last executing test programs: 1m37.620767549s ago: executing program 0 (id=216): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000780)='^\x8a\x983be\fe1i\x1b\x05Q\x886\xa7\x12f\x14L\x9b\xe0\xdc^\x8e\xa5\x84\xden\xef\x8e\xb0sr\xcb\x9e\xb5ko\xf8\xfb\xc7`Ei\xdc\xb2\x1a\x06\xc0\xeb\x1fg\xf2\x05\xae\xa2y.\x7fAY\xac~|\x19\xf0\x90\xcc\x1d\xe6\xc5\xcc\xeaJ\xfdi\xdf\x8fD\xc3%\x1a]\xa5\xa9,\x9f\xd6\xaf\x8a\"\x9bu\xf4\x00iK\x10%E\x11|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x80iz\x9bA\x9c\x19\xa1\xba,G\xd2\x0f\xe5\\b\xfe\x84H\xd5\x03y\xaeq\xaeL\xacBX<\xeb\a\'a\xcc\xf4#R\xafj??\xae\t\x1e\xfa\xb7l\xf8\x88\xde\xc0\x1a-\x84\xac\x18\x05\xb1k\x8f\xab>c\xe6\x04\xafr*\xd1yD\x12p\xd0\xfdg\xb7\xa3<\x15F\x10\xe5\xfae7\xbc\xdb\x93:\x84\xe7\xf2\x1c\xed*\xd1{\xaf\xd1\xed\r\xda\xe8\xd5\x0e\x97\xbb\x7f\xdeDO\x16\xca\xb8\x05\x82T!\xa9)\xed\xb4\x97\xae\xd4\xaaPH\x94\x99-)\x1a', 0x0, r1) 1m36.475726068s ago: executing program 0 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000340)=0x10001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1m35.469548534s ago: executing program 0 (id=236): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x50, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x240}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) 1m33.459688357s ago: executing program 0 (id=241): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611266000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$eJzs3b9vW1sdAPDvdeImL8996YM3AAJeeRQKqur8aBtVZaBdQKiqhKiYGNqQuFEUu47ipDShQzqyI1GJCf4ENgakTgxsbLCxlAGpQAVqkBiM7vVt6iZxYl5+uLU/H+nm3nOu4+85ds85vqe5PgEMrLMRsRkRpyLibkSM5/lJvsX11pY+7uWLR3NbLx7NJdFs3v5Hkp1P86Ltd1Lv5885GhE/+G7Ej5PdcRvrG0uz1WplJU9PrNaWJxrrGxcXC3nO9MzUzOTVS1emj6yuH9d+8/w7izd/+LvffunZHze/+dO0WKWfnc7OtdfjKLWqXoxSW95wRNw8jmA9Mpz/++Hdk7a2z0TEJ1n7H4+h7N0EAPpZszkezfH2NADQ79Lr/1IkhXI+F1CKQqFcbs3hfRRjhWq9sXphvL52fz6yOawzUSzcW6xWJvO5wjNRTNL0VHb8Oj0dm2+kL0XEhxHx85H3snR5rl6d7+UHHwAYYO/vGP//PdIa/wGAPjfa6wIAACfO+A8Ag8f4DwCD5/8Y/90dCAB9wvU/AAwe4z8ADJ4Dx//HJ1MOAOBEfP/WrXRrbuXffz3/YH3tW6UHF+crjaVybW2uPFdfWS4v1OsL1Up5rtnMf63j1z1X6/Xlqcvbycb6xp1afe3+6p3F2uxC5U6leAJ1AgD29+HHT/+cRMTmtfeyLdoGd2M19LdCrwsA9MxQrwsA9Iz7eWBwdXGNbxoA+tweS/S+oeOfCD2x+Cu8q85/3vw/DKpu5//dIgT959PN/3/7yMsBnDzz/zC4ms3Emv8AMGDM8QOH+v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGFClbEsK5Wwt8M30Z6FcjjgdEWeimNxbrFYmI+KDiPjTSHEkTU/1utAAwCEV/pbk63+dHz9X2nn2VPKfkWwfET/55e1fPJxdXV2ZSvP/uZ2/+iTPnz7ViwoAAO2u785qjdP5vu1C/uWLR3OvtpMs4vMbrcVF07hb+dY6MxzD2X40ihEx9q8kT7ekn1eGjiD+5uOI+Nzr+j9si1DK5kBaK5/ujJ/GPn0M8V+//jvjF96IX8jOpfti9lp89gjKAoPm6Y1WP5m3vbSJ5e2vEGez/d7tfzTroQ7vVf+3tav/K2z3f0O74idZmz+7nd6/JM8v//57uzKb461zjyO+MLxX/GQ7ftKh/z3XZR3/8sUvf9LpXPNXEedj7/gttaybnVitLU801jcuLtZmFyoLlfvT0zNTM5NXL12ZnsjmqFs//7BXjL9fu/BBp/hp/cc6xB89oP5f67L+v/7v3R99ZZ/43/jq3u//R/vET8fEr3cZf3bsesflu9P48x3qf9D7f6HL+M/+ujHf5UMBgBPQWN9Ymq1WKysHHKSfNQ96jIOeHEQc8nliM6LntejLg2LX7evtO+h1zwQct/ZhBAAAAAAAAAAAAAAAeDs11jeWRqLDbUClo7pBDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7H/wIAAP//L93NTg==") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 1m29.455647373s ago: executing program 0 (id=260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000190001002abd7000000000007f000001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f040000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff000000000100"], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 1m28.000019511s ago: executing program 0 (id=268): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m27.480880614s ago: executing program 32 (id=268): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.199079793s ago: executing program 1 (id=571): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r2, &(0x7f00000004c0)=""/85, 0x55) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(r2, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) openat$kvm(0xffffffffffffff9c, 0x0, 0x8ab43, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) 10.522986053s ago: executing program 1 (id=581): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 8.73561538s ago: executing program 2 (id=582): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 8.73294813s ago: executing program 3 (id=583): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 7.22692361s ago: executing program 3 (id=586): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0xfe7d}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000640)=""/68, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x40001f5, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 7.076040663s ago: executing program 1 (id=589): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]}) io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x1a1081, 0x29) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd70001fdbdf251200000008003100bd00000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000024) r2 = socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000108}]) 6.112655319s ago: executing program 4 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x4, 0x6, 0x3fe}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 5.957318493s ago: executing program 5 (id=591): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 5.68074804s ago: executing program 1 (id=592): capset(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0xf) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 5.439125316s ago: executing program 3 (id=593): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) 4.54463346s ago: executing program 5 (id=594): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760", 0x49}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e", 0x2c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.54422669s ago: executing program 2 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 4.54386833s ago: executing program 4 (id=596): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$kcm(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 4.496828461s ago: executing program 1 (id=597): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{}, {}]}, 0xd) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.462049438s ago: executing program 3 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000500)='A', 0x1000) 3.430668889s ago: executing program 2 (id=599): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = inotify_init1(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) read(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) 3.38251775s ago: executing program 5 (id=600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008008}, 0x4800) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.320852532s ago: executing program 4 (id=601): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='\\\'-\x95\'\x8aC\x16', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x30) 1.736955724s ago: executing program 2 (id=606): epoll_create1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 1.529682139s ago: executing program 5 (id=607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x10a, 0x5, 0xfff, 0x7e00}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x5dc}], 0x1}, 0x4) 1.440399612s ago: executing program 2 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffe0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.439474092s ago: executing program 4 (id=609): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000500000062000000891476657468305f6d6163767461702aae0000006e6963766630000000000000000000006e65747063693000000000000000000067726530000000000000000000000000ffffffffffffffff00ff8000aaaaaaaaaabb00000000ff806e0000006e0000009e000000000000000000000000000000000000001f"]}, 0x159) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3ac, 0x10c, 0x10c, 0x0, 0x2cc, 0x2cc, 0x2cc, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0x0, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x7, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE0={0x24}}], {{'\x00', 0xbc, 0xfffffffffffffe06}, {0x24}}}}, 0x403) r2 = socket(0x10, 0x3, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FITHAW(r4, 0xc0045878) sendmsg$kcm(r2, 0x0, 0x10) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000440)={'filter\x00', 0x5b, "7b42003e3c65c7447453328db115034117571e664a8c7209c602f9e8f36760d10882bb207b2f89215f9e464f2911fd7bd38125888ff17ba4e69262866b16acb85377824e9da16680b0ea2b6c102d1974b22ddb65ce06557fbee542"}, &(0x7f0000000500)=0x7f) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000400)=0xe, 0xffffffffffffff56) 1.325853164s ago: executing program 4 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000180)=ANY=[], 0x24c4}, 0x1, 0x0, 0x0, 0x8}, 0xc0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.228660777s ago: executing program 5 (id=611): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1.11224542s ago: executing program 1 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) close(0xffffffffffffffff) 0s ago: executing program 2 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 51.558097][ T4174] cgroup: Unknown subsys name 'net' [ 51.686972][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.927817][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.717962][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 54.755159][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.821080][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.834008][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 54.873296][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.880389][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.888986][ T4196] device bridge_slave_0 entered promiscuous mode [ 54.921170][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.928296][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.936134][ T4196] device bridge_slave_1 entered promiscuous mode [ 55.007911][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.015464][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.023263][ T4186] device bridge_slave_0 entered promiscuous mode [ 55.032521][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.041640][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.049206][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.057224][ T4186] device bridge_slave_1 entered promiscuous mode [ 55.064305][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 55.086482][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.093801][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.101417][ T4187] device bridge_slave_0 entered promiscuous mode [ 55.110184][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.135726][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.142972][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.150640][ T4188] device bridge_slave_0 entered promiscuous mode [ 55.159294][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.166439][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.174599][ T4188] device bridge_slave_1 entered promiscuous mode [ 55.181579][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.188665][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.196975][ T4187] device bridge_slave_1 entered promiscuous mode [ 55.219817][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.232143][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.282169][ T4196] team0: Port device team_slave_0 added [ 55.289580][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.301114][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.325787][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.336188][ T4196] team0: Port device team_slave_1 added [ 55.343581][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.354773][ T4186] team0: Port device team_slave_0 added [ 55.384358][ T4186] team0: Port device team_slave_1 added [ 55.417519][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.424527][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.450485][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.464308][ T4187] team0: Port device team_slave_0 added [ 55.470263][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.477612][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.485490][ T4201] device bridge_slave_0 entered promiscuous mode [ 55.493765][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.500819][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.508548][ T4201] device bridge_slave_1 entered promiscuous mode [ 55.517564][ T4188] team0: Port device team_slave_0 added [ 55.525403][ T4188] team0: Port device team_slave_1 added [ 55.536380][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.543556][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.570013][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.582148][ T4187] team0: Port device team_slave_1 added [ 55.617687][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.624780][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.651073][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.664289][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.671243][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.697652][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.724823][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.734503][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.741458][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.768027][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.792557][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.799548][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.831574][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.844205][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.851155][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.877359][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.891247][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.900939][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.908439][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.934401][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.001110][ T4196] device hsr_slave_0 entered promiscuous mode [ 56.007837][ T4196] device hsr_slave_1 entered promiscuous mode [ 56.024520][ T4188] device hsr_slave_0 entered promiscuous mode [ 56.031248][ T4188] device hsr_slave_1 entered promiscuous mode [ 56.038125][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.046192][ T4188] Cannot create hsr debugfs directory [ 56.054140][ T4201] team0: Port device team_slave_0 added [ 56.069245][ T4201] team0: Port device team_slave_1 added [ 56.077288][ T4186] device hsr_slave_0 entered promiscuous mode [ 56.084093][ T4186] device hsr_slave_1 entered promiscuous mode [ 56.090488][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.098342][ T4186] Cannot create hsr debugfs directory [ 56.159247][ T4187] device hsr_slave_0 entered promiscuous mode [ 56.165885][ T4187] device hsr_slave_1 entered promiscuous mode [ 56.172810][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.180396][ T4187] Cannot create hsr debugfs directory [ 56.207970][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.215052][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.241215][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.273062][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.280035][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.306168][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.431151][ T4201] device hsr_slave_0 entered promiscuous mode [ 56.438180][ T4201] device hsr_slave_1 entered promiscuous mode [ 56.445002][ T1323] Bluetooth: hci1: command 0x0409 tx timeout [ 56.451229][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.451582][ T1323] Bluetooth: hci3: command 0x0409 tx timeout [ 56.459383][ T4201] Cannot create hsr debugfs directory [ 56.465036][ T1323] Bluetooth: hci0: command 0x0409 tx timeout [ 56.482198][ T1323] Bluetooth: hci2: command 0x0409 tx timeout [ 56.522167][ T24] Bluetooth: hci4: command 0x0409 tx timeout [ 56.617209][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.631841][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.646991][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.657751][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.698281][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.714432][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.723775][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.741589][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.767439][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.779523][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.809075][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.837588][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.880946][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.889902][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.899562][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.924103][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.938767][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.988945][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.999371][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.030046][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.048350][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.059465][ T4201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.071595][ T4201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.090220][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.107610][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.116576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.124978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.133567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.143231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.152223][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.159370][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.169065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.177202][ T4201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.186844][ T4201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.215048][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.226407][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.235167][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.242266][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.250558][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.260682][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.269594][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.276686][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.287213][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.318262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.328037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.336069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.345247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.354905][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.362019][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.369710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.380037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.389890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.399291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.408559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.417387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.425991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.435476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.445137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.454091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.463659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.472304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.480655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.488627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.507787][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.524314][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.535906][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.548061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.558152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.567526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.576955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.585432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.594473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.603185][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.610232][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.618869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.627352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.636030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.644419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.677146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.689675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.701078][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.708219][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.724800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.733615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.746540][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.767445][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.778523][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.799094][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.810648][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.825061][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.835559][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.851866][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.873079][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.881617][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.899369][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.910160][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.923168][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.944469][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.957653][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.966933][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.976944][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.985897][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.994970][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.002068][ T1534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.011763][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.020751][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.029581][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.036682][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.045123][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.055768][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.070703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.079349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.100722][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.117457][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.132775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.159353][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.170035][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.193027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.208817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.219103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.229190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.238822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.247975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.256765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.265458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.274062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.282829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.290501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.298667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.306435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.314643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.322993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.333346][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.360897][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.378920][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.394959][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.405386][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.412508][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.421136][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.428814][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.436487][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.446653][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.455842][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.483028][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.505425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.515774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.522316][ T2302] Bluetooth: hci2: command 0x041b tx timeout [ 58.525567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.538080][ T2302] Bluetooth: hci0: command 0x041b tx timeout [ 58.538439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.554454][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.555136][ T2302] Bluetooth: hci3: command 0x041b tx timeout [ 58.561634][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.578187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.584724][ T2302] Bluetooth: hci1: command 0x041b tx timeout [ 58.587094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.601137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.608915][ T2302] Bluetooth: hci4: command 0x041b tx timeout [ 58.612691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.634025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.643898][ T4186] device veth0_vlan entered promiscuous mode [ 58.674316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.687835][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.700121][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.710456][ T4186] device veth1_vlan entered promiscuous mode [ 58.743434][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.751524][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.759672][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.768371][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.776211][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.783723][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.792660][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.800939][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.809664][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.818650][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.828150][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.836606][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.845324][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.854346][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.863327][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.871853][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.888455][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.898975][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.907734][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.916365][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.926882][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.934940][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.947114][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.954646][ T4196] device veth0_vlan entered promiscuous mode [ 58.971696][ T4188] device veth0_vlan entered promiscuous mode [ 58.994444][ T4188] device veth1_vlan entered promiscuous mode [ 59.013624][ T4196] device veth1_vlan entered promiscuous mode [ 59.038636][ T4186] device veth0_macvtap entered promiscuous mode [ 59.068946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.079313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.108752][ T4186] device veth1_macvtap entered promiscuous mode [ 59.124076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.160890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.177319][ T4188] device veth0_macvtap entered promiscuous mode [ 59.201827][ T4196] device veth0_macvtap entered promiscuous mode [ 