last executing test programs: 10.223476889s ago: executing program 4 (id=330): mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2802, 0x0) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgsnd(r1, &(0x7f0000000400)=ANY=[@ANYRES8], 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x37db, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40040) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 8.691243255s ago: executing program 4 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.720881664s ago: executing program 1 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000100)={&(0x7f0000000140)="92", 0x1a000}}, 0xee) 6.790207629s ago: executing program 1 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0xa0, 0x0) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') 5.508358709s ago: executing program 1 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8008}, 0x0) 5.29844471s ago: executing program 0 (id=350): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = syz_create_resource$futex(&(0x7f0000000000)=0x1) r3 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r3, 0x6, 0x1, 0x0, 0x0, 0x1) futex(r2, 0x5, 0x1, 0x0, r3, 0x3000020) futex(r3, 0x8, 0x2, 0x0, 0x0, 0x1) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x3, 0x80, 0x7f, 0xc000}, 0x7, [0x7, 0x8ae, 0x3, 0x1, 0x140000, 0xa, 0x5133, 0xc, 0x6, 0x3, 0x6, 0x7, 0x7, 0x8, 0x1, 0xb, 0xffff, 0x3, 0x8, 0x0, 0x3ff, 0x5, 0xe1ce, 0x7f, 0x949d, 0x3, 0x6, 0xee59f85, 0x10, 0x8, 0x1, 0x3, 0x4, 0x6, 0x5, 0x4, 0x7, 0x3, 0x8, 0x9, 0x2, 0xfffffff9, 0x1000, 0x2, 0x8, 0x5, 0x3, 0x9, 0xa6, 0x6, 0x3, 0x1, 0x1, 0x3, 0x9, 0x5, 0xd, 0x10000, 0x6, 0x4, 0x80000000, 0x0, 0x1, 0xaec], [0x9, 0x0, 0x6, 0x7, 0x800, 0x17ed, 0x7ff, 0x7, 0x9a, 0x6, 0x7, 0x3, 0xb4, 0x7, 0x9ad, 0x7, 0x1, 0x7, 0x40, 0x8, 0x3, 0xe621, 0x0, 0x0, 0x7, 0x8000, 0x6, 0x8, 0x7f, 0x8, 0x8, 0x63ae, 0x40, 0xc2f, 0x1, 0xfffffffa, 0x52f4, 0x80000000, 0x170, 0x8, 0xc9, 0x4, 0x0, 0x1, 0x5, 0x2, 0x0, 0xc39c, 0x5, 0x81, 0x400, 0x14, 0xefb, 0x8, 0x8, 0x8001, 0x9, 0x9, 0x8, 0x750a, 0x4, 0x0, 0x5, 0x7f], [0x7, 0x3, 0xfa, 0x5, 0x7, 0x8, 0xe9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x6, 0x800, 0x7, 0x1000, 0x3, 0x8001, 0x1, 0x4d, 0x4, 0x7dc, 0x4, 0x10, 0x8001, 0x0, 0x2, 0x91a5, 0x79c0, 0xfffffff8, 0xd693, 0x1, 0x10001, 0x1000, 0x6, 0x4, 0x10000000, 0x1c000000, 0x101, 0xfffff493, 0x6, 0x6, 0x1, 0x3, 0x3ff, 0x8b, 0x7, 0x8, 0x3, 0x7, 0x0, 0x1, 0x7, 0x0, 0x8, 0xfffffff7, 0x7, 0x7, 0x5, 0x3ff, 0x6, 0x6, 0xff, 0x26f], [0x2, 0x47, 0x4, 0x4, 0xac0d, 0x200, 0x0, 0x5, 0x3, 0xc56, 0x10, 0x100, 0x15a2, 0x2, 0xffff8001, 0x6a, 0x4, 0x1, 0x9, 0x0, 0x2, 0xfffffeff, 0x10000, 0x4, 0x6, 0x6, 0x1, 0x4, 0x0, 0x1, 0x0, 0x800, 0xfffffffa, 0x3, 0x4f, 0x5, 0x48, 0x5, 0xffff, 0x5b, 0x2, 0x2, 0x400, 0xffe00000, 0xfff, 0x4, 0x8c, 0x9, 0x7fffffff, 0x9, 0x2b, 0x7, 0x3, 0xeef511c6, 0xfffffff7, 0x3, 0x2, 0x2, 0x9, 0xbc, 0xfffffffe, 0x2, 0x15b85565, 0x885]}, 0x45c) 4.915913209s ago: executing program 2 (id=351): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e20, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) 4.567395255s ago: executing program 3 (id=352): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs]}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x1100, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000007c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000800)={0x8, 0x0, &(0x7f0000000840)=[@increfs], 0x37}) dup3(r3, r2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000440)={0x5, {{0x2, 0xfffd, @multicast1}}, {{0x2, 0x1400, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) 4.481548914s ago: executing program 1 (id=353): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x8) splice(r2, 0x0, r5, 0x0, 0x50, 0x8) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000240)={0xffffffffffffffb6, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x2, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 4.248279108s ago: executing program 3 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) semop(0x0, &(0x7f0000001240)=[{}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f00000012c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x3f, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0xfffe, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x7}]) 4.061046616s ago: executing program 0 (id=355): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 3.706827642s ago: executing program 4 (id=356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r2, &(0x7f00000002c0)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 3.217945802s ago: executing program 1 (id=357): pipe2(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000740)='./file1\x00', 0x10048, &(0x7f0000001980)=ANY=[], 0x67, 0xc54, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001440)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001500)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001680)=0x6) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000300)=""/147}, 0x80) 3.13947162s ago: executing program 3 (id=358): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000340)={0x4, 0xffffffffffffffff, 0x6, {0x4, 0x8}, 0x5}, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r1, 0x9, 0x1, 0x0, r1, 0x2) r2 = syz_create_resource$futex(&(0x7f0000000140)=0x3) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x100000000, 0x7, 0x1, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) futex(r1, 0x5, 0x0, 0x0, r2, 0x1) 3.084272276s ago: executing program 0 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000190c0)=0xa, 0x4) 3.075772197s ago: executing program 2 (id=360): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x6cf0842e, 0x25, 0x4000007, 0x10000, 0x3, 0x415, 0x18, 0xffff62d8, 0x2}}) rt_sigtimedwait(&(0x7f0000000500)={[0x7]}, 0x0, &(0x7f0000000740), 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) 2.901210564s ago: executing program 2 (id=361): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r1 = socket(0x10, 0x803, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000004c0)) openat$vcsu(0xffffffffffffff9c, 0x0, 0x20401, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 1.914113775s ago: executing program 0 (id=362): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000180)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0x1, 0xffffbfff, 0x1, 0xffffdfff, 0x3, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x3fc, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000005c0)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000500)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[@ANYBLOB="e904a20000000180c20000008100020008004500001c0000e000001190780000510000200005eaffffffff079078"], 0x0) 1.809773176s ago: executing program 3 (id=363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6124dc4dc182e6e4) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newsa={0x154, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@private=0xa010100, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@empty, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x2}, 0x102, 0xfffffffc, 0x2, 0x2, 0x0, 0x80}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) 1.794629087s ago: executing program 2 (id=364): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x3, 0x0, 0x5989, 0x4}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x0, 0x2, 0xb, 0xfffffffd, 0x100000, 0x3}}) syz_mount_image$ext4(&(0x7f0000006b00)='ext4\x00', &(0x7f0000006b40)='./file0\x00', 0x800, &(0x7f0000006b80), 0x25, 0x756, &(0x7f0000006bc0)="$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") chdir(&(0x7f0000007340)='./file0\x00') getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x1, r1, 0x1, 0x80000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000007380)='./file0\x00', 0x0, 0x10) truncate(&(0x7f00000073c0)='./file0\x00', 0xd16e) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000007400)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.793477117s ago: executing program 4 (id=365): r0 = socket(0x11, 0xa, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x20080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a80)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000ac0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b40)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000bc0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000c00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) 1.76391292s ago: executing program 0 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.488418838s ago: executing program 3 (id=367): socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x81, 0x0, 0x0, 0x800001}, {0x16, 0xfc, 0x5}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r2, &(0x7f0000000600), &(0x7f0000000840)=""/10, 0x4}, 0x20) 772.603501ms ago: executing program 0 (id=368): mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = getpgid(0x0) setpriority(0x0, r1, 0x4) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r2, &(0x7f00000000c0)=""/72, 0x48, 0x1, 0x0) 609.703418ms ago: executing program 4 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x7f, 0x7, 0x6, 0x6, 0x1, 0x4, 0x2, 0x5}, {0xf000, 0x8000000, 0x0, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x5000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xa000, 0x41000, 0xa, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x3}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0x0, 0x8000900, 0x1, [0x6, 0x2, 0x8000000000000003, 0x3]}) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000440)=""/144, 0x90}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, r3, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 423.609426ms ago: executing program 2 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a00030002b51112d439000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) pidfd_send_signal(r5, 0x24, &(0x7f0000000080)={0x4003b, 0x8000, 0x7}, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000b7}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x7, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 217.925607ms ago: executing program 1 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x5dc, &(0x7f0000000280)={0x0, 0x86a1, 0x2, 0x0, 0x1fb}) setns(0xc9, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000003c0), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 82.642961ms ago: executing program 2 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x6) fallocate(0xffffffffffffffff, 0x50, 0x0, 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./myproc/interrupts\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001200)={0x2020}, 0x2020) 82.280031ms ago: executing program 4 (id=373): recvmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000d00)=""/198, 0xc6}, 0x4}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/147, 0x93}], 0x1}, 0x1}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f00)=""/108, 0x6c}, {0x0}, {&(0x7f0000001000)=""/162, 0xa2}, {&(0x7f00000010c0)=""/46, 0x2e}, {&(0x7f0000001100)=""/63, 0x3f}], 0x5, &(0x7f00000011c0)=""/29, 0x1d}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/122, 0x7a}, 0x2}, {{&(0x7f0000001680)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/95, 0x5f}, 0x2}], 0x5, 0x40000100, &(0x7f0000003e40)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="5338a3848b25e258a25f9dae13eda187dfe4d7e54837014bc66a90fad415ad383bef957576b9eb09041f2794149037927ac98181fe027423e7c8ddc89730", 0x3e}], 0x1}}], 0x1, 0x20008000) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, 0x0, 0x8841) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41100}, 