last executing test programs: 13.721766789s ago: executing program 1 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="82a30000000000000000030000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x401, 0x8, 0x70c0, 0x7, 0x3], 0x1, &(0x7f0000000280)=[{}], 0x0, [{}]}, 0x88) 12.626111827s ago: executing program 1 (id=521): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f00000008c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723dbd3066f52c6e6c733d63703835352c756d61736b3d30303030303030303030303030303030303030303033372c666f7263652c00"], 0x13, 0x6c7, &(0x7f0000001f80)="$eJzs3U1sXFfZB/D/nYzHnrxS6rZpmhch1WqkChqR2BmVBAkpASGURYQi2HRrJU5jZZJWjovSCpEJ0CKxYoW6YFGEzKIrhBBSWSHKGgmJBayyj8SORRaA0b3z4fF44thJnDHt7ydd33Puueec5z65HzPjWBPgM+v865nqpMj54xdulfW7RZK11vWqvNZqJ5lOUkvq3VWKZlJ8kpxLd8n/lxt7wxUPmue1ex8X9Q8+anVr9d5S7V/brt8WY/fsJDODyoEkc93iv3Y8bKZGxquWapxLG+M9omIQd5mwY/3EwaStb9HZaKw9tPvOr1tg37rdfW5uMZscTPfpWr4OSO/u8PA7w+Rte2/qPL04AAAAYK+MfS8/7Jn7uZ9bOfR0wgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBPh6L7nYFFb6n1y3Mp+t//3xj6Tv3GhMN9TO9dqVbffmbSgQAAAAAAAADAY3npfu7nVg716+tF9Tv/l6vK4ern/+Xt3MxSVnIit7KY1axmJQtJZocGatxaXF1dWdja82cpe66vr9/u9Tw1tuepzXF1RgMd9z8NtuwEAAAAAAAAAJ9ZP8j5jd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAflAkB7qrajncL8+mVk8yk6RRzA12b0w02CfgD5MOAAAAAPZes7c+VPynW1gvqvf8R6r3/TN5OzeymuWspp2lXK4+C+i+66/9pdNq311rXS+XrQN/7R+7iqMaMd3PHsbPPF/t8cKgx/l8M9/J8czlYlaynO9mMatZyly+UZUWU2S29+nF7N21Zvqxbo333KbaxdHYXhoql/EdrSJp5kqWq9hO5FKjH3qtt9/Rodl+10gvbwN3yuxM9Spnd5ijy711OdZPs2XMCZqtjnxqkJH5Xu7LbDw7nPetud/leTI600Jqg8+gDpejN6tZyuroTFXOi7M9O5zvYG9d5vr9vc35Lj9K25yJzk/KWv/sO7J9zpMv/vWPF6/Wbly7euXm8f1zGj2i0XOiNZSJF3eUiXaZic4jZ+Jvjxf/k9PoZaN7F93d3fLlqu+hLOdbeTOXs5TTmc9CzmQ+X8mptHJqKK8vbJ/X6lqr7e5aO/aFXqF8Jv146Nn01Ew/qKHM67NDeR2+081WbcNbNrL03A6yVDQyPkt/HxtK/XO9QjnHD4eeOJM3momFoUw8v30mfvHv9SQ32zeurVxdfGuH873SW5eX7Xub782/fCIHtCv1bPxjlOfLc/1t72fT2VG2Pd9vG8lX2VbU+yNufs41Gqmu527zw67UcqQjd/p7D4/UbXsx49paVdvRobZNr3LyZtqDVyEA7GMHXz3YaN5r/rn5YfNHzavNCzNfnz4z/flGpv5U//2BX9d+Vftq8Wo+zPdzaNKRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAp8HNd969tthuL63sw0JqT3jAO2Ob+qnobmnsj2MvCzObApt8PDspTG93Rv0myTbdG5OIuZlkX6Qu9acw13TGNF0YbGkmtUE8Sa7NTOzGBOy5k6vX3zp58513v7R8ffGNpTeWbpw6c/rs6daXF26fvLLcXprv/px0lMBe2HgZMOlIAAAAAAAAAAAAgJ0a+QuBRjLuLwQerzBm2qIzgWMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/jedfz1TnRRZmD8xX9bvrrXa5dIvb+xZT1JLUnwvKT5JzqW7ZHZouOJB87x27+Ofv/LBR62Nser9/Wsj/X77z/X1XR5Fp7dkLsmB6e764aZHN5wbN96lbIzX2WVgXcXgCMsJjg1NBBP13wAAAP//WdX+lg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x88c0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x33, 0x2, 0x0, "bc3e098e0000f4ba89591da86b97000000002b00030400"}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='\x02\x00\x00\x00\x00', &(0x7f0000000140)='\x00', 0x0) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2, 0x37, 0x6, 0x19, 0x3, 0x64, 0x2, 0x106, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, 0x0, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x4, 0x6, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 10.549946692s ago: executing program 0 (id=527): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x80fe, @empty}, 0x1c) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) memfd_create(0x0, 0x1) 9.192819492s ago: executing program 4 (id=529): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 8.972455664s ago: executing program 4 (id=531): pipe2(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r0, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, r0, 0x60000000000, 0x7) 8.861960465s ago: executing program 0 (id=532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}}, 0x24}}, 0x400c084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {0x0, 0xfff1}, {0xffe0, 0x7}}, [{0x8, 0xb, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041080) 8.652437886s ago: executing program 4 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x800) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7f) 8.347342258s ago: executing program 0 (id=535): bind$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) 8.322186109s ago: executing program 1 (id=536): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.36981741s ago: executing program 3 (id=540): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.330995051s ago: executing program 4 (id=541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 4.571603496s ago: executing program 2 (id=542): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x80fe, @empty}, 0x1c) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) memfd_create(0x0, 0x1) 4.491866707s ago: executing program 3 (id=543): pipe2(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r0, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, r0, 0x60000000000, 0x7) 4.430849527s ago: executing program 1 (id=544): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 4.366004078s ago: executing program 3 (id=545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}}, 0x24}}, 0x400c084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {0x0, 0xfff1}, {0xffe0, 0x7}}, [{0x8, 0xb, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041080) 3.542080404s ago: executing program 1 (id=546): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f00000008c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723dbd3066f52c6e6c733d63703835352c756d61736b3d30303030303030303030303030303030303030303033372c666f7263652c00"], 0x13, 0x6c7, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x88c0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x33, 0x2, 0x0, "bc3e098e0000f4ba89591da86b97000000002b00030400"}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='\x02\x00\x00\x00\x00', &(0x7f0000000140)='\x00', 0x0) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2, 0x37, 0x6, 0x19, 0x3, 0x64, 0x2, 0x106, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, 0x0, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x4, 0x6, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 3.534424234s ago: executing program 2 (id=547): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x80fe, @empty}, 0x1c) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) memfd_create(&(0x7f0000000940)='\x00\x00\x04\x00\x1f\xd7\xdc1\x02{-3yE7\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec>\xa2\x14\xb9\xa0\xfeA\x7f0\xee\xdeR\x94\x1f\xb8j\xc8;\x03\xfa):h\xffmkK\xef\x90\xfaC\f\x99\x18%\xaaa\b\xd8\f\xfb\xae\x0e\xb6\r\x04\x16\xb3\xdb\xf0\x97c\xddO\xceZD\xee/\xf7\xe3\xd5B\x88T\xc9\xf0\x8bJ\\\x1c\xa2&\f\xf7\x8eK\x9d\xe9\xca\x82\xd7\xa0b\xf4\xd2\xac&]\xe8&Knp\xd9\xe1\xe5F2\xf8\xa6+H\xc8\xa3\xe1[\xe3\xae\xcd\xd2\x89\xc1\x96<\xf0\xdf\xb8\xed\xa2\xb1\x9a\xf1vU9\xa9\xb9\x01\xc9\xf9\xcd\xf0]\x14I\xb4\x7f2\x84\xdb\xb7\x05\x8d\xa5\xf7{ww\xc8\xb8B\x90\xeci\x9bc{\xd0M\b%\x06\xd7\x17\xff\xc6\x8be\x9e\a\xe4\xb5 \xd9\x1c\xceM55\x99!\xcc\xac\\\b\xdc\x82\xf9\x87\x1em|\xc7\a,Fg4\x1d\xd9\xee\xd0|8\f\xcc\x7f\x15<8YW\x16zO9\xa7\x8a\xdd\xcc|\xbe\xda\x14\xf8\x8f\x94\xad\x90\xa51\xc6\xd0\xd7\x86\xb1\x15x\x12\xd2_?\xfa\xf8\xcd\xcf\xb7\x95\x1a\xd2Ue\xd5\xfb\\\x89\x11\xd0\xde\x04\x88L\x17Q\x94\x14\x0f\xc7\xdb\x86\x16|\xe9=\xee\x06U\x8a\xe8=\xe0\xf9\xce\xe4\xebM\a3\xba\x98\x9dv\xba\xfb\x7fk\xf0\x9a\xbf\x91KCC.B_:w\xff0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x1, {0x1, 0xff}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}}, 0x0) 3.297622766s ago: executing program 3 (id=550): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000980)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000200)={'trans=virtio,', {[{@nodevmap}, {@version_u}]}}) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) 2.405302742s ago: executing program 0 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x800) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7f) 2.394665413s ago: executing program 2 (id=552): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.340877233s ago: executing program 3 (id=553): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) 522.041356ms ago: executing program 3 (id=554): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 492.743116ms ago: executing program 2 (id=555): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 295.301788ms ago: executing program 2 (id=556): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 165.884489ms ago: executing program 2 (id=557): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast]}, 0x40) connect$rose(r1, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @bcast}, 0x1c) 155.789079ms ago: executing program 1 (id=558): bind$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) 154.921089ms ago: executing program 4 (id=559): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 0s ago: executing program 4 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}]}}]}, 0x3c}}, 0x400c084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {0x0, 0xfff1}, {0xffe0, 0x7}}, [{0x8, 0xb, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.100' (ED25519) to the list of known hosts. syzkaller login: [ 35.646758][ T4284] cgroup: Unknown subsys name 'net' [ 35.905445][ T4284] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.234780][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.336536][ T4297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.339679][ T4297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.342676][ T4297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.345585][ T4297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.347951][ T4297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.360816][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.363329][ T4295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.366697][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.369127][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.375368][ T4299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.378024][ T4301] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.380468][ T4301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.430237][ T4297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.433513][ T4297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.435733][ T4297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.438605][ T4297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.441306][ T4297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.443354][ T4297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.446206][ T4301] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.449245][ T4297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.454060][ T4301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.457038][ T4301] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.459557][ T4301] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.465878][ T4297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.468444][ T4297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.470990][ T4297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.473082][ T4295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.473467][ T4297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.480690][ T4297] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 37.482779][ T4297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.658212][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 37.708362][ T4294] chnl_net:caif_netlink_parms(): no params data found [ 37.783597][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.785571][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.788191][ T4298] device bridge_slave_0 entered promiscuous mode [ 37.820649][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.822521][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.824944][ T4298] device bridge_slave_1 entered promiscuous mode [ 37.848716][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 37.871717][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.873623][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.875999][ T4294] device bridge_slave_0 entered promiscuous mode [ 37.889526][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 37.896204][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.898254][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.901779][ T4294] device bridge_slave_1 entered promiscuous mode [ 37.905656][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.915733][ T4303] chnl_net:caif_netlink_parms(): no params data found [ 37.931998][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.966874][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.969137][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.972209][ T4302] device bridge_slave_0 entered promiscuous mode [ 37.978735][ T4294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.997571][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.999424][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.001842][ T4302] device bridge_slave_1 entered promiscuous mode [ 38.005171][ T4294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.016902][ T4298] team0: Port device team_slave_0 added [ 38.038566][ T4298] team0: Port device team_slave_1 added [ 38.045467][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.047345][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.049754][ T4305] device bridge_slave_0 entered promiscuous mode [ 38.067692][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.071932][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.083668][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.085535][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.087846][ T4305] device bridge_slave_1 entered promiscuous mode [ 38.095666][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.097545][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.100543][ T4303] device bridge_slave_0 entered promiscuous mode [ 38.106279][ T4294] team0: Port device team_slave_0 added [ 38.108465][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.110349][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.112830][ T4303] device bridge_slave_1 entered promiscuous mode [ 38.125558][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.127472][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.133998][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.143059][ T4294] team0: Port device team_slave_1 added [ 38.156150][ T4302] team0: Port device team_slave_0 added [ 38.158180][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.159995][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.166720][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.171378][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.175128][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.188281][ T4302] team0: Port device team_slave_1 added [ 38.207520][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.211848][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.225737][ T4305] team0: Port device team_slave_0 added [ 38.237509][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.239319][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.246709][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.266519][ T4305] team0: Port device team_slave_1 added [ 38.278546][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.280520][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.286766][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.301675][ T4303] team0: Port device team_slave_0 added [ 38.303693][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.305507][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.312271][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.382167][ T4298] device hsr_slave_0 entered promiscuous mode [ 38.420536][ T4298] device hsr_slave_1 entered promiscuous mode [ 38.466727][ T4303] team0: Port device team_slave_1 added [ 38.502039][ T4294] device hsr_slave_0 entered promiscuous mode [ 38.550486][ T4294] device hsr_slave_1 entered promiscuous mode [ 38.590407][ T4294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.592341][ T4294] Cannot create hsr debugfs directory [ 38.594237][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.596014][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.602824][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.606427][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.608212][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.616289][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.633898][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.635605][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.642672][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.699771][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.702003][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.708692][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.735780][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.737565][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.744349][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.831890][ T4302] device hsr_slave_0 entered promiscuous mode [ 38.870643][ T4302] device hsr_slave_1 entered promiscuous mode [ 38.930254][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.932206][ T4302] Cannot create hsr debugfs directory [ 38.997444][ T4305] device hsr_slave_0 entered promiscuous mode [ 39.030522][ T4305] device hsr_slave_1 entered promiscuous mode [ 39.080244][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.082142][ T4305] Cannot create hsr debugfs directory [ 39.152173][ T4303] device hsr_slave_0 entered promiscuous mode [ 39.200428][ T4303] device hsr_slave_1 entered promiscuous mode [ 39.240211][ T4303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.242054][ T4303] Cannot create hsr debugfs directory [ 39.401951][ T4294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.440860][ T4301] Bluetooth: hci1: command 0x0409 tx timeout [ 39.442707][ T4301] Bluetooth: hci0: command 0x0409 tx timeout [ 39.462084][ T4294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.514107][ T4294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.520356][ T4297] Bluetooth: hci3: command 0x0409 tx timeout [ 39.520385][ T4301] Bluetooth: hci4: command 0x0409 tx timeout [ 39.522116][ T4297] Bluetooth: hci2: command 0x0409 tx timeout [ 39.551933][ T4294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.605818][ T4298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.642838][ T4298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.687462][ T4298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.732051][ T4298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.864033][ T4302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.921622][ T4302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.971868][ T4302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.011795][ T4302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.085605][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.104257][ T4305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.141020][ T4305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.184477][ T4305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.235985][ T4305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.273153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.276597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.289456][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.295072][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.314849][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.318446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.322069][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.324976][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.326982][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.329889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.334640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.337530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.346153][ T4303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.402262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.404838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.407693][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.409745][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.412682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.415616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.418010][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.419811][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.422386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.425844][ T4303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.461863][ T4303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.502155][ T4303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.557757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.574364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.577269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.579857][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.581716][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.585859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.588601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.615135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.617953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.622892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.625619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.646080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.649280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.652632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.655276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.657810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.674075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.676860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.679743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.682998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.685484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.688064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.708053][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.717979][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.722253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.724745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.740933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.743442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.748490][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.779536][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.782318][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.787867][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.821248][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.841014][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.844302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.846952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.849406][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.851242][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.868654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.872398][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.874819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.891593][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.896211][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.898891][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.904409][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.906223][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.913940][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.916278][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.925675][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.928471][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.932128][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.935309][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.937117][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.939437][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.946182][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.953043][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.955647][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.958151][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.960129][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.962858][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.967567][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.974733][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.977124][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.979650][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.981507][ T1575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.994115][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.996469][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.999179][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.002788][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.005260][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.007825][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.010986][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.021920][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.024395][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.028925][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.032867][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.038037][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.041792][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.044153][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.045819][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.063451][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.065673][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.067614][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.071479][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.074033][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.077536][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.079962][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.084516][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.088386][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.102478][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.105255][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.108074][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.113816][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.116322][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.121886][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.135306][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.138471][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.145059][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.147672][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.153443][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.156052][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.158570][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.168216][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.175015][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.192596][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.195447][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.212725][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.215348][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.237630][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.251043][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.253696][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.276607][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.279215][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.293851][ T4294] device veth0_vlan entered promiscuous mode [ 41.314332][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.318460][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.327211][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.331694][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.333667][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.353351][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.355726][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.358685][ T4294] device veth1_vlan entered promiscuous mode [ 41.375277][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.377781][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.380993][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.386039][ T4298] device veth0_vlan entered promiscuous mode [ 41.389488][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.392137][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.414275][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.417520][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.425523][ T4298] device veth1_vlan entered promiscuous mode [ 41.429502][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.432692][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.435128][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.437325][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.443050][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.481338][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.484770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.487313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.490799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.495964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.501992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.515383][ T4302] device veth0_vlan entered promiscuous mode [ 41.518784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.520858][ T4295] Bluetooth: hci0: command 0x041b tx timeout [ 41.520967][ T4295] Bluetooth: hci1: command 0x041b tx timeout [ 41.525253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.533493][ T4302] device veth1_vlan entered promiscuous mode [ 41.542737][ T4298] device veth0_macvtap entered promiscuous mode [ 41.544953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.547478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.557000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.559680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.568067][ T4298] device veth1_macvtap entered promiscuous mode [ 41.580735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.583164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.585775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.603102][ T4297] Bluetooth: hci2: command 0x041b tx timeout [ 41.604748][ T4297] Bluetooth: hci4: command 0x041b tx timeout [ 41.606229][ T4297] Bluetooth: hci3: command 0x041b tx timeout [ 41.619215][ T4294] device veth0_macvtap entered promiscuous mode [ 41.622979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.625504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.627850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.631759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.643603][ T4294] device veth1_macvtap entered promiscuous mode [ 41.649012][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.663270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.665692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.668116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.676903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.679321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.692971][ T4302] device veth0_macvtap entered promiscuous mode [ 41.702597][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.705508][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.709183][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.713151][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.719631][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.723963][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.726520][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.729098][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.732390][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.735068][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.737616][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.740917][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.743324][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.747196][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.749873][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.754758][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.758497][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.767656][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.769794][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.772437][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.777884][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.780884][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.787015][ T4294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.789450][ T4294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.792242][ T4294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.794395][ T4294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.806916][ T4305] device veth0_vlan entered promiscuous mode [ 41.812165][ T4302] device veth1_macvtap entered promiscuous mode [ 41.828417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.832214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.873898][ T4305] device veth1_vlan entered promiscuous mode [ 41.880343][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.883021][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.885392][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.887921][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.894367][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.913995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.916596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.929010][ T4303] device veth0_vlan entered promiscuous mode [ 41.933377][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.935891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.938828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.943086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.962864][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.966522][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.968978][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.972530][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.976555][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.996397][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.999183][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.007038][ T4302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.009309][ T4302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.012702][ T4302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.014886][ T4302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.024249][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.026266][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.032766][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.035801][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.041307][ T4303] device veth1_vlan entered promiscuous mode [ 42.044867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.047449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.049754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.074577][ T4305] device veth0_macvtap entered promiscuous mode [ 42.095059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.097749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.100930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.113513][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.115591][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.125754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.128547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.132853][ T4305] device veth1_macvtap entered promiscuous mode [ 42.169249][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.174462][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.181518][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.184268][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.189460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.198114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.205344][ T4303] device veth0_macvtap entered promiscuous mode [ 42.235830][ T4303] device veth1_macvtap entered promiscuous mode [ 42.295455][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.298125][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.315511][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.318193][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.341215][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.344251][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.357122][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.359328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.363118][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.366228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.369106][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.381498][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.383520][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.398806][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.403182][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.432887][ T4379] loop1: detected capacity change from 0 to 1024 [ 42.496675][ T4379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.538078][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.542835][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.553392][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.556126][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.559926][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 42.568450][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.876427][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.034404][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.195235][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.220809][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.239227][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.254395][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.256885][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.259533][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.281460][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.283839][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.286059][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.288372][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.292126][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.297706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.311371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.314014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.327270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.336856][ T4305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.339116][ T4305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.359299][ T4305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.361926][ T4305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.390399][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.392973][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.395426][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.399603][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.417146][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.419902][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.447769][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.455766][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.468559][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.491302][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.493904][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.498526][ T4303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.501111][ T4303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.510842][ T4303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.513111][ T4303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.565000][ T4399] loop1: detected capacity change from 0 to 128 [ 43.600264][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 43.601804][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 43.620656][ T4399] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 43.661226][ T4399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 43.680642][ T4297] Bluetooth: hci3: command 0x040f tx timeout [ 43.682275][ T4297] Bluetooth: hci4: command 0x040f tx timeout [ 43.683776][ T4297] Bluetooth: hci2: command 0x040f tx timeout [ 43.769041][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.772418][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.782797][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.903559][ T1575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.905766][ T1575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.916900][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.923446][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.925609][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.928774][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.723990][ T1575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.726247][ T1575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.729540][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.249217][ T4431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 45.252634][ T4431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 45.257540][ T4405] loop2: detected capacity change from 0 to 32768 [ 45.682396][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 45.761232][ T4301] Bluetooth: hci3: command 0x0419 tx timeout [ 45.763778][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 45.764060][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 45.884506][ T4405] ======================================================= [ 45.884506][ T4405] WARNING: The mand mount option has been deprecated and [ 45.884506][ T4405] and is ignored by this kernel. Remove the mand [ 45.884506][ T4405] option from the mount to silence this warning. [ 45.884506][ T4405] ======================================================= [ 46.039716][ T4437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 46.042094][ T4437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 46.118689][ T4405] XFS (loop2): Mounting V5 Filesystem [ 46.178184][ T4437] Zero length message leads to an empty skb [ 46.263648][ T4405] XFS (loop2): Ending clean mount [ 46.279742][ T4405] XFS (loop2): Quotacheck needed: Please wait. [ 46.315108][ T4405] XFS (loop2): Quotacheck: Done. [ 46.381634][ T4463] loop1: detected capacity change from 0 to 256 [ 46.399633][ T4463] exfat: Deprecated parameter 'namecase' [ 46.478102][ T4302] XFS (loop2): Unmounting Filesystem [ 47.459745][ T4472] loop3: detected capacity change from 0 to 16 [ 47.532002][ T4473] loop0: detected capacity change from 0 to 8192 [ 47.548996][ T4472] erofs: (device loop3): mounted with root inode @ nid 36. [ 47.551233][ T4463] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 48.831180][ T4299] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 48.833476][ T4299] Bluetooth: hci1: Injecting HCI hardware error event [ 48.836041][ T4299] Bluetooth: hci1: hardware error 0x00 [ 50.252861][ T4518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.255410][ T4518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.541490][ T4522] loop1: detected capacity change from 0 to 32768 [ 50.565767][ T4522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.47 (4522) [ 50.618127][ T4522] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.621330][ T4522] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 50.623484][ T4522] BTRFS info (device loop1): using free space tree [ 50.741019][ T4522] BTRFS info (device loop1): enabling ssd optimizations [ 50.792317][ T4294] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.978944][ T4552] loop3: detected capacity change from 0 to 512 [ 51.200204][ T4299] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 51.222946][ T4552] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.53: casefold flag without casefold feature [ 51.230394][ T4552] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.53: couldn't read orphan inode 15 (err -117) [ 51.234612][ T4552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.875924][ T4564] netlink: 148 bytes leftover after parsing attributes in process `syz.1.55'. [ 53.977673][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 55.642911][ T4610] netlink: 148 bytes leftover after parsing attributes in process `syz.3.68'. [ 55.735156][ T4591] loop4: detected capacity change from 0 to 32768 [ 55.884737][ T4616] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 55.903760][ T4616] can0: slcan on ttyS3. [ 57.756226][ T4608] can0 (unregistered): slcan off ttyS3. [ 57.914628][ T4628] loop3: detected capacity change from 0 to 512 [ 58.009160][ T4628] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.72: casefold flag without casefold feature [ 58.015740][ T4628] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.72: couldn't read orphan inode 15 (err -117) [ 58.035764][ T4628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.122943][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 60.340020][ C0] sched: RT throttling activated [ 60.790995][ T4666] netlink: 148 bytes leftover after parsing attributes in process `syz.1.83'. [ 62.126730][ T4700] loop3: detected capacity change from 0 to 128 [ 63.352810][ T4710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.356085][ T4710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.405747][ T4712] netlink: 148 bytes leftover after parsing attributes in process `syz.4.97'. [ 63.663044][ T4700] EXT4-fs (loop3): Test dummy encryption mode enabled [ 63.763925][ T4700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.816904][ T4700] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 63.847438][ T4700] overlayfs: failed to resolve './file2': -2 [ 63.959618][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 64.179223][ T4715] loop4: detected capacity change from 0 to 32768 [ 64.438328][ T4721] loop0: detected capacity change from 0 to 40427 [ 64.482174][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.483967][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.507470][ T4721] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.689954][ T4721] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.719474][ T4731] loop3: detected capacity change from 0 to 32768 [ 64.722175][ T4731] XFS: noikeep mount option is deprecated. [ 64.757878][ T4731] XFS (loop3): Mounting V5 Filesystem [ 64.817803][ T4731] XFS (loop3): Ending clean mount [ 64.827235][ T4731] XFS (loop3): Quotacheck needed: Please wait. [ 64.836069][ T4298] syz-executor: attempt to access beyond end of device [ 64.836069][ T4298] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.882785][ T4731] XFS (loop3): Quotacheck: Done. [ 64.950393][ T4305] XFS (loop3): Unmounting Filesystem [ 65.575160][ T4766] loop4: detected capacity change from 0 to 128 [ 65.589018][ T4766] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.649612][ T4766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.782361][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 65.796257][ T4770] netlink: 148 bytes leftover after parsing attributes in process `syz.3.108'. [ 66.296498][ T4778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.112'. [ 67.129072][ T4792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.118'. [ 67.136386][ T4792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.118'. [ 67.479419][ C1] vcan0: j1939_tp_rxtimer: 0x000000008ebaf173: rx timeout, send abort [ 67.982632][ C1] vcan0: j1939_tp_rxtimer: 0x000000008ebaf173: abort rx timeout. Force session deactivation [ 68.449827][ T4807] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 68.506297][ T4807] can0: slcan on ttyS3. [ 69.017799][ T4809] loop3: detected capacity change from 0 to 128 [ 69.043134][ T4809] EXT4-fs (loop3): Test dummy encryption mode enabled [ 69.090606][ T4809] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.160357][ T4801] can0 (unregistered): slcan off ttyS3. [ 69.211067][ T4814] netlink: 148 bytes leftover after parsing attributes in process `syz.0.123'. [ 69.235831][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 69.619752][ T14] cfg80211: failed to load regulatory.db [ 70.396598][ T4839] loop2: detected capacity change from 0 to 256 [ 70.788731][ T4859] loop2: detected capacity change from 0 to 128 [ 70.812539][ T4859] EXT4-fs (loop2): Test dummy encryption mode enabled [ 71.016823][ T4859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.946447][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 71.964562][ C0] vcan0: j1939_tp_rxtimer: 0x0000000032fb559a: rx timeout, send abort [ 72.466577][ C0] vcan0: j1939_tp_rxtimer: 0x0000000032fb559a: abort rx timeout. Force session deactivation [ 72.982810][ T4885] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 73.025780][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.045878][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.216908][ T4922] loop1: detected capacity change from 0 to 128 [ 75.257084][ T4922] EXT4-fs (loop1): Test dummy encryption mode enabled [ 75.281552][ T4922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.323893][ T4926] loop2: detected capacity change from 0 to 512 [ 75.326007][ T4926] EXT4-fs: Ignoring removed oldalloc option [ 75.371067][ T4926] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.379977][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 75.400608][ T4926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.445025][ T4926] EXT4-fs (loop2): 1 truncate cleaned up [ 75.446542][ T4926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.520719][ T4895] loop3: detected capacity change from 0 to 32768 [ 75.523526][ T4895] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.144 (4895) [ 75.540973][ T4895] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.543347][ T4895] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 75.545456][ T4895] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 75.547724][ T4895] BTRFS info (device loop3): use zstd compression, level 3 [ 75.549404][ T4895] BTRFS info (device loop3): using free space tree [ 75.717690][ T4895] BTRFS info (device loop3): enabling ssd optimizations [ 75.760500][ T4929] loop1: detected capacity change from 0 to 4096 [ 75.829680][ T4910] netlink: 104 bytes leftover after parsing attributes in process `syz.4.147'. [ 75.871998][ T4302] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 75.913981][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 76.045653][ T4305] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.494457][ C1] vcan0: j1939_tp_rxtimer: 0x00000000633e6ef6: rx timeout, send abort [ 77.579246][ T4977] loop4: detected capacity change from 0 to 1764 [ 77.625859][ T4977] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 77.776764][ T4987] loop4: detected capacity change from 0 to 128 [ 77.792417][ T4987] EXT4-fs (loop4): Test dummy encryption mode enabled [ 77.806621][ T4987] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.948684][ T4990] loop3: detected capacity change from 0 to 512 [ 77.952567][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 77.996532][ C1] vcan0: j1939_tp_rxtimer: 0x00000000633e6ef6: abort rx timeout. Force session deactivation [ 78.067415][ T4990] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.161: casefold flag without casefold feature [ 78.097816][ T4990] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.161: couldn't read orphan inode 15 (err -117) [ 78.143157][ T4990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.077036][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 79.420808][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 79.423422][ T5015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.425795][ T5015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.436355][ T5013] netlink: 104 bytes leftover after parsing attributes in process `syz.0.164'. [ 79.464156][ T5015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.466266][ T5015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.597020][ T5023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.627150][ T4998] loop2: detected capacity change from 0 to 32768 [ 80.630855][ T5023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.705198][ T4998] XFS (loop2): Mounting V5 Filesystem [ 80.766790][ T4998] XFS (loop2): Ending clean mount [ 80.774777][ T4998] XFS (loop2): Quotacheck needed: Please wait. [ 80.796567][ T4998] XFS (loop2): Quotacheck: Done. [ 80.832998][ T4995] XFS (loop2): User initiated shutdown received. [ 80.839387][ T4995] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xe0/0x15c (fs/xfs/xfs_fsops.c:492). Shutting down filesystem. [ 80.843222][ T4995] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 80.923883][ T4302] XFS (loop2): Unmounting Filesystem [ 81.160510][ T5047] loop4: detected capacity change from 0 to 8 [ 81.278351][ T5047] process 'syz.4.173' launched './file1' with NULL argv: empty string added [ 81.323982][ T5047] SQUASHFS error: Failed to read block 0x4e8: -5 [ 81.351564][ T5050] loop2: detected capacity change from 0 to 128 [ 81.361103][ T5050] EXT4-fs (loop2): Test dummy encryption mode enabled [ 81.568710][ T5050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.685976][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 81.825249][ T5064] loop2: detected capacity change from 0 to 1024 [ 82.767764][ T4493] hfsplus: b-tree write err: -5, ino 4 [ 82.810442][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f65cedcb: rx timeout, send abort [ 83.273859][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 83.276382][ T5080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.278541][ T5080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.312718][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f65cedcb: abort rx timeout. Force session deactivation [ 83.867456][ T5080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.869501][ T5080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.235999][ T5103] netlink: 104 bytes leftover after parsing attributes in process `syz.4.180'. [ 84.306702][ T5108] loop3: detected capacity change from 0 to 128 [ 84.309379][ T5108] EXT4-fs (loop3): Test dummy encryption mode enabled [ 84.357784][ T5108] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.544728][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 84.718784][ T5118] loop3: detected capacity change from 0 to 1024 [ 85.007059][ T4916] hfsplus: b-tree write err: -5, ino 4 [ 86.569246][ C1] vcan0: j1939_tp_rxtimer: 0x000000001be90f2d: rx timeout, send abort [ 86.796151][ T5137] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 87.071504][ C1] vcan0: j1939_tp_rxtimer: 0x000000001be90f2d: abort rx timeout. Force session deactivation [ 87.287606][ T5144] loop3: detected capacity change from 0 to 128 [ 87.320736][ T5144] EXT4-fs (loop3): Test dummy encryption mode enabled [ 87.357705][ T5144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.677776][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 87.808224][ T5154] loop1: detected capacity change from 0 to 2048 [ 87.826007][ T5154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.188471][ T5164] loop1: detected capacity change from 0 to 1024 [ 89.431641][ T5169] netlink: 104 bytes leftover after parsing attributes in process `syz.3.200'. [ 89.730049][ T4416] hfsplus: b-tree write err: -5, ino 4 [ 91.255379][ T5182] loop4: detected capacity change from 0 to 128 [ 91.272886][ T5182] EXT4-fs (loop4): Test dummy encryption mode enabled [ 91.471545][ T5182] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.372906][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 92.403765][ T5194] loop1: detected capacity change from 0 to 512 [ 92.544770][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e976d395: rx timeout, send abort [ 92.611052][ T5194] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.214: casefold flag without casefold feature [ 92.639597][ T5194] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.214: couldn't read orphan inode 15 (err -117) [ 92.728988][ T5194] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.778333][ T5207] loop2: detected capacity change from 0 to 1024 [ 93.046991][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e976d395: abort rx timeout. Force session deactivation [ 94.350383][ T4882] hfsplus: b-tree write err: -5, ino 4 [ 94.543156][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 94.717395][ T5224] loop3: detected capacity change from 0 to 512 [ 94.871977][ T5224] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 94.880166][ T5224] EXT4-fs (loop3): orphan cleanup on readonly fs [ 94.922060][ T5224] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 94.925259][ T5224] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 94.927715][ T5224] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.221: Failed to acquire dquot type 1 [ 94.953376][ T5224] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.221: bg 0: block 40: padding at end of block bitmap is not set [ 94.969088][ T5224] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 94.976835][ T5224] EXT4-fs (loop3): 1 truncate cleaned up [ 95.277035][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.334470][ T5220] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.221: bad symlink. [ 96.681584][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 97.789215][ T5241] loop2: detected capacity change from 0 to 512 [ 98.032233][ T5241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.153754][ T5241] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.230088][ T5252] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 98.254239][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 