171.269975][ T5296] Invalid argument reading file caps for ./file0 [ 179.263767][ T5360] device syzkaller0 entered promiscuous mode [ 179.327048][ T5360] tipc: Enabled bearer , priority 0 [ 180.243444][ T5358] tipc: Resetting bearer [ 180.423164][ T5358] tipc: Disabling bearer [ 186.935053][ T5443] device syzkaller0 entered promiscuous mode [ 187.751993][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 188.844067][ T5487] loop2: detected capacity change from 0 to 1024 [ 188.929137][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 189.160387][ T5496] tipc: Started in network mode [ 189.165545][ T5496] tipc: Node identity d2cb87268e9d, cluster identity 4711 [ 189.173152][ T5496] tipc: Enabled bearer , priority 0 [ 189.182894][ T5496] device syzkaller0 entered promiscuous mode [ 189.183084][ T5487] EXT4-fs (loop2): Test dummy encryption mode enabled [ 189.199006][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 189.215094][ T5496] tipc: Resetting bearer [ 189.228356][ T5487] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 189.257572][ T5495] tipc: Resetting bearer [ 189.287013][ T5495] tipc: Disabling bearer [ 189.346626][ T5501] ipt_REJECT: TCP_RESET invalid for non-tcp [ 189.387254][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.402801][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.710129][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.720421][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.713462][ T5511] device syzkaller0 entered promiscuous mode [ 190.881127][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.893987][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.189867][ T4235] Bluetooth: hci1: command 0x0406 tx timeout [ 191.210956][ T4235] Bluetooth: hci0: command 0x0406 tx timeout [ 191.620345][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 191.626731][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 191.633234][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 192.833961][ T4233] usb 2-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 192.900660][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.808202][ T4233] usb 2-1: Product: syz [ 193.985122][ T4233] usb 2-1: config 0 descriptor?? [ 194.055836][ T4233] usb 2-1: can't set config #0, error -71 [ 194.093237][ T4233] usb 2-1: USB disconnect, device number 2 [ 194.129534][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 194.232513][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.322431][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.494607][ T5552] device team1 entered promiscuous mode [ 194.500811][ T5552] 8021q: adding VLAN 0 to HW filter on device team1 [ 194.509693][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 194.519303][ T5548] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 194.560674][ T5548] device team2 entered promiscuous mode [ 194.566854][ T5548] 8021q: adding VLAN 0 to HW filter on device team2 [ 195.771253][ T5564] loop2: detected capacity change from 0 to 40427 [ 195.874049][ T5564] F2FS-fs (loop2): Invalid segment count (0) [ 195.880869][ T5564] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 195.898830][ T5564] F2FS-fs (loop2): invalid crc value [ 196.059090][ T5569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.328'. [ 196.068230][ T5569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.328'. [ 196.290323][ T5564] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 196.357809][ T5564] F2FS-fs (loop2): Inconsistent i_blocks, ino:3, iblocks:0, sectors:8 [ 198.753047][ T5601] loop1: detected capacity change from 0 to 512 [ 198.832479][ T5601] EXT4-fs (loop1): Ignoring removed orlov option [ 198.869519][ T5601] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 198.944355][ T5601] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.335: corrupted in-inode xattr [ 199.003466][ T5601] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.335: couldn't read orphan inode 15 (err -117) [ 199.075536][ T5612] loop2: detected capacity change from 0 to 256 [ 199.099472][ T5601] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 199.138177][ T5612] FAT-fs (loop2): bogus logical sector size 128 [ 199.177430][ T5612] FAT-fs (loop2): Can't find a valid FAT filesystem [ 200.555341][ T5620] loop4: detected capacity change from 0 to 256 [ 201.136076][ T5639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 203.110323][ T5653] loop0: detected capacity change from 0 to 128 [ 203.371207][ T5653] FAT-fs (loop0): Unrecognized mount option "s" or missing value [ 204.316080][ T5667] netlink: 56 bytes leftover after parsing attributes in process `syz.3.348'. [ 204.316286][ T5665] loop4: detected capacity change from 0 to 2048 [ 204.362619][ T5668] loop0: detected capacity change from 0 to 256 [ 204.389920][ T5667] 9pnet: Insufficient options for proto=fd [ 204.662235][ T5665] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.384499][ T5702] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 206.455706][ T5699] loop1: detected capacity change from 0 to 512 [ 206.691218][ T5699] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 206.733599][ T5714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.740625][ T5699] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.005307][ T5699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.222070][ T5730] loop2: detected capacity change from 0 to 128 [ 207.306607][ T5730] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (35457!