last executing test programs: 1m36.748634345s ago: executing program 2 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) waitid(0x0, r0, 0x0, 0x373dd6bea8d6291b, &(0x7f0000000240)) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) syz_open_dev$video(0x0, 0x7, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) 1m35.732493533s ago: executing program 2 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 1m35.152594791s ago: executing program 2 (id=892): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 1m34.516616481s ago: executing program 2 (id=896): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20004080) r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r3 = openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhos', 0x22) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) 1m33.037036482s ago: executing program 2 (id=900): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) landlock_restrict_self(0xffffffffffffffff, 0x0) ptrace(0x10, r2) 1m32.884534169s ago: executing program 2 (id=902): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xb01, @empty, 0x6}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="0dc785c4cb69d0b3d461ca5d", 0xc}], 0x1}}], 0x1, 0x48000) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m31.130253602s ago: executing program 32 (id=902): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0xb01, @empty, 0x6}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="0dc785c4cb69d0b3d461ca5d", 0xc}], 0x1}}], 0x1, 0x48000) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.672650886s ago: executing program 0 (id=1191): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x0, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20004080) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r4 = openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhos', 0x22) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) 11.222488727s ago: executing program 0 (id=1193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 9.574546325s ago: executing program 0 (id=1198): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 9.361020556s ago: executing program 1 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r8, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x1d, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 9.203501423s ago: executing program 0 (id=1203): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x0, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20004080) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r4 = openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhos', 0x22) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) 8.250280658s ago: executing program 0 (id=1207): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d2", 0x9}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 6.988124168s ago: executing program 5 (id=1211): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x401}}]}, 0x154}}, 0x24000058) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x410040, 0x0) ptrace$cont(0x9, r1, 0x0, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r5, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xa}, {0xdedf0d8c1d41c28, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) 6.823820446s ago: executing program 1 (id=1221): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x104, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.370403197s ago: executing program 3 (id=1212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.209019815s ago: executing program 0 (id=1213): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5.984516316s ago: executing program 1 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r3 = socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, &(0x7f00000002c0), 0x2, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.393666704s ago: executing program 4 (id=1215): syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000280)='./file1\x00', 0x200802, &(0x7f0000000500)=ANY=[], 0x9, 0x20e, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x21c90c, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@usrjquota}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@orlov, 0x32}], [{@obj_user={'obj_user', 0x3d, 'errors=remount-ro'}}, {@appraise_type}, {@appraise_type}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") 5.392812824s ago: executing program 5 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) 4.748225735s ago: executing program 3 (id=1217): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x0, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20004080) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r4 = openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhos', 0x22) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) 4.747092404s ago: executing program 4 (id=1218): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f01b, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(r4, 0x6f3e, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 4.41134382s ago: executing program 1 (id=1219): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) timer_create(0x7, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20044845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) 4.4107613s ago: executing program 5 (id=1220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x401) write$P9_RREADLINK(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0xc0, &(0x7f00000001c0)={[{@compress_algo={'compress', 0x3d, 'lzo'}}, {@clear_cache}, {@space_cache_v2}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0xb, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 3.612516818s ago: executing program 4 (id=1222): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x8}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xb, 0x6, 0x3, 0x7, 0x8, 0x2, 0x10, 0x4], 0x3, [0x1751, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xc, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x9, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2002]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.560656511s ago: executing program 3 (id=1223): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2030, 0x4}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000840}, 0x48014) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r3, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) 3.477327955s ago: executing program 1 (id=1224): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x0, 0x2, 0x4, 0x3}]}) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) close(r1) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5,nr_bl']) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setns(0xc9, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df250100000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, 0x0, &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x78) tkill(0x0, 0x18) 3.377658049s ago: executing program 1 (id=1225): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 2.982107638s ago: executing program 4 (id=1226): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.270998922s ago: executing program 5 (id=1227): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0), 0x0, 0x0) gettid() pipe2(&(0x7f0000002140)={0x0, 0x0}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) write(r1, 0x0, 0x0) 1.949175217s ago: executing program 3 (id=1228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 862.731949ms ago: executing program 5 (id=1229): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) 862.480689ms ago: executing program 3 (id=1230): socket(0x40000000015, 0x805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@any, 0x1}) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') write(0xffffffffffffffff, 0x0, 0x0) 861.797719ms ago: executing program 4 (id=1231): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x36, 0x0, 0x0) capset(0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x5a, "19fe140814adc0a3a9635947204fba5aeed88bd7f5061c101c1a9ee54d5974f415829d866b630a1db248692ede45d828a88548d56538c6fe74b21ed694e80914917da2cd909b005c1478b1cc483d56ab12a5c86483ee7527437c"}, &(0x7f0000000180)=0x62) sendmsg$NFT_MSG_GETFLOWTABLE(r2, 0x0, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 628.59162ms ago: executing program 5 (id=1232): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080)=0xffffffff, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) 114.007584ms ago: executing program 4 (id=1233): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x0, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20004080) r3 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r4 = openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhos', 0x22) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) 0s ago: executing program 3 (id=1234): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 44.910968][ T4171] cgroup: Unknown subsys name 'net' [ 45.055256][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.230694][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 47.533679][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 47.571473][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 47.628577][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 47.670832][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.678543][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.686564][ T4190] device bridge_slave_0 entered promiscuous mode [ 47.695102][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 47.719481][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.726583][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.734347][ T4190] device bridge_slave_1 entered promiscuous mode [ 47.745904][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 47.785131][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.793142][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.801296][ T4191] device bridge_slave_0 entered promiscuous mode [ 47.824910][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.840006][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.849377][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.857259][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.864962][ T4191] device bridge_slave_1 entered promiscuous mode [ 47.914790][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.922224][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.929752][ T4185] device bridge_slave_0 entered promiscuous mode [ 47.951006][ T4190] team0: Port device team_slave_0 added [ 47.956961][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.965268][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.973172][ T4189] device bridge_slave_0 entered promiscuous mode [ 47.980332][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.987387][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.995313][ T4185] device bridge_slave_1 entered promiscuous mode [ 48.005934][ T4190] team0: Port device team_slave_1 added [ 48.013313][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.022683][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.029724][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.038070][ T4189] device bridge_slave_1 entered promiscuous mode [ 48.060661][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.090206][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.097161][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.123639][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.142784][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.164374][ T4191] team0: Port device team_slave_0 added [ 48.171862][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.181439][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.188387][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.214337][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.226811][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.243880][ T4191] team0: Port device team_slave_1 added [ 48.249692][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.256998][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.264674][ T4194] device bridge_slave_0 entered promiscuous mode [ 48.273510][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.297584][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.305471][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.313241][ T4194] device bridge_slave_1 entered promiscuous mode [ 48.359715][ T4185] team0: Port device team_slave_0 added [ 48.367395][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.382009][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.388963][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.415167][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.428374][ T4189] team0: Port device team_slave_0 added [ 48.435345][ T4185] team0: Port device team_slave_1 added [ 48.443249][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.455273][ T4190] device hsr_slave_0 entered promiscuous mode [ 48.462523][ T4190] device hsr_slave_1 entered promiscuous mode [ 48.469452][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.476537][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.502529][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.514404][ T4189] team0: Port device team_slave_1 added [ 