98.338524][ T5258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.349632][ T5258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.441358][ T5244] loop0: detected capacity change from 0 to 40427 [ 98.459493][ T5244] F2FS-fs (loop0): Wrong segment_count / block_count (64 > 16384) [ 98.464643][ T5244] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.491151][ T5244] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.509001][ T5244] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 98.511551][ T5244] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.649338][ T5265] loop1: detected capacity change from 0 to 1024 [ 98.674529][ T4339] kworker/u4:5: attempt to access beyond end of device [ 98.674529][ T4339] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 98.703664][ T9] hfsplus: b-tree write err: -5, ino 4 [ 98.730338][ T5244] VFS:Filesystem freeze failed [ 99.144793][ T5273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.970872][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f71f645e: rx timeout, send abort [ 100.475186][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f71f645e: abort rx timeout. Force session deactivation [ 102.287605][ T5296] loop2: detected capacity change from 0 to 1024 [ 102.524783][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 103.205964][ T4916] hfsplus: b-tree write err: -5, ino 4 [ 103.412150][ T5286] loop1: detected capacity change from 0 to 32768 [ 103.427032][ T5286] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.242 (5286) [ 103.475801][ T5286] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.483372][ T5286] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 103.488112][ T5286] BTRFS info (device loop1): using free space tree [ 103.718725][ T5286] BTRFS info (device loop1): enabling ssd optimizations [ 104.594103][ T4294] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.608555][ T5310] loop4: detected capacity change from 0 to 32768 [ 104.619409][ T5310] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.248 (5310) [ 104.782080][ T5310] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.550313][ T5310] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 105.554016][ T5310] BTRFS info (device loop4): using free space tree [ 105.568580][ C1] vcan0: j1939_tp_rxtimer: 0x0000000022af662f: rx timeout, send abort [ 105.715887][ T5354] loop3: detected capacity change from 0 to 1024 [ 105.754031][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 105.803753][ T5366] loop3: detected capacity change from 0 to 512 [ 105.888023][ T5366] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 105.943707][ T5366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0102] [ 105.945634][ T5366] System zones: 1-12 [ 105.947518][ T5366] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.949631][ T5366] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.257: invalid indirect mapped block 12 (level 1) [ 105.981877][ T5366] EXT4-fs (loop3): Remounting filesystem read-only [ 105.983614][ T5366] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.257: invalid indirect mapped block 2 (level 2) [ 106.070684][ C1] vcan0: j1939_tp_rxtimer: 0x0000000022af662f: abort rx timeout. Force session deactivation [ 106.345279][ T5310] BTRFS info (device loop4): enabling ssd optimizations [ 106.514192][ T5366] EXT4-fs (loop3): Remounting filesystem read-only [ 106.527195][ T5366] EXT4-fs (loop3): 1 truncate cleaned up [ 106.770355][ T5366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.851094][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 106.930779][ T4303] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.370253][ T5397] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.265' sets config #1 [ 109.160888][ T5388] loop1: detected capacity change from 0 to 32768 [ 109.163370][ T5388] XFS: attr2 mount option is deprecated. [ 109.164911][ T5388] XFS: attr2 mount option is deprecated. [ 109.175803][ T5400] loop0: detected capacity change from 0 to 1024 [ 109.356159][ T5388] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 109.358980][ T5388] XFS (loop1): Mounting V5 Filesystem [ 109.529359][ T5388] XFS (loop1): Ending clean mount [ 109.535280][ T5388] XFS (loop1): Quotacheck needed: Please wait. [ 109.652109][ T5425] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 109.672563][ T5425] can0: slcan on ttyS3. [ 109.876287][ T5388] XFS (loop1): Quotacheck: Done. [ 110.110416][ T5402] can0 (unregistered): slcan off ttyS3. [ 110.339996][ T4294] XFS (loop1): Unmounting Filesystem [ 111.080516][ C0] vcan0: j1939_tp_rxtimer: 0x000000009727f8ca: rx timeout, send abort [ 111.582554][ C0] vcan0: j1939_tp_rxtimer: 0x000000009727f8ca: abort rx timeout. Force session deactivation [ 111.612340][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 111.844716][ T5450] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.278' sets config #0 [ 111.853664][ T5450] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.278' sets config #1 [ 112.085408][ T5450] block device autoloading is deprecated and will be removed. [ 113.091276][ T5470] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 113.116952][ T5470] can0: slcan on ttyS3. [ 113.797857][ T5462] can0 (unregistered): slcan off ttyS3. [ 113.802773][ T5471] loop2: detected capacity change from 0 to 1024 [ 114.870279][ T5465] loop0: detected capacity change from 0 to 65536 [ 114.872427][ T5465] XFS: noikeep mount option is deprecated. [ 114.925694][ T5465] XFS (loop0): Mounting V5 Filesystem [ 114.980916][ T5465] XFS (loop0): Ending clean mount [ 115.017419][ T5465] syz.0.286: attempt to access beyond end of device [ 115.017419][ T5465] loop0: rw=4096, sector=16639336477372767361, nr_sectors = 1 limit=65536 [ 115.051647][ T4298] XFS (loop0): Unmounting Filesystem [ 115.207092][ C0] vcan0: j1939_tp_rxtimer: 0x000000000a90f00a: rx timeout, send abort [ 115.570278][ T5496] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.294' sets config #0 [ 115.584031][ T5496] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.294' sets config #1 [ 116.189254][ C0] vcan0: j1939_tp_rxtimer: 0x000000000a90f00a: abort rx timeout. Force session deactivation [ 116.335974][ T9] hfsplus: b-tree write err: -5, ino 4 [ 116.939218][ T5514] loop0: detected capacity change from 0 to 512 [ 117.082285][ T5514] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 117.089455][ T5514] EXT4-fs (loop0): orphan cleanup on readonly fs [ 117.098763][ T5514] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 117.101727][ T5514] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 117.104134][ T5514] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.293: Failed to acquire dquot type 1 [ 117.113215][ T5514] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.293: bg 0: block 40: padding at end of block bitmap is not set [ 117.119858][ T5514] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 117.127789][ T5514] EXT4-fs (loop0): 1 truncate cleaned up [ 117.130518][ T5514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 117.359136][ T5514] EXT4-fs error (device loop0): ext4_get_link:104: inode #16: comm syz.0.293: bad symlink. [ 117.622174][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 119.312551][ T5525] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 119.408171][ T5525] can0: slcan on ttyS3. [ 120.510433][ T5512] can0 (unregistered): slcan off ttyS3. [ 120.927790][ T5537] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.306' sets config #0 [ 120.938420][ T5537] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.306' sets config #1 [ 121.685265][ T5540] loop2: detected capacity change from 0 to 1024 [ 122.823847][ C1] vcan0: j1939_tp_rxtimer: 0x000000009e4cc004: rx timeout, send abort [ 123.326064][ C1] vcan0: j1939_tp_rxtimer: 0x000000009e4cc004: abort rx timeout. Force session deactivation [ 124.471857][ T1963] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 124.557596][ T5577] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 124.583664][ T5577] can0: slcan on ttyS3. [ 125.184274][ T1963] usb 1-1: config 150 has an invalid interface number: 120 but max is 0 [ 125.186745][ T1963] usb 1-1: config 150 has no interface number 0 [ 125.189439][ T1963] usb 1-1: config 150 interface 120 has no altsetting 0 [ 125.210289][ T5572] can0 (unregistered): slcan off ttyS3. [ 125.282607][ T1963] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 125.284974][ T1963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.286948][ T1963] usb 1-1: Product: syz [ 125.288051][ T1963] usb 1-1: Manufacturer: syz [ 125.289235][ T1963] usb 1-1: SerialNumber: syz [ 125.361370][ T5579] loop3: detected capacity change from 0 to 1024 [ 125.400404][ T4417] hfsplus: b-tree write err: -5, ino 4 [ 125.668636][ T1963] radioshark 1-1:150.120: Invalid radioSHARK device [ 125.671459][ T1963] radioshark: probe of 1-1:150.120 failed with error -22 [ 125.673517][ T1963] usbhid 1-1:150.120: couldn't find an input interrupt endpoint [ 125.683626][ T1963] usb 1-1: USB disconnect, device number 2 [ 126.271333][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.275156][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.923429][ T5603] loop2: detected capacity change from 0 to 256 [ 126.960995][ T5603] exfat: Deprecated parameter 'namecase' [ 126.990749][ T5603] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 127.840922][ T5610] loop4: detected capacity change from 0 to 1024 [ 129.080352][ T5620] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 129.376953][ T5620] slcan: can't register candev [ 129.411012][ T1575] hfsplus: b-tree write err: -5, ino 4 [ 129.500975][ T5623] syz.4.333 uses obsolete (PF_INET,SOCK_PACKET) [ 129.707866][ T5625] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.333' sets config #1 [ 129.761142][ T5625] loop4: detected capacity change from 0 to 512 [ 130.022757][ T5625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.357414][ T5619] loop0: detected capacity change from 0 to 32768 [ 131.824929][ T5619] ea_get: invalid extended attribute [ 131.826468][ T5619] 0000000072d906f6: 04 00 00 00 .... [ 132.101598][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 132.183709][ T5644] netlink: 104 bytes leftover after parsing attributes in process `syz.3.334'. [ 133.034098][ T5653] loop1: detected capacity change from 0 to 1024 [ 135.076082][ T1575] hfsplus: b-tree write err: -5, ino 4 [ 135.382792][ T5668] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 135.958913][ T5668] slcan: can't register candev [ 136.473848][ T5685] netlink: 52 bytes leftover after parsing attributes in process `syz.3.352'. [ 137.382226][ T5689] loop0: detected capacity change from 0 to 1024 [ 137.434778][ T5694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.357'. [ 138.685145][ T1575] hfsplus: b-tree write err: -5, ino 4 [ 140.415905][ T5716] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 140.444199][ T5716] can0: slcan on ttyS3. [ 140.720303][ T5708] can0 (unregistered): slcan off ttyS3. [ 141.113672][ T5727] loop0: detected capacity change from 0 to 256 [ 141.116595][ T5727] exfat: Unknown parameter 'zero_size_dir' [ 141.287822][ T4286] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.119983][ T5719] loop2: detected capacity change from 0 to 32768 [ 142.161698][ T5731] loop0: detected capacity change from 0 to 256 [ 142.163819][ T5731] exfat: Deprecated parameter 'namecase' [ 142.218683][ T5731] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 142.222052][ T5719] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.364 (5719) [ 142.242261][ T5710] loop1: detected capacity change from 0 to 32768 [ 142.296813][ T5719] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 142.299315][ T5719] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 142.303347][ T5719] BTRFS info (device loop2): force clearing of disk cache [ 142.313938][ T5719] BTRFS info (device loop2): enabling ssd optimizations [ 142.329606][ T5719] BTRFS info (device loop2): using spread ssd allocation scheme [ 142.331963][ T5719] BTRFS info (device loop2): using free space tree [ 142.481313][ T5743] (syz.3.370,5743,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 142.483399][ T5743] (syz.3.370,5743,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 143.134410][ T5719] BTRFS info (device loop2): rebuilding free space tree [ 143.269924][ T5719] BTRFS info (device loop2): balance: start -susage=12582912,drange=65536..8,limit=10376293541461622786,limit=2..2415919104 [ 143.288635][ T5719] BTRFS info (device loop2): relocating block group 1048576 flags system [ 143.388099][ T5719] BTRFS info (device loop2): balance: canceled [ 143.502194][ T4302] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 143.592548][ T5770] netlink: 104 bytes leftover after parsing attributes in process `syz.3.372'. [ 144.798646][ T5789] loop1: detected capacity change from 0 to 128 [ 144.838530][ T5789] EXT4-fs (loop1): Test dummy encryption mode enabled [ 144.871403][ T5789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.964680][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 146.136703][ T5822] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.392' sets config #1 [ 146.257322][ T5822] loop1: detected capacity change from 0 to 512 [ 146.429090][ T5822] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.429230][ T5836] loop0: detected capacity change from 0 to 32768 [ 148.493245][ T5836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.395 (5836) [ 148.587339][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 148.597544][ T5836] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.610143][ T5836] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 148.612472][ T5836] BTRFS info (device loop0): setting nodatacow, compression disabled [ 148.614534][ T5836] BTRFS info (device loop0): enabling auto defrag [ 148.616082][ T5836] BTRFS info (device loop0): max_inline at 0 [ 148.617608][ T5836] BTRFS info (device loop0): using free space tree [ 148.687399][ C0] vcan0: j1939_tp_rxtimer: 0x0000000076ef1473: rx timeout, send abort [ 149.902709][ T4298] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.018437][ T5866] netlink: 104 bytes leftover after parsing attributes in process `syz.1.396'. [ 150.255244][ T5863] loop4: detected capacity change from 0 to 32768 [ 150.295514][ T5863] XFS (loop4): Mounting V5 Filesystem [ 150.365163][ T5863] XFS (loop4): Ending clean mount [ 150.433843][ T5878] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 150.443474][ T5878] bond0: (slave wlan1): Opening slave failed [ 150.495371][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.504216][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.624866][ T5871] loop3: detected capacity change from 0 to 40427 [ 150.672326][ T5871] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 150.674376][ T5871] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 150.718765][ T5871] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.759425][ T5871] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 150.767826][ T5871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.896933][ T5863] syz.4.398 (5863): drop_caches: 2 [ 151.798142][ T4303] XFS (loop4): Unmounting Filesystem [ 154.020205][ T5936] netlink: 104 bytes leftover after parsing attributes in process `syz.4.414'. [ 154.120970][ T5939] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 154.150481][ T5939] can0: slcan on ttyS3. [ 154.495721][ C1] vcan0: j1939_tp_rxtimer: 0x00000000846ec76d: rx timeout, send abort [ 154.791275][ T5931] can0 (unregistered): slcan off ttyS3. [ 154.998086][ C1] vcan0: j1939_tp_rxtimer: 0x00000000846ec76d: abort rx timeout. Force session deactivation [ 156.100780][ T5944] loop4: detected capacity change from 0 to 40427 [ 156.113457][ T5944] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 156.115385][ T5944] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 156.165100][ T5944] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.230733][ T5944] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 156.232497][ T5944] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.417201][ T5963] loop1: detected capacity change from 0 to 32768 [ 156.420954][ T5963] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.425 (5963) [ 156.428951][ T5963] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.431681][ T5963] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 156.433868][ T5963] BTRFS info (device loop1): using free space tree [ 156.742808][ T5963] BTRFS info (device loop1): enabling ssd optimizations [ 156.807726][ T5963] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.812828][ T5963] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.477963][ T5992] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 158.048758][ T5992] slcan: can't register candev [ 158.447534][ T5988] loop0: detected capacity change from 0 to 32768 [ 158.456714][ T5988] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.429 (5988) [ 158.527858][ T4294] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.882177][ T5988] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 158.887527][ T5988] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 158.889895][ T5988] BTRFS info (device loop0): doing ref verification [ 158.915940][ T5988] BTRFS info (device loop0): use zlib compression, level 3 [ 158.917835][ T5988] BTRFS info (device loop0): using free space tree [ 158.942719][ T6003] misc userio: The device must be registered before sending interrupts [ 160.419489][ T5988] BTRFS error (device loop0): open_ctree failed: -22 [ 160.610509][ T6040] loop2: detected capacity change from 0 to 512 [ 160.617637][ T6038] netlink: 104 bytes leftover after parsing attributes in process `syz.4.431'. [ 160.667683][ T6040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.776190][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 161.141783][ T6054] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 161.168718][ T6054] can0: slcan on ttyS3. [ 161.841167][ T6048] can0 (unregistered): slcan off ttyS3. [ 161.952893][ T6058] misc userio: The device must be registered before sending interrupts [ 162.061679][ C1] vcan0: j1939_tp_rxtimer: 0x000000001724aab8: rx timeout, send abort [ 162.953957][ T6052] loop0: detected capacity change from 0 to 32768 [ 163.014488][ T6052] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.442 (6052) [ 163.048741][ T6052] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.058523][ T6052] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 163.062958][ T6052] BTRFS info (device loop0): setting nodatacow, compression disabled [ 163.065500][ T6052] BTRFS info (device loop0): force clearing of disk cache [ 163.069794][ T6052] BTRFS info (device loop0): setting datacow [ 163.075608][ T6052] BTRFS info (device loop0): doing ref verification [ 163.078711][ T6052] BTRFS info (device loop0): disabling free space tree [ 163.084556][ T6052] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 163.090443][ T6052] BTRFS info (device loop0): use zstd compression, level 3 [ 163.094562][ T6052] BTRFS info (device loop0): enabling ssd optimizations [ 163.097448][ T6052] BTRFS info (device loop0): using spread ssd allocation scheme [ 163.108023][ T6052] BTRFS info (device loop0): not using ssd optimizations [ 163.115544][ T6052] BTRFS info (device loop0): not using spread ssd allocation scheme [ 163.880208][ T4299] Bluetooth: hci2: command 0x0406 tx timeout [ 163.880442][ T4301] Bluetooth: hci0: command 0x0406 tx timeout [ 163.883915][ T4299] Bluetooth: hci3: command 0x0406 tx timeout [ 163.885846][ T4301] Bluetooth: hci4: command 0x0406 tx timeout [ 164.199229][ T6052] BTRFS error (device loop0): open_ctree failed: -12 [ 164.669856][ T6102] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 165.259953][ T6102] slcan: can't register candev [ 165.748278][ T6111] loop0: detected capacity change from 0 to 512 [ 165.824606][ T6111] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.458: casefold flag without casefold feature [ 165.827794][ T6111] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.458: couldn't read orphan inode 15 (err -117) [ 165.845063][ T6111] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 165.877874][ T6114] netlink: 104 bytes leftover after parsing attributes in process `syz.1.453'. [ 166.799924][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 166.866061][ T6120] misc userio: The device must be registered before sending interrupts [ 166.916106][ T6126] loop0: detected capacity change from 0 to 16 [ 166.925842][ T6126] erofs: (device loop0): mounted with root inode @ nid 36. [ 167.122686][ T6105] loop2: detected capacity change from 0 to 40427 [ 167.769153][ T6105] F2FS-fs (loop2): Unrecognized mount option "errors=continue" or missing value [ 167.941750][ T4408] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.174545][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c170fadc: rx timeout, send abort [ 169.777408][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c170fadc: abort rx timeout. Force session deactivation [ 170.199267][ T6150] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 170.791432][ T6150] slcan: can't register candev [ 171.176191][ T6157] netlink: 104 bytes leftover after parsing attributes in process `syz.4.469'. [ 171.891611][ T6162] loop2: detected capacity change from 0 to 512 [ 171.937083][ T6162] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.473: casefold flag without casefold feature [ 171.950581][ T6164] misc userio: No port type given on /dev/userio [ 171.953218][ T6164] misc userio: The device must be registered before sending interrupts [ 171.955785][ T6162] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.473: couldn't read orphan inode 15 (err -117) [ 171.970461][ T6162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 172.310567][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 172.374357][ T6155] loop1: detected capacity change from 0 to 32768 [ 172.512259][ T6155] XFS (loop1): Mounting V5 Filesystem [ 172.604129][ T6185] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 173.357780][ T6155] XFS (loop1): Ending clean mount [ 173.371037][ T6155] XFS (loop1): Quotacheck needed: Please wait. [ 173.405475][ T6155] XFS (loop1): Quotacheck: Done. [ 173.620195][ T4294] XFS (loop1): Unmounting Filesystem [ 175.936577][ T6212] netlink: 104 bytes leftover after parsing attributes in process `syz.0.484'. [ 176.152791][ T6217] loop3: detected capacity change from 0 to 512 [ 176.179624][ T6217] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.486: casefold flag without casefold feature [ 176.186708][ T6217] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.486: couldn't read orphan inode 15 (err -117) [ 176.191835][ T6217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 176.596100][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 177.151820][ T6216] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 177.163268][ T6216] can0: slcan on ttyS3. [ 177.690312][ T6214] can0 (unregistered): slcan off ttyS3. [ 178.090610][ T6241] hub 1-0:1.0: USB hub found [ 178.093612][ T6241] hub 1-0:1.0: 1 port detected [ 