last executing test programs: 5m37.848558384s ago: executing program 4 (id=68): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) syz_open_dev$dri(0x0, 0x1, 0x48240) 5m36.708289201s ago: executing program 4 (id=72): close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) io_submit(0x0, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 5m36.041586667s ago: executing program 4 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r1, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r6, {}, {0x0, 0xa}, {0x7ff9, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) 5m33.891450969s ago: executing program 0 (id=80): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYBLOB="0800080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m33.634179935s ago: executing program 0 (id=82): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)}}, {}], 0x3, 0x1c000) shutdown(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) 5m33.628210195s ago: executing program 4 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000014c0)={0xff}, 0x8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 5m32.285611298s ago: executing program 0 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000003000000000000", @ANYRES32=0x0], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m32.265195238s ago: executing program 4 (id=87): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='1\x00', 0x2) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000700)=0x2) write(r0, &(0x7f0000000800)='a\n\x00', 0x2) write(r0, &(0x7f0000000900)='b\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000b00), 0x64) read(r1, 0x0, 0x0) close(r3) 5m31.020967488s ago: executing program 4 (id=88): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000500"], 0x50) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5m30.244766407s ago: executing program 0 (id=92): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 5m27.808764615s ago: executing program 0 (id=98): bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 5m26.435590708s ago: executing program 0 (id=103): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0x0) 5m26.202593844s ago: executing program 32 (id=103): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0x0) 5m15.963953639s ago: executing program 33 (id=88): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000500"], 0x50) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21.727505528s ago: executing program 1 (id=817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="c6e71d", 0x3}], 0x1}, 0x4) 19.760158415s ago: executing program 1 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f0000000b40)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) close(r2) truncate(&(0x7f0000000080)='./file0\x00', 0x3) 12.04015306s ago: executing program 1 (id=840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 10.725004262s ago: executing program 1 (id=845): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 10.562164966s ago: executing program 5 (id=857): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x4c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000140)={'b', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x294, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x5, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8}}, {0x0, 0x2, [0x6, 0x6]}}, {{0x0, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3}}, {0x0, 0x2, [0x5fd]}}, {{0x0, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x0, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0x2}}, @TCA_RATE={0x0, 0x5, {0x10, 0x2}}]}, 0x2c4}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 9.089790321s ago: executing program 2 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e23, 0x9, @empty, 0xa}}, 0x0, 0x0, 0x49, 0x0, "c00866fdc25aca6c451dbae34eeb6cc3904fddf83259e584824efe263c8eef3e3a2f4a231e46f2e5d0c491fd99bb68ec8293d502fcfeafa0dec2fac1fd9b716c8a628631f326f2d8d5f495dec117c4d8"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) 8.966563594s ago: executing program 6 (id=852): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r2, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 8.962857314s ago: executing program 3 (id=853): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 8.6926526s ago: executing program 5 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 8.086350085s ago: executing program 2 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 6.984532642s ago: executing program 6 (id=856): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f390768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78600a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80d6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a44ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141dae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2fa2a11533dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f78099513d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905070000003eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86f8ec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1c6) 6.982893432s ago: executing program 2 (id=867): mkdirat(0xffffffffffffff9c, 0x0, 0x158) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) 6.194870071s ago: executing program 3 (id=858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 5.984627716s ago: executing program 5 (id=859): syz_open_dev$dri(0x0, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 4.825149564s ago: executing program 1 (id=860): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, 0x0}, 0xe0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x40080) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) 4.823921264s ago: executing program 3 (id=861): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001740)={0x0, 0x8, &(0x7f0000000740)="8af7a39ac7136fdc"}) r2 = syz_open_dev$vbi(0x0, 0x3, 0x2) preadv2(r2, 0x0, 0x0, 0x1, 0x1, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 4.816693984s ago: executing program 6 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create(0x2) r4 = socket(0x1, 0x1, 0x0) r5 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f0000000140)={r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x8000008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendfile(r6, r7, &(0x7f0000000000), 0x9) 4.688633267s ago: executing program 2 (id=863): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) fsopen(0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x0, 0x8000, 0x3, 0x8}, 0x9, 0x4, 'id1\x00', 'timer0\x00', 0x0, 0x380000000000, 0x0, 0x2, 0x1}) 3.564997744s ago: executing program 6 (id=864): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = inotify_init1(0x80000) r6 = inotify_add_watch(r5, &(0x7f0000010280)='./file0\x00', 0x20000000) write$binfmt_elf32(r1, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.278318271s ago: executing program 3 (id=865): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroo', 0xa) close(r0) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001000)='rd_pages=8', 0xa) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000001200)='1', 0x1) 3.029277516s ago: executing program 5 (id=866): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1\x00', 0x1) 2.225595966s ago: executing program 6 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r1, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r2, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) 1.547091642s ago: executing program 2 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xa4fffffb, @mcast1}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 1.545950662s ago: executing program 3 (id=870): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.499450584s ago: executing program 5 (id=871): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x7b408477ebd014ef) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) 1.437187595s ago: executing program 3 (id=872): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 243.870083ms ago: executing program 5 (id=873): syz_kvm_add_vcpu$x86(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x8, 0xfa00, {0x1, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 242.183014ms ago: executing program 2 (id=874): socket$kcm(0x10, 0x2, 0x4) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) eventfd2(0x4, 0x800) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) 22.181719ms ago: executing program 1 (id=875): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001000)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r1, &(0x7f0000001900)='1', 0x1) 0s ago: executing program 6 (id=876): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001740)={0x0, 0x8, &(0x7f0000000740)="8af7a39ac7136fdc"}) r2 = syz_open_dev$vbi(0x0, 0x3, 0x2) preadv2(r2, 0x0, 0x0, 0x1, 0x1, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): o params data found [ 65.592038][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.599893][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.608731][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.654525][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.661645][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.669781][ T4193] device bridge_slave_0 entered promiscuous mode [ 65.678268][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.685423][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.693542][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.716682][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.724737][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.732892][ T4192] device bridge_slave_0 entered promiscuous mode [ 65.740877][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.748267][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.756596][ T4193] device bridge_slave_1 entered promiscuous mode [ 65.781203][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.788360][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.796800][ T4199] device bridge_slave_0 entered promiscuous mode [ 65.804877][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.811938][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.820861][ T4192] device bridge_slave_1 entered promiscuous mode [ 65.844237][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.858333][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.865700][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.873715][ T4199] device bridge_slave_1 entered promiscuous mode [ 65.889330][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.900672][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.913538][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.950883][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.989304][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.007566][ T4193] team0: Port device team_slave_0 added [ 66.013819][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.020915][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.029987][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.039826][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.061098][ T4187] team0: Port device team_slave_0 added [ 66.069385][ T4193] team0: Port device team_slave_1 added [ 66.075775][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.082876][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.091502][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.100319][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.126039][ T4187] team0: Port device team_slave_1 added [ 66.170142][ T4192] team0: Port device team_slave_0 added [ 66.191337][ T4199] team0: Port device team_slave_0 added [ 66.198159][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.206432][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.232914][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.246967][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.257579][ T4192] team0: Port device team_slave_1 added [ 66.263927][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.270957][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.297139][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.310030][ T4199] team0: Port device team_slave_1 added [ 66.316483][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.323500][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.349550][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.362139][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.386064][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.397192][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.423640][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.495685][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.502683][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.529779][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.542616][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.550044][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.576295][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.588275][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.595433][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.621629][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.640905][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.648139][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.674562][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.690866][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.698149][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.708195][ T4186] team0: Port device team_slave_0 added [ 66.732129][ T4186] team0: Port device team_slave_1 added [ 66.755284][ T4193] device hsr_slave_0 entered promiscuous mode [ 66.762380][ T4193] device hsr_slave_1 entered promiscuous mode [ 66.770500][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.778585][ T4193] Cannot create hsr debugfs directory [ 66.805107][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.812117][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.838581][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.857486][ T4199] device hsr_slave_0 entered promiscuous mode [ 66.864684][ T4199] device hsr_slave_1 entered promiscuous mode [ 66.871393][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.879946][ T4199] Cannot create hsr debugfs directory [ 66.899186][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.906359][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.932688][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.974305][ T4192] device hsr_slave_0 entered promiscuous mode [ 66.981374][ T4192] device hsr_slave_1 entered promiscuous mode [ 66.988182][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.996152][ T4192] Cannot create hsr debugfs directory [ 67.074428][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 67.077494][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.082137][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 67.088161][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.099571][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 67.105999][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 67.107022][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.118994][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.126674][ T4186] Cannot create hsr debugfs directory [ 67.390301][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.411000][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.420473][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.434622][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.491492][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.515906][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.526343][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.535859][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.585754][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.606290][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.628143][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.644520][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.672113][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.706152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.716863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.737019][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.747344][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.780137][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.790019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.799534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.811228][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.818744][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.828605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.845864][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.878048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.887329