=39978) [ 207.343649][ T5733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.389288][ T5730] EXT4-fs (loop2): group descriptors corrupted! [ 207.497670][ T5736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.570471][ T5733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.359405][ T5760] netlink: 14 bytes leftover after parsing attributes in process `syz.4.365'. [ 212.246928][ T5788] overlayfs: missing 'lowerdir' [ 212.547554][ T5792] loop0: detected capacity change from 0 to 32768 [ 212.635507][ T5792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.373 (5792) [ 212.671034][ T5792] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 212.680124][ T5792] BTRFS info (device loop0): turning on sync discard [ 212.687087][ T5792] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 212.696987][ T5792] BTRFS info (device loop0): use zstd compression, level 3 [ 212.704371][ T5792] BTRFS info (device loop0): turning on async discard [ 212.711697][ T5792] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 212.722358][ T5792] BTRFS info (device loop0): trying to use backup root at mount time [ 212.730810][ T5792] BTRFS info (device loop0): enabling auto defrag [ 212.737384][ T5792] BTRFS info (device loop0): using free space tree [ 212.743998][ T5792] BTRFS info (device loop0): has skinny extents [ 213.081687][ T4462] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 213.124567][ T5792] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 213.133247][ T5246] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 213.176780][ T5827] device bridge0 entered promiscuous mode [ 213.189533][ T5792] BTRFS warning (device loop0): couldn't read tree root [ 213.197321][ T5792] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 213.207606][ T5792] BTRFS warning (device loop0): couldn't read tree root [ 213.241258][ T5792] BTRFS info (device loop0): enabling ssd optimizations [ 213.251137][ T5792] BTRFS info (device loop0): clearing free space tree [ 213.258657][ T5792] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.268779][ T5792] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 213.340726][ T5792] BTRFS info (device loop0): creating free space tree [ 213.349883][ T5792] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.359503][ T5792] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.562489][ T4523] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4523) [ 218.646916][ T5925] loop1: detected capacity change from 0 to 256 [ 218.751919][ T5929] device bridge1 entered promiscuous mode [ 218.806152][ T5925] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 220.077610][ T5945] loop0: detected capacity change from 0 to 4096 [ 220.190447][ T5945] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.977958][ T5978] loop0: detected capacity change from 0 to 1024 [ 223.268311][ T5978] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.256478][ T23] kernel write not supported for file [eventfd] (pid: 23 comm: kworker/1:1) [ 224.653125][ T5994] device syzkaller0 entered promiscuous mode [ 229.645637][ T6034] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 229.692673][ T6034] comedi comedi0: 8255: I/O port conflict (0xffffffff80000003,4) [ 229.730919][ T6034] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 231.155215][ T6055] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 238.046463][ T6087] ODEBUG: Out of memory. ODEBUG disabled [ 239.631398][ T6092] loop2: detected capacity change from 0 to 2048 [ 239.781400][ T6105] loop0: detected capacity change from 0 to 2048 [ 240.655675][ T6105] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 240.686577][ T6092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.734186][ T6105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.020442][ T6136] netlink: 52 bytes leftover after parsing attributes in process `syz.1.452'. [ 242.143073][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.150462][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.311697][ T4189] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 242.403836][ T4189] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 245.656995][ T6163] loop2: detected capacity change from 0 to 512 [ 247.035246][ T6180] device vlan2 entered promiscuous mode [ 248.888280][ T6189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.471'. [ 249.028914][ T4232] Bluetooth: hci0: command 0x0409 tx timeout [ 249.332867][ T6181] chnl_net:caif_netlink_parms(): no params data found [ 250.112463][ T6236] binder_alloc: 6235: pid 6235 spamming oneway? 2 buffers allocated for a total size of 5120 [ 250.857787][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.877393][ T6238] binder_alloc: 6235: pid 6235 spamming oneway? 