48.544161][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.551232][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.577265][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.615156][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.622295][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.648520][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.667008][ T4194] team0: Port device team_slave_0 added [ 48.673564][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.680882][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.706866][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.734073][ T4194] team0: Port device team_slave_1 added [ 48.740275][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.747210][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.773326][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.808249][ T4185] device hsr_slave_0 entered promiscuous mode [ 48.815087][ T4185] device hsr_slave_1 entered promiscuous mode [ 48.821778][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.829525][ T4185] Cannot create hsr debugfs directory [ 48.851321][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.858248][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.884853][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.899202][ T4191] device hsr_slave_0 entered promiscuous mode [ 48.905993][ T4191] device hsr_slave_1 entered promiscuous mode [ 48.912869][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.920545][ T4191] Cannot create hsr debugfs directory [ 48.942003][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.948943][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.975274][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.040863][ T4189] device hsr_slave_0 entered promiscuous mode [ 49.047475][ T4189] device hsr_slave_1 entered promiscuous mode [ 49.054230][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.062122][ T4189] Cannot create hsr debugfs directory [ 49.087923][ T4194] device hsr_slave_0 entered promiscuous mode [ 49.094637][ T4194] device hsr_slave_1 entered promiscuous mode [ 49.101237][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.108779][ T4194] Cannot create hsr debugfs directory [ 49.286858][ T4196] Bluetooth: hci2: command 0x0409 tx timeout [ 49.290231][ T4198] Bluetooth: hci1: command 0x0409 tx timeout [ 49.293976][ T4196] Bluetooth: hci0: command 0x0409 tx timeout [ 49.298964][ T4198] Bluetooth: hci3: command 0x0409 tx timeout [ 49.330373][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.350039][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.364693][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 49.369050][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.383967][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.408007][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.418096][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.434043][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.444521][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.493540][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.502889][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.514450][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.539542][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.601120][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.623057][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.634253][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.659401][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.672619][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.679384][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.694376][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.705994][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.718906][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.731104][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.759657][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.769257][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.782055][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.795843][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.813965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.823362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.833708][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.840931][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.849266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.857824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.865657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.874170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.883939][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.891022][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.913350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.922794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.932064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.941245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.949542][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.956609][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.966075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.974896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.983766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.992243][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.999271][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.015916][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.044067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.054987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.064054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.074582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.083807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.109148][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.118209][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.127047][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.135730][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.145813][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.154452][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.164257][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.172800][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.181857][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.190092][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.198483][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.207031][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.228215][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.236814][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.245686][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.255096][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.263726][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.274414][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.288535][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.302047][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.310574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.319364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.334944][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.380460][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.388204][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.406414][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.418051][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.429949][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.437057][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.445687][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.454451][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.463089][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.470119][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.478456][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.487129][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.499018][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.512035][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.526072][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.556922][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.589387][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.598575][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.605687][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.619805][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.628577][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.637849][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.646976][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.656233][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.664571][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.677035][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.685532][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.693376][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.703526][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.712523][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.719564][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.735274][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.759009][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.769993][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.778620][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.787152][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.795478][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.803251][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.811378][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.827036][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.837027][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.849034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.875624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.886936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.895801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.905600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.933466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.941718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.950767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.959265][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.966356][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.977053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.984912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.992722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.001979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.010495][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.017519][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.025340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.034478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.043661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.052449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.061421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.069604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.078257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.087053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.095811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.104205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.121322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.129639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.138349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.148381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.162581][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.179486][ T4190] device veth0_vlan entered promiscuous mode [ 51.197756][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.208467][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.224921][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.236114][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.246102][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.259040][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.268639][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.277909][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.287304][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.296127][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.304880][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.312736][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.325761][ T4190] device veth1_vlan entered promiscuous mode [ 51.352168][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.361129][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 51.361245][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 51.372218][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.390314][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 51.401122][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 51.406191][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.420399][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.437535][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.440500][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 51.469913][ T4190] device veth0_macvtap entered promiscuous mode [ 51.479096][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.494305][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.503387][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.512503][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.524486][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.548689][ T4191] device veth0_vlan entered promiscuous mode [ 51.562145][ T4190] device veth1_macvtap entered promiscuous mode [ 51.574275][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.583467][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.593108][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.602747][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.610721][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.618171][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.626502][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.648743][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.660036][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.691660][ T4191] device veth1_vlan entered promiscuous mode [ 51.706488][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.716427][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.726049][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.737839][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.746690][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.755839][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.765504][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.774677][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.782847][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.791134][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.799552][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.808661][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.816485][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.827524][ T4185] device veth0_vlan entered promiscuous mode [ 51.837557][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.847129][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.856031][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.864988][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.895416][ T4185] device veth1_vlan entered promiscuous mode [ 51.910946][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.918425][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.937165][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.962343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.974959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.021935][ T4191] device veth0_macvtap entered promiscuous mode [ 52.051572][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.070470][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.079258][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.089413][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.098260][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.126282][ T4185] device veth0_macvtap entered promiscuous mode [ 52.145651][ T4191] device veth1_macvtap entered promiscuous mode [ 52.164979][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.175827][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.188067][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.197460][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.207529][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.216009][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.224015][ T4189] device veth0_vlan entered promiscuous mode [ 52.249526][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.261475][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.273088][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.292608][ T4185] device veth1_macvtap entered promiscuous mode [ 52.308089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.317647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.327772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.336654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.345582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.356092][ T4189] device veth1_vlan entered promiscuous mode [ 52.380979][ T1270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.389740][ T1270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.397295][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.408015][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.422216][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.456297][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.466861][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.478042][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.489824][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.501569][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.510640][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.518649][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.527665][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.535785][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.544461][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.553941][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.563775][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.572762][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.581422][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.592556][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.601439][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.610577][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.619262][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.632191][ T4189] device veth0_macvtap entered promiscuous mode [ 52.652193][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.662782][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.666759][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.682141][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.684885][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.692583][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.693752][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.727217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.736093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.744330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.752976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.761769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.770566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.779126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.787033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.797650][ T4189] device veth1_macvtap entered promiscuous mode [ 52.813432][ T4194] device veth0_vlan entered promiscuous mode [ 52.829268][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.839890][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.849928][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.862836][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.872928][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.883617][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.896095][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.931858][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.942615][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.951636][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.961876][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.973046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.983687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.995321][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.006316][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.016390][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.026917][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.036784][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.047523][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.061462][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.165639][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.177034][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.185088][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.202765][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.219481][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.227528][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.242056][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.255073][ T4194] device veth1_vlan entered promiscuous mode [ 53.269992][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.284841][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.295110][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.304244][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.318284][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.625217][ T4265] loop2: detected capacity change from 0 to 8192 [ 53.935853][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 53.942063][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 53.948133][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 53.954262][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 53.957764][ T4265] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.960797][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 54.058058][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.075825][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.091101][ T4194] device veth0_macvtap entered promiscuous mode [ 54.101189][ T4194] device veth1_macvtap entered promiscuous mode [ 54.146290][ T4270] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2'. [ 54.227793][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.244166][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.255326][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.266802][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.277462][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.287728][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.297404][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.310405][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.333258][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.359975][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.546159][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.571117][ T4274] CIFS: Attempting to mount \\127.0.0.1\share [ 54.579408][ T4274] CIFS: VFS: Error connecting to socket. Aborting operation. [ 54.586934][ T4274] CIFS: VFS: cifs_mount failed w/return code = -111 [ 54.613177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.631030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.659488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.678095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.723527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.734063][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.745035][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.758021][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.774471][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.823086][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.954728][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.974090][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.991065][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.026642][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.468610][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.471832][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.476926][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.494644][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.504740][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.516012][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.524996][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.529218][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.544127][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.553147][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.561892][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.572376][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.709844][ T4286] device syzkaller0 entered promiscuous mode [ 55.831705][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.906869][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.952809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.061803][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 56.608997][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 56.950177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.970177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 57.055561][ T4295] loop3: detected capacity change from 0 to 1024 [ 57.852260][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.916832][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.071528][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.137832][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 58.527317][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.566070][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.712387][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.036309][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 59.044397][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 59.051262][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 59.080166][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1a!!! [ 59.300161][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 59.320160][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 59.330155][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 59.350154][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 