0x94) 0s ago: executing program 3 (id=374): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000380)='0', 0x1, 0x40000, &(0x7f00000003c0)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.981071][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.995161][ T3853] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. syzkaller login: [ 62.242117][ T4175] cgroup: Unknown subsys name 'net' [ 62.372292][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.826151][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.039271][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.062970][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.074493][ T4201] rdma_rxe: rxe_register_device failed with error -23 [ 65.083203][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 65.090577][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 65.091437][ T4201] rdma_rxe: failed to add rxe_eth0 [ 65.102724][ T4188] rdma_rxe: failed to add rxe_eth0 [ 65.121009][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 65.133499][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.156199][ T4190] rdma_rxe: failed to add rxe_eth0 [ 65.162955][ T4191] rdma_rxe: failed to add rxe_eth0 [ 65.401674][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.411508][ T4189] infiniband rxe0: set active [ 65.422436][ T4189] infiniband rxe0: added rxe_eth0 [ 65.469498][ T4189] RDS/IB: rxe0: added [ 65.479864][ T4189] smc: adding ib device rxe0 with port count 1 [ 65.505994][ T4189] smc: ib device rxe0 port 1 has pnetid [ 65.517844][ T3519] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.526509][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.565355][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.654951][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.672385][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 65.696265][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.721438][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.879202][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.991737][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.004594][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.015532][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.055531][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.065739][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.072813][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.101620][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.125977][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.133098][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.146771][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.161842][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.169781][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.178120][ T4201] device bridge_slave_0 entered promiscuous mode [ 66.192314][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.201058][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.226865][ T4201] device bridge_slave_1 entered promiscuous mode [ 66.234107][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.249609][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.273713][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.305091][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.317433][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.327864][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.355038][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.374646][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.392841][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.401531][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.430995][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.447307][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.482225][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.503410][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.527729][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.551867][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.614016][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.643686][ T4188] team0: Port device team_slave_0 added [ 66.653043][ T4190] team0: Port device team_slave_0 added [ 66.663863][ T4190] team0: Port device team_slave_1 added [ 66.675274][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.693425][ T4201] team0: Port device team_slave_0 added [ 66.704494][ T4201] team0: Port device team_slave_1 added [ 66.714358][ T4188] team0: Port device team_slave_1 added [ 66.753883][ T4191] team0: Port device team_slave_0 added [ 66.761617][ T3519] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.786266][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.793242][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.821393][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.841696][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.848828][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.875005][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.894167][ T4191] team0: Port device team_slave_1 added [ 66.913723][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.921292][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.947458][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.959330][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.966654][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.992932][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.008252][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.015297][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.042451][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 67.049099][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 67.051220][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.055179][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 67.072043][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 67.083366][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.090877][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.117083][ T3519] Bluetooth: hci4: command 0x0409 tx timeout [ 67.120035][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.136102][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.143068][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.169241][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.190426][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.197575][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.223590][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.235028][ T3853] infiniband rxe0: set active [ 67.242985][ T3519] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.303778][ T4201] device hsr_slave_0 entered promiscuous mode [ 67.310915][ T4201] device hsr_slave_1 entered promiscuous mode [ 67.336537][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.343413][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.350380][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.358623][ T4190] Cannot create hsr debugfs directory [ 67.397003][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.404143][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.410863][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.418869][ T4188] Cannot create hsr debugfs directory [ 67.453834][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.460896][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.468257][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.475934][ T4191] Cannot create hsr debugfs directory [ 67.670750][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.837036][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.844204][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.852754][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.862438][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.869790][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.878168][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.905313][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.924571][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.946870][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.960469][ T4189] team0: Port device team_slave_0 added [ 67.969715][ T4189] team0: Port device team_slave_1 added [ 67.981240][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.003220][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.018868][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.026087][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.052239][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.064581][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.080296][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.087460][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.113755][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.161932][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.168931][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.177012][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.184587][ T4189] Cannot create hsr debugfs directory [ 68.195151][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.204577][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.214463][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.224075][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.379687][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.392607][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.402254][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.423006][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.487872][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.498361][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.524522][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.540367][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.560570][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.580036][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.631222][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.647257][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.659390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.674578][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.689468][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.700939][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.712064][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.720684][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.729779][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.738963][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.748825][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.756204][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.788676][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.798931][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.808384][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.818335][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.827027][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.834102][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.842120][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.851245][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.860209][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.869001][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.877960][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.885059][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.893538][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.902444][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.913538][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.920657][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.931857][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.940178][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.954200][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.966849][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.994994][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.004665][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.013939][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.029846][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.046874][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.070641][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.081643][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.090464][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.100034][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.108280][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 