59.209952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.219187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.229075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.240781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.258338][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.269003][ T4188] device veth1_macvtap entered promiscuous mode [ 59.286566][ T4196] device veth1_macvtap entered promiscuous mode [ 59.294238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.302982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.310854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.320357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.328791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.337774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.347085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.354825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.370066][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.383015][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.393999][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.404850][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.418718][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.429751][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.440785][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.454900][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.464166][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.473882][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.483479][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.510906][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.521544][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.530563][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.540046][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.550988][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.563893][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.575465][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.589398][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.599976][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.610877][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.621635][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.633950][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.664619][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.673870][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.682778][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.691226][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.700340][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.709038][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.718989][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.727691][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.737746][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.745911][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.756453][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.767056][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.777383][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.788245][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.799122][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.819489][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.829498][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.841752][ T4187] device veth0_vlan entered promiscuous mode [ 59.850853][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.860281][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.869698][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.878916][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.893456][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.907993][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.916878][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.927212][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.959501][ T4187] device veth1_vlan entered promiscuous mode [ 59.978252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.992845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.000969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.009530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.017550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.029859][ T4201] device veth0_vlan entered promiscuous mode [ 60.088802][ T4201] device veth1_vlan entered promiscuous mode [ 60.158627][ T4201] device veth0_macvtap entered promiscuous mode [ 60.181255][ T4201] device veth1_macvtap entered promiscuous mode [ 60.191773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.200861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.210605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.218617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.227216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.238839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.250687][ T4187] device veth0_macvtap entered promiscuous mode [ 60.264499][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.273846][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.292371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.300717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.313862][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.317107][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.321690][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.333222][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.350552][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.362981][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.372876][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.383422][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.395974][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.415215][ T4187] device veth1_macvtap entered promiscuous mode [ 60.425829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.434070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.446291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.456131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.470300][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.480834][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.490932][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.502562][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.514354][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.525771][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.536881][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.561245][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.574636][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.584783][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.596836][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.602267][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 60.607175][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.618173][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 60.624574][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.629440][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 60.638980][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.638995][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.641096][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.652209][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 60.662948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.682583][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 60.695437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.704338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.713651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.724008][ T4201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.733357][ T4201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.742675][ T4201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.751374][ T4201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.764647][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.772997][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.773065][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.789895][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.801068][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.811717][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.825234][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.835767][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.846353][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.857165][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.868450][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.896564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.905149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.916057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.928410][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.938434][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.942084][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.951246][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.964374][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.973237][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.001494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.063135][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.083691][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.112462][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.120522][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.174991][ T4269] loop1: detected capacity change from 0 to 512 [ 61.200787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.212157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.244801][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.272984][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.303986][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.323528][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.332770][ T4274] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.351184][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.363520][ T4269] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.2: iget: bad i_size value: 38620345925642 [ 61.379800][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.387324][ T4269] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 61.399305][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.418531][ T4269] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.442021][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.450035][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.505069][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.524743][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.576884][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.101966][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.121945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.131952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.141950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.151937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.161950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.171937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.181953][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.191944][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.201945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.687062][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 62.982270][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 62.998714][ T1168] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 63.012482][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 63.019328][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 63.155462][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 63.183402][ T1168] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1148 with error 28 [ 63.229014][ T1168] EXT4-fs (loop1): This should not happen!! Data will be lost [ 63.229014][ T1168] [ 63.242283][ T1168] EXT4-fs (loop1): Total free blocks count 0 [ 63.248399][ T1168] EXT4-fs (loop1): Free/Dirty block details [ 63.266221][ T1168] EXT4-fs (loop1): free_blocks=0 [ 63.281723][ T1168] EXT4-fs (loop1): dirty_blocks=1148 [ 63.290600][ T1168] EXT4-fs (loop1): Block reservation details [ 63.305972][ T1168] EXT4-fs (loop1): i_reserved_data_blocks=1148 [ 63.337566][ T4274] crypto_alloc_aead failed rc=-4 [ 64.440432][ T4321] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.555401][ T4321] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 64.579421][ T4326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9'. [ 64.788712][ T4334] loop4: detected capacity change from 0 to 512 [ 64.862369][ T4334] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.906811][ T4334] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.992429][ T4334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 65.041152][ T4334] System zones: 1-12 [ 65.058697][ T4334] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 65.114836][ T4334] EXT4-fs (loop4): 1 truncate cleaned up [ 65.122059][ T4334] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 65.233927][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 66.972979][ T4352] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.186929][ T4357] loop0: detected capacity change from 0 to 1024 [ 67.303592][ T4357] ======================================================= [ 67.303592][ T4357] WARNING: The mand mount option has been deprecated and [ 67.303592][ T4357] and is ignored by this kernel. Remove the mand [ 67.303592][ T4357] option from the mount to silence this warning. [ 67.303592][ T4357] ======================================================= [ 67.492924][ T4357] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,noquota,delalloc,noblock_validity,nodioread_nolock,errors=remount-ro,. Quota mode: none. [ 67.558759][ T4357] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.607088][ T4346] loop2: detected capacity change from 0 to 40427 [ 67.676655][ T4346] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 67.765729][ T4346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 67.776181][ T4357] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.20: bg 0: block 112: padding at end of block bitmap is not set [ 67.796918][ T4346] F2FS-fs (loop2): invalid crc value [ 67.838498][ T4346] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 67.855487][ T4372] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 67.903688][ T4357] EXT4-fs (loop0): Remounting filesystem read-only [ 68.185318][ T4346] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 68.215080][ T4346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.239435][ T4377] device syzkaller0 entered promiscuous mode [ 69.651913][ C0] sched: RT throttling activated [ 69.698946][ T4196] attempt to access beyond end of device [ 69.698946][ T4196] loop2: rw=2049, want=45104, limit=40427 [ 71.252036][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.258631][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.276431][ T4393] device syzkaller0 entered promiscuous mode [ 71.401252][ T4399] loop0: detected capacity change from 0 to 64 [ 71.931848][ T4410] netlink: 276 bytes leftover after parsing attributes in process `syz.2.27'. [ 72.032393][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 72.829083][ T4410] tipc: Enabling of bearer rejected, failed to enable media [ 73.438714][ T4435] xt_policy: output policy not valid in PREROUTING and INPUT [ 76.122421][ T4458] loop2: detected capacity change from 0 to 1024 [ 76.195577][ T4460] kvm: pic: single mode not supported [ 76.195681][ T4460] kvm: pic: level sensitive irq not supported [ 76.254708][ T4460] kvm: pic: single mode not supported [ 76.260823][ T4460] kvm: pic: level sensitive irq not supported [ 76.272402][ T4458] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 76.376034][ T4460] kvm: pic: single mode not supported [ 76.376048][ T4460] kvm: pic: level sensitive irq not supported [ 76.458361][ T4458] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 76.544915][ T4458] System zones: 0-1, 3-12 [ 76.579550][ T4458] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 76.606233][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.687599][ T4472] loop3: detected capacity change from 0 to 256 [ 76.875713][ T4472] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.876446][ T4472] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 77.995545][ T4472] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 78.281174][ T4487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.56'. [ 78.319904][ T4489] loop1: detected capacity change from 0 to 256 [ 78.375341][ T4489] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.447050][ T4489] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 78.511648][ T4489] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 79.687887][ T4502] FAULT_INJECTION: forcing a failure. [ 79.687887][ T4502] name failslab, interval 1, probability 100, space 0, times 1 [ 79.687962][ T4504] FAULT_INJECTION: forcing a failure. [ 79.687962][ T4504] name failslab, interval 1, probability 100, space 0, times 1 [ 79.687996][ T4504] CPU: 0 PID: 4504 Comm: syz.3.60 Not tainted syzkaller #0 [ 79.688015][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.688031][ T4504] Call Trace: [ 79.701409][ T4499] FAULT_INJECTION: forcing a failure. [ 79.701409][ T4499] name failslab, interval 1, probability 100, space 0, times 1 [ 79.713771][ T4504] [ 79.713786][ T4504] dump_stack_lvl+0x188/0x250 [ 79.713833][ T4504] ? show_regs_print_info+0x20/0x20 [ 79.713855][ T4504] ? load_image+0x410/0x410 [ 79.713883][ T4504] should_fail+0x383/0x4b0 [ 79.713908][ T4504] should_failslab+0x5/0x20 [ 79.713926][ T4504] slab_pre_alloc_hook+0x51/0xc0 [ 79.713946][ T4504] ? getname_flags+0xb7/0x4f0 [ 79.721366][ T4294] FAULT_INJECTION: forcing a failure. [ 79.721366][ T4294] name failslab, interval 1, probability 100, space 0, times 1 [ 79.731328][ T4504] kmem_cache_alloc+0x3d/0x280 [ 79.731356][ T4504] getname_flags+0xb7/0x4f0 [ 79.731380][ T4504] do_sys_openat2+0xdd/0x500 [ 79.731399][ T4504] ? __lock_acquire+0x7b50/0x7b50 [ 79.731421][ T4504] ? do_sys_open+0xe0/0xe0 [ 79.731440][ T4504] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.761431][ C1] FAULT_INJECTION: forcing a failure. [ 79.761431][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 79.764913][ T4504] ? lock_chain_count+0x20/0x20 [ 79.764945][ T4504] __x64_sys_openat+0x135/0x160 [ 79.764969][ T4504] do_syscall_64+0x4c/0xa0 [ 79.852452][ T4504] ? clear_bhb_loop+0x30/0x80 [ 79.857129][ T4504] ? clear_bhb_loop+0x30/0x80 [ 79.861827][ T4504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.867746][ T4504] RIP: 0033:0x7f3c128f30d9 [ 79.872159][ T4504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.891758][ T4504] RSP: 002b:00007f3c10b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.900180][ T4504] RAX: ffffffffffffffda RBX: 00007f3c12b7afa0 RCX: 00007f3c128f30d9 [ 79.908145][ T4504] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 79.916108][ T4504] RBP: 00007f3c1298a024 R08: 0000000000000000 R09: 0000000000000000 [ 79.924072][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.932031][ T4504] R13: 00007f3c12b7b038 R14: 00007f3c12b7afa0 R15: 00007ffdfe2fb118 [ 79.940007][ T4504] [ 79.943018][ C1] CPU: 1 PID: 4294 Comm: kworker/1:7 Not tainted syzkaller #0 [ 79.943503][ C0] FAULT_INJECTION: forcing a failure. [ 79.943503][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 79.950477][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.973263][ C1] Workqueue: events nsim_dev_trap_report_work [ 79.979328][ C1] Call Trace: [ 79.982596][ C1] [ 79.985427][ C1] dump_stack_lvl+0x188/0x250 [ 79.990100][ C1] ? show_regs_print_info+0x20/0x20 [ 79.995295][ C1] ? load_image+0x410/0x410 [ 79.999791][ C1] ? prandom_u32+0x217/0x250 [ 80.004378][ C1] should_fail+0x383/0x4b0 [ 80.008789][ C1] should_failslab+0x5/0x20 [ 80.013281][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 80.018216][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 80.023400][ C1] ? __alloc_skb+0xf4/0x750 [ 80.027940][ C1] __alloc_skb+0xf4/0x750 [ 80.032266][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 80.037315][ C1] ? __alloc_skb+0x750/0x750 [ 80.041891][ C1] ? mark_lock+0x94/0x320 [ 80.046217][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 80.051671][ C1] ? verify_lock_unused+0x140/0x140 [ 80.056880][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 80.062860][ C1] ? verify_lock_unused+0x140/0x140 [ 80.068075][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 80.073525][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 80.079069][ C1] __iterate_interfaces+0x225/0x4c0 [ 80.084256][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 80.090488][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 80.096717][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 80.103733][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 80.108922][ C1] ? hw_scan_work+0xef0/0xef0 [ 80.113612][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 80.118820][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 80.123928][ C1] hrtimer_run_softirq+0x176/0x240 [ 80.129036][ C1] handle_softirqs+0x336/0x830 [ 80.133797][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 80.138642][ C1] ? do_softirq+0x210/0x210 [ 80.143139][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 80.148248][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 80.153440][ C1] __irq_exit_rcu+0x13b/0x230 [ 80.158107][ C1] ? irq_exit_rcu+0x20/0x20 [ 80.162614][ C1] irq_exit_rcu+0x5/0x20 [ 80.166849][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 80.172473][ C1] [ 80.175401][ C1] [ 80.178327][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.184297][ C1] RIP: 0010:__kasan_check_read+0x0/0x10 [ 80.189963][ C1] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 fc a0 df 8b eb 0a 48 c7 c7 2c a1 c5 8b 48 89 de e8 38 51 f7 07 31 ed eb d7 00 00 cc cc <89> f6 48 8b 0c 24 31 d2 e9 43 ef ff ff 0f 1f 00 89 f6 48 8b 0c 24 [ 80.209559][ C1] RSP: 0018:ffffc9000342f930 EFLAGS: 00000293 [ 80.215617][ C1] RAX: ffffffff816062c8 RBX: 0000000000000200 RCX: ffff88802ac2bb80 [ 80.223588][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c1fb700 [ 80.231547][ C1] RBP: ffffc9000342fa30 R08: 0000000000000003 R09: 0000000000000004 [ 80.239506][ C1] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 80.247465][ C1] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000685f2c [ 80.255433][ C1] ? __printk_wait_on_cpu_lock+0x28/0x30 [ 80.261065][ C1] __printk_wait_on_cpu_lock+0x18/0x30 [ 80.266511][ C1] dump_stack_lvl+0x161/0x250 [ 80.271182][ C1] ? show_regs_print_info+0x20/0x20 [ 80.276368][ C1] ? load_image+0x410/0x410 [ 80.280862][ C1] ? prandom_u32+0x217/0x250 [ 80.285449][ C1] should_fail+0x383/0x4b0 [ 80.289858][ C1] should_failslab+0x5/0x20 [ 80.294366][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 80.299295][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 80.304492][ C1] ? __alloc_skb+0xf4/0x750 [ 80.308989][ C1] __alloc_skb+0xf4/0x750 [ 80.313311][ C1] nsim_dev_trap_report_work+0x25c/0xab0 [ 80.318937][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.324829][ C1] process_one_work+0x867/0xff0 [ 80.329682][ C1] ? worker_detach_from_pool+0x240/0x240 [ 80.335305][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 80.340588][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.345599][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.351137][ C1] ? wq_worker_running+0x97/0x170 [ 80.356172][ C1] worker_thread+0xad7/0x12a0 [ 80.360849][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.366737][ C1] kthread+0x42e/0x520 [ 80.370794][ C1] ? rcu_lock_release+0x20/0x20 [ 80.375630][ C1] ? kthread_blkcg+0xd0/0xd0 [ 80.380211][ C1] ret_from_fork+0x1f/0x30 [ 80.384632][ C1] [ 80.387666][ C0] CPU: 0 PID: 4504 Comm: syz.3.60 Not tainted syzkaller #0 [ 80.387677][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.400822][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.410868][ C0] Call Trace: [ 80.414141][ C0] [ 80.416977][ C0] dump_stack_lvl+0x188/0x250 [ 80.421654][ C0] ? show_regs_print_info+0x20/0x20 [ 80.426855][ C0] ? load_image+0x410/0x410 [ 80.431355][ C0] ? prandom_u32+0x217/0x250 [ 80.435943][ C0] should_fail+0x383/0x4b0 [ 80.440357][ C0] should_failslab+0x5/0x20 [ 80.444875][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 80.449806][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 80.454990][ C0] ? __alloc_skb+0xf4/0x750 [ 80.459485][ C0] __alloc_skb+0xf4/0x750 [ 80.463807][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 80.468821][ C0] ? __alloc_skb+0x750/0x750 [ 80.473399][ C0] ? mark_lock+0x94/0x320 [ 80.477726][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 80.483200][ C0] ? verify_lock_unused+0x140/0x140 [ 80.488408][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 80.494381][ C0] ? verify_lock_unused+0x140/0x140 [ 80.499595][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 80.505059][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 80.510614][ C0] __iterate_interfaces+0x225/0x4c0 [ 80.515802][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 80.522065][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 80.528407][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 80.535440][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 80.540637][ C0] ? hw_scan_work+0xef0/0xef0 [ 80.545328][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 80.550601][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 80.555720][ C0] hrtimer_run_softirq+0x176/0x240 [ 80.560829][ C0] handle_softirqs+0x336/0x830 [ 80.565588][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 80.570432][ C0] ? do_softirq+0x210/0x210 [ 80.574926][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 80.580030][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 80.585222][ C0] __irq_exit_rcu+0x13b/0x230 [ 80.589892][ C0] ? irq_exit_rcu+0x20/0x20 [ 80.594394][ C0] irq_exit_rcu+0x5/0x20 [ 80.598626][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 80.604249][ C0] [ 80.607171][ C0] [ 80.610088][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.616058][ C0] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 80.621948][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 e6 89 f7 e8 10 c3 b6 f7 fb bf 01 00 00 00 d5 b5 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 80.641546][ C0] RSP: 0018:ffffc900033ffa60 EFLAGS: 00000286 [ 80.647627][ C0] RAX: cf32e2820e4bda00 RBX: 0000000000000000 RCX: cf32e2820e4bda00 [ 80.655591][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 80.663555][ C0] RBP: ffffc900033ffb00 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 80.671517][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 80.679478][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200067ff4c [ 80.687455][ C0] ? __cond_resched+0xd0/0xd0 [ 80.692135][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 80.697930][ C0] irqentry_exit+0x63/0x70 [ 80.702337][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 80.707791][ C0] RIP: 0010:dump_stack_lvl+0x20e/0x250 [ 80.713239][ C0] Code: e8 a7 d0 c0 f7 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 93 d0 c0 f7 eb 06 e8 8c d0 c0 f7 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 80.732831][ C0] RSP: 0018:ffffc900033ffbc0 EFLAGS: 00000246 [ 80.738998][ C0] RAX: ffffffff89b82c24 RBX: dffffc0000000000 RCX: 0000000000080000 [ 80.746960][ C0] RDX: ffffc9000e809000 RSI: 000000000007ffff RDI: 0000000000080000 [ 80.754929][ C0] RBP: ffffc900033ffca8 R08: 0000000000000003 R09: 0000000000000004 [ 80.762885][ C0] R10: dffffc0000000000 R11: fffffbfff183f6e0 R12: dffffc0000000004 [ 80.770853][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff9200067ff7c [ 80.778832][ C0] ? dump_stack_lvl+0x204/0x250 [ 80.783696][ C0] ? show_regs_print_info+0x20/0x20 [ 80.788898][ C0] ? load_image+0x410/0x410 [ 80.793409][ C0] should_fail+0x383/0x4b0 [ 80.797822][ C0] should_failslab+0x5/0x20 [ 80.802316][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 80.807250][ C0] ? getname_flags+0xb7/0x4f0 [ 80.811917][ C0] kmem_cache_alloc+0x3d/0x280 [ 80.816676][ C0] getname_flags+0xb7/0x4f0 [ 80.821176][ C0] do_sys_openat2+0xdd/0x500 [ 