59.370152][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.380157][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 59.400154][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.013765][ T4294] af_packet: tpacket_rcv: packet too big, clamped from 132 to 4294967272. macoff=96 [ 60.225688][ T4329] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.275125][ T4330] device syzkaller0 entered promiscuous mode [ 62.432893][ T4339] kvm [4337]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x0 [ 67.727617][ C1] Unknown status report in ack skb [ 68.661015][ T4228] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.810731][ T4411] loop2: detected capacity change from 0 to 32768 [ 68.870653][ T4411] ======================================================= [ 68.870653][ T4411] WARNING: The mand mount option has been deprecated and [ 68.870653][ T4411] and is ignored by this kernel. Remove the mand [ 68.870653][ T4411] option from the mount to silence this warning. [ 68.870653][ T4411] ======================================================= [ 68.943279][ T4411] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.41 (4411) [ 69.161162][ T4228] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 69.838152][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.959704][ T4228] usb 1-1: config 0 descriptor?? [ 70.014549][ T4411] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 70.023833][ T4411] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 70.033494][ T4411] BTRFS info (device loop2): use zstd compression, level 3 [ 70.040746][ T4411] BTRFS info (device loop2): force clearing of disk cache [ 70.047859][ T4411] BTRFS info (device loop2): enabling disk space caching [ 70.055011][ T4411] BTRFS info (device loop2): disk space caching is enabled [ 70.062331][ T4411] BTRFS info (device loop2): has skinny extents [ 70.117990][ T4228] cp210x 1-1:0.0: cp210x converter detected [ 70.592478][ T4431] ODEBUG: Out of memory. ODEBUG disabled [ 71.125465][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.133268][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.391894][ T4438] udc-core: couldn't find an available UDC or it's busy [ 71.398877][ T4438] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.345928][ T4401] loop0: detected capacity change from 0 to 64 [ 72.411360][ T4411] BTRFS error (device loop2): open_ctree failed: -12 [ 72.471518][ T4467] jffs2: notice: (4467) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 72.566177][ T4467] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 72.575196][ T4467] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 72.752200][ T4475] loop4: detected capacity change from 0 to 1024 [ 73.402534][ T4481] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET) [ 73.457171][ T4475] hfsplus: unable to load nls mapping "cp43" [ 73.470324][ T4475] hfsplus: unable to parse mount options [ 75.386375][ T4495] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.395507][ T4495] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.404266][ T4495] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.413213][ T4495] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.424564][ T4228] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 75.482457][ T4228] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 75.490063][ T4228] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 75.527217][ T4228] usb 1-1: cp210x converter now attached to ttyUSB0 [ 75.557050][ T4228] usb 1-1: USB disconnect, device number 2 [ 75.601186][ T4228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 75.620644][ T4228] cp210x 1-1:0.0: device disconnected [ 75.671891][ T4495] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 76.639920][ T1324] cfg80211: failed to load regulatory.db [ 80.728183][ T4541] nvmet_tcp: malformed ip/port passed: :4 [ 81.055843][ T4543] sched: RT throttling activated [ 81.121151][ T4516] team0 (unregistering): Port device team_slave_0 removed [ 81.542141][ T4547] loop2: detected capacity change from 0 to 512 [ 81.669083][ T4516] team0 (unregistering): Port device team_slave_1 removed [ 81.691513][ T4547] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 81.862579][ T4537] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 81.926927][ T4547] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpjquota=,norecovery,nolazytime,,errors=continue. Quota mode: writeback. [ 82.116474][ T4547] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.313201][ T4546] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 84.740480][ T4574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.784084][ T25] audit: type=1326 audit(1789408870.935:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 84.828300][ T25] audit: type=1326 audit(1789408870.935:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 85.100243][ T25] audit: type=1326 audit(1789408870.935:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 85.218734][ T4586] netlink: 44 bytes leftover after parsing attributes in process `syz.0.72'. [ 85.227849][ T4586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'. [ 85.642953][ T25] audit: type=1326 audit(1789408870.955:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 85.666615][ T25] audit: type=1326 audit(1789408870.955:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 85.691021][ T25] audit: type=1326 audit(1789408870.955:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 85.714818][ T25] audit: type=1326 audit(1789408870.955:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 85.760295][ T25] audit: type=1326 audit(1789408870.955:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 85.945224][ T25] audit: type=1326 audit(1789408870.955:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 86.020451][ T25] audit: type=1326 audit(1789408870.955:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.3.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f5afa159 code=0x7ffc0000 [ 88.092963][ T4607] netlink: 'syz.1.86': attribute type 4 has an invalid length. [ 88.651548][ T4607] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 88.659255][ T4607] netlink: 'syz.1.86': attribute type 26 has an invalid length. [ 88.677401][ T4607] netlink: 60759 bytes leftover after parsing attributes in process `syz.1.86'. [ 88.709325][ T4611] bridge0: port 3(ipvlan2) entered blocking state [ 88.715971][ T4611] bridge0: port 3(ipvlan2) entered disabled state [ 90.685082][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 90.718295][ T4629] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.92'. [ 91.052456][ T4645] loop4: detected capacity change from 0 to 256 [ 91.180956][ T4645] exfat: Deprecated parameter 'utf8' [ 91.197946][ T4645] exfat: Deprecated parameter 'utf8' [ 91.236033][ T4645] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 91.296017][ T4645] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 91.394944][ T4661] overlayfs: failed to clone upperpath [ 93.973729][ T4686] netlink: 64 bytes leftover after parsing attributes in process `syz.1.106'. [ 96.100582][ T4267] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.175575][ T4711] loop1: detected capacity change from 0 to 128 [ 96.674536][ T4714] fuse: Bad value for 'fd' [ 96.710467][ T4711] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 96.764592][ T4267] usb 1-1: Using ep0 maxpacket: 8 [ 96.880347][ T4267] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 96.911967][ T154] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 97.170403][ T4267] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 97.200280][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.209558][ T4267] usb 1-1: Product: syz [ 97.214788][ T4267] usb 1-1: Manufacturer: syz [ 97.226360][ T4267] usb 1-1: SerialNumber: syz [ 97.234851][ T4267] usb 1-1: config 0 descriptor?? [ 97.282021][ T4267] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 97.992317][ T4743] tipc: Started in network mode [ 97.998404][ T4743] tipc: Node identity 62a937dc7baf, cluster identity 4711 [ 98.006181][ T4743] tipc: Enabled bearer , priority 0 [ 98.125388][ T4749] device syzkaller0 entered promiscuous mode [ 98.134606][ T4751] tipc: Enabling of bearer rejected, failed to enable media [ 98.146440][ T4743] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 98.187637][ T4743] tipc: Resetting bearer [ 98.252963][ T4754] Zero length message leads to an empty skb [ 98.390167][ T4742] tipc: Resetting bearer [ 98.494656][ T4742] tipc: Disabling bearer [ 98.851519][ T4757] TC_ACT_REPEAT abuse ? [ 98.946511][ T4761] MPTCP: addr_signal error, add_addr=1, echo=0 [ 98.953189][ T4761] MPTCP: addr_signal error, rm_addr=1 [ 100.139261][ T4776] loop1: detected capacity change from 0 to 512 [ 100.215155][ T4267] gspca_zc3xx: reg_r err -32 [ 100.667082][ T4776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 100.722074][ T4776] System zones: 1-12 [ 100.772867][ T4776] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.134: missing EA_INODE flag [ 100.801636][ T4776] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.134: error while reading EA inode 12 err=-117 [ 100.816804][ T4776] EXT4-fs (loop1): 1 orphan inode deleted [ 100.822742][ T4776] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 100.840224][ T4267] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 100.847434][ T4267] gspca_zc3xx: probe of 1-1:0.0 failed with error -32 [ 100.867516][ T4267] usb 1-1: USB disconnect, device number 3 [ 101.106263][ T4791] netlink: 'syz.4.138': attribute type 10 has an invalid length. [ 101.134187][ T4791] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.141760][ T4791] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.232755][ T4787] ip6t_srh: unknown srh invflags 4000 [ 101.675996][ T4791] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.683309][ T4791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.691306][ T4791] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.698373][ T4791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.746676][ T4791] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.908536][ T4798] netlink: 52 bytes leftover after parsing attributes in process `syz.0.139'. [ 101.946526][ T4805] loop4: detected capacity change from 0 to 512 [ 101.968625][ T4798] netlink: 'syz.0.139': attribute type 11 has an invalid length. [ 102.015690][ T4805] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.066689][ T4805] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.133856][ T4805] EXT4-fs (loop4): 1 truncate cleaned up [ 102.180959][ T4805] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 102.229413][ T4801] kvm [4800]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x800100000080 [ 102.274719][ T4801] kvm [4800]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 102.289243][ T4801] kvm [4800]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x800000000000 [ 102.683831][ T4813] process 'syz.4.141' launched './file0' with NULL argv: empty string added [ 102.697923][ T4813] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.562762][ T4837] loop4: detected capacity change from 0 to 128 [ 106.640960][ T4836] device syzkaller0 entered promiscuous mode [ 106.660577][ T4837] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 106.693636][ T4836] tipc: Started in network mode [ 106.865881][ T4836] tipc: Node identity 0ee65b42e70e, cluster identity 4711 [ 107.030020][ T4836] tipc: Enabled bearer , priority 0 [ 107.433261][ T4843] tipc: Resetting bearer [ 107.465879][ T4846] netlink: 'syz.4.152': attribute type 4 has an invalid length. [ 107.681701][ T4830] tipc: Resetting bearer [ 108.444421][ T4830] tipc: Disabling bearer [ 108.471916][ T4228] tipc: Node number set to 3924319042 [ 112.155303][ T4906] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 113.309147][ T4906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.346345][ T4910] device macvlan2 entered promiscuous mode [ 113.357729][ T4910] device bond1 entered promiscuous mode [ 114.584893][ T4910] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.727268][ T4910] team0: Port device macvlan2 added [ 115.034142][ T4942] loop4: detected capacity change from 0 to 1024 [ 115.801440][ T4944] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 115.989653][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 115.999560][ T4950] device syzkaller0 entered promiscuous mode [ 116.017119][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.043621][ T4956] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.051829][ T4956] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.096168][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.134305][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.207208][ T4960] loop1: detected capacity change from 0 to 16 [ 116.232238][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.257979][ T4960] erofs: (device loop1): mounted with root inode @ nid 36. [ 116.290339][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.317860][ T4956] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.332384][ T4956] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.355566][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.366544][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.200580][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.207933][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.282424][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.289842][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.308719][ T4956] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.317299][ T4956] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.335609][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.343163][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.503027][ T4973] netlink: 56 bytes leftover after parsing attributes in process `syz.0.188'. [ 117.552775][ T4973] loop0: detected capacity change from 0 to 16 [ 117.564063][ T4956] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.584716][ T4956] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.594594][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.606086][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.800578][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.807900][ T4942] hfsplus: request for non-existent node 33423360 in B*Tree [ 118.194115][ T4973] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.259577][ T2239] kernel write not supported for file /115/net/ip6_tables_matches (pid: 2239 comm: kworker/1:2) [ 118.318258][ T25] kauditd_printk_skb: 153 callbacks suppressed [ 118.318273][ T25] audit: type=1800 audit(1789408904.465:165): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.188" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 120.054098][ T5001] loop4: detected capacity change from 0 to 32768 [ 120.640926][ T5007] device syzkaller0 entered promiscuous mode [ 120.900386][ T5015] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5015] [ 120.946510][ T5014] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 120.964037][ T5014] device syzkaller0 entered promiscuous mode [ 120.971705][ T5001] XFS (loop4): Mounting V5 Filesystem [ 121.051208][ T5001] XFS (loop4): Ending clean mount [ 121.070052][ T5026] autofs4:pid:5026:autofs_fill_super: called with bogus options [ 121.071409][ T5001] XFS (loop4): Quotacheck needed: Please wait. [ 121.143700][ T5001] XFS (loop4): Quotacheck: Done. [ 121.827823][ T25] audit: type=1800 audit(1789408907.935:166): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.195" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 121.999161][ T4194] XFS (loop4): Unmounting Filesystem [ 122.885165][ T5062] device syzkaller0 entered promiscuous mode [ 123.865933][ T5072] tipc: Started in network mode [ 123.900251][ T5072] tipc: Node identity ac1414aa, cluster identity 4711 [ 123.951088][ T5072] tipc: New replicast peer: 172.20.20.187 [ 123.974711][ T5072] tipc: Enabled bearer , priority 10 [ 126.061591][ T4230] tipc: Node number set to 2886997162 [ 126.395168][ T5075] loop0: detected capacity change from 0 to 32768 [ 127.327576][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4178) [ 129.153388][ T5141] device syzkaller0 entered promiscuous mode [ 129.284173][ T5143] loop1: detected capacity change from 0 to 1024 [ 129.308820][ T5148] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.361035][ T5143] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 129.438205][ T5143] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0102] [ 129.452745][ T5143] System zones: 0-1, 3-12 [ 129.613452][ T5143] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,nodelalloc,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 130.835494][ T5175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 130.848278][ T5175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'. [ 133.061083][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067421][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.842756][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'. [ 136.031447][ T5217] syz.1.253 (5217): drop_caches: 2 [ 136.402437][ T26] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 139.230278][ T26] usb 5-1: device descriptor read/all, error -71 [ 139.293527][ T5246] fuse: blksize only supported for fuseblk [ 139.305147][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 139.402022][ T5251] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.755593][ T5281] fuse: Bad value for 'fd' [ 141.837316][ T5243] loop4: detected capacity change from 0 to 32768 [ 142.017121][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 142.039205][ T5243] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.261 (5243) [ 142.124098][ T5243] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 142.164127][ T5243] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 142.204947][ T5243] BTRFS info (device loop4): use zstd compression, level 3 [ 142.284764][ T5243] BTRFS info (device loop4): using free space tree [ 142.291725][ T5243] BTRFS info (device loop4): has skinny extents [ 143.499747][ T5243] BTRFS error (device loop4): open_ctree failed: -12 [ 143.546275][ T4178] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by udevd (4178) [ 143.614277][ T5311] device syzkaller0 entered promiscuous mode [ 145.662586][ T5350] loop0: detected capacity change from 0 to 1024 [ 146.915131][ T5350] EXT4-fs (loop0): Ignoring removed bh option [ 147.719766][ T5350] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,max_dir_size_kb=0x0000000000000001,nombcache,sysvgroups,noinit_itable,dioread_lock,nogrpid,bh,grpjquota=,,errors=continue. Quota mode: none. [ 149.084045][ T5378] syz.4.288 (5378): attempted to duplicate a private mapping with mremap. This is not supported. [ 149.253259][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.293'. [ 149.355373][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.293'. [ 150.647524][ T5402] file system registered [ 150.691388][ T5400] loop4: detected capacity change from 0 to 256 [ 152.406745][ T5400] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 152.418564][ T5421] loop0: detected capacity change from 0 to 164 [ 152.451140][ T5403] ipt_REJECT: ECHOREPLY no longer supported. [ 152.514949][ T4196] Process accounting resumed [ 152.663437][ T5400] attempt to access beyond end of device [ 152.663437][ T5400] loop4: rw=524288, want=34359738496, limit=256 [ 152.710274][ T5400] attempt to access beyond end of device [ 152.710274][ T5400] loop4: rw=0, want=34359738496, limit=256 [ 152.809524][ T5429] rock: directory entry would overflow storage [ 152.816074][ T5429] rock: sig=0x4f50, size=4, remaining=3 [ 152.821846][ T5429] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 153.174921][ T25] audit: type=1800 audit(1789408939.325:167): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.298" name="file1" dev="loop4" ino=1048594 res=0 errno=0 [ 154.982125][ T25] audit: type=1326 audit(1789408941.135:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f5afa159 code=0x7fc00000 [ 157.687002][ T5336] Process accounting resumed [ 158.859764][ T5499] loop1: detected capacity change from 0 to 256 [ 159.199295][ T5499] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 160.381861][ T5499] attempt to access beyond end of device [ 160.381861][ T5499] loop1: rw=524288, want=34359738496, limit=256 [ 160.424506][ T5499] attempt to access beyond end of device [ 160.424506][ T5499] loop1: rw=0, want=34359738496, limit=256 [ 160.500229][ T25] audit: type=1800 audit(1789408946.635:169): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.332" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 165.960509][ T5583] loop0: detected capacity change from 0 to 512 [ 170.481778][ T5335] Bluetooth: hci3: command 0x0406 tx timeout [ 171.038125][ T5335] Bluetooth: hci2: command 0x0406 tx timeout [ 171.052179][ T5335] Bluetooth: hci0: command 0x0406 tx timeout [ 171.060501][ T5335] Bluetooth: hci1: command 0x0406 tx timeout [ 171.066614][ T5335] Bluetooth: hci4: command 0x0406 tx timeout [ 171.080969][ T5617] Process accounting resumed [ 173.844778][ T5668] tipc: Enabling of bearer rejected, failed to enable media [ 174.748517][ T5676] Process accounting resumed [ 175.184127][ T5687] capability: warning: `syz.3.372' uses 32-bit capabilities (legacy support in use) [ 179.397178][ T5728] Process accounting resumed [ 179.405011][ T5730] futex_wake_op: syz.2.384 tries to shift op by 144; fix this program [ 179.499353][ T25] audit: type=1800 audit(1789408965.645:170): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.385" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 179.939506][ T5746] tipc: Enabling of bearer rejected, failed to enable media [ 180.730201][ T5749] loop0: detected capacity change from 0 to 32768 [ 180.969180][ T5760] capability: warning: `syz.4.392' uses deprecated v2 capabilities in a way that may be insecure [ 181.520866][ T5749] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.390 (5749) [ 181.977185][ T5749] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 181.987600][ T5749] BTRFS info (device loop0): turning on sync discard [ 181.994352][ T5749] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 182.003754][ T5749] BTRFS info (device loop0): use zstd compression, level 3 [ 182.011014][ T5749] BTRFS info (device loop0): turning on async discard [ 182.018002][ T5749] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 182.028654][ T5749] BTRFS info (device loop0): trying to use backup root at mount time [ 182.036756][ T5749] BTRFS info (device loop0): enabling auto defrag [ 182.043239][ T5749] BTRFS info (device loop0): using free space tree [ 182.049739][ T5749] BTRFS info (device loop0): has skinny extents [ 183.159861][ T5802] fuse: Bad value for 'fd' [ 183.181958][ T4294] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 183.595701][ T5749] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 183.614870][ T4294] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 183.657638][ T5749] BTRFS warning (device loop0): couldn't read tree root [ 183.670608][ T5749] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 183.680848][ T5749] BTRFS warning (device loop0): couldn't read tree root [ 183.989901][ T5749] BTRFS error (device loop0): open_ctree failed: -22 [ 184.001306][ T4178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4178) [ 184.943078][ T5821] syz.4.402 (5821) used greatest stack depth: 17792 bytes left [ 187.931398][ T5851] loop0: detected capacity change from 0 to 40427 [ 188.176841][ T5851] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 188.184885][ T5851] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 188.221825][ T5851] F2FS-fs (loop0): invalid crc value [ 188.487674][ T5851] F2FS-fs (loop0): Found nat_bits in checkpoint [ 188.754073][ T5851] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 188.761248][ T5851] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 191.346344][ T5893] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 192.225809][ T5905] device syzkaller0 entered promiscuous mode [ 192.289784][ T5905] tipc: Enabled bearer , priority 0 [ 192.462561][ T5903] tipc: Resetting bearer [ 192.499257][ T5903] tipc: Disabling bearer [ 192.698479][ T5928] loop0: detected capacity change from 0 to 512 [ 194.536268][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.580567][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.589413][ T5815] Process accounting resumed [ 194.809969][ T5947] UBIFS error (pid: 5947): cannot open "(null)", error -22 [ 195.662229][ T5953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.442'. [ 197.801487][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 197.812166][ T6002] bond0: option lp_interval: invalid value (0) [ 197.818344][ T6002] bond0: option lp_interval: allowed values 1 - 2147483647 [ 197.998246][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 198.202180][ T6005] device bridge_slave_1 left promiscuous mode [ 198.460371][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.711320][ T6005] device bridge_slave_0 left promiscuous mode [ 198.798404][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.571263][ T6037] overlayfs: failed to clone upperpath [ 201.332798][ T6046] loop0: detected capacity change from 0 to 4096 [ 203.917564][ T6073] UBIFS error (pid: 6073): cannot open "(null)", error -22 [ 205.216255][ T6093] overlayfs: failed to clone lowerpath [ 205.264252][ T6092] tipc: Started in network mode [ 205.323450][ T6092] tipc: Node identity 4, cluster identity 4711 [ 205.329636][ T6092] tipc: Node number set to 4 [ 205.534097][ T6113] tipc: Enabling of bearer rejected, failed to enable media [ 206.409996][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.483'. [ 207.894922][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 208.048700][ T6137] kvm [6136]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 208.075781][ T6137] kvm [6136]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 208.088928][ T6137] kvm [6136]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 208.278282][ T4268] Process accounting resumed [ 208.351173][ T6174] overlayfs: failed to clone upperpath [ 209.313235][ T4268] libceph: connect (1)[c::]:6789 error -101 [ 209.383128][ T4268] libceph: mon0 (1)[c::]:6789 connect error [ 209.456045][ T6177] ceph: No mds server is up or the cluster is laggy [ 211.396884][ T6212] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 211.408952][ T6212] netlink: 'syz.2.504': attribute type 2 has an invalid length. [ 213.354850][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 213.381595][ T6234] loop0: detected capacity change from 0 to 32768 [ 213.450461][ T6234] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 214.387372][ T6246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.480603][ T6246] team0: Port device bond1 added [ 215.452793][ T5335] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 215.462024][ T5335] Bluetooth: hci4: Injecting HCI hardware error event [ 215.472672][ T4186] Bluetooth: hci4: hardware error 0x00 [ 215.590884][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 218.905727][ T6308] netem: change failed [ 220.258531][ T6338] overlayfs: failed to clone upperpath [ 220.960604][ T6344] netlink: 36 bytes leftover after parsing attributes in process `syz.4.537'. [ 222.499635][ T4268] Process accounting resumed [ 224.352356][ T6379] overlayfs: failed to clone upperpath [ 224.426314][ T4230] Process accounting resumed [ 225.294811][ T26] Process accounting resumed [ 225.530004][ T6412] loop0: detected capacity change from 0 to 512 [ 225.706330][ T6416] CIFS: Attempting to mount \\127.0.0.1\share [ 225.715126][ T26] Process accounting resumed [ 226.682999][ T6416] CIFS: VFS: Error connecting to socket. Aborting operation. [ 226.690458][ T6416] CIFS: VFS: cifs_mount failed w/return code = -4 [ 227.257848][ T4267] Process accounting resumed [ 228.415988][ T6453] netlink: 'syz.1.569': attribute type 15 has an invalid length. [ 228.745558][ T6453] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 228.754356][ T6453] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 228.763108][ T6453] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 228.771836][ T6453] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 228.931482][ T6453] netlink: 'syz.1.569': attribute type 15 has an invalid length. [ 229.045011][ T6459] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 231.912769][ T4230] Process accounting resumed [ 237.337584][ T6546] overlayfs: failed to clone upperpath [ 237.828367][ T4230] Process accounting resumed [ 239.832765][ T6576] CIFS: Attempting to mount \\127.0.0.1\share [ 240.656877][ T6576] CIFS: VFS: Could not allocate crypto cmac(aes) [ 240.665193][ T6576] CIFS: VFS: cifs_mount failed w/return code = -512 [ 241.446538][ T4267] Process accounting resumed [ 243.053904][ T5815] Process accounting resumed [ 245.407298][ T5335] Process accounting resumed [ 246.563330][ T6667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 247.981297][ T6694] tipc: Enabling of bearer rejected, failed to enable media [ 248.001739][ T5335] Process accounting resumed [ 249.910479][ T5335] Process accounting resumed [ 251.283977][ T4267] Process accounting resumed [ 254.949110][ T6689] Process accounting resumed [ 255.108339][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.119465][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.808038][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.815726][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.051042][ T6815] tipc: Enabling of bearer rejected, failed to enable media [ 257.509941][ T6833] tipc: Enabling of bearer rejected, failed to enable media [ 257.599491][ T6838] sctp: [Deprecated]: syz.0.670 (pid 6838) Use of int in max_burst socket option. [ 257.599491][ T6838] Use struct sctp_assoc_value instead [ 262.722888][ T26] Process accounting resumed [ 265.427198][ T6930] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 268.052355][ T6689] Process accounting resumed [ 268.100801][ T5335] Process accounting resumed [ 268.142545][ T6951] overlayfs: missing 'lowerdir' [ 268.193177][ T6951] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 268.205286][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.212553][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.591067][ T6971] No such timeout policy "syz1" [ 269.921830][ T4268] Process accounting resumed [ 270.769032][ T6995] tc action pedit 'at' offset 164 out of bounds [ 270.836813][ T26] Process accounting resumed [ 271.794476][ T7006] overlayfs: failed to clone upperpath [ 273.708416][ T4268] Process accounting resumed [ 273.931011][ T7041] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 275.951404][ T6689] Process accounting resumed [ 277.107365][ T7072] tipc: Enabling of bearer rejected, failed to enable media [ 277.898868][ T1107] Process accounting resumed [ 278.022971][ T1107] Process accounting resumed [ 278.223271][ T4268] Process accounting resumed [ 279.590329][ T7139] tipc: Enabling of bearer rejected, failed to enable media [ 279.639474][ T26] Process accounting resumed [ 280.153373][ T1107] Process accounting resumed [ 281.952037][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.768'. [ 282.252787][ T7177] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 284.081958][ T7199] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 284.853021][ T1107] Process accounting resumed [ 284.915190][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'. [ 286.803665][ T7255] xt_CONNSECMARK: invalid mode: 66 [ 286.814483][ T7255] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 287.403947][ T7256] tipc: Enabling of bearer rejected, failed to enable media [ 287.970612][ T7274] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 291.973923][ T7305] overlayfs: failed to clone upperpath [ 292.662248][ T7317] tipc: Enabling of bearer rejected, failed to enable media [ 292.694805][ T7319] tipc: Enabling of bearer rejected, failed to enable media [ 294.057824][ T5336] Process accounting resumed [ 294.123460][ T1107] Process accounting resumed [ 294.926302][ T4196] Process accounting resumed [ 296.153826][ T7389] overlayfs: failed to clone upperpath [ 296.543762][ T7398] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 297.485349][ T5335] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 297.550558][ T5335] Bluetooth: hci3: Injecting HCI hardware error event [ 297.726112][ T146] Bluetooth: hci3: hardware error 0x00 [ 297.871475][ T4196] Process accounting resumed [ 297.899866][ T5335] Process accounting resumed [ 297.945623][ T1107] Process accounting resumed [ 298.321229][ T7433] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 299.451964][ T4196] Process accounting resumed [ 299.479990][ T4196] Process accounting resumed [ 299.544480][ T5336] Process accounting resumed [ 300.803756][ T7470] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.812018][ T7470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.819713][ T7470] IPv6: NLM_F_CREATE should be set when creating new route [ 301.864703][ T7490] netlink: 14 bytes leftover after parsing attributes in process `syz.4.855'. [ 302.612502][ T1107] Process accounting resumed [ 302.674212][ T5335] Process accounting resumed [ 303.782929][ T25] audit: type=1326 audit(1789409089.925:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 304.203545][ T25] audit: type=1326 audit(1789409089.925:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 304.246301][ T25] audit: type=1326 audit(1789409089.925:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 304.455967][ T25] audit: type=1326 audit(1789409089.925:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 304.899339][ T25] audit: type=1326 audit(1789409089.925:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 304.929918][ T25] audit: type=1326 audit(1789409089.925:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 304.960728][ T25] audit: type=1326 audit(1789409089.925:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 304.988325][ T25] audit: type=1326 audit(1789409089.925:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 305.133205][ T25] audit: type=1326 audit(1789409089.925:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 305.170419][ T25] audit: type=1326 audit(1789409089.925:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.860" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7016cf159 code=0x7ffc0000 [ 305.314855][ T7542] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 306.048630][ T5335] Process accounting resumed [ 306.363529][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.872'. [ 308.515884][ T4196] Process accounting resumed [ 308.545632][ T4196] Process accounting resumed [ 310.665566][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 311.610345][ T7641] xt_CONNSECMARK: invalid mode: 66 [ 312.000301][ T7641] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 312.137494][ T4198] Process accounting resumed [ 313.811679][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 313.820889][ T7672] netlink: 300 bytes leftover after parsing attributes in process `syz.4.904'. [ 314.658162][ T7680] overlayfs: unrecognized mount option "/" or missing value [ 315.461150][ T5335] Process accounting resumed [ 315.621191][ T7700] overlayfs: failed to clone lowerpath [ 316.546619][ T161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.627020][ T7694] chnl_net:caif_netlink_parms(): no params data found [ 316.761647][ T161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.878914][ T161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.894102][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.894165][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.046692][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.100282][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.135580][ T6689] Process accounting resumed [ 317.136769][ T7694] device bridge_slave_0 entered promiscuous mode [ 317.190882][ T161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.343262][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.356549][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.378430][ T7694] device bridge_slave_1 entered promiscuous mode [ 317.600275][ T4198] Bluetooth: hci5: command 0x0409 tx timeout [ 318.182480][ T7694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.214018][ T7694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.791044][ T7694] team0: Port device team_slave_0 added [ 318.806796][ T4198] Process accounting resumed [ 318.832158][ T7694] team0: Port device team_slave_1 added [ 318.957224][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.981281][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.080197][ T7694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.115273][ T161] tipc: Left network mode [ 319.131083][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.138071][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.217845][ T7694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.312789][ T7694] device hsr_slave_0 entered promiscuous mode [ 319.328683][ T7694] device hsr_slave_1 entered promiscuous mode [ 319.359231][ T7694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.398509][ T7694] Cannot create hsr debugfs directory [ 319.894647][ T4198] Bluetooth: hci5: command 0x041b tx timeout [ 320.197337][ T7796] device syzkaller0 entered promiscuous mode [ 320.336404][ T7796] tipc: Enabled bearer , priority 0 [ 320.419446][ T7795] tipc: Resetting bearer [ 320.437126][ T7795] tipc: Disabling bearer [ 321.084167][ T4196] Process accounting resumed [ 321.938643][ T5335] Bluetooth: hci5: command 0x040f tx timeout [ 322.122029][ T7694] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.142172][ T7694] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.180146][ T7694] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.404186][ T7694] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.360316][ T5336] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 323.433369][ T5336] Bluetooth: hci2: Injecting HCI hardware error event [ 323.493376][ T7843] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.501245][ T7843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.508448][ T7843] IPv6: NLM_F_CREATE should be set when creating new route [ 323.526900][ T146] Bluetooth: hci2: hardware error 0x00 [ 323.722631][ T7694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.805262][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.821025][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.873651][ T7694] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.005922][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.016049][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.024952][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.032047][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.743052][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 325.036925][ T7859] tipc: Enabling of bearer rejected, failed to enable media [ 325.056436][ T1107] Process accounting resumed [ 325.068899][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.100180][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.142947][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.191904][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.199019][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.217062][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.544079][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.130254][ T25] kauditd_printk_skb: 59 callbacks suppressed [ 326.130285][ T25] audit: type=1326 audit(1789409111.765:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 326.183337][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.201444][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.212422][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.225735][ T25] audit: type=1326 audit(1789409111.765:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 326.263697][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.327609][ T25] audit: type=1326 audit(1789409111.765:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 326.353149][ T25] audit: type=1326 audit(1789409111.765:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 326.377165][ T25] audit: type=1326 audit(1789409111.765:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 326.401397][ T25] audit: type=1326 audit(1789409111.765:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 326.429778][ T161] device hsr_slave_0 left promiscuous mode [ 326.445285][ T161] device hsr_slave_1 left promiscuous mode [ 327.093521][ T25] audit: type=1326 audit(1789409111.765:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 327.117887][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.166312][ T25] audit: type=1326 audit(1789409111.765:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 327.348371][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.388549][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.430294][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.458143][ T25] audit: type=1326 audit(1789409111.775:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 327.519797][ T161] device veth1_macvtap left promiscuous mode [ 327.526811][ T25] audit: type=1326 audit(1789409111.775:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6d88f159 code=0x7ffc0000 [ 327.564903][ T161] device veth0_macvtap left promiscuous mode [ 327.589116][ T161] device veth1_vlan left promiscuous mode [ 327.595868][ T161] device veth0_vlan left promiscuous mode [ 327.843769][ T4196] Process accounting resumed [ 328.504965][ T161] team0 (unregistering): Port device team_slave_1 removed [ 328.522014][ T161] team0 (unregistering): Port device team_slave_0 removed [ 330.126623][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.159566][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.313462][ T161] bond0 (unregistering): Released all slaves [ 330.340345][ T7694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.377949][ T7694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.390793][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.399599][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.408056][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.418611][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.427190][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.947561][ T7915] tipc: Enabling of bearer rejected, failed to enable media [ 331.064982][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.055268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.482133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.760342][ T7694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.710781][ T8008] tipc: Enabling of bearer rejected, failed to enable media [ 335.582157][ T8015] overlayfs: unrecognized mount option "/" or missing value [ 337.236119][ T25] kauditd_printk_skb: 305 callbacks suppressed [ 337.236133][ T25] audit: type=1800 audit(1789409123.385:555): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.995" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 337.384906][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.394191][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.444173][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.919981][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.134795][ T7694] device veth0_vlan entered promiscuous mode [ 338.531262][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.539476][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.602182][ T7694] device veth1_vlan entered promiscuous mode [ 338.726097][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.769675][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.862968][ T8086] overlayfs: unrecognized mount option "/" or missing value [ 338.905736][ T7694] device veth0_macvtap entered promiscuous mode [ 338.943196][ T7694] device veth1_macvtap entered promiscuous mode [ 339.004394][ T8095] fuse: Bad value for 'fd' [ 339.044457][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.147674][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.208436][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.249895][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.286322][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.307193][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.370199][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.381415][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.399584][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.409272][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.417756][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.643659][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.885810][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.101897][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.148901][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.189523][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.224614][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.257630][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.288517][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.316549][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.351031][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.382394][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.406244][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.437355][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.471321][ T7694] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.504146][ T7694] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.531084][ T7694] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.549965][ T7694] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.664739][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.698112][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.748845][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.765646][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.788630][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.817933][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.156919][ T8137] loop5: detected capacity change from 0 to 2048 [ 342.321607][ T8137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.625664][ T4196] Process accounting resumed [ 348.347425][ T4196] Process accounting resumed [ 349.509844][ T8252] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 349.859646][ T8255] device syzkaller0 entered promiscuous mode [ 351.069818][ T8279] tipc: Enabling of bearer rejected, failed to enable media [ 351.973002][ T4267] Process accounting resumed [ 353.669395][ T8336] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8336] [ 354.620690][ T8340] ceph: No mds server is up or the cluster is laggy [ 354.708379][ T5336] libceph: connect (1)[c::]:6789 error -101 [ 354.737405][ T5336] libceph: mon0 (1)[c::]:6789 connect error [ 355.553006][ T8376] overlayfs: failed to clone lowerpath [ 356.011652][ T8394] tipc: Enabling of bearer rejected, failed to enable media [ 357.764113][ T5336] Process accounting resumed [ 358.094026][ T8417] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 358.128530][ T8417] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 358.153799][ T8417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.499063][ T8417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.890293][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 358.899366][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 358.908961][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 358.917483][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 358.926255][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 358.934848][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 358.943581][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 359.426039][ T4268] Process accounting resumed [ 360.220763][ T8458] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 360.761527][ T8460] tipc: Enabling of bearer rejected, failed to enable media [ 364.112429][ T4268] Process accounting resumed [ 364.458454][ T8532] trusted_key: encrypted_key: insufficient parameters specified [ 366.476714][ T8558] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 367.315100][ T26] Process accounting resumed [ 369.163628][ T8596] kAFS: bad VL server IP address [ 369.931895][ T8603] loop5: detected capacity change from 0 to 512 [ 373.737743][ T8671] loop5: detected capacity change from 0 to 2048 [ 373.897552][ T8671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.935029][ T8698] loop5: detected capacity change from 0 to 32768 [ 376.169543][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 376.187138][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 376.700282][ T8698] XFS (loop5): Mounting V5 Filesystem [ 377.650212][ T8698] XFS (loop5): Ending clean mount [ 377.658895][ T8698] XFS (loop5): Quotacheck needed: Please wait. [ 377.742310][ T8698] XFS (loop5): Quotacheck: Done. [ 378.596399][ T25] audit: type=1800 audit(1789409164.245:556): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1134" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4428 res=0 errno=0 [ 378.601462][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.651121][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.221548][ T7694] XFS (loop5): Unmounting Filesystem [ 379.327510][ T8764] ceph: No mds server is up or the cluster is laggy [ 379.399209][ T8768] device lo entered promiscuous mode [ 379.448938][ T8768] device tunl0 entered promiscuous mode [ 379.484533][ T8768] device gre0 entered promiscuous mode [ 379.602857][ T8768] device gretap0 entered promiscuous mode [ 379.653007][ T8768] device erspan0 entered promiscuous mode [ 379.700643][ T8768] device ip_vti0 entered promiscuous mode [ 379.736112][ T8768] device ip6_vti0 entered promiscuous mode [ 379.766587][ T8768] device sit0 entered promiscuous mode [ 380.212342][ T8768] device ip6tnl0 entered promiscuous mode [ 380.237977][ T8768] device ip6gre0 entered promiscuous mode [ 380.255668][ T8768] device syz_tun entered promiscuous mode [ 380.506177][ T8768] device ip6gretap0 entered promiscuous mode [ 380.920171][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.927396][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.949420][ T8768] device bridge0 entered promiscuous mode [ 381.016094][ T8768] device vcan0 entered promiscuous mode [ 381.065031][ T8768] device bond0 entered promiscuous mode [ 381.085388][ T8768] device bond_slave_0 entered promiscuous mode [ 381.110340][ T8768] device bond_slave_1 entered promiscuous mode [ 381.127147][ T8768] device vxlan0 entered promiscuous mode [ 381.177038][ T8768] device team0 entered promiscuous mode [ 381.182675][ T8768] device team_slave_0 entered promiscuous mode [ 381.189012][ T8768] device team_slave_1 entered promiscuous mode [ 381.216352][ T8768] device dummy0 entered promiscuous mode [ 381.237262][ T8768] device nlmon0 entered promiscuous mode [ 381.244745][ T8768] device caif0 entered promiscuous mode [ 381.746647][ T8768] device batadv0 entered promiscuous mode [ 381.771773][ T8768] device vxcan0 entered promiscuous mode [ 381.783136][ T8768] device vxcan1 entered promiscuous mode [ 381.794685][ T8768] device veth0 entered promiscuous mode [ 381.815272][ T8768] device veth1 entered promiscuous mode [ 381.837058][ T8768] device wg0 entered promiscuous mode [ 381.887846][ T8768] device wg1 entered promiscuous mode [ 381.904976][ T8768] device wg2 entered promiscuous mode [ 381.923006][ T8768] device veth0_to_bridge entered promiscuous mode [ 381.954251][ T8768] device veth1_to_bridge entered promiscuous mode [ 381.984541][ T8768] device veth0_to_bond entered promiscuous mode [ 382.013478][ T8768] device veth1_to_bond entered promiscuous mode [ 382.038833][ T8768] device veth0_to_team entered promiscuous mode [ 382.069128][ T8768] device veth1_to_team entered promiscuous mode [ 382.099786][ T8768] device veth0_to_batadv entered promiscuous mode [ 382.112190][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.131484][ T8768] device batadv_slave_0 entered promiscuous mode [ 382.151996][ T8768] device veth1_to_batadv entered promiscuous mode [ 382.165029][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.176257][ T8768] device batadv_slave_1 entered promiscuous mode [ 382.194581][ T8768] device xfrm0 entered promiscuous mode [ 382.212258][ T8768] device veth0_to_hsr entered promiscuous mode [ 382.239172][ T8768] device veth1_to_hsr entered promiscuous mode [ 382.264649][ T8768] device hsr0 entered promiscuous mode [ 382.282087][ T8768] device veth1_virt_wifi entered promiscuous mode [ 382.299785][ T8768] device veth0_virt_wifi entered promiscuous mode [ 382.308045][ T8768] device virt_wifi0 entered promiscuous mode [ 382.349686][ T8768] device vlan0 entered promiscuous mode [ 382.370343][ T8768] device vlan1 entered promiscuous mode [ 382.384035][ T8768] device macvlan0 entered promiscuous mode [ 382.402595][ T8768] device macvlan1 entered promiscuous mode [ 382.409862][ T8768] device ipvlan0 entered promiscuous mode [ 382.416252][ T8768] device ipvlan1 entered promiscuous