69.116020][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 69.121593][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.122133][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 69.135234][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.145945][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.154423][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.163238][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.172095][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 69.173171][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.187282][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 69.202429][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.219155][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.229980][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.239171][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.252228][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.261269][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.270535][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.277700][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.285642][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.294050][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.307120][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.330185][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.348959][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.363856][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.372347][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.383619][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.392924][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.402725][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.412061][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.422192][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.431873][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.439005][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.450710][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.464979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.478242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.510643][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.536537][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.545178][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.556304][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.575898][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.583043][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.611938][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.623037][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.631560][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.642355][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.651740][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.658871][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.667868][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.678599][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.692888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.702228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.724328][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.737470][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.752004][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.760891][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.778924][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.801612][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.810087][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.821824][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.831046][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.838990][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.882599][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.902924][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.919526][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.934038][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.942923][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.958355][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.972674][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.987862][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.004390][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.041622][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.064824][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.076649][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.086629][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.094557][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.123438][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.148562][ T4201] device veth0_vlan entered promiscuous mode [ 70.163127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.178717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.191402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.202904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.212164][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.219324][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.228317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.237782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.246687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.255323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.263949][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.271021][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.280460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.289297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.297204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.334327][ T4201] device veth1_vlan entered promiscuous mode [ 70.344190][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.359911][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.369606][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.378905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.388095][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.407563][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.456921][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.469698][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.479641][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.489333][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.499383][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.509608][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.518628][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.528092][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.536944][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.545280][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.566103][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.574797][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.591184][ T4201] device veth0_macvtap entered promiscuous mode [ 70.603419][ T4201] device veth1_macvtap entered promiscuous mode [ 70.615633][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.624245][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.633847][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.644230][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.653021][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.701428][ T4190] device veth0_vlan entered promiscuous mode [ 70.711395][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.729213][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.743938][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.753076][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.765623][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.773043][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.783007][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.803718][ T4188] device veth0_vlan entered promiscuous mode [ 70.816092][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.826524][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.844518][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.860427][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.874293][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.887023][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.901549][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.910655][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.929944][ T4188] device veth1_vlan entered promiscuous mode [ 70.942564][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.953621][ T4190] device veth1_vlan entered promiscuous mode [ 70.963983][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.973157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.982242][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.996560][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.005393][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.016066][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.024791][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.061315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.070621][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.080497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.113029][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.132754][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.144773][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.173869][ T4188] device veth0_macvtap entered promiscuous mode [ 71.186108][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 71.192246][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 71.205808][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 71.217771][ T4190] device veth0_macvtap entered promiscuous mode [ 71.232939][ T4190] device veth1_macvtap entered promiscuous mode [ 71.240591][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.249147][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.257871][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.267250][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.276114][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.277694][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.287606][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.290786][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.309612][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 71.316208][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 71.328187][ T4188] device veth1_macvtap entered promiscuous mode [ 