3 buffers allocated for a total size of 5128 [ 250.908092][ T6243] loop2: detected capacity change from 0 to 8 [ 250.924749][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.933389][ T6181] device bridge_slave_0 entered promiscuous mode [ 250.970185][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.998473][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.017827][ T6181] device bridge_slave_1 entered promiscuous mode [ 251.026781][ T6243] SQUASHFS error: Unable to read inode 0x11f [ 251.109347][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 251.132320][ T6181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.144101][ T6181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.196641][ T6181] team0: Port device team_slave_0 added [ 251.231376][ T6181] team0: Port device team_slave_1 added [ 251.291569][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.298567][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.324521][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.366003][ T6181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.444125][ T6181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.451170][ T6181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.477221][ T6181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.787046][ T6255] block device autoloading is deprecated and will be removed. [ 252.972829][ T6181] device hsr_slave_0 entered promiscuous mode [ 253.097257][ T6181] device hsr_slave_1 entered promiscuous mode [ 253.152922][ T6181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.188910][ T5873] Bluetooth: hci0: command 0x040f tx timeout [ 253.308175][ T6181] Cannot create hsr debugfs directory [ 255.268985][ T5873] Bluetooth: hci0: command 0x0419 tx timeout [ 255.673399][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679808][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.777358][ T6181] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.281710][ T6181] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.378113][ T6181] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.943943][ T6181] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.234786][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.300916][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.482475][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.668642][ T6181] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.917328][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.941097][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.970555][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.977676][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.985651][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.048763][ T6316] team0: Port device bridge2 added [ 259.080351][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.089819][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.103639][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.110805][ T5241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.139387][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.178274][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.204749][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.227891][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.250652][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.266584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.283434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.302248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.318514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.343384][ T6181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.363909][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.376966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.396148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.595586][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.609168][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.632904][ T6181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.657557][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 260.832177][ T6362] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 260.847804][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 260.898150][ T6362] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 260.977341][ T6362] bond2 (unregistering): Released all slaves [ 261.329271][ T6382] device syzkaller0 entered promiscuous mode [ 261.456412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.477762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.530738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.562383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.572503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.589491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.619147][ T6181] device veth0_vlan entered promiscuous mode [ 261.648567][ T6386] device bond0 entered promiscuous mode [ 261.669237][ T6386] device bond_slave_0 entered promiscuous mode [ 261.676809][ T6386] device bond_slave_1 entered promiscuous mode [ 261.708178][ T6181] device veth1_vlan entered promiscuous mode [ 261.770937][ T6389] team0: Port device bridge1 added [ 261.816819][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.847784][ T6374] loop4: detected capacity change from 0 to 32768 [ 261.851302][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.872395][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.901892][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.926586][ T6181] device veth0_macvtap entered promiscuous mode [ 261.958865][ T6181] device veth1_macvtap entered promiscuous mode [ 261.974735][ T6374] loop4: p1 p2 p3 < p5 p6 p7 > [ 262.028168][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.060282][ T6374] loop4: p2 size 16775168 extends beyond EOD, truncated [ 262.074406][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.087319][ T6374] loop4: p5 start 4294970168 is beyond EOD, truncated [ 