mode [ 382.432567][ T8768] device macvtap0 entered promiscuous mode [ 382.465085][ T8768] device macsec0 entered promiscuous mode [ 382.482578][ T8768] device geneve0 entered promiscuous mode [ 382.502021][ T8768] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.512142][ T8768] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.521341][ T8768] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.530463][ T8768] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.539454][ T8768] device geneve1 entered promiscuous mode [ 382.553737][ T8768] device netdevsim0 entered promiscuous mode [ 382.571618][ T8768] device netdevsim1 entered promiscuous mode [ 382.585248][ T8768] device netdevsim2 entered promiscuous mode [ 382.598403][ T8768] device netdevsim3 entered promiscuous mode [ 382.613638][ T8768] device wlan0 entered promiscuous mode [ 382.624795][ T8768] device wlan1 entered promiscuous mode [ 382.637580][ T8768] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.646525][ T8768] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.655524][ T8768] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.664420][ T8768] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.685588][ T8768] device erspan0.0 entered promiscuous mode [ 382.691775][ T8768] device sit1 entered promiscuous mode [ 382.784266][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1156'. [ 383.009488][ T8821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.231524][ T8823] ceph: No mds server is up or the cluster is laggy [ 384.271380][ T4231] Process accounting resumed [ 389.318353][ T5815] Process accounting resumed [ 394.094396][ T5336] Process accounting resumed [ 395.887723][ T8981] loop5: detected capacity change from 0 to 8 [ 396.833576][ T26] Process accounting resumed [ 396.869294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 396.886179][ T8994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.148745][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'. [ 400.820643][ T5815] Process accounting resumed [ 401.232772][ T9085] loop5: detected capacity change from 0 to 32768 [ 401.711969][ T9085] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1220 (9085) [ 401.747923][ T9085] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 401.756694][ T9085] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 401.765992][ T9085] BTRFS info (device loop5): use lzo compression, level 0 [ 401.773162][ T9085] BTRFS info (device loop5): force clearing of disk cache [ 401.780932][ T9085] BTRFS info (device loop5): using free space tree [ 401.787444][ T9085] BTRFS info (device loop5): has skinny extents [ 402.150114][ T9085] BTRFS info (device loop5): enabling ssd optimizations [ 402.162347][ T9085] BTRFS info (device loop5): clearing free space tree [ 402.170869][ T9085] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 402.181473][ T9085] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 402.221876][ T9085] BTRFS info (device loop5): creating free space tree [ 402.230585][ T9085] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 402.240188][ T9085] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 404.553028][ T9162] CIFS: Attempting to mount \\127.0.0.1\share [ 405.338921][ T9162] CIFS: VFS: cifs_mount failed w/return code = -112 [ 405.351414][ T9166] ================================================================== [ 405.360037][ T9166] BUG: KASAN: use-after-free in string+0x204/0x290 [ 405.366569][ T9166] Read of size 1 at addr ffff888022af3f60 by task cifsd/9166 [ 405.373940][ T9166] [ 405.376273][ T9166] CPU: 1 PID: 9166 Comm: cifsd Not tainted syzkaller #0 [ 405.383207][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.393270][ T9166] Call Trace: [ 405.396553][ T9166] [ 405.399486][ T9166] dump_stack_lvl+0x188/0x250 [ 405.404343][ T9166] ? show_regs_print_info+0x20/0x20 [ 405.409558][ T9166] ? _printk+0xda/0x130 [ 405.413726][ T9166] ? load_image+0x410/0x410 [ 405.418229][ T9166] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 405.423702][ T9166] print_address_description+0x60/0x2d0 [ 405.429263][ T9166] ? string+0x204/0x290 [ 405.433422][ T9166] kasan_report+0xdf/0x130 [ 405.437839][ T9166] ? string+0x204/0x290 [ 405.441984][ T9166] string+0x204/0x290 [ 405.445954][ T9166] vsnprintf+0x10db/0x1c20 [ 405.450361][ T9166] scnprintf+0xe5/0x180 [ 405.454501][ T9166] ? snprintf+0x140/0x140 [ 405.458822][ T9166] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 405.464966][ T9166] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 405.471977][ T9166] ? cifs_tree_connect+0x4f0/0x4f0 [ 405.477070][ T9166] ? tcp_recvmsg+0x28a/0x760 [ 405.481639][ T9166] ? do_raw_spin_unlock+0x11d/0x230 [ 405.486829][ T9166] cifs_reconnect+0x470/0x1350 [ 405.491587][ T9166] ? inet_recvmsg+0x18b/0x200 [ 405.496245][ T9166] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 405.502208][ T9166] ? inet_sendpage+0x2e0/0x2e0 [ 405.506957][ T9166] ? security_socket_recvmsg+0x85/0xb0 [ 405.512402][ T9166] ? sock_recvmsg+0x6f/0xf0 [ 405.516888][ T9166] cifs_readv_from_socket+0x7c4/0x8b0 [ 405.522254][ T9166] cifs_demultiplex_thread+0x53b/0x35b0 [ 405.527796][ T9166] ? cifs_resolve_server+0x110/0x110 [ 405.533065][ T9166] ? __perf_event_task_sched_out+0xec0/0xec0 [ 405.539044][ T9166] ? finish_lock_switch+0x12d/0x290 [ 405.544229][ T9166] ? lockdep_hardirqs_on+0x94/0x140 [ 405.549413][ T9166] ? finish_lock_switch+0x12d/0x290 [ 405.554606][ T9166] ? finish_task_switch+0x12f/0x650 [ 405.559813][ T9166] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 405.565786][ T9166] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 405.571662][ T9166] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 405.577553][ T9166] ? _raw_spin_unlock+0x40/0x40 [ 405.582380][ T9166] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 405.588251][ T9166] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 405.594124][ T9166] ? __kthread_parkme+0x14e/0x1b0 [ 405.599130][ T9166] kthread+0x42e/0x520 [ 405.603179][ T9166] ? cifs_resolve_server+0x110/0x110 [ 405.608444][ T9166] ? kthread_blkcg+0xd0/0xd0 [ 405.613012][ T9166] ret_from_fork+0x1f/0x30 [ 405.617413][ T9166] [ 405.620439][ T9166] [ 405.622740][ T9166] Allocated by task 9162: [ 405.627042][ T9166] __kasan_kmalloc+0xaf/0xe0 [ 405.631626][ T9166] kstrdup+0x32/0x70 [ 405.635496][ T9166] cifs_get_tcp_session+0xde/0x18f0 [ 405.640668][ T9166] mount_get_conns+0xc3/0xe00 [ 405.645322][ T9166] cifs_mount+0x162/0x1380 [ 405.649717][ T9166] cifs_smb3_do_mount+0x366/0x760 [ 405.654715][ T9166] smb3_get_tree+0x59a/0xa80 [ 405.659281][ T9166] vfs_get_tree+0x88/0x270 [ 405.663674][ T9166] do_new_mount+0x247/0xa40 [ 405.668153][ T9166] __se_sys_mount+0x2e3/0x3d0 [ 405.672813][ T9166] do_syscall_64+0x4c/0xa0 [ 405.677206][ T9166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.683097][ T9166] [ 405.685410][ T9166] Freed by task 9162: [ 405.689363][ T9166] kasan_set_track+0x4b/0x70 [ 405.693933][ T9166] kasan_set_free_info+0x1f/0x40 [ 405.698848][ T9166] ____kasan_slab_free+0xd5/0x110 [ 405.703848][ T9166] slab_free_freelist_hook+0xec/0x170 [ 405.709194][ T9166] kfree+0xef/0x2a0 [ 405.712979][ T9166] cifs_put_tcp_session+0x2e1/0x3d0 [ 405.718167][ T9166] mount_put_conns+0xb0/0x270 [ 405.722828][ T9166] cifs_mount+0xbf5/0x1380 [ 405.727218][ T9166] cifs_smb3_do_mount+0x366/0x760 [ 405.732217][ T9166] smb3_get_tree+0x59a/0xa80 [ 405.736784][ T9166] vfs_get_tree+0x88/0x270 [ 405.741174][ T9166] do_new_mount+0x247/0xa40 [ 405.745666][ T9166] __se_sys_mount+0x2e3/0x3d0 [ 405.750325][ T9166] do_syscall_64+0x4c/0xa0 [ 405.754734][ T9166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.760603][ T9166] [ 405.762910][ T9166] The buggy address belongs to the object at ffff888022af3f60 [ 405.762910][ T9166] which belongs to the cache kmalloc-16 of size 16 [ 405.776762][ T9166] The buggy address is located 0 bytes inside of [ 405.776762][ T9166] 16-byte region [ffff888022af3f60, ffff888022af3f70) [ 405.789764][ T9166] The buggy address belongs to the page: [ 405.795373][ T9166] page:ffffea00008abcc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22af3 [ 405.805507][ T9166] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 405.813041][ T9166] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016c413c0 [ 405.821617][ T9166] raw: 0000000000000000 0000000000800080 00000001ffffffff 0000000000000000 [ 405.830172][ T9166] page dumped because: kasan: bad access detected [ 405.836586][ T9166] page_owner tracks the page as allocated [ 405.842275][ T9166] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 23, ts 6958483910, free_ts 6951576364 [ 405.857963][ T9166] get_page_from_freelist+0x24f6/0x2670 [ 405.863490][ T9166] __alloc_pages+0x1ee/0x480 [ 405.868057][ T9166] new_slab+0xc0/0x4b0 [ 405.872099][ T9166] ___slab_alloc+0x807/0xdd0 [ 405.876668][ T9166] __kmalloc_track_caller+0x11b/0x330 [ 405.882012][ T9166] kstrdup+0x32/0x70 [ 405.885897][ T9166] devtmpfs_work_loop+0x299/0xe40 [ 405.890898][ T9166] devtmpfsd+0x44/0x50 [ 405.894944][ T9166] kthread+0x42e/0x520 [ 405.898983][ T9166] ret_from_fork+0x1f/0x30 [ 405.903376][ T9166] page last free stack trace: [ 405.908020][ T9166] free_unref_page_prepare+0x637/0x6c0 [ 405.913456][ T9166] free_unref_page+0x8f/0x2a0 [ 405.918108][ T9166] __mmdrop+0xaa/0x3e0 [ 405.922150][ T9166] free_bprm+0x122/0x2d0 [ 405.926368][ T9166] kernel_execve+0x386/0x8e0 [ 405.931257][ T9166] call_usermodehelper_exec_async+0x207/0x350 [ 405.937309][ T9166] ret_from_fork+0x1f/0x30 [ 405.941738][ T9166] [ 405.944041][ T9166] Memory state around the buggy address: [ 405.949643][ T9166] ffff888022af3e00: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 405.957682][ T9166] ffff888022af3e80: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 405.965719][ T9166] >ffff888022af3f00: 00 04 fc fc 00 04 fc fc 00 04 fc fc fa fb fc fc [ 405.973754][ T9166] ^ [ 405.980924][ T9166] ffff888022af3f80: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 405.988960][ T9166] ffff888022af4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.996995][ T9166] ================================================================== [ 406.005045][ T9166] Disabling lock debugging due to kernel taint [ 406.038065][ T9173] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 406.655255][ T1324] Process accounting resumed [ 406.667017][ T9166] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 406.674229][ T9166] CPU: 1 PID: 9166 Comm: cifsd Tainted: G B syzkaller #0 [ 406.682544][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.692581][ T9166] Call Trace: [ 406.695839][ T9166] [ 406.698750][ T9166] dump_stack_lvl+0x188/0x250 [ 406.703417][ T9166] ? show_regs_print_info+0x20/0x20 [ 406.708595][ T9166] ? load_image+0x410/0x410 [ 406.713079][ T9166] panic+0x2f8/0x850 [ 406.716954][ T9166] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 406.723089][ T9166] ? bpf_jit_dump+0xd0/0xd0 [ 406.727574][ T9166] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 406.733531][ T9166] ? _raw_spin_unlock+0x40/0x40 [ 406.738363][ T9166] ? string+0x204/0x290 [ 406.742498][ T9166] check_panic_on_warn+0x80/0xa0 [ 406.747417][ T9166] ? string+0x204/0x290 [ 406.751553][ T9166] end_report+0x6d/0xf0 [ 406.755691][ T9166] kasan_report+0x102/0x130 [ 406.760175][ T9166] ? string+0x204/0x290 [ 406.764528][ T9166] string+0x204/0x290 [ 406.768510][ T9166] vsnprintf+0x10db/0x1c20 [ 406.772912][ T9166] scnprintf+0xe5/0x180 [ 406.777060][ T9166] ? snprintf+0x140/0x140 [ 406.781381][ T9166] reconn_set_ipaddr_from_hostname+0x112/0x580 [ 406.787522][ T9166] ? cifs_mark_tcp_ses_conns_for_reconnect+0x13a0/0x13a0 [ 406.794527][ T9166] ? cifs_tree_connect+0x4f0/0x4f0 [ 406.799618][ T9166] ? tcp_recvmsg+0x28a/0x760 [ 406.804188][ T9166] ? do_raw_spin_unlock+0x11d/0x230 [ 406.809397][ T9166] cifs_reconnect+0x470/0x1350 [ 406.814148][ T9166] ? inet_recvmsg+0x18b/0x200 [ 406.818807][ T9166] ? cifs_mount_params_proc_show+0x1a0/0x1a0 [ 406.824764][ T9166] ? inet_sendpage+0x2e0/0x2e0 [ 406.829509][ T9166] ? security_socket_recvmsg+0x85/0xb0 [ 406.834953][ T9166] ? sock_recvmsg+0x6f/0xf0 [ 406.839436][ T9166] cifs_readv_from_socket+0x7c4/0x8b0 [ 406.844795][ T9166] cifs_demultiplex_thread+0x53b/0x35b0 [ 406.850328][ T9166] ? cifs_resolve_server+0x110/0x110 [ 406.855596][ T9166] ? __perf_event_task_sched_out+0xec0/0xec0 [ 406.861555][ T9166] ? finish_lock_switch+0x12d/0x290 [ 406.866736][ T9166] ? lockdep_hardirqs_on+0x94/0x140 [ 406.871912][ T9166] ? finish_lock_switch+0x12d/0x290 [ 406.877090][ T9166] ? finish_task_switch+0x12f/0x650 [ 406.882272][ T9166] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 406.888239][ T9166] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 406.894112][ T9166] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 406.899986][ T9166] ? _raw_spin_unlock+0x40/0x40 [ 406.904815][ T9166] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 406.910774][ T9166] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 406.916646][ T9166] ? __kthread_parkme+0x14e/0x1b0 [ 406.921652][ T9166] kthread+0x42e/0x520 [ 406.925698][ T9166] ? cifs_resolve_server+0x110/0x110 [ 406.930966][ T9166] ? kthread_blkcg+0xd0/0xd0 [ 406.935537][ T9166] ret_from_fork+0x1f/0x30 [ 406.939936][ T9166] [ 406.943160][ T9166] Kernel Offset: disabled [ 406.947474][ T9166] Rebooting in 86400 seconds..