71.348255][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.357609][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.371350][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.384852][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.403507][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.418672][ T4191] device veth0_vlan entered promiscuous mode [ 71.429242][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.444467][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.453566][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.462578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.472888][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.481219][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.491016][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.508926][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.523054][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.564330][ T4191] device veth1_vlan entered promiscuous mode [ 71.579376][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.591244][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.602554][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.613616][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.624951][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.633620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.642089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.651237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.660244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.669482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.684733][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.693709][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.702791][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.713136][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.742678][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.755302][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.771885][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.783409][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.800481][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.810888][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.839465][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.849057][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.863474][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.878323][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.899648][ T4191] device veth0_macvtap entered promiscuous mode [ 71.912167][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.921858][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.930840][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.939934][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.963588][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.978335][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.988124][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.007573][ T4191] device veth1_macvtap entered promiscuous mode [ 72.054246][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.060399][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.072617][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.085321][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.094589][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.105034][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.137943][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.150080][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.164744][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.230231][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.241764][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.251897][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.263379][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.273546][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.285240][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.302832][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.317267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.332156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.341330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.350939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.360364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.368965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.382626][ T4189] device veth0_vlan entered promiscuous mode [ 72.392687][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.403778][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.424484][ T4189] device veth1_vlan entered promiscuous mode [ 72.435381][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.449686][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.460821][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.472506][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.482474][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.499181][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.512131][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.534648][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.543676][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.551394][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.551532][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.551567][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.581983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.591374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.601681][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.610910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.619451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.628236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.637749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.917384][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.953082][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.969935][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.986610][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.997952][ T4189] device veth0_macvtap entered promiscuous mode [ 73.024302][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.061447][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.083537][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.116779][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.131631][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.155306][ T4189] device veth1_macvtap entered promiscuous mode [ 73.229989][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.238870][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.251036][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.260010][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.266259][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 73.273300][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 73.906831][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.932392][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.959392][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.974889][ T4319] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.991885][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.016799][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 74.034960][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 74.041138][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 74.050281][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.060820][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.070718][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.085035][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.109331][ T4321] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 74.175380][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.224693][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.257101][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.288401][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.384925][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.431336][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.462387][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.502404][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.512978][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.522872][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.542700][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.568075][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.584255][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.729931][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.639353][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.697835][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.722302][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.744404][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.783752][ T4360] loop0: detected capacity change from 0 to 8 [ 76.847777][ T4360] unable to read xattr id index table [ 76.947843][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.956485][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.965476][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.975514][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.129873][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.217590][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.708595][ T3519] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.803006][ T4360] 9pnet_virtio: no channels available for device syz [ 78.842377][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 79.365300][ T4360] loop0: detected capacity change from 0 to 32768 [ 79.464290][ T4360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.15 (4360) [ 79.601388][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.606991][ T4360] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 80.616103][ T4360] BTRFS info (device loop0): using free space tree [ 80.622758][ T4360] BTRFS info (device loop0): has skinny extents [ 80.724910][ C0] sched: RT throttling activated [ 81.132698][ T4360] BTRFS error (device loop0): open_ctree failed: -12 [ 81.161959][ T4356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4356) [ 81.375279][ T1111] usb 4-1: config 4 has an invalid interface number: 122 but max is 0 [ 81.390010][ T4466] loop4: detected capacity change from 0 to 128 [ 81.404499][ T1111] usb 4-1: config 4 has no interface number 0 [ 81.410869][ T1111] usb 4-1: too many endpoints for config 4 interface 122 altsetting 16: 59, using maximum allowed: 30 [ 81.452918][ T1111] usb 4-1: config 4 interface 122 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 81.546882][ T4203] Bluetooth: Frame is too long (len 38, expected len 31) [ 82.342084][ T1111] usb 4-1: config 4 interface 122 has no altsetting 0 [ 82.373230][ T4472] netlink: 64 bytes leftover after parsing attributes in process `syz.4.29'. [ 82.454912][ T1111] usb 4-1: string descriptor 0 read error: -71 [ 82.461264][ T1111] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 82.491214][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.509766][ T4462] syz.4.29 (4462) used greatest stack depth: 20288 bytes left [ 82.518850][ T4475] hub 8-0:1.0: USB hub found [ 82.538893][ T4475] hub 8-0:1.0: 1 port detected [ 82.570632][ T1111] usb 4-1: can't set config #4, error -71 [ 82.620427][ T1111] usb 4-1: USB disconnect, device number 2 [ 83.924539][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.944530][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.954531][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.964512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.974510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.984512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.994527][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.004513][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.014511][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 