262.117962][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.142063][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.162928][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.188920][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.212344][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.241772][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.274767][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.328940][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.387241][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.421310][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.431996][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.441930][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.452438][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.462469][ T6181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.473437][ T6181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.484665][ T6181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.503559][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.517820][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.500197][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.590028][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.660676][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.718783][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.731932][ T6181] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.759954][ T6181] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.798881][ T6181] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.837025][ T6181] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.266383][ T6418] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 265.321614][ T5255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.399818][ T5255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.626772][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.831756][ T5255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.124868][ T5255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.507300][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.865169][ T6443] xt_nat: multiple ranges no longer supported [ 266.912050][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.463'. [ 267.194343][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.201645][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.770788][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.542'. [ 274.196715][ T6490] netlink: 'syz.1.547': attribute type 14 has an invalid length. [ 274.227051][ T6491] ip6t_srh: unknown srh invflags 4000 [ 275.579999][ T6509] device syzkaller0 entered promiscuous mode [ 281.191404][ T6554] loop2: detected capacity change from 0 to 512 [ 281.230673][ T6557] device syzkaller0 entered promiscuous mode [ 281.301771][ T6554] EXT4-fs (loop2): Ignoring removed bh option [ 281.332082][ T6554] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 281.429055][ T6554] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 281.444801][ T6554] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.564: Corrupt directory, running e2fsck is recommended [ 281.463906][ T6554] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 281.473068][ T6554] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.564: corrupted in-inode xattr [ 281.490016][ T6554] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.564: couldn't read orphan inode 15 (err -117) [ 281.509251][ T6554] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,commit=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,bh,grpid,,,errors=continue. Quota mode: writeback. [ 284.342368][ T2285] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 284.410117][ T2285] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.455447][ T6608] device syzkaller0 entered promiscuous mode [ 284.801955][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 285.209467][ T4232] usb 6-1: config 0 has no interfaces? [ 285.299833][ T4232] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.386330][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 285.992496][ T4232] usb 6-1: SerialNumber: syz [ 286.007330][ T4232] usb 6-1: config 0 descriptor?? [ 286.129764][ T4232] usb 6-1: can't set config #0, error -71 [ 286.150892][ T4232] usb 6-1: USB disconnect, device number 2 [ 288.109536][ T6653] tipc: Enabling of bearer rejected, failed to enable media [ 288.464984][ T6658] loop5: detected capacity change from 0 to 32768 [ 289.611387][ T6658] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 289.849044][ T6658] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 292.755716][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 293.081566][ T6723] bridge0: port 3(vxlan0) entered blocking state [ 293.139136][ T6723] bridge0: port 3(vxlan0) entered disabled state [ 293.162377][ T6181] ocfs2: Unmounting device (7,5) on (node local) [ 293.182129][ T6723] device vxlan0 entered promiscuous mode [ 297.059927][ T6774] "syz.3.622" (6774) uses obsolete ecb(arc4) skcipher [ 303.824099][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.5.635'. [ 303.951506][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.5.635'. [ 304.382765][ T6851] ipt_REJECT: TCP_RESET invalid for non-tcp [ 305.822759][ T6866] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6866] [ 306.341078][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 306.820216][ T6885] ksmbd: Unknown IPC event: 11, ignore. [ 307.295371][ T6875] device team1 entered promiscuous mode [ 307.356503][ T6875] 8021q: adding VLAN 0 to HW filter on device team1 [ 307.369834][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 307.530494][ T6883] device team2 entered promiscuous mode [ 307.543607][ T6883] 8021q: adding VLAN 0 to HW filter on device team2 [ 309.426924][ T6912] __sock_release: fasync list not empty! [ 309.592880][ T6913] loop4: detected capacity change from 0 to 128 [ 309.690776][ T6913] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (35457!