178.223204][ T6235] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 179.253034][ T6251] loop1: detected capacity change from 0 to 1024 [ 180.315107][ T4916] hfsplus: b-tree write err: -5, ino 4 [ 180.885253][ T6267] hub 1-0:1.0: USB hub found [ 180.887321][ T6267] hub 1-0:1.0: 1 port detected [ 181.608451][ T6273] loop0: detected capacity change from 0 to 512 [ 181.647703][ T6273] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.499: casefold flag without casefold feature [ 181.800453][ T6273] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.499: couldn't read orphan inode 15 (err -117) [ 181.815556][ T6273] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.861169][ T4298] EXT4-fs (loop0): unmounting filesystem. [ 182.360828][ T6287] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 182.378959][ T6287] can0: slcan on ttyS3. [ 183.150577][ T6283] can0 (unregistered): slcan off ttyS3. [ 183.199339][ T6289] netlink: 'syz.3.504': attribute type 10 has an invalid length. [ 183.313687][ T6290] netlink: 104 bytes leftover after parsing attributes in process `syz.0.502'. [ 183.389451][ C0] vcan0: j1939_tp_rxtimer: 0x00000000426ae5db: rx timeout, send abort [ 183.464433][ T6289] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.576478][ T6294] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 183.778783][ T6294] can0: slcan on ttyS3. [ 183.891611][ C0] vcan0: j1939_tp_rxtimer: 0x00000000426ae5db: abort rx timeout. Force session deactivation [ 184.250151][ T6291] can0 (unregistered): slcan off ttyS3. [ 184.546669][ T6298] loop4: detected capacity change from 0 to 1024 [ 185.972820][ T4416] hfsplus: b-tree write err: -5, ino 4 [ 186.172640][ T6316] loop1: detected capacity change from 0 to 512 [ 186.214352][ T6316] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.512: casefold flag without casefold feature [ 186.217786][ T6316] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.512: couldn't read orphan inode 15 (err -117) [ 186.236604][ T6316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 186.433023][ T6323] hub 1-0:1.0: USB hub found [ 186.435048][ T6323] hub 1-0:1.0: 1 port detected [ 187.069342][ T6324] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 187.293078][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 187.381630][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.383419][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.780932][ T6332] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 187.805671][ T6332] can0: slcan on ttyS3. [ 188.370463][ T6325] can0 (unregistered): slcan off ttyS3. [ 189.702327][ T6343] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 189.706507][ T6343] can0: slcan on ttyS3. [ 190.511461][ T6329] can0 (unregistered): slcan off ttyS3. [ 191.799436][ T6355] loop1: detected capacity change from 0 to 1024 [ 192.544236][ T6366] loop2: detected capacity change from 0 to 512 [ 192.579274][ T6366] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.524: casefold flag without casefold feature [ 192.584213][ T6366] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.524: couldn't read orphan inode 15 (err -117) [ 192.597870][ T6366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.685980][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 193.105665][ T6375] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 193.264702][ C1] vcan0: j1939_tp_rxtimer: 0x000000007385b4a7: rx timeout, send abort [ 195.522164][ T6388] hub 1-0:1.0: USB hub found [ 195.531584][ T6388] hub 1-0:1.0: 1 port detected [ 195.981464][ T4438] hfsplus: b-tree write err: -5, ino 4 [ 196.114665][ T6407] loop1: detected capacity change from 0 to 512 [ 196.157120][ T6407] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.536: casefold flag without casefold feature [ 196.212446][ T6407] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.536: couldn't read orphan inode 15 (err -117) [ 196.231435][ T6407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 197.149519][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 197.218021][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 197.235360][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 197.272226][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 197.304517][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 197.328570][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 197.377696][ T6416] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 197.986045][ T6423] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 199.768912][ T6432] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 199.862704][ T4294] EXT4-fs (loop1): unmounting filesystem. [ 200.827939][ T6444] loop1: detected capacity change from 0 to 1024 [ 201.020415][ T6454] loop3: detected capacity change from 0 to 1024 [ 201.116275][ T6454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.156471][ T6454] 9pnet_virtio: no channels available for device syz [ 201.281158][ T6460] hub 1-0:1.0: USB hub found [ 201.283240][ T6460] hub 1-0:1.0: 1 port detected [ 201.496593][ T6459] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 201.774039][ T6454] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2739: inode #12: comm syz.3.550: corrupted in-inode xattr [ 201.787277][ T6454] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 201.952857][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 203.761428][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ee00f334: rx timeout, send abort [ 203.858519][ T6481] loop3: detected capacity change from 0 to 512 [ 203.881647][ T6484] netlink: 'syz.2.555': attribute type 10 has an invalid length. [ 203.884684][ T6484] bond0: (slave wlan1): Opening slave failed [ 203.906272][ T6481] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.554: casefold flag without casefold feature [ 203.945881][ T6481] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.554: couldn't read orphan inode 15 (err -117) [ 203.949971][ T6481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.170569][ T4417] hfsplus: b-tree write err: -5, ino 4 [ 204.393745][ T6501] ================================================================== [ 204.395866][ T6501] BUG: KASAN: use-after-free in rose_get_neigh+0x1a4/0x5ac [ 204.397663][ T6501] Read of size 1 at addr ffff0000f23aa830 by task syz.2.557/6501 [ 204.399643][ T6501] [ 204.400205][ T6501] CPU: 0 PID: 6501 Comm: syz.2.557 Not tainted 6.1.131-syzkaller #0 [ 204.401739][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.402464][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.402477][ T6501] Call trace: [ 204.402481][ T6501] dump_backtrace+0x1c8/0x1f4 [ 204.402501][ T6501] show_stack+0x2c/0x3c [ 204.402509][ T6501] dump_stack_lvl+0x108/0x170 [ 204.411220][ T6501] print_report+0x174/0x4c0 [ 204.412490][ T6501] kasan_report+0xd4/0x130 [ 204.413546][ T6501] __asan_report_load1_noabort+0x2c/0x38 [ 204.414543][ T6501] rose_get_neigh+0x1a4/0x5ac [ 204.415799][ T6501] rose_connect+0x3b8/0xe44 [ 204.417020][ T6501] __sys_connect+0x268/0x290 [ 204.418226][ T6501] __arm64_sys_connect+0x7c/0x94 [ 204.419566][ T6501] invoke_syscall+0x98/0x2bc [ 204.420817][ T6501] el0_svc_common+0x138/0x258 [ 204.422089][ T6501] do_el0_svc+0x58/0x13c [ 204.423253][ T6501] el0_svc+0x58/0x168 [ 204.424307][ T6501] el0t_64_sync_handler+0x84/0xf0 [ 204.425618][ T6501] el0t_64_sync+0x18c/0x190 [ 204.426750][ T6501] [ 204.427344][ T6501] Allocated by task 6085: [ 204.428401][ T6501] kasan_set_track+0x4c/0x80 [ 204.429588][ T6501] kasan_save_alloc_info+0x24/0x30 [ 204.430879][ T6501] __kasan_kmalloc+0xac/0xc4 [ 204.432072][ T6501] kmalloc_trace+0x7c/0x94 [ 204.433212][ T6501] rose_add_node+0x200/0xbc0 [ 204.434436][ T6501] rose_rt_ioctl+0xa6c/0xec0 [ 204.435598][ T6501] rose_ioctl+0x400/0xc7c [ 204.436752][ T6501] sock_do_ioctl+0x134/0x2dc [ 204.437968][ T6501] sock_ioctl+0x4f0/0x85c [ 204.439013][ T6501] __arm64_sys_ioctl+0x14c/0x1c8 [ 204.440294][ T6501] invoke_syscall+0x98/0x2bc [ 204.441470][ T6501] el0_svc_common+0x138/0x258 [ 204.442681][ T6501] do_el0_svc+0x58/0x13c [ 204.443820][ T6501] el0_svc+0x58/0x168 [ 204.444843][ T6501] el0t_64_sync_handler+0x84/0xf0 [ 204.446067][ T6501] el0t_64_sync+0x18c/0x190 [ 204.447224][ T6501] [ 204.447852][ T6501] Freed by task 6492: [ 204.448827][ T6501] kasan_set_track+0x4c/0x80 [ 204.450021][ T6501] kasan_save_free_info+0x38/0x5c [ 204.451295][ T6501] ____kasan_slab_free+0x144/0x1c0 [ 204.452684][ T6501] __kasan_slab_free+0x18/0x28 [ 204.453970][ T6501] __kmem_cache_free+0x2c0/0x4b4 [ 204.455279][ T6501] kfree+0xcc/0x1b8 [ 204.456297][ T6501] rose_remove_neigh+0x23c/0x2b8 [ 204.457652][ T6501] rose_rt_device_down+0x5cc/0x628 [ 204.458956][ T6501] rose_device_event+0x5dc/0x690 [ 204.460281][ T6501] raw_notifier_call_chain+0xd4/0x164 [ 204.461718][ T6501] dev_close_many+0x300/0x46c [ 204.462974][ T6501] dev_close+0x174/0x250 [ 204.464118][ T6501] bpq_device_event+0x318/0x820 [ 204.465404][ T6501] raw_notifier_call_chain+0xd4/0x164 [ 204.466799][ T6501] dev_close_many+0x300/0x46c [ 204.468023][ T6501] dev_close+0x174/0x250 [ 204.469155][ T6501] bond_setup_by_slave+0x70/0x39c [ 204.470455][ T6501] bond_enslave+0x62c/0x3044 [ 204.471701][ T6501] bond_do_ioctl+0x26c/0xccc [ 204.472817][ T6501] dev_ifsioc+0xc90/0xfb4 [ 204.473933][ T6501] dev_ioctl+0x4d8/0xd34 [ 204.475024][ T6501] sock_do_ioctl+0x1dc/0x2dc [ 204.476241][ T6501] sock_ioctl+0x4f0/0x85c [ 204.477417][ T6501] __arm64_sys_ioctl+0x14c/0x1c8 [ 204.478690][ T6501] invoke_syscall+0x98/0x2bc [ 204.479869][ T6501] el0_svc_common+0x138/0x258 [ 204.481089][ T6501] do_el0_svc+0x58/0x13c [ 204.482204][ T6501] el0_svc+0x58/0x168 [ 204.483220][ T6501] el0t_64_sync_handler+0x84/0xf0 [ 204.484461][ T6501] el0t_64_sync+0x18c/0x190 [ 204.485622][ T6501] [ 204.486165][ T6501] The buggy address belongs to the object at ffff0000f23aa800 [ 204.486165][ T6501] which belongs to the cache kmalloc-512 of size 512 [ 204.489788][ T6501] The buggy address is located 48 bytes inside of [ 204.489788][ T6501] 512-byte region [ffff0000f23aa800, ffff0000f23aaa00) [ 204.493458][ T6501] [ 204.494022][ T6501] The buggy address belongs to the physical page: [ 204.495623][ T6501] page:00000000caebf522 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f23a8400 pfn:0x1323a8 [ 204.498751][ T6501] head:00000000caebf522 order:2 compound_mapcount:0 compound_pincount:0 [ 204.500933][ T6501] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 204.503037][ T6501] raw: 05ffc00000010200 fffffc0003023808 fffffc0003521708 ffff0000c0002600 [ 204.505259][ T6501] raw: ffff0000f23a8400 0000000000100007 00000001ffffffff 0000000000000000 [ 204.507476][ T6501] page dumped because: kasan: bad access detected [ 204.509111][ T6501] [ 204.509747][ T6501] Memory state around the buggy address: [ 204.511123][ T6501] ffff0000f23aa700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 204.513055][ T6501] ffff0000f23aa780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 204.515146][ T6501] >ffff0000f23aa800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.517173][ T6501] ^ [ 204.518758][ T6501] ffff0000f23aa880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.520920][ T6501] ffff0000f23aa900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.523146][ T6501] ================================================================== [ 204.525274][ T6501] Disabling lock debugging due to kernel taint [ 204.735064][ T6492] bond0: (slave rose0): Enslaving as an active interface with an up link [ 204.756807][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 205.198050][ T4305] EXT4-fs (loop3): unmounting filesystem.