84.024509][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 85.604680][ T4456] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.964392][ T4456] usb 5-1: Using ep0 maxpacket: 8 [ 86.084543][ T4456] usb 5-1: device descriptor read/all, error -71 [ 86.491693][ T4514] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 86.499658][ T4514] Error parsing options; rc = [-22] [ 87.176969][ T13] cfg80211: failed to load regulatory.db [ 91.206999][ T4544] loop4: detected capacity change from 0 to 128 [ 91.890950][ T4554] process 'syz.1.51' launched './file1' with NULL argv: empty string added [ 93.504500][ T4563] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.674767][ T4611] loop3: detected capacity change from 0 to 256 [ 98.732761][ T1109] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.751654][ T4611] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.808068][ T4611] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.982772][ T1109] usb 5-1: Using ep0 maxpacket: 8 [ 99.113573][ T1109] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 99.193980][ T1109] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 99.298374][ T1109] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.391959][ T1109] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 99.493951][ T1109] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 99.588470][ T1109] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.709602][ T1109] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.866396][ T4622] loop1: detected capacity change from 0 to 512 [ 99.917768][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.940269][ T4622] ======================================================= [ 99.940269][ T4622] WARNING: The mand mount option has been deprecated and [ 99.940269][ T4622] and is ignored by this kernel. Remove the mand [ 99.940269][ T4622] option from the mount to silence this warning. [ 99.940269][ T4622] ======================================================= [ 100.002575][ T4626] loop0: detected capacity change from 0 to 256 [ 100.056797][ T4622] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.068835][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.113829][ T4626] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 100.201400][ T26] audit: type=1804 audit(1794035993.089:2): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.74" name="/newroot/12/file0/bus" dev="loop0" ino=1048626 res=1 errno=0 [ 100.230163][ T1109] usb 5-1: GET_CAPABILITIES returned 0 [ 100.237486][ T1109] usbtmc 5-1:16.0: can't read capabilities [ 100.502751][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 100.514274][ T4602] usbtmc 5-1:16.0: Unable to send data, error -71 [ 100.524750][ T4294] usb 5-1: USB disconnect, device number 4 [ 101.712466][ T1111] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.202490][ T1111] usb 4-1: string descriptor 0 read error: -71 [ 102.208742][ T1111] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.297729][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.352505][ T1111] usb 4-1: can't set config #1, error -71 [ 102.389036][ T1111] usb 4-1: USB disconnect, device number 3 [ 104.987613][ T4677] loop0: detected capacity change from 0 to 16 [ 105.087594][ T4682] loop4: detected capacity change from 0 to 512 [ 105.120823][ T4677] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 105.218246][ T4673] pit: kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 105.297877][ T4673] pit: kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 105.327719][ T4673] pit: kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 105.359998][ T4682] EXT4-fs (loop4): Test dummy encryption mode enabled [ 105.368996][ T4682] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 105.385681][ T4673] pit: kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 105.395076][ T4673] pit: kvm: requested 159238 ns i8254 timer period limited to 200000 ns [ 105.398122][ T4682] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 105.413475][ T4673] pit: kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 105.423877][ T4682] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,errors=continue,auto_da_alloc,lazytime,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 105.457942][ T4673] pit: kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 105.472103][ T4692] jffs2: notice: (4692) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.497575][ T4682] xt_policy: neither incoming nor outgoing policy selected [ 105.501381][ T4673] pit: kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 105.526710][ T4673] pit: kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 105.538476][ T4673] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 105.746397][ T4697] netlink: 120 bytes leftover after parsing attributes in process `syz.4.91'. [ 106.718035][ T4685] netlink: 68 bytes leftover after parsing attributes in process `syz.3.89'. [ 107.579617][ T4719] block device autoloading is deprecated and will be removed. [ 108.976037][ T26] audit: type=1326 audit(1794036001.871:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4718 comm="syz.1.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2368699559 code=0x7ffc0000 [ 109.016650][ T26] audit: type=1326 audit(1794036001.901:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4718 comm="syz.1.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2368699559 code=0x7ffc0000 [ 109.065133][ T26] audit: type=1326 audit(1794036001.901:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4718 comm="syz.1.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f2368699559 code=0x7ffc0000 [ 109.158040][ T4264] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.088236][ T4747] device syzkaller0 entered promiscuous mode [ 110.141836][ T4455] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 110.485721][ T4749] loop2: detected capacity change from 0 to 40427 [ 110.493257][ T4264] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.506336][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.516357][ T4264] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 110.529447][ T4264] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 110.540719][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.586227][ T4749] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 110.592822][ T4749] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 110.605526][ T4264] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 110.613613][ T4749] F2FS-fs (loop2): invalid crc value [ 110.620100][ T4264] keyspan 5-1:1.0: unsupported endpoint type 0 [ 110.636816][ T4264] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 110.647445][ T4264] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 110.658552][ T4264] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 110.666610][ T4749] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 110.737120][ T4749] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 110.744550][ T4749] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.763859][ T4264] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 110.774470][ T4264] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 110.782946][ T4264] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 110.802063][ T4264] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 111.044586][ T4264] usb 5-1: USB disconnect, device number 5 [ 111.351538][ T4764] attempt to access beyond end of device [ 111.351538][ T4764] loop2: rw=10241, want=53256, limit=40427 [ 111.613626][ T4734] loop4: detected capacity change from 0 to 256 [ 112.093013][ T4734] exfat: Bad value for 'uid' [ 112.102561][ T4264] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 112.103496][ T4201] attempt to access beyond end of device [ 112.103496][ T4201] loop2: rw=2049, want=45104, limit=40427 [ 112.126792][ T4264] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 112.143417][ T4766] loop3: detected capacity change from 0 to 2048 [ 112.178365][ T4264] keyspan 5-1:1.0: device disconnected [ 112.222763][ T4769] netlink: 128 bytes leftover after parsing attributes in process `syz.1.111'. [ 112.300434][ T4766] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.372292][ T4766] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 112.439555][ T4766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.700084][ T4774] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.844279][ T4777] loop0: detected capacity change from 0 to 512 [ 112.947567][ T4777] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 112.983164][ T4779] netlink: 56 bytes leftover after parsing attributes in process `syz.4.116'. [ 113.029009][ T4779] loop4: detected capacity change from 0 to 16 [ 113.039446][ T4777] EXT4-fs (loop0): 1 truncate cleaned up [ 113.117609][ T4779] erofs: (device loop4): mounted with root inode @ nid 36. [ 113.130207][ T4777] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 113.210237][ T1109] kernel write not supported for file /58/net/ip6_tables_matches (pid: 1109 comm: kworker/1:2) [ 113.339609][ T26] audit: type=1800 audit(1794036006.231:6): pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.116" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 114.232620][ T4796] syz.3.119 uses obsolete (PF_INET,SOCK_PACKET) [ 114.405193][ T4800] loop2: detected capacity change from 0 to 512 [ 115.639377][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'. [ 115.654289][ T4819] device bond_slave_0 entered promiscuous mode [ 115.660809][ T4819] device bond_slave_1 entered promiscuous mode [ 115.669108][ T4819] device bond_slave_0 left promiscuous mode [ 115.675118][ T4819] device bond_slave_1 left promiscuous mode [ 115.724106][ T4819] bond1: (slave vlan4): making interface the new active one [ 115.759781][ T4819] device bond_slave_0 entered promiscuous mode [ 115.766077][ T4819] device bond_slave_1 entered promiscuous mode [ 115.792318][ T4819] bond1: (slave vlan4): Enslaving as an active interface with an up link [ 115.813751][ T4825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 115.820799][ T4825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 115.829196][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 115.840015][ T4825] device hsr_slave_0 left promiscuous mode [ 115.854599][ T4819] syz.0.127 (4819) used greatest stack depth: 20144 bytes left [ 116.078535][ T4825] device hsr_slave_1 left promiscuous mode [ 118.078820][ T4313] wlan1: Trigger new scan to find an IBSS to join [ 118.176875][ T4839] printk: console [ttyS0] disabled [ 118.346143][ T4851] printk: console [ttyS0] enabled [ 118.460718][ T26] audit: type=1107 audit(1794036011.332:7): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.694300][ T4864] bond0 speed is unknown, defaulting to 1000 [ 119.790462][ T4864] bond0 speed is unknown, defaulting to 1000 [ 119.797967][ T4864] bond0 speed is unknown, defaulting to 1000 [ 120.022311][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.038916][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.048168][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.118948][ T4864] infiniband syz0: set down [ 120.123650][ T4864] infiniband syz0: added bond0 [ 120.159580][ T4864] infiniband syz0: Couldn't open port 1 [ 120.504231][ T4864] RDS/IB: syz0: added [ 120.508674][ T4864] smc: adding ib device syz0 