80.825753][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 80.830777][ C0] ? do_sys_open+0xe0/0xe0 [ 80.835182][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.841159][ C0] ? lock_chain_count+0x20/0x20 [ 80.846005][ C0] __x64_sys_openat+0x135/0x160 [ 80.850853][ C0] do_syscall_64+0x4c/0xa0 [ 80.855262][ C0] ? clear_bhb_loop+0x30/0x80 [ 80.860013][ C0] ? clear_bhb_loop+0x30/0x80 [ 80.864678][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.870652][ C0] RIP: 0033:0x7f3c128f30d9 [ 80.875056][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.894739][ C0] RSP: 002b:00007f3c10b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.903145][ C0] RAX: ffffffffffffffda RBX: 00007f3c12b7afa0 RCX: 00007f3c128f30d9 [ 80.911112][ C0] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 80.919069][ C0] RBP: 00007f3c1298a024 R08: 0000000000000000 R09: 0000000000000000 [ 80.927027][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.934985][ C0] R13: 00007f3c12b7b038 R14: 00007f3c12b7afa0 R15: 00007ffdfe2fb118 [ 80.942958][ C0] [ 80.945973][ T4294] CPU: 1 PID: 4294 Comm: kworker/1:7 Not tainted syzkaller #0 [ 80.953527][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.963586][ T4294] Workqueue: events nsim_dev_trap_report_work [ 80.969671][ T4294] Call Trace: [ 80.972952][ T4294] [ 80.975888][ T4294] dump_stack_lvl+0x188/0x250 [ 80.980579][ T4294] ? show_regs_print_info+0x20/0x20 [ 80.985793][ T4294] ? load_image+0x410/0x410 [ 80.990287][ T4294] ? prandom_u32+0x217/0x250 [ 80.994880][ T4294] should_fail+0x383/0x4b0 [ 80.999279][ T4294] should_failslab+0x5/0x20 [ 81.003758][ T4294] slab_pre_alloc_hook+0x51/0xc0 [ 81.008685][ T4294] kmem_cache_alloc_node+0x47/0x2c0 [ 81.013878][ T4294] ? __alloc_skb+0xf4/0x750 [ 81.018360][ T4294] __alloc_skb+0xf4/0x750 [ 81.022669][ T4294] nsim_dev_trap_report_work+0x25c/0xab0 [ 81.028358][ T4294] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.034238][ T4294] process_one_work+0x867/0xff0 [ 81.039075][ T4294] ? worker_detach_from_pool+0x240/0x240 [ 81.044685][ T4294] ? lockdep_hardirqs_off+0x70/0x100 [ 81.049974][ T4294] ? _raw_spin_lock_irq+0xb7/0xf0 [ 81.054994][ T4294] ? _raw_spin_lock_irqsave+0x100/0x100 [ 81.060606][ T4294] ? wq_worker_running+0x97/0x170 [ 81.065610][ T4294] worker_thread+0xad7/0x12a0 [ 81.070275][ T4294] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.076151][ T4294] kthread+0x42e/0x520 [ 81.080198][ T4294] ? rcu_lock_release+0x20/0x20 [ 81.085029][ T4294] ? kthread_blkcg+0xd0/0xd0 [ 81.089596][ T4294] ret_from_fork+0x1f/0x30 [ 81.094001][ T4294] [ 81.097045][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.132066][ T4499] CPU: 0 PID: 4499 Comm: syz.2.58 Not tainted syzkaller #0 [ 81.139303][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.149362][ T4499] Call Trace: [ 81.152645][ T4499] [ 81.155576][ T4499] dump_stack_lvl+0x188/0x250 [ 81.160263][ T4499] ? show_regs_print_info+0x20/0x20 [ 81.165464][ T4499] ? load_image+0x410/0x410 [ 81.169980][ T4499] ? prandom_u32+0x217/0x250 [ 81.174592][ T4499] should_fail+0x383/0x4b0 [ 81.179023][ T4499] should_failslab+0x5/0x20 [ 81.183534][ T4499] slab_pre_alloc_hook+0x51/0xc0 [ 81.188478][ T4499] ? vm_area_dup+0x1e/0xb0 [ 81.192904][ T4499] kmem_cache_alloc+0x3d/0x280 [ 81.197687][ T4499] vm_area_dup+0x1e/0xb0 [ 81.201939][ T4499] __split_vma+0xb1/0x410 [ 81.206275][ T4499] ? split_vma+0x6b/0xd0 [ 81.210528][ T4499] mprotect_fixup+0x518/0x800 [ 81.215222][ T4499] ? change_protection+0x1940/0x1940 [ 81.220519][ T4499] ? vmacache_find+0x53c/0x590 [ 81.225301][ T4499] ? vmacache_update+0xa0/0x100 [ 81.230165][ T4499] ? bpf_lsm_file_mprotect+0x5/0x10 [ 81.235368][ T4499] ? security_file_mprotect+0x7e/0xb0 [ 81.240755][ T4499] do_mprotect_pkey+0x658/0x910 [ 81.245625][ T4499] __x64_sys_mprotect+0x7c/0x90 [ 81.250500][ T4499] do_syscall_64+0x4c/0xa0 [ 81.254924][ T4499] ? clear_bhb_loop+0x30/0x80 [ 81.259607][ T4499] ? clear_bhb_loop+0x30/0x80 [ 81.264390][ T4499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.270294][ T4499] RIP: 0033:0x7efff8938ed7 [ 81.274717][ T4499] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.294325][ T4499] RSP: 002b:00007fffd13712f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 81.302745][ T4499] RAX: ffffffffffffffda RBX: 00007efff6b706c0 RCX: 00007efff8938ed7 [ 81.310758][ T4499] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007efff6b51000 [ 81.318741][ T4499] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 81.326719][ T4499] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffd1371450 [ 81.334787][ T4499] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 81.342781][ T4499] [ 81.357108][ T4502] CPU: 0 PID: 4502 Comm: syz.4.59 Not tainted syzkaller #0 [ 81.364330][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.374393][ T4502] Call Trace: [ 81.377680][ T4502] [ 81.380615][ T4502] dump_stack_lvl+0x188/0x250 [ 81.385315][ T4502] ? show_regs_print_info+0x20/0x20 [ 81.390533][ T4502] ? load_image+0x410/0x410 [ 81.395058][ T4502] ? prandom_u32+0x217/0x250 [ 81.399671][ T4502] should_fail+0x383/0x4b0 [ 81.404104][ T4502] should_failslab+0x5/0x20 [ 81.408625][ T4502] slab_pre_alloc_hook+0x51/0xc0 [ 81.413660][ T4502] ? ptlock_alloc+0x1c/0x60 [ 81.418175][ T4502] kmem_cache_alloc+0x3d/0x280 [ 81.422953][ T4502] ptlock_alloc+0x1c/0x60 [ 81.427296][ T4502] pte_alloc_one+0xc0/0x310 [ 81.431814][ T4502] ? rcu_lock_release+0x20/0x20 [ 81.436677][ T4502] ? __might_sleep+0xf0/0xf0 [ 81.441277][ T4502] ? do_raw_spin_lock+0x128/0x2f0 [ 81.446321][ T4502] ? __rwlock_init+0x140/0x140 [ 81.451101][ T4502] __pte_alloc+0x21/0x150 [ 81.455444][ T4502] copy_page_range+0x2ab2/0x32c0 [ 81.460434][ T4502] ? pfn_valid+0x380/0x380 [ 81.464877][ T4502] ? validate_mm_rb+0x201/0x230 [ 81.469749][ T4502] ? validate_mm_rb+0x230/0x230 [ 81.474619][ T4502] ? vma_gap_callbacks_rotate+0x196/0x1f0 [ 81.480367][ T4502] copy_mm+0xc61/0x13d0 [ 81.484562][ T4502] ? copy_signal+0x610/0x610 [ 81.489172][ T4502] ? __init_rwsem+0x11e/0x160 [ 81.493865][ T4502] ? copy_signal+0x501/0x610 [ 81.498478][ T4502] copy_process+0x17fb/0x3ec0 [ 81.503207][ T4502] ? __pidfd_prepare+0x140/0x140 [ 81.508159][ T4502] ? kfree+0x4a/0x2a0 [ 81.512153][ T4502] ? verify_lock_unused+0x140/0x140 [ 81.517376][ T4502] kernel_clone+0x23f/0x990 [ 81.521900][ T4502] ? create_io_thread+0x180/0x180 [ 81.526958][ T4502] __x64_sys_clone+0x19a/0x210 [ 81.531736][ T4502] ? __ia32_sys_vfork+0x130/0x130 [ 81.536927][ T4502] ? lockdep_hardirqs_on+0x94/0x140 [ 81.542182][ T4502] do_syscall_64+0x4c/0xa0 [ 81.546613][ T4502] ? clear_bhb_loop+0x30/0x80 [ 81.551307][ T4502] ? clear_bhb_loop+0x30/0x80 [ 81.556001][ T4502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.561914][ T4502] RIP: 0033:0x7f07e0cb30d9 [ 81.566347][ T4502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.585972][ T4502] RSP: 002b:00007f07def0afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 81.594421][ T4502] RAX: ffffffffffffffda RBX: 00007f07e0f3afa0 RCX: 00007f07e0cb30d9 [ 81.602406][ T4502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002304000 [ 81.610391][ T4502] RBP: 00007f07e0d4a024 R08: 0000000000000000 R09: 0000000000000000 [ 81.618377][ T4502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 81.626364][ T4502] R13: 00007f07e0f3b038 R14: 00007f07e0f3afa0 R15: 00007ffd1ad38a88 [ 81.634373][ T4502] [ 81.652206][ T7] cfg80211: failed to load regulatory.db [ 81.780467][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 81.796087][ T4521] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.805368][ T4521] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.814105][ T4521] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.822882][ T4521] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.848768][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 81.925589][ T4522] Zero length message leads to an empty skb [ 84.219053][ T4557] loop1: detected capacity change from 0 to 1024 [ 84.600368][ T4570] ODEBUG: Out of memory. ODEBUG disabled [ 85.067052][ T4557] hfsplus: xattr searching failed [ 85.433771][ T4575] netlink: 48 bytes leftover after parsing attributes in process `syz.4.79'. [ 87.361438][ T4607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.85'. [ 87.380669][ T4607] netlink: 18 bytes leftover after parsing attributes in process `syz.2.85'. [ 87.445525][ T4618] 9pnet_virtio: no channels available for device syz [ 87.938889][ T4620] ecryptfs_parse_options: eCryptfs: unrecognized option [³] [ 87.946351][ T4620] ecryptfs_parse_options: eCryptfs: unrecognized option [z\)] [ 87.953951][ T4620] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 87.968176][ T4620] Error parsing options; rc = [-22] [ 89.200068][ T4627] tipc: Failed to remove unknown binding: 66,0,0/0:3857037990/3857037992 [ 89.367101][ T4627] tipc: Failed to remove unknown binding: 66,0,0/0:3857037990/3857037991 [ 89.869710][ T4627] tipc: Failed to remove unknown binding: 66,0,0/0:3857037990/3857037992 [ 89.941608][ T4627] tipc: Failed to remove unknown binding: 66,0,0/0:3857037990/3857037991 [ 90.130267][ T4651] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 91.853759][ T4674] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 92.300418][ T4677] loop3: detected capacity change from 0 to 65536 [ 92.936647][ T4677] XFS: noattr2 mount option is deprecated. [ 93.134896][ T4677] XFS (loop3): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 93.141169][ T4674] syz.0.92 (4674) used greatest stack depth: 21104 bytes left [ 93.310480][ T4707] tipc: Started in network mode [ 93.315479][ T4707] tipc: Node identity 84e, cluster identity 4711 [ 93.340396][ T4707] tipc: Node number set to 2126 [ 93.379443][ T4710] tipc: Enabling of bearer rejected, failed to enable media [ 93.692120][ T4264] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.852368][ T4264] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 94.871025][ T4264] usb 1-1: config 1 has no interface number 0 [ 96.522122][ T4264] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 96.535463][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.582470][ T4264] usb 1-1: can't set config #1, error -71 [ 96.636665][ T4264] usb 1-1: USB disconnect, device number 2 [ 97.456521][ T4764] loop0: detected capacity change from 0 to 512 [ 97.506348][ T4764] EXT4-fs (loop0): Ignoring removed bh option [ 97.574874][ T4764] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.652504][ T4764] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 97.707637][ T4768] device syzkaller0 entered promiscuous mode [ 97.737544][ T4764] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.124: Corrupt directory, running e2fsck is recommended [ 97.831552][ T4770] device hsr0 entered promiscuous mode [ 97.846514][ T4764] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 97.875674][ T4764] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.124: corrupted in-inode xattr [ 97.876354][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 98.911849][ T4764] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.124: couldn't read orphan inode 15 (err -117) [ 98.956759][ T4764] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,commit=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,bh,grpid,,,errors=continue. Quota mode: writeback. [ 99.888658][ T4810] nftables ruleset with unbound chain [ 100.026362][ T4814] loop4: detected capacity change from 0 to 512 [ 100.061667][ T4814] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 100.103269][ T4814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 100.113643][ T4814] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.120007][ T4814] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.136: bad orphan inode 267 [ 100.157949][ T4814] EXT4-fs (loop4): Remounting filesystem read-only [ 100.177716][ T4814] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 100.228672][ T4814] ip6t_srh: unknown srh invflags 4000 [ 100.294621][ T4823] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.136: dx entry: limit 0 != root limit 125 [ 100.341986][ T4823] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.136: Corrupt directory, running e2fsck is recommended [ 101.046597][ T4842] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 101.576551][ T4844] device bond1 entered promiscuous mode [ 101.594557][ T4844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.408149][ T4857] device syzkaller0 entered promiscuous mode [ 104.046361][ T4867] tipc: Started in network mode [ 104.051307][ T4867] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 104.061566][ T4867] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 104.070659][ T4867] tipc: Enabled bearer , priority 10 [ 105.128371][ T4891] loop4: detected capacity change from 0 to 1024 [ 105.133372][ T26] audit: type=1800 audit(1786110159.829:2): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="ipv4_port" dev="configfs" ino=34634 res=0 errno=0 [ 105.195021][ T2302] tipc: Node number set to 1 [ 105.212957][ T26] audit: type=1800 audit(1786110159.869:3): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="num" dev="configfs" ino=34635 res=0 errno=0 [ 105.256308][ T4891] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 105.305549][ T26] audit: type=1800 audit(1786110159.869:4): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="local" dev="configfs" ino=34636 res=0 errno=0 [ 105.687905][ T4898] sctp: [Deprecated]: syz.1.161 (pid 4898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.687905][ T4898] Use struct sctp_sack_info instead [ 105.760749][ T4891] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 105.829074][ T4898] sctp: [Deprecated]: syz.1.161 (pid 4898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.829074][ T4898] Use struct sctp_sack_info instead [ 106.076021][ T1323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.076337][ T4927] loop0: detected capacity change from 0 to 256 [ 107.118732][ T4927] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 107.162742][ T1323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.199240][ T4931] netlink: 'syz.2.170': attribute type 11 has an invalid length. [ 107.217158][ T1323] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.218319][ T4927] attempt to access beyond end of device [ 107.218319][ T4927] loop0: rw=524288, want=4281, limit=256 [ 107.258132][ T4935] device syzkaller1 entered promiscuous mode [ 107.279850][ T4938] exFAT-fs (loop0): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 107.303361][ T4938] exFAT-fs (loop0): Filesystem has been set read-only [ 107.312548][ T4927] attempt to access beyond end of device [ 107.312548][ T4927] loop0: rw=0, want=4281, limit=256 [ 107.324253][ T26] audit: type=1800 audit(1786110162.029:5): pid=4927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.171" name="file1" dev="loop0" ino=1048591 res=0 errno=0 [ 107.436040][ T1323] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 107.461674][ T1323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.474694][ T1323] usb 4-1: Product: syz [ 107.480316][ T1323] usb 4-1: Manufacturer: syz [ 107.549877][ T1323] usb 4-1: SerialNumber: syz [ 107.982339][ T1323] usb 4-1: usb_control_msg returned -71 [ 108.004378][ T1323] usbtmc 4-1:1.0: can't read capabilities [ 108.305201][ T4954] capability: warning: `syz.2.180' uses deprecated v2 capabilities in a way that may be insecure [ 108.313694][ T1323] usb 4-1: USB disconnect, device number 2 [ 108.356853][ T4956] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 108.359906][ T4955] IPVS: stopping master sync thread 4956 ... [ 108.502295][ T26] audit: type=1326 audit(1786110163.199:6): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=4959 comm="syz.2.182" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efff89390d9 code=0x0 [ 108.732259][ T1323] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.192830][ T1323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.290090][ T1323] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.522098][ T1323] usb 4-1: string descriptor 0 read error: -71 [ 109.522191][ T1323] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 109.522215][ T1323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.692513][ T1323] usb 4-1: can't set config #1, error -71 [ 109.698344][ T1323] usb 4-1: USB disconnect, device number 3 [ 110.582542][ T4999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.590242][ T4999] IPv6: NLM_F_CREATE should be set when creating new route [ 111.373930][ T5014] binder_alloc: 5013: pid 5013 spamming oneway? 2 buffers allocated for a total size of 5120 [ 111.408615][ T5014] binder_alloc: 5013: pid 5013 spamming oneway? 3 buffers allocated for a total size of 5128 [ 112.345460][ T4999] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.354064][ T4999] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.875017][ T4999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.910601][ T4999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.189644][ T4999] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.198718][ T4999] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.207710][ T4999] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.217022][ T4999] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.263316][ T5036] ceph: No mds server is up or the cluster is laggy [ 113.278105][ T1323] libceph: mon0 (2)127.0.0.1:6667 socket closed (con state V2_BANNER_PAYLOAD) [ 113.379908][ T5031] device ipip0 entered promiscuous mode [ 113.470223][ T4999] syz.1.190 (4999) used greatest stack depth: 20976 bytes left [ 113.663254][ T5052] netlink: 'syz.2.205': attribute type 12 has an invalid length. [ 113.843960][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 114.202639][ T5062] No source specified [ 114.885562][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 114.962403][ T5066] device bond1 entered promiscuous mode [ 115.729696][ T5056] loop1: detected capacity change from 0 to 32768 [ 116.225913][ T5056] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 117.376619][ T1106] libceph: connect (1)[c::]:6789 error -101 [ 117.376987][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 117.392367][ T1106] libceph: mon0 (1)[c::]:6789 connect error [ 117.553941][ T5104] ceph: No mds server is up or the cluster is laggy [ 118.380416][ T5114] tipc: Failed to remove unknown binding: 66,0,0/2126:3971407715/3971407716 [ 118.431256][ T5114] tipc: Failed to remove unknown binding: 66,0,0/2126:3971407715/3971407716 [ 119.175995][ T5124] netlink: 79 bytes leftover after parsing attributes in process `syz.3.222'. [ 119.239471][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 119.280990][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 119.308791][ T5124] netlink: 'syz.3.222': attribute type 11 has an invalid length. [ 119.493473][ T5140] binder: 5137:5140 ioctl c0306201 200000002580 returned -14 [ 120.645110][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 120.651119][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 120.663636][ T5157] ceph: No mds server is up or the cluster is laggy [ 120.774712][ T5165] device syzkaller0 entered promiscuous mode [ 121.006783][ T5184] ipt_REJECT: TCP_RESET invalid for non-tcp [ 121.796682][ T5190] loop0: detected capacity change from 0 to 2048 [ 121.891199][ T5190] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 121.933102][ T5190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.694155][ T5213] bridge0: bridge: STP does not work in non-root netns [ 123.731386][ T5217] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 125.167376][ T5232] tipc: Enabled bearer , priority 0 [ 125.307147][ T5235] loop4: detected capacity change from 0 to 1024 [ 125.428163][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 125.432392][ T4188] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 125.452226][ T4188] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 125.476280][ T26] audit: type=1326 audit(1786110180.179:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.3.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f3c128ece57 code=0x0 [ 126.635616][ T5259] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 126.648235][ T5259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.655550][ T5259] IPv6: NLM_F_CREATE should be set when creating new route [ 126.820488][ T4188] syz-executor (4188) used greatest stack depth: 20944 bytes left [ 127.198597][ T4437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.388395][ T4437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.432901][ T4437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.483318][ T4267] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 127.698424][ T4437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.494283][ T4267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.515573][ T4267] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.692035][ T4267] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.701235][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.709706][ T4267] usb 5-1: Product: syz [ 128.714111][ T4267] usb 5-1: Manufacturer: syz [ 128.718814][ T4267] usb 5-1: SerialNumber: syz [ 128.863243][ T5277] chnl_net:caif_netlink_parms(): no params data found [ 129.295256][ T4267] usb 5-1: 0:2 : does not exist [ 129.684819][ T4267] usb 5-1: USB disconnect, device number 2 [ 129.732539][ T4264] Bluetooth: hci2: command 0x0409 tx timeout [ 129.841673][ T5314] tipc: Started in network mode [ 129.846679][ T5314] tipc: Node identity e0000001, cluster identity 4711 [ 129.890235][ T5314] tipc: Enabling of bearer rejected, failed to enable media [ 129.973752][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.984274][ T5277] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.001146][ T5277] device bridge_slave_0 entered promiscuous mode [ 130.054262][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.076117][ T5277] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.082701][ T5310] syz.3.280 (5310) used greatest stack depth: 18640 bytes left [ 130.118513][ T5277] device bridge_slave_1 entered promiscuous mode [ 130.825938][ T5277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.860976][ T5277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.974334][ T5277] team0: Port device team_slave_0 added [ 130.983761][ T5277] team0: Port device team_slave_1 added [ 131.060939][ T5277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.078606][ T5277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.136496][ T5277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.184243][ T5351] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 131.227578][ T5351] device bond1 entered promiscuous mode [ 131.234392][ T5351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.246985][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.258449][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.269775][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.280655][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.290941][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.301782][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.312084][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.323043][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.335382][ T5354] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 131.348172][ T5354] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 131.359941][ T5354] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 131.397036][ T5277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.406011][ T5277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.482380][ T5277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.524662][ T5364] cgroup: Name too long [ 131.527242][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.558842][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.558861][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.558879][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.558889][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.558903][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.558916][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.558929][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.559590][ T5358] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 131.559611][ T5358] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 131.651667][ T5277] device hsr_slave_0 entered promiscuous mode [ 131.652654][ T5277] device hsr_slave_1 entered promiscuous mode [ 132.580076][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 132.616112][ T4437] device hsr_slave_0 left promiscuous mode [ 132.684896][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.692547][ T4437] device hsr_slave_1 left promiscuous mode [ 132.712991][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.742159][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.753042][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.775907][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.784962][ T4437] device bridge_slave_1 left promiscuous mode [ 132.793095][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.892984][ T4437] device bridge_slave_0 left promiscuous mode [ 132.915350][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.993329][ T4437] device veth1_macvtap left promiscuous mode [ 132.999937][ T4437] device veth0_macvtap left promiscuous mode [ 133.020929][ T4437] device veth1_vlan left promiscuous mode [ 133.027910][ T4437] device veth0_vlan left promiscuous mode [ 133.261178][ T4437] bond1 (unregistering): Released all slaves [ 133.295248][ T5385] loop3: detected capacity change from 0 to 32768 [ 133.437216][ T5385] XFS (loop3): Mounting V5 Filesystem [ 133.517982][ T5385] XFS (loop3): Ending clean mount [ 133.603179][ T4437] team0 (unregistering): Port device team_slave_1 removed [ 133.628663][ T4437] team0 (unregistering): Port device team_slave_0 removed [ 133.650709][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.653050][ T4201] XFS (loop3): Unmounting Filesystem [ 133.676798][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.781733][ T4437] bond0 (unregistering): Released all slaves [ 133.920545][ T5417] jffs2: notice: (5417) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.174448][ T5277] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.243553][ T5277] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.314029][ T5277] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.335736][ T5277] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.612132][ T2302] Bluetooth: hci2: command 0x040f tx timeout [ 135.252235][ T5277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.333181][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.341020][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.460638][ T5277] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.150288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.179769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.239973][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.247123][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.292908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.306517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.337806][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.344969][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.545217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.604267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.657343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.691954][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 136.746878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.922085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.034612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.161262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.215827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.246166][ T5277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.273886][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.311037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.331626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.350452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.379614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.928939][ T5493] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.102147][ T5493] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 138.230592][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.262949][ T1534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.297578][ T5277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.578442][ T5515] md: personality for level is not loaded! [ 139.804335][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.823773][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.951082][ T5277] device veth0_vlan entered promiscuous mode [ 139.992455][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.000882][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.042786][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.050591][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.107871][ T5277] device veth1_vlan entered promiscuous mode [ 140.183374][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.222794][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.277975][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.324177][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.358299][ T5277] device veth0_macvtap entered promiscuous mode [ 140.388148][ T5277] device veth1_macvtap entered promiscuous mode [ 140.412152][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'. [ 140.633668][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.720483][ T5552] No source specified [ 141.091980][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.280229][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.291362][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.343166][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.375655][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.388739][ T5277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.410043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.454470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.519313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.563961][ T5560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.568053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.636009][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.665686][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.691212][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.703857][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.720443][ T5277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.743832][ T5277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.770444][ T5277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.783459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.804352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.843118][ T5560] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 141.870492][ T5277] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.889550][ T5277] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.950353][ T5277] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.281640][ T5277] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.866342][ T4654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.894087][ T4654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.878777][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.982455][ T5600] No source specified [ 145.597792][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.606773][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.615931][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.824706][ T5604] team0: Device xfrm0 is of different type [ 145.894120][ T5612] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.959556][ T5611] tipc: Enabled bearer , priority 0 [ 146.803215][ T5623] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 146.887561][ T5628] overlayfs: failed to clone upperpath [ 146.949084][ T5631] overlayfs: failed to clone upperpath [ 148.515172][ T5651] overlayfs: failed to clone upperpath [ 148.793973][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 150.438200][ T5692] device syzkaller0 entered promiscuous mode [ 153.507549][ T5714] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.627814][ T26] audit: type=1800 audit(1786110464.336:8): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.362" name="bus" dev="ramfs" ino=38359 res=0 errno=0 [ 153.652320][ T5714] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 153.846662][ T5727] MTD: Couldn't look up './dev/mtdblock0': -2 [ 153.895657][ T5731] 9pnet_virtio: no channels available for device syz [ 155.169397][ T5751] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 155.209256][ T5753] overlayfs: failed to clone upperpath [ 155.218151][ T5751] device bond1 entered promiscuous mode [ 155.224945][ T5751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.248368][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.275452][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.285429][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.301696][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.371993][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.421990][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.445473][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.469316][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.495004][ T5756] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.522186][ T5756] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 155.555858][ T5756] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 155.627189][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.642750][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.664470][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.701227][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.727432][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.752004][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.772040][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.794720][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.831082][ T5751] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.862085][ T5751] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 156.842324][ T5769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.380'. [ 157.131966][ T1106] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.481256][ T5793] sch_tbf: burst 1520 is lower than device lo mtu (1550) ! [ 157.492180][ T1106] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.536585][ T1106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 157.606278][ T5764] loop3: detected capacity change from 0 to 40427 [ 157.653727][ T5764] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 157.660105][ T5764] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 157.722302][ T1106] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 157.734157][ T1106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.752629][ T5764] F2FS-fs (loop3): invalid crc value [ 157.793099][ T1106] usb 5-1: Product: syz [ 157.803209][ T1106] usb 5-1: Manufacturer: syz [ 157.807844][ T1106] usb 5-1: SerialNumber: syz [ 157.864355][ T5764] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 158.104733][ T1106] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 158.119953][ T5764] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 158.130680][ T5764] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 158.149563][ T26] audit: type=1800 audit(1786110468.856:9): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.381" name="bus" dev="ramfs" ino=39002 res=0 errno=0 [ 158.460727][ T4201] attempt to access beyond end of device [ 158.460727][ T4201] loop3: rw=2049, want=45104, limit=40427 [ 158.554518][ T4229] usb 5-1: USB disconnect, device number 3 [ 158.880128][ T4229] usblp0: removed [ 159.452129][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.390'. [ 160.393005][ T5848] netlink: 'syz.5.393': attribute type 1 has an invalid length. [ 160.433167][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.472646][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.490042][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.543250][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.557008][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.568096][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.578272][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.591366][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.617776][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.628837][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.640094][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.650664][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.660822][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.671348][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.681232][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.691993][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.717881][ T5855] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 160.892457][ T5873] loop5: detected capacity change from 0 to 1024 [ 161.147073][ T5873] hfsplus: xattr searching failed [ 162.971987][ T26] audit: type=1800 audit(1786110473.676:10): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.399" name="bus" dev="ramfs" ino=38668 res=0 errno=0 [ 167.439809][ T5971] loop4: detected capacity change from 0 to 512 [ 167.693664][ T5971] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a32,abort,,errors=continue. Quota mode: writeback. [ 167.705985][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 167.797310][ T26] audit: type=1326 audit(1786110478.506:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 167.827825][ T26] audit: type=1326 audit(1786110478.506:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 167.869472][ T26] audit: type=1326 audit(1786110478.506:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 167.896376][ T26] audit: type=1326 audit(1786110478.516:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 167.920679][ T26] audit: type=1326 audit(1786110478.516:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 167.945222][ T26] audit: type=1326 audit(1786110478.516:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 167.976184][ T26] audit: type=1326 audit(1786110478.516:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.011609][ T26] audit: type=1326 audit(1786110478.516:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.042056][ T26] audit: type=1326 audit(1786110478.516:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.071350][ T26] audit: type=1326 audit(1786110478.526:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.101800][ T26] audit: type=1326 audit(1786110478.526:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.151959][ T26] audit: type=1326 audit(1786110478.526:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.181355][ T26] audit: type=1326 audit(1786110478.526:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.218967][ T26] audit: type=1326 audit(1786110478.526:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.278295][ T26] audit: type=1326 audit(1786110478.536:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.338943][ T26] audit: type=1326 audit(1786110478.536:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 168.370620][ T26] audit: type=1326 audit(1786110478.536:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff89390d9 code=0x7ffc0000 [ 169.401262][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 169.636673][ T6003] netlink: 'syz.5.435': attribute type 10 has an invalid length. [ 170.501246][ T6003] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 170.586201][ T6019] tipc: Failed to remove unknown binding: 66,0,0/1:3792769578/3792769579 [ 170.633069][ T6019] tipc: Failed to remove unknown binding: 66,0,0/1:3792769578/3792769579 [ 170.645017][ T6026] loop5: detected capacity change from 0 to 128 [ 170.660521][ T6016] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 170.675013][ T6027] md: could not open device unknown-block(1,0). [ 170.731290][ T6026] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 171.041047][ T4437] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 171.601122][ T6035] netlink: 'syz.4.444': attribute type 2 has an invalid length. [ 171.709942][ T6045] No such timeout policy "syz1" [ 174.862745][ T6083] tipc: Enabled bearer , priority 0 [ 174.884289][ T6083] device syzkaller0 entered promiscuous mode [ 174.921631][ T6083] tipc: Resetting bearer [ 174.945105][ T6081] tipc: Resetting bearer [ 174.964609][ T6081] tipc: Disabling bearer [ 175.116964][ T6098] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 175.356841][ T6100] loop5: detected capacity change from 0 to 32768 [ 175.568123][ T6100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.460 (6100) [ 176.182346][ T6100] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 176.191521][ T6100] BTRFS info (device loop5): use zlib compression, level 3 [ 176.198874][ T6100] BTRFS info (device loop5): turning on sync discard [ 176.205994][ T6100] BTRFS info (device loop5): using free space tree [ 176.212573][ T6100] BTRFS info (device loop5): has skinny extents [ 176.283303][ T6112] MPTCP: addr_signal error, add_addr=1, echo=0 [ 176.314925][ T6112] MPTCP: addr_signal error, rm_addr=1 [ 176.320517][ T6122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.464'. [ 176.504386][ T6133] device syzkaller0 entered promiscuous mode [ 176.635416][ T6100] BTRFS info (device loop5): enabling ssd optimizations [ 177.175608][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 177.530470][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 177.530488][ T26] audit: type=1800 audit(1786110488.056:29): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.460" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 178.129279][ T6172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.149037][ T6172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.637061][ T6172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.692875][ T6172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.744564][ T6194] netlink: 'syz.5.475': attribute type 1 has an invalid length. [ 179.091771][ T6195] bond1: (slave veth3): Enslaving as an active interface with a down link [ 179.670182][ T6197] bond1: (slave macvlan1): making interface the new active one [ 179.824899][ T6197] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 179.894049][ T6172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.912134][ T6172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.030127][ T6172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.102330][ T6172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.852276][ T4264] Bluetooth: hci0: command 0x0406 tx timeout [ 180.896183][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 180.933727][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 180.964814][ T6172] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.979208][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 181.014989][ T6172] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.157288][ T6172] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.174712][ T6172] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.191536][ T6172] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.230462][ T6172] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.257340][ T6172] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.281657][ T6172] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.304002][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 181.475930][ T6256] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 181.516852][ T6256] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 181.576958][ T6264] sch_tbf: burst 3 is lower than device syzkaller0 mtu (65589) ! [ 181.659086][ T6271] device syzkaller0 entered promiscuous mode [ 181.680704][ T6256] netlink: 'syz.3.488': attribute type 11 has an invalid length. [ 181.962049][ T6284] device syzkaller0 left promiscuous mode [ 183.117256][ T6309] loop5: detected capacity change from 0 to 512 [ 183.250500][ T6309] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 183.343175][ T6321] loop3: detected capacity change from 0 to 64 [ 183.447787][ T6309] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 183.544218][ T6309] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.627510][ T6345] sch_tbf: burst 1520 is lower than device lo mtu (1550) ! [ 189.145323][ T6404] SET target dimension over the limit! [ 192.618110][ T6443] device syzkaller0 entered promiscuous mode [ 194.125878][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.366586][ T6481] device syzkaller0 entered promiscuous mode [ 197.608423][ T6521] device syzkaller0 entered promiscuous mode [ 197.785543][ T6515] tipc: Started in network mode [ 197.868678][ T6515] tipc: Node identity eaaa9c680eef, cluster identity 4711 [ 198.261714][ T6515] tipc: Enabled bearer , priority 0 [ 198.357278][ T6528] tipc: Enabled bearer , priority 0 [ 198.365667][ T6528] device syzkaller0 entered promiscuous mode [ 198.376143][ T6528] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 198.393045][ T6528] netlink: 116 bytes leftover after parsing attributes in process `syz.4.558'. [ 198.425146][ T6528] tipc: Resetting bearer [ 198.452262][ T6530] tipc: Resetting bearer [ 198.529401][ T6530] tipc: Disabling bearer [ 199.632557][ T6527] tipc: Resetting bearer [ 199.718542][ T6527] tipc: Disabling bearer [ 199.933674][ T6546] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 201.169842][ T6561] loop0: detected capacity change from 0 to 32768 [ 201.830166][ T6561] device-mapper: table: 248:0: thi: unknown target type [ 201.872596][ T6561] device-mapper: ioctl: error adding target to table [ 204.554066][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. Stopping sshd: [ 208.818964][ T6625] syz.3.586 sent an empty control message without MSG_MORE. [ 208.933947][ T6642] device syzkaller0 entered promiscuous mode stopped /usr/sbin/sshd (pid 3939) OK [ 209.335459][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.591'. [ 209.346349][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.591'. [ 209.355438][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.591'. [ 209.365103][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.591'. [ 209.375160][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.591'. Stopping crond: stopped /usr/sbin/crond (pid 3926) OK [ 211.430141][ T6684] jffs2: notice: (6684) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 211.556715][ T6689] mmap: syz.2.599 (6689) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3851) [ 213.533848][ T6716] tipc: Enabling of bearer rejected, failed to enable media Stopping network: [ 216.319504][ C0] ================================================================== [ 216.328097][ C0] BUG: KASAN: use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 216.337052][ C0] Read of size 1 at addr ffff88801c25b010 by task ksoftirqd/0/14 [ 216.344780][ C0] [ 216.347124][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 216.354390][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.364444][ C0] Call Trace: [ 216.367722][ C0] [ 216.370650][ C0] dump_stack_lvl+0x188/0x250 [ 216.375338][ C0] ? show_regs_print_info+0x20/0x20 [ 216.380546][ C0] ? load_image+0x410/0x410 [ 216.385052][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 216.390531][ C0] print_address_description+0x60/0x2d0 [ 216.396110][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 216.402697][ C0] kasan_report+0xdf/0x130 [ 216.407115][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 216.413706][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 216.420131][ C0] llc_conn_state_process+0x506/0x12b0 [ 216.425604][ C0] llc_conn_tmr_common_cb+0x336/0x7e0 [ 216.430985][ C0] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 216.436192][ C0] call_timer_fn+0x17b/0x540 [ 216.440792][ C0] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 216.446000][ C0] ? __run_timers+0x810/0x810 [ 216.450692][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 216.455894][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 216.461100][ C0] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 216.466310][ C0] __run_timers+0x56c/0x810 [ 216.470823][ C0] ? lock_chain_count+0x20/0x20 [ 216.475695][ C0] ? detach_timer+0x2b0/0x2b0 [ 216.480415][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.486415][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 216.491302][ C0] run_timer_softirq+0x63/0xf0 [ 216.496049][ C0] handle_softirqs+0x336/0x830 [ 216.500802][ C0] ? run_ksoftirqd+0xa4/0x100 [ 216.505472][ C0] ? do_softirq+0x210/0x210 [ 216.510019][ C0] ? run_ksoftirqd+0x81/0x100 [ 216.514712][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 216.519893][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 216.525164][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 216.530347][ C0] run_ksoftirqd+0xa4/0x100 [ 216.534831][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 216.540015][ C0] smpboot_thread_fn+0x520/0x990 [ 216.544944][ C0] kthread+0x42e/0x520 [ 216.548992][ C0] ? cpu_report_death+0x180/0x180 [ 216.554001][ C0] ? kthread_blkcg+0xd0/0xd0 [ 216.558590][ C0] ret_from_fork+0x1f/0x30 [ 216.562996][ C0] [ 216.565995][ C0] [ 216.568305][ C0] Allocated by task 6734: [ 216.572624][ C0] __kasan_kmalloc+0xaf/0xe0 [ 216.577212][ C0] llc_sap_open+0xda/0x330 [ 216.581613][ C0] llc_ui_autobind+0x1fa/0x4b0 [ 216.586358][ C0] llc_ui_connect+0x1c5/0xc70 [ 216.591013][ C0] __sys_connect+0x3cb/0x450 [ 216.595585][ C0] __x64_sys_connect+0x76/0x80 [ 216.600332][ C0] do_syscall_64+0x4c/0xa0 [ 216.604729][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.610601][ C0] [ 216.612904][ C0] Freed by task 1106: [ 216.616856][ C0] kasan_set_track+0x4b/0x70 [ 216.621425][ C0] kasan_set_free_info+0x1f/0x40 [ 216.626338][ C0] ____kasan_slab_free+0xd5/0x110 [ 216.631346][ C0] slab_free_freelist_hook+0xec/0x170 [ 216.636703][ C0] kmem_cache_free_bulk+0x38b/0x490 [ 216.641884][ C0] kfree_rcu_work+0x311/0x900 [ 216.646568][ C0] process_one_work+0x867/0xff0 [ 216.651401][ C0] worker_thread+0xad7/0x12a0 [ 216.656070][ C0] kthread+0x42e/0x520 [ 216.660144][ C0] ret_from_fork+0x1f/0x30 [ 216.664543][ C0] [ 216.666852][ C0] Last potentially related work creation: [ 216.672542][ C0] kasan_save_stack+0x35/0x60 [ 216.677207][ C0] kasan_record_aux_stack+0xb8/0x100 [ 216.682472][ C0] kvfree_call_rcu+0x105/0x7f0 [ 216.687212][ C0] llc_ui_release+0x212/0x450 [ 216.691870][ C0] sock_close+0xbf/0x210 [ 216.696115][ C0] __fput+0x212/0x8c0 [ 216.700084][ C0] task_work_run+0x125/0x1a0 [ 216.704651][ C0] get_signal+0x123e/0x12e0 [ 216.709130][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 216.714743][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 216.720006][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 216.725525][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 216.730962][ C0] do_syscall_64+0x58/0xa0 [ 216.735359][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.741243][ C0] [ 216.743548][ C0] The buggy address belongs to the object at ffff88801c25b000 [ 216.743548][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 216.757576][ C0] The buggy address is located 16 bytes inside of [ 216.757576][ C0] 2048-byte region [ffff88801c25b000, ffff88801c25b800) [ 216.770823][ C0] The buggy address belongs to the page: [ 216.776460][ C0] page:ffffea0000709600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c258 [ 216.786589][ C0] head:ffffea0000709600 order:3 compound_mapcount:0 compound_pincount:0 [ 216.794890][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 216.802871][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42000 [ 216.811433][ C0] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 216.819987][ C0] page dumped because: kasan: bad access detected [ 216.826394][ C0] page_owner tracks the page as allocated [ 216.832090][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 3520783333, free_ts 0 [ 216.849944][ C0] get_page_from_freelist+0x24f6/0x2670 [ 216.855472][ C0] __alloc_pages+0x1ee/0x480 [ 216.860047][ C0] alloc_page_interleave+0x24/0x1e0 [ 216.865219][ C0] new_slab+0xc0/0x4b0 [ 216.869262][ C0] ___slab_alloc+0x807/0xdd0 [ 216.873831][ C0] kmem_cache_alloc_trace+0xf9/0x290 [ 216.879089][ C0] acpi_ds_create_walk_state+0xe2/0x270 [ 216.884616][ C0] acpi_ps_execute_method+0x21d/0x7a0 [ 216.889979][ C0] acpi_ns_evaluate+0x661/0xa30 [ 216.894823][ C0] acpi_ut_evaluate_object+0x12f/0x480 [ 216.900258][ C0] acpi_ut_execute_STA+0x44/0x130 [ 216.905256][ C0] acpi_ns_get_device_callback+0x210/0x4b0 [ 216.911037][ C0] acpi_ns_walk_namespace+0x21f/0x6a0 [ 216.916397][ C0] acpi_get_devices+0x108/0x170 [ 216.921220][ C0] pnpacpi_init+0x7e/0x120 [ 216.925626][ C0] do_one_initcall+0x272/0x730 [ 216.930365][ C0] page_owner free stack trace missing [ 216.935723][ C0] [ 216.938024][ C0] Memory state around the buggy address: [ 216.943631][ C0] ffff88801c25af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.951665][ C0] ffff88801c25af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.959698][ C0] >ffff88801c25b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.967731][ C0] ^ [ 216.972297][ C0] ffff88801c25b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.980337][ C0] ffff88801c25b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.988388][ C0] ================================================================== [ 216.996421][ C0] Disabling lock debugging due to kernel taint [ 217.002637][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 217.009803][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G B syzkaller #0 [ 217.018449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.028485][ C0] Call Trace: [ 217.031741][ C0] [ 217.034651][ C0] dump_stack_lvl+0x188/0x250 [ 217.039308][ C0] ? show_regs_print_info+0x20/0x20 [ 217.044498][ C0] ? load_image+0x410/0x410 [ 217.048980][ C0] panic+0x2f8/0x850 [ 217.052853][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 217.057346][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 217.063212][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 217.069074][ C0] ? _raw_spin_unlock+0x40/0x40 [ 217.073896][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 217.080457][ C0] check_panic_on_warn+0x80/0xa0 [ 217.085371][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 217.091935][ C0] end_report+0x6d/0xf0 [ 217.096066][ C0] kasan_report+0x102/0x130 [ 217.100545][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 217.107109][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x332/0x3c0 [ 217.113498][ C0] llc_conn_state_process+0x506/0x12b0 [ 217.118936][ C0] llc_conn_tmr_common_cb+0x336/0x7e0 [ 217.124282][ C0] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 217.129476][ C0] call_timer_fn+0x17b/0x540 [ 217.134042][ C0] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 217.139216][ C0] ? __run_timers+0x810/0x810 [ 217.143887][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 217.149059][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 217.154232][ C0] ? llc_conn_busy_tmr_cb+0x20/0x20 [ 217.159404][ C0] __run_timers+0x56c/0x810 [ 217.163887][ C0] ? lock_chain_count+0x20/0x20 [ 217.168734][ C0] ? detach_timer+0x2b0/0x2b0 [ 217.173384][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.179337][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 217.184181][ C0] run_timer_softirq+0x63/0xf0 [ 217.188936][ C0] handle_softirqs+0x336/0x830 [ 217.193675][ C0] ? run_ksoftirqd+0xa4/0x100 [ 217.198326][ C0] ? do_softirq+0x210/0x210 [ 217.202802][ C0] ? run_ksoftirqd+0x81/0x100 [ 217.207455][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 217.212623][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 217.217881][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 217.223049][ C0] run_ksoftirqd+0xa4/0x100 [ 217.227526][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 217.232696][ C0] smpboot_thread_fn+0x520/0x990 [ 217.237626][ C0] kthread+0x42e/0x520 [ 217.241677][ C0] ? cpu_report_death+0x180/0x180 [ 217.246686][ C0] ? kthread_blkcg+0xd0/0xd0 [ 217.251252][ C0] ret_from_fork+0x1f/0x30 [ 217.255650][ C0] [ 217.258749][ C0] Kernel Offset: disabled [ 217.263061][ C0] Rebooting in 86400 seconds..