=39978) [ 309.734302][ T6919] loop5: detected capacity change from 0 to 256 [ 309.760628][ T6913] EXT4-fs (loop4): group descriptors corrupted! [ 309.829907][ T6919] exfat: Deprecated parameter 'utf8' [ 309.841863][ T6919] exfat: Deprecated parameter 'utf8' [ 309.950331][ T6919] exfat: Deprecated parameter 'utf8' [ 310.907515][ T6919] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 311.088629][ T6931] device ip6gretap0 entered promiscuous mode [ 311.103636][ T6931] device vlan4 entered promiscuous mode [ 312.260069][ T6944] loop4: detected capacity change from 0 to 2048 [ 312.322758][ T6944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.341767][ T6963] netlink: 14 bytes leftover after parsing attributes in process `syz.3.672'. [ 315.089145][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 316.002190][ T6988] device syzkaller0 entered promiscuous mode [ 316.017066][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 316.292505][ T13] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 126, changing to 7 [ 316.327406][ T13] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 196, changing to 7 [ 316.933768][ T7004] loop5: detected capacity change from 0 to 512 [ 316.957741][ T7002] device syz_tun entered promiscuous mode [ 316.969435][ T7002] device vlan2 entered promiscuous mode [ 317.065635][ T7004] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 317.089125][ T7004] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.115550][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.121961][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.313207][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'. [ 317.363153][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'. [ 317.426349][ T7009] TC_ACT_REPEAT abuse ? [ 317.999418][ T13] usb 3-1: string descriptor 0 read error: -71 [ 318.006164][ T13] usb 3-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice= 0.40 [ 318.031711][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.079031][ T13] usb 3-1: can't set config #1, error -71 [ 318.089950][ T13] usb 3-1: USB disconnect, device number 4 [ 319.375868][ T7044] device bridge3 entered promiscuous mode [ 320.796659][ T7070] dns_resolver: Unsupported server list version (55) [ 322.192123][ T7061] device bridge0 entered promiscuous mode [ 322.198084][ T7061] device vlan2 entered promiscuous mode [ 327.387327][ T23] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 332.304552][ T7143] TC_ACT_REPEAT abuse ? [ 332.334539][ T7148] loop2: detected capacity change from 0 to 512 [ 333.263818][ T7148] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext2 [ 334.728651][ T7170] autofs4:pid:7170:autofs_fill_super: called with bogus options [ 335.567660][ T7174] loop4: detected capacity change from 0 to 256 [ 335.739619][ T7174] FAT-fs (loop4): bogus logical sector size 128 [ 335.778973][ T7174] FAT-fs (loop4): Can't find a valid FAT filesystem [ 339.937570][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.742'. [ 340.280787][ T7225] atomic_op ffff8880200d0998 conn xmit_atomic 0000000000000000 [ 340.426098][ T7230] device syzkaller0 entered promiscuous mode [ 341.660167][ T7249] autofs4:pid:7249:autofs_fill_super: called with bogus options [ 341.876168][ T7254] loop2: detected capacity change from 0 to 512 [ 341.890281][ T7250] device syzkaller0 entered promiscuous mode [ 342.145066][ T7261] loop5: detected capacity change from 0 to 256 [ 342.164427][ T7261] FAT-fs (loop5): bogus logical sector size 128 [ 342.219423][ T7261] FAT-fs (loop5): Can't find a valid FAT filesystem [ 342.778329][ T7254] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 342.934283][ T7254] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.749576][ T7254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.363326][ T7304] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7304] [ 348.999241][ T7306] loop4: detected capacity change from 0 to 8 [ 349.073373][ T7306] SQUASHFS error: Unable to read inode 0x11f [ 349.139850][ T7311] loop2: detected capacity change from 0 to 128 [ 354.214294][ T7328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.591819][ T7370] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7370] [ 357.064709][ T7373] device syzkaller0 entered promiscuous mode [ 368.519400][ T7455] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 368.544958][ T7455] overlayfs: failed to look up (tracing) for ino (-66) [ 371.875679][ T7476] loop2: detected capacity change from 0 to 1024 [ 374.850333][ T7488] loop5: detected capacity change from 0 to 2048 [ 375.344224][ T7488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.455409][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.468559][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 Stopping sshd: stopped /usr/sbin/sshd (pid 3947) OK Stopping crond: [ 388.809827][ T7593] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available serialport: VM disconnected.