with port count 1 [ 120.515051][ T4864] smc: ib device syz0 port 1 has pnetid [ 120.530875][ T4864] bond0 speed is unknown, defaulting to 1000 [ 120.628614][ T4264] bond0 speed is unknown, defaulting to 1000 [ 120.691733][ T4864] bond0 speed is unknown, defaulting to 1000 [ 120.794960][ T4864] bond0 speed is unknown, defaulting to 1000 [ 120.899553][ T4864] bond0 speed is unknown, defaulting to 1000 [ 121.003621][ T4864] bond0 speed is unknown, defaulting to 1000 [ 121.693892][ T4217] wlan1: Trigger new scan to find an IBSS to join [ 121.914313][ T1109] bond0 speed is unknown, defaulting to 1000 [ 123.448668][ T145] wlan1: Creating new IBSS network, BSSID 46:50:9a:44:6f:92 [ 123.490249][ T4268] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.585148][ T4889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 123.801474][ T4889] device hsr_slave_0 left promiscuous mode [ 123.981954][ T4889] device hsr_slave_1 left promiscuous mode [ 124.865034][ T4918] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.004050][ T4921] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 125.231907][ T4925] xt_ipcomp: unknown flags 1D [ 125.300952][ T4926] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 126.021467][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 127.559861][ T4966] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.223839][ T4454] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.745261][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 128.788995][ T4454] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.877343][ T4454] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 128.896823][ T4454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.218892][ T4988] loop2: detected capacity change from 0 to 256 [ 129.270764][ T4988] exFAT-fs (loop2): invalid boot record signature [ 129.379145][ T4988] exFAT-fs (loop2): failed to read boot sector [ 129.389487][ T4988] exFAT-fs (loop2): failed to recognize exfat type [ 129.413005][ T4454] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 129.433384][ T4988] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.453511][ T4454] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 129.531069][ T4454] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0001/input/input5 [ 130.631243][ T1111] usb 4-1: USB disconnect, device number 4 [ 130.733162][ T4998] fido_id[4998]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 132.706836][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.713371][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.482095][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.821451][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.870083][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.880239][ T5046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.919270][ T5046] device bridge_slave_0 left promiscuous mode [ 134.927814][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.090854][ T5046] device bridge_slave_1 left promiscuous mode [ 135.100807][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.182620][ T5046] bond0: (slave bond_slave_0): Releasing backup interface [ 135.267278][ T5046] bond0: (slave bond_slave_1): Releasing backup interface [ 135.460428][ T5046] team0: Port device team_slave_0 removed [ 135.524566][ T5046] team0: Port device team_slave_1 removed [ 135.532895][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.547777][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.561515][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.588123][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.670874][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 135.719443][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 135.733376][ T5048] Zero length message leads to an empty skb [ 135.743716][ T5053] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.753099][ T5053] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.762144][ T5053] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.770927][ T5053] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.450539][ T5065] loop1: detected capacity change from 0 to 512 [ 136.798003][ T5070] loop2: detected capacity change from 0 to 512 [ 137.616784][ T5070] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 137.627280][ T5070] FAT-fs (loop2): Filesystem has been set read-only [ 137.718998][ T5075] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 137.718998][ T5075] The task syz.3.195 (5075) triggered the difference, watch for misbehavior. [ 137.848714][ T5081] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 47323 - 0 [ 137.867894][ T5081] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 47323 - 0 [ 137.902976][ T5081] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 47323 - 0 [ 137.922090][ T5081] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 47323 - 0 [ 137.987403][ T5081] device geneve2 entered promiscuous mode [ 139.056691][ T5095] loop0: detected capacity change from 0 to 2048 [ 139.104888][ T5095] UDF-fs: bad mount option "" or missing value [ 140.201276][ T5109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.205'. [ 140.252749][ T5109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 141.513291][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 142.195735][ T5134] ip_tables: iptables: counters copy to user failed while replacing table [ 142.275329][ T5138] loop0: detected capacity change from 0 to 16 [ 142.308955][ T5138] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 142.326946][ T5138] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 142.371019][ T5138] erofs: DAX unsupported by block device. Turning off DAX. [ 142.406025][ T5138] erofs: (device loop0): mounted with root inode @ nid 36. [ 143.051309][ T5139] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.059001][ T5139] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.737395][ T4381] wlan1: Trigger new scan to find an IBSS to join [ 144.106054][ T5139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.156140][ T5139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.007878][ T5139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.019211][ T5139] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.036937][ T5139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.053922][ T5139] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.329472][ T5142] device bond_slave_0 entered promiscuous mode [ 145.335824][ T5142] device bond_slave_1 entered promiscuous mode [ 145.343750][ T5142] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.353450][ T5142] bond1: (slave macvlan2): making interface the new active one [ 145.362316][ T5142] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 145.383769][ T5143] netlink: 14 bytes leftover after parsing attributes in process `syz.2.216'. [ 145.393228][ T5142] syz.2.216 (5142) used greatest stack depth: 19984 bytes left [ 145.443213][ T5143] device bond_slave_0 left promiscuous mode [ 145.457547][ T5143] device bond_slave_1 left promiscuous mode [ 145.546480][ T5156] loop1: detected capacity change from 0 to 2048 [ 145.564740][ T5159] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 145.598221][ T5143] bond1: (slave macvlan2): Releasing active interface [ 145.623211][ T5156] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 145.649986][ T5143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.672709][ T5156] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 145.703456][ T5156] UDF-fs: Scanning with blocksize 512 failed [ 145.709985][ T5143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.738877][ T5143] bond0 (unregistering): Released all slaves [ 145.742545][ T5156] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 145.761714][ T5156] UDF-fs: Scanning with blocksize 1024 failed [ 145.776020][ T5156] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 145.800866][ T5156] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 145.808986][ T5156] UDF-fs: Scanning with blocksize 2048 failed [ 145.834048][ T5156] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 145.902603][ T5156] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 145.939304][ T5156] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 145.969899][ T5156] UDF-fs: Scanning with blocksize 4096 failed [ 146.001267][ T5156] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 146.041817][ T5165] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.076610][ T5165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 147.496647][ T5171] netlink: 56 bytes leftover after parsing attributes in process `syz.0.225'. [ 151.016461][ T4269] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.053708][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.061656][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.166657][ T5171] device bond_slave_0 left promiscuous mode [ 151.172984][ T5171] device bond_slave_1 left promiscuous mode [ 151.386737][ T4269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.403661][ T4269] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 151.414990][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.910200][ T4269] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 151.925175][ T4269] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 151.938796][ T4269] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0002/input/input8 [ 152.000684][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.146446][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.861289][ T5171] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.870714][ T5171] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.880957][ T5171] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.890164][ T5171] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.916622][ T4268] usb 5-1: USB disconnect, device number 6 [ 153.278773][ T5171] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.288026][ T5171] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.296992][ T5171] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.305904][ T5171] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.116203][ T4456] bond0 speed is unknown, defaulting to 1000 [ 154.297863][ T5232] loop0: detected capacity change from 0 to 2048 [ 154.446770][ T5232] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 154.455477][ T4177] Bluetooth: hci4: command 0x0406 tx timeout [ 154.536261][ T5232] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 154.656415][ T5232] UDF-fs: Scanning with blocksize 512 failed [ 155.196367][ T5232] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 155.204171][ T5232] UDF-fs: Scanning with blocksize 1024 failed [ 155.308356][ T5232] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 155.385965][ T5232] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 155.406780][ T5232] UDF-fs: Scanning with blocksize 2048 failed [ 155.424279][ T5232] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 155.435386][ T5232] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 155.676499][ T5232] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 156.485983][ T5232] UDF-fs: Scanning with blocksize 4096 failed [ 156.492113][ T5232] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 156.864291][ T5260] ip_tables: iptables: counters copy to user failed while replacing table [ 156.936708][ T5260] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.212724][ T5284] loop2: detected capacity change from 0 to 256 [ 160.307006][ T5290] loop4: detected capacity change from 0 to 1024 [ 160.361000][ T5284] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.384559][ T5290] EXT4-fs (loop4): Ignoring removed bh option [ 160.398093][ T5284] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 160.455171][ T5290] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 160.483318][ T5284] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 160.493323][ T5290] capability: warning: `syz.4.256' uses 32-bit capabilities (legacy support in use) [ 161.746793][ T5306] loop4: detected capacity change from 0 to 128 [ 161.884929][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.955528][ T5306] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.537307][ T5098] syz.3.200 (5098) used greatest stack depth: 19376 bytes left [ 164.707831][ T26] audit: type=1326 audit(1794036057.607:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5336 comm="syz.2.