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.896721][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.903861][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.917163][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.925729][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.941766][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.962262][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.977718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.987693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.996329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.005992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.025598][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.042991][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.066900][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.077183][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.086388][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.096636][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.107115][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.114265][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.122187][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.131096][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.140673][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.149572][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.159067][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.167554][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.178209][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.201507][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.232759][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.241675][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.251150][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.261411][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.271451][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.278616][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.287207][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.297685][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.307600][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.318643][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.328607][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.340441][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.368073][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.377153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.386297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.394858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.404711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.418642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.427263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.438676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.447329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.477544][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.489245][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.504091][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.511294][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.521663][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.532137][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.570927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.582028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.591395][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.598529][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.608260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.635850][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.644995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.664215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.700799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.714238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.732806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.746340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.762895][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.774841][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.801710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.810817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.820440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.829170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.838744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.847468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.857729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.879655][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.925200][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.938557][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.954922][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.973728][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.980839][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.997550][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.008048][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.017895][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.025032][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.032685][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.040362][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.050900][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.087339][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.094893][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.103445][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.112435][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.127041][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.137412][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.147154][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.153947][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 69.161569][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.170808][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.178268][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 69.178451][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 69.189533][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.199116][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 69.210627][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 69.235399][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.245833][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.254199][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.261684][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.271020][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.280073][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.289671][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.299092][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.308290][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.317699][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.324873][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.333218][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.341975][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.350912][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.358063][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.366514][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.380574][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.390532][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.428146][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.441568][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.452698][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.468636][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.480650][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.496281][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.508490][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.517606][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.526599][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.546530][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.556827][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.572492][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.589128][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.597956][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.612074][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.631706][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.644375][ T4187] device veth0_vlan entered promiscuous mode [ 69.651554][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.666884][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.689110][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.703017][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.740604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.749382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.789870][ T4187] device veth1_vlan entered promiscuous mode [ 69.841627][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.851796][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.883426][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.912660][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.943938][ T4187] device veth0_macvtap entered promiscuous mode [ 69.977778][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.988618][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.998065][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.008875][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.017446][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.044808][ T4187] device veth1_macvtap entered promiscuous mode [ 70.058605][ T4192] device veth0_vlan entered promiscuous mode [ 70.070043][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.079417][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.088646][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.097955][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.106880][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.116020][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.126032][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.134769][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.161355][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.173552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.181922][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.191391][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.201024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.212496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.221118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.230680][ T4192] device veth1_vlan entered promiscuous mode [ 70.245875][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.261267][ T4199] device veth0_vlan entered promiscuous mode [ 70.270582][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.279070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.289464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.299276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.314890][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.324270][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.332998][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.343079][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.373880][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.383085][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.390760][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.402000][ T4199] device veth1_vlan entered promiscuous mode [ 70.427268][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.436962][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.446915][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.462614][ T4192] device veth0_macvtap entered promiscuous mode [ 70.476730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.491829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.501568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.531339][ T4192] device veth1_macvtap entered promiscuous mode [ 70.565424][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.576577][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.585764][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.609745][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.620702][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.634708][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.647600][ T4193] device veth0_vlan entered promiscuous mode [ 70.670324][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.679926][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.691488][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.700263][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.709741][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.718139][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.731966][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.746830][ T4199] device veth0_macvtap entered promiscuous mode [ 70.761930][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.770227][ T4193] device veth1_vlan entered promiscuous mode [ 70.782513][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.795519][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.807306][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.819847][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.828505][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.837035][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.848313][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.857760][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.867185][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.876790][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.886044][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.895372][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.903912][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.911846][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.921045][ T4186] device veth0_vlan entered promiscuous mode [ 70.934944][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.944297][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.953028][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.963753][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.987224][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.992533][ T4199] device veth1_macvtap entered promiscuous mode [ 71.003159][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.012593][ T4186] device veth1_vlan entered promiscuous mode [ 71.042769][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.055251][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.065455][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.076550][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.087716][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.096278][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.104870][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.113029][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.121935][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.131007][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.140384][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.160652][ T4193] device veth0_macvtap entered promiscuous mode [ 71.183617][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.196102][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.206602][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.218021][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.230347][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.235385][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 71.247862][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.251701][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 71.261921][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 71.268712][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 71.270031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.274888][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 71.296730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.309373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.321175][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.324850][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.328212][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.346609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.365114][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.378628][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.387834][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.399199][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.411419][ T4193] device veth1_macvtap entered promiscuous mode [ 71.430396][ T4186] device veth0_macvtap entered promiscuous mode [ 