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8575f00559 code=0x0 [ 164.971384][ T5266] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.981424][ T5266] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.993809][ T5266] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.009532][ T5266] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.447804][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'. [ 166.273899][ T5361] loop3: detected capacity change from 0 to 2048 [ 166.298179][ T5361] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 166.312171][ T5361] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 166.323520][ T5361] UDF-fs: Scanning with blocksize 512 failed [ 166.335280][ T5359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.272'. [ 166.353428][ T5361] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 166.361952][ T5361] UDF-fs: Scanning with blocksize 1024 failed [ 166.380352][ T5361] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 166.401028][ T5361] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 166.412676][ T5361] UDF-fs: Scanning with blocksize 2048 failed [ 166.439495][ T5361] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 166.472115][ T5361] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 166.512382][ T5361] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 166.530496][ T5361] UDF-fs: Scanning with blocksize 4096 failed [ 166.551234][ T5361] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 166.551776][ T5370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 166.584737][ T4269] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 166.965928][ T4269] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.047474][ T4269] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 167.354751][ T4269] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 167.385012][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.423109][ T4269] usb 3-1: Product: syz [ 167.444178][ T4269] usb 3-1: Manufacturer: syz [ 167.471732][ T4269] usb 3-1: SerialNumber: syz [ 167.998716][ T4269] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 168.457953][ T5409] loop4: detected capacity change from 0 to 512 [ 169.000655][ T4269] usb 3-1: USB disconnect, device number 3 [ 169.046310][ T4269] usblp0: removed [ 169.291167][ T5409] EXT4-fs (loop4): Ignoring removed nobh option [ 169.329482][ T5409] EXT4-fs (loop4): orphan cleanup on readonly fs [ 169.423627][ T5426] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 169.503112][ T5409] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.287: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 170.328522][ T5409] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.4.287: ea_inode dec ref err=-117 [ 170.386715][ T5409] EXT4-fs (loop4): 1 orphan inode deleted [ 170.398886][ T5409] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,min_batch_time=0x000000000000000f,init_itable,nobh,lazytime,acl,init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 172.720725][ T5442] loop4: detected capacity change from 0 to 2048 [ 172.927913][ T5442] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 172.964211][ T5442] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 172.999077][ T5442] UDF-fs: Scanning with blocksize 512 failed [ 173.013914][ T5442] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 173.021718][ T5442] UDF-fs: Scanning with blocksize 1024 failed [ 173.033819][ T4456] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 173.049284][ T5442] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 173.066264][ T5447] netlink: 14 bytes leftover after parsing attributes in process `syz.2.296'. [ 173.078929][ T5442] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 173.095149][ T5442] UDF-fs: Scanning with blocksize 2048 failed [ 173.102877][ T5442] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 173.120141][ T5442] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 173.132497][ T5442] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 173.147563][ T5442] UDF-fs: Scanning with blocksize 4096 failed [ 173.163170][ T5442] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 173.344118][ T5452] loop0: detected capacity change from 0 to 512 [ 173.414349][ T4456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.534320][ T4456] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 173.590560][ T5457] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 173.723769][ T4456] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 173.780844][ T5457] FAT-fs (loop0): Filesystem has been set read-only [ 173.798172][ T4456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.843373][ T4456] usb 4-1: config 0 descriptor?? [ 173.983016][ T5463] mmap: syz.2.300 (5463) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 174.044784][ T5465] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 175.256061][ T5440] udc-core: couldn't find an available UDC or it's busy [ 175.277912][ T5440] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 175.292261][ T5465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.327303][ T5470] device bridge1 entered promiscuous mode [ 175.412526][ T5470] bond1: (slave bridge1): making interface the new active one [ 175.467336][ T5470] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 175.493666][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 175.533811][ T4456] Bluetooth: Can't get state to change to load configuration err [ 175.541696][ T4456] Bluetooth: Loading sysconfig file failed [ 175.590202][ T4456] ath3k: probe of 4-1:0.0 failed with error -16 [ 175.708808][ T4456] usb 4-1: USB disconnect, device number 5 [ 175.732586][ T5482] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.937430][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 176.948451][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 176.957672][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 176.967387][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 176.976452][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 177.081337][ T5493] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.090254][ T5493] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.099069][ T5493] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.108287][ T5493] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.151199][ T5493] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 177.166909][ T5503] loop3: detected capacity change from 0 to 512 [ 177.187001][ T5500] bridge0: port 3(macvlan2) entered blocking state [ 177.197079][ T5500] bridge0: port 3(macvlan2) entered disabled state [ 177.209558][ T5500] device macvlan2 entered promiscuous mode [ 177.235915][ T5500] bridge0: port 3(macvlan2) entered blocking state [ 177.242714][ T5500] bridge0: port 3(macvlan2) entered forwarding state [ 177.254710][ T5504] loop0: detected capacity change from 0 to 2048 [ 177.339032][ T5503] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 177.354779][ T5503] FAT-fs (loop3): Filesystem has been set read-only [ 177.411099][ T5504] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 177.501211][ T5504] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 177.572834][ T5504] UDF-fs: Scanning with blocksize 512 failed [ 178.013821][ T5504] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 178.391524][ T5504] UDF-fs: Scanning with blocksize 1024 failed [ 178.402012][ T5504] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 178.446839][ T5515] team0: Port device bridge0 added [ 178.465478][ T5504] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 178.551310][ T5504] UDF-fs: Scanning with blocksize 2048 failed [ 178.576102][ T5504] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 178.601326][ T5517] loop4: detected capacity change from 0 to 2048 [ 178.609354][ T5504] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 178.640451][ T5504] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 178.665581][ T5504] UDF-fs: Scanning with blocksize 4096 failed [ 178.723425][ T5504] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 178.773297][ T5519] program syz.3.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.780454][ T5519] tipc: Started in network mode [ 179.806065][ T5519] tipc: Node identity ac14140f, cluster identity 4711 [ 179.874959][ T5519] tipc: New replicast peer: 255.255.255.255 [ 179.882050][ T5519] tipc: Enabled bearer , priority 10 [ 179.892289][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 180.006294][ T5532] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.997696][ T4269] tipc: Node number set to 2886997007 [ 182.086537][ T5556] netlink: 112 bytes leftover after parsing attributes in process `syz.2.329'. [ 182.124413][ T5551] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 182.134804][ T5551] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 182.208719][ T5551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.259523][ T5563] futex_wake_op: syz.3.332 tries to shift op by 144; fix this program [ 183.006514][ T5551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.257701][ T5551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.420327][ T5551] bond0: (slave netdevsim0): Releasing backup interface [ 183.467543][ T5551] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.204961][ T5581] loop0: detected capacity change from 0 to 2048 [ 184.312853][ T5581] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 184.344746][ T5581] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 184.357699][ T5581] UDF-fs: Scanning with blocksize 512 failed [ 184.389378][ T151] block nbd2: Attempted send on invalid socket [ 184.396886][ T151] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.409078][ T5592] FAT-fs (nbd2): unable to read boot sector [ 184.436278][ T5581] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 184.492580][ T5581] UDF-fs: Scanning with blocksize 1024 failed [ 184.538459][ T5581] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 184.556148][ T5581] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 184.573829][ T5581] UDF-fs: Scanning with blocksize 2048 failed [ 184.617518][ T5581] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 184.640581][ T5581] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 184.673491][ T5581] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 184.681209][ T5581] UDF-fs: Scanning with blocksize 4096 failed [ 184.702491][ T5581] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 185.135961][ T5589] orangefs_mount: mount request failed with -4 [ 186.561307][ T5619] tipc: New replicast peer: 127.0.0.1 [ 186.580771][ T5617] loop0: detected capacity change from 0 to 2048 [ 186.598327][ T5619] tipc: Enabled bearer , priority 10 [ 186.643176][ T5619] tipc: Disabling bearer [ 186.751448][ T5619] loop3: detected capacity change from 0 to 256 [ 186.888265][ T5619] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.928264][ T5634] binder: 5633:5634 ioctl c0306201 200000000800 returned -14 [ 188.180134][ T5639] serio: Serial port ptm0 [ 188.366202][ T5639] serio: Serial port ptm0 [ 189.270238][ T5651] loop1: detected capacity change from 0 to 2048 [ 189.301682][ T5651] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 189.345045][ T5651] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 189.369417][ T5651] UDF-fs: Scanning with blocksize 512 failed [ 189.523183][ T5658] netlink: 'syz.2.361': attribute type 1 has an invalid length. [ 189.536600][ T5651] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 189.577932][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.585692][ T5651] UDF-fs: Scanning with blocksize 1024 failed [ 189.635452][ T5651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 190.136239][ T5651] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 190.285251][ T5651] UDF-fs: Scanning with blocksize 2048 failed [ 190.316428][ T5658] device bridge1 entered promiscuous mode [ 190.335910][ T5651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 190.370065][ T5658] bond0: (slave bridge1): making interface the new active one [ 190.400427][ T5651] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 190.412854][ T5651] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 190.423621][ T5658] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 190.433229][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 190.457697][ T5651] UDF-fs: Scanning with blocksize 4096 failed [ 190.482006][ T5651] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 190.560362][ T5669] capability: warning: `syz.2.364' uses deprecated v2 capabilities in a way that may be insecure [ 191.306587][ T4342] Bluetooth: hci2: command 0x0406 tx timeout [ 191.331073][ T4342] Bluetooth: hci4: command 0x0406 tx timeout [ 191.365190][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 191.371334][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 191.396470][ T4342] Bluetooth: hci0: command 0x0406 tx timeout [ 191.403255][ T26] audit: type=1326 audit(1794036084.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5676 comm="syz.3.367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd237185559 code=0x0 [ 192.010494][ T5685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.369'. [ 192.072729][ T5685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.369'. [ 192.336810][ T5700] netlink: 'syz.4.373': attribute type 4 has an invalid length. [ 192.353012][ T5700] netlink: 17 bytes leftover after parsing attributes in process `syz.4.373'. [ 192.392714][ T5703] device syzkaller0 entered promiscuous mode [ 193.126240][ T5707] ================================================================== [ 193.134765][ T5707] BUG: KASAN: use-after-free in string+0x204/0x290 [ 193.141325][ T5707] Read of size 1 at addr ffff888147228078 by task syz.2.372/5707 [ 193.149065][ T5707] [ 193.151422][ T5707] CPU: 0 PID: 5707 Comm: syz.2.372 Not tainted syzkaller #0 [ 193.158741][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.168830][ T5707] Call Trace: [ 193.172139][ T5707] [ 193.175094][ T5707] dump_stack_lvl+0x188/0x250 [ 193.179810][ T5707] ? show_regs_print_info+0x20/0x20 [ 193.185033][ T5707] ? _printk+0xda/0x130 [ 193.189483][ T5707] ? load_image+0x410/0x410 [ 193.194019][ T5707] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 193.199511][ T5707] ? memset+0x1e/0x40 [ 193.203528][ T5707] print_address_description+0x60/0x2d0 [ 193.209118][ T5707] ? string+0x204/0x290 [ 193.213321][ T5707] kasan_report+0xdf/0x130 [ 193.217776][ T5707] ? string+0x204/0x290 [ 193.221972][ T5707] string+0x204/0x290 [ 193.225994][ T5707] vsnprintf+0x10db/0x1c20 [ 193.230456][ T5707] seq_printf+0x185/0x280 [ 193.234822][ T5707] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 193.240313][ T5707] ? seq_vprintf+0x180/0x180 [ 193.244940][ T5707] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 193.250455][ T5707] ? _raw_spin_lock+0x40/0x40 [ 193.255177][ T5707] show_interrupts+0x9ab/0xba0 [ 193.259986][ T5707] seq_read_iter+0x8af/0xc50 [ 193.264632][ T5707] proc_reg_read_iter+0x1a9/0x270 [ 193.269695][ T5707] vfs_read+0x75e/0xd50 [ 193.273893][ T5707] ? kernel_read+0x1e0/0x1e0 [ 193.278537][ T5707] ? mutex_lock_nested+0x17/0x20 [ 193.283526][ T5707] ? __fdget_pos+0x2bf/0x370 [ 193.288164][ T5707] ? ksys_read+0x70/0x260 [ 193.292526][ T5707] ksys_read+0x153/0x260 [ 193.296812][ T5707] ? vfs_write+0xd70/0xd70 [ 193.301259][ T5707] ? lockdep_hardirqs_on+0x94/0x140 [ 193.306492][ T5707] do_syscall_64+0x4c/0xa0 [ 193.310938][ T5707] ? clear_bhb_loop+0x30/0x80 [ 193.315645][ T5707] ? clear_bhb_loop+0x30/0x80 [ 193.320367][ T5707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.326323][ T5707] RIP: 0033:0x7f8575f00559 [ 193.330773][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.350414][ T5707] RSP: 002b:00007f8574115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.358860][ T5707] RAX: ffffffffffffffda RBX: 00007f8576187180 RCX: 00007f8575f00559 [ 193.366876][ T5707] RDX: 0000000000002020 RSI: 0000200000001200 RDI: 0000000000000005 [ 193.374877][ T5707] RBP: 00007f8575f97b50 R08: 0000000000000000 R09: 0000000000000000 [ 193.382878][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.390881][ T5707] R13: 00007f8576187218 R14: 00007f8576187180 R15: 00007ffcd35394f8 [ 193.398907][ T5707] [ 193.401948][ T5707] [ 193.404288][ T5707] Allocated by task 4189: [ 193.408634][ T5707] __kasan_kmalloc+0xaf/0xe0 [ 193.413263][ T5707] __vmalloc_node_range+0x2dd/0x8b0 [ 193.418500][ T5707] vzalloc+0x75/0x80 [ 193.422433][ T5707] alloc_counters+0xcc/0x740 [ 193.427049][ T5707] do_ipt_get_ctl+0xa37/0x1110 [ 193.431840][ T5707] nf_getsockopt+0x25e/0x280 [ 193.436463][ T5707] ip_getsockopt+0x1219/0x1660 [ 193.441257][ T5707] tcp_getsockopt+0x209/0x25e0 [ 193.446042][ T5707] __sys_getsockopt+0x1b0/0x230 [ 193.450921][ T5707] __x64_sys_getsockopt+0xb1/0xc0 [ 193.455985][ T5707] do_syscall_64+0x4c/0xa0 [ 193.460432][ T5707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.466361][ T5707] [ 193.468707][ T5707] The buggy address belongs to the object at ffff888147228078 [ 193.468707][ T5707] which belongs to the cache kmalloc-8 of size 8 [ 193.482454][ T5707] The buggy address is located 0 bytes inside of [ 193.482454][ T5707] 8-byte region [ffff888147228078, ffff888147228080) [ 193.495424][ T5707] The buggy address belongs to the page: [ 193.501106][ T5707] page:ffffea00051c8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888147228050 pfn:0x147228 [ 193.512674][ T5707] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 193.520332][ T5707] raw: 057ff00000000200 ffffea0000958640 0000000300000003 ffff888017841280 [ 193.528944][ T5707] raw: ffff888147228050 0000000080660063 00000001ffffffff 0000000000000000 [ 193.537549][ T5707] page dumped because: kasan: bad access detected [ 193.543973][ T5707] page_owner tracks the page as allocated [ 193.549707][ T5707] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 8808270112, free_ts 0 [ 193.564569][ T5707] get_page_from_freelist+0x24f6/0x2670 [ 193.570139][ T5707] __alloc_pages+0x1ee/0x480 [ 193.574746][ T5707] alloc_page_interleave+0x24/0x1e0 [ 193.579977][ T5707] new_slab+0xc0/0x4b0 [ 193.584115][ T5707] ___slab_alloc+0x807/0xdd0 [ 193.588748][ T5707] __kmalloc+0x11d/0x340 [ 193.593025][ T5707] __tty_alloc_driver+0x2d9/0x440 [ 193.598087][ T5707] unix98_pty_init+0x41/0x6c0 [ 193.602790][ T5707] pty_init+0xf/0x20 [ 193.606705][ T5707] do_one_initcall+0x272/0x730 [ 193.611504][ T5707] do_initcall_level+0x13d/0x1f0 [ 193.616466][ T5707] do_initcalls+0x4b/0x90 [ 193.620808][ T5707] kernel_init_freeable+0x3d5/0x560 [ 193.626020][ T5707] kernel_init+0x19/0x1b0 [ 193.630369][ T5707] ret_from_fork+0x1f/0x30 [ 193.634805][ T5707] page_owner free stack trace missing [ 193.640180][ T5707] [ 193.642519][ T5707] Memory state around the buggy address: [ 193.648160][ T5707] ffff888147227f00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 193.656233][ T5707] ffff888147227f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 193.664323][ T5707] >ffff888147228000: 00 fc fc fc fc 04 fc fc fc fc fb fc fc fc fc fb [ 193.672393][ T5707] ^ [ 193.680396][ T5707] ffff888147228080: fc fc fc fc 04 fc fc fc fc 04 fc fc fc fc 04 fc [ 193.688490][ T5707] ffff888147228100: fc fc fc 04 fc fc fc fc 04 fc fc fc fc 04 fc fc [ 193.696578][ T5707] ================================================================== [ 193.704657][ T5707] Disabling lock debugging due to kernel taint [ 193.710839][ T5707] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 193.718041][ T5707] CPU: 0 PID: 5707 Comm: syz.2.372 Tainted: G B syzkaller #0 [ 193.726732][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.736798][ T5707] Call Trace: [ 193.740106][ T5707] [ 193.743049][ T5707] dump_stack_lvl+0x188/0x250 [ 193.747747][ T5707] ? show_regs_print_info+0x20/0x20 [ 193.752973][ T5707] ? load_image+0x410/0x410 [ 193.757502][ T5707] panic+0x2f8/0x850 [ 193.761417][ T5707] ? __lock_acquire+0x7d40/0x7d40 [ 193.766454][ T5707] ? bpf_jit_dump+0xd0/0xd0 [ 193.770973][ T5707] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 193.776886][ T5707] ? _raw_spin_unlock+0x40/0x40 [ 193.781749][ T5707] ? string+0x204/0x290 [ 193.785918][ T5707] check_panic_on_warn+0x80/0xa0 [ 193.790867][ T5707] ? string+0x204/0x290 [ 193.795036][ T5707] end_report+0x6d/0xf0 [ 193.799209][ T5707] kasan_report+0x102/0x130 [ 193.803740][ T5707] ? string+0x204/0x290 [ 193.807911][ T5707] string+0x204/0x290 [ 193.811913][ T5707] vsnprintf+0x10db/0x1c20 [ 193.816350][ T5707] seq_printf+0x185/0x280 [ 193.820708][ T5707] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 193.826193][ T5707] ? seq_vprintf+0x180/0x180 [ 193.830800][ T5707] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 193.836269][ T5707] ? _raw_spin_lock+0x40/0x40 [ 193.840963][ T5707] show_interrupts+0x9ab/0xba0 [ 193.845744][ T5707] seq_read_iter+0x8af/0xc50 [ 193.850357][ T5707] proc_reg_read_iter+0x1a9/0x270 [ 193.855400][ T5707] vfs_read+0x75e/0xd50 [ 193.859574][ T5707] ? kernel_read+0x1e0/0x1e0 [ 193.864184][ T5707] ? mutex_lock_nested+0x17/0x20 [ 193.869139][ T5707] ? __fdget_pos+0x2bf/0x370 [ 193.873742][ T5707] ? ksys_read+0x70/0x260 [ 193.878176][ T5707] ksys_read+0x153/0x260 [ 193.882445][ T5707] ? vfs_write+0xd70/0xd70 [ 193.886878][ T5707] ? lockdep_hardirqs_on+0x94/0x140 [ 193.892105][ T5707] do_syscall_64+0x4c/0xa0 [ 193.896563][ T5707] ? clear_bhb_loop+0x30/0x80 [ 193.901268][ T5707] ? clear_bhb_loop+0x30/0x80 [ 193.905981][ T5707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.911911][ T5707] RIP: 0033:0x7f8575f00559 [ 193.916341][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.935964][ T5707] RSP: 002b:00007f8574115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.944410][ T5707] RAX: ffffffffffffffda RBX: 00007f8576187180 RCX: 00007f8575f00559 [ 193.952420][ T5707] RDX: 0000000000002020 RSI: 0000200000001200 RDI: 0000000000000005 [ 193.960409][ T5707] RBP: 00007f8575f97b50 R08: 0000000000000000 R09: 0000000000000000 [ 193.968407][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.976392][ T5707] R13: 00007f8576187218 R14: 00007f8576187180 R15: 00007ffcd35394f8 [ 193.984382][ T5707] [ 193.987523][ T5707] Kernel Offset: disabled [ 193.991867][ T5707] Rebooting in 86400 seconds..