71.451737][ T4186] device veth1_macvtap entered promiscuous mode [ 71.496156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.506574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.515669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.524972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.541892][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.554369][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.564514][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.577062][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.587063][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.597866][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.609634][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.635296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.645518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.656103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.669604][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.687292][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.699532][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.716417][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.730403][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.745230][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.760274][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.778496][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.789418][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.807223][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.817904][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.828184][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.846884][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.860405][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.878914][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.892101][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.908258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.919076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.930355][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.939579][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.951937][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.964226][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.973294][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.982137][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.985273][ T4270] netlink: 'syz.3.6': attribute type 2 has an invalid length. [ 72.013743][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.024516][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.062324][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.076351][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.086663][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.098239][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.108170][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.119051][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.129114][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.139678][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.150724][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.164001][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.171851][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.180962][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.214498][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.223782][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.232518][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.261121][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.276053][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.313262][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.338086][ T4276] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7'. [ 72.353594][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.366508][ T4276] device syzkaller0 entered promiscuous mode [ 72.390906][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.413230][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.452384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.571130][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.599903][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.661033][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.730635][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.746446][ T4288] capability: warning: `syz.3.8' uses deprecated v2 capabilities in a way that may be insecure [ 72.771948][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.787804][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.797432][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.813759][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.822558][ T4284] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 72.854063][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.908124][ T4287] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 72.919568][ T4290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.932530][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.938642][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.953888][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.972162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.012281][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.031954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.291893][ T4294] device syzkaller0 entered promiscuous mode [ 74.110130][ T4175] Bluetooth: hci0: command 0x0419 tx timeout [ 74.116797][ T4175] Bluetooth: hci2: command 0x0419 tx timeout [ 74.123645][ T4175] Bluetooth: hci3: command 0x0419 tx timeout [ 74.129740][ T4175] Bluetooth: hci1: command 0x0419 tx timeout [ 74.153596][ T4296] device syzkaller0 entered promiscuous mode [ 74.161029][ T4175] Bluetooth: hci4: command 0x0419 tx timeout [ 75.353155][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 75.373159][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 75.393164][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.744102][ T4330] xt_connbytes: Forcing CT accounting to be enabled [ 75.750973][ T4330] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 75.764069][ T4330] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 76.323156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.333143][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.343143][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.353141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.363135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.373159][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.383147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 76.818167][ T4331] ecryptfs_parse_options: eCryptfs: unrecognized option [³] [ 76.825791][ T4331] ecryptfs_parse_options: eCryptfs: unrecognized option [z\)] [ 76.833668][ T4331] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 76.847984][ T4331] Error parsing options; rc = [-22] [ 78.109435][ T4337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.327855][ T4350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 81.984013][ T4365] sched: RT throttling activated [ 82.808500][ T4370] device syzkaller0 entered promiscuous mode [ 84.630254][ T4402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34'. [ 84.881066][ T4405] device syzkaller0 entered promiscuous mode [ 86.282822][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'. [ 87.159615][ T4441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.48'. [ 87.402903][ T7] cfg80211: failed to load regulatory.db [ 87.707935][ T4459] device syzkaller0 entered promiscuous mode [ 89.518215][ T4468] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 89.698138][ T4468] CIFS mount error: No usable UNC path provided in device string! [ 89.698138][ T4468] [ 89.924056][ T4474] loop1: detected capacity change from 0 to 8 [ 90.043477][ T4468] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 90.115617][ T4473] device syzkaller0 entered promiscuous mode [ 90.132045][ T4474] squashfs image failed sanity check [ 90.143329][ T4475] tipc: Started in network mode [ 90.148418][ T4475] tipc: Node identity 967d26215e27, cluster identity 4711 [ 90.157007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.165507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.175532][ T4475] tipc: Enabled bearer , priority 0 [ 90.259016][ T4464] tipc: Resetting bearer [ 90.282150][ T4468] loop1: detected capacity change from 0 to 512 [ 90.387193][ T4468] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 90.412214][ T4468] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 90.425153][ T4464] tipc: Disabling bearer [ 90.453571][ T4468] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 90.461629][ T4468] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 90.510966][ T4468] EXT4-fs (loop1): 1 truncate cleaned up [ 90.528540][ T4468] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 90.674225][ T4468] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 90.714784][ T4468] EXT4-fs (loop1): group quota file already specified [ 90.783214][ T4471] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 92.205984][ T4510] netlink: 240 bytes leftover after parsing attributes in process `syz.0.67'. [ 93.327081][ T4521] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.457762][ T4521] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.911474][ T4533] Zero length message leads to an empty skb [ 94.010828][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.094056][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.101768][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.111510][ T4535] device bridge_slave_0 left promiscuous mode [ 94.124579][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.693798][ T4535] device bridge_slave_1 left promiscuous mode [ 95.133235][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.065226][ T4547] futex_wake_op: syz.4.75 tries to shift op by 144; fix this program [ 96.114064][ T4535] bond0: (slave bond_slave_0): Releasing backup interface [ 96.171744][ T4535] bond0: (slave bond_slave_1): Releasing backup interface [ 96.255453][ T4535] team0: Port device team_slave_0 removed [ 96.287080][ T4535] team0: Port device team_slave_1 removed [ 96.298468][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.308287][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.318986][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.327477][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.351826][ T4545] netlink: 14 bytes leftover after parsing attributes in process `syz.2.77'. [ 96.491824][ T4565] device syzkaller0 entered promiscuous mode [ 97.866986][ T4580] ======================================================= [ 97.866986][ T4580] WARNING: The mand mount option has been deprecated and [ 97.866986][ T4580] and is ignored by this kernel. Remove the mand [ 97.866986][ T4580] option from the mount to silence this warning. [ 97.866986][ T4580] ======================================================= [ 99.865302][ T4597] loop2: detected capacity change from 0 to 128 [ 100.091745][ T4599] loop0: detected capacity change from 0 to 2048 [ 100.155414][ T4601] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.174958][ T4597] FAT-fs (loop2): bogus number of reserved sectors [ 100.202766][ T4597] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 100.242632][ T4599] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 100.285196][ T4597] FAT-fs (loop2): Can't find a valid FAT filesystem [ 100.296357][ T4599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.614471][ T4609] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.735062][ T4615] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 101.754987][ T4609] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 102.257499][ T4186] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 102.299076][ T4186] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 102.638188][ T4636] tipc: Started in network mode [ 102.930745][ T4636] tipc: Node identity 7eea773abaed, cluster identity 4711 [ 103.277588][ T4636] tipc: Enabled bearer , priority 0 [ 103.567421][ T4643] tipc: Disabling bearer [ 103.751756][ T4646] device syzkaller0 entered promiscuous mode [ 104.156240][ T4652] device hsr0 entered promiscuous mode [ 107.081974][ T4679] device syzkaller0 entered promiscuous mode [ 107.165359][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 108.442539][ T4662] chnl_net:caif_netlink_parms(): no params data found [ 108.728583][ T4662] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.798421][ T4700] netlink: 'syz.2.115': attribute type 11 has an invalid length. [ 108.873046][ T4662] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.106679][ T4662] device bridge_slave_0 entered promiscuous mode [ 109.393916][ T4662] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.403497][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 109.441887][ T4662] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.612264][ T4662] device bridge_slave_1 entered promiscuous mode [ 111.437155][ T4662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.483410][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 111.542211][ T4662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.680762][ T4662] team0: Port device team_slave_0 added [ 111.712564][ T4662] team0: Port device team_slave_1 added [ 111.857366][ T4662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.878023][ T4662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.985156][ T4662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.045982][ T4662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.069903][ T4662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.152371][ T4662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.182992][ T4720] tipc: Started in network mode [ 112.190536][ T4720] tipc: Node identity a28a682ad91d, cluster identity 4711 [ 113.736212][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 113.743385][ T4720] tipc: Enabled bearer , priority 0 [ 113.813483][ T4722] device syzkaller0 entered promiscuous mode [ 113.924130][ T4722] tipc: Resetting bearer [ 113.984554][ T4722] tipc: Disabling bearer [ 114.072059][ T4662] device hsr_slave_0 entered promiscuous mode [ 114.106144][ T4662] device hsr_slave_1 entered promiscuous mode [ 114.133523][ T4662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.141510][ T4662] Cannot create hsr debugfs directory [ 114.645448][ T4662] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.697821][ T4662] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.726729][ T4662] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.741208][ T4662] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.903425][ T4302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.024821][ T4302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.119828][ T4662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.413585][ T4741] loop3: detected capacity change from 0 to 40427 [ 115.423326][ T4742] xt_TPROXY: Can be used only with -p tcp or -p udp [ 115.529338][ T4741] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 115.537456][ T4741] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.691117][ T4741] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.817124][ T4731] chnl_net:caif_netlink_parms(): no params data found [ 116.248195][ T4741] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.255684][ T4741] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.321698][ T4302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.424524][ T4748] loop1: detected capacity change from 0 to 1024 [ 116.440314][ T4741] attempt to access beyond end of device [ 116.440314][ T4741] loop3: rw=2049, want=78320, limit=40427 [ 116.461390][ T4749] attempt to access beyond end of device [ 116.461390][ T4749] loop3: rw=2049, want=79632, limit=40427 [ 116.656468][ T4662] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.673255][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 116.707461][ T4302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.801123][ T4345] attempt to access beyond end of device [ 116.801123][ T4345] loop3: rw=1, want=45104, limit=40427 [ 116.917215][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.941325][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.974405][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.308976][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.374691][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.381811][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.406706][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.505753][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.523352][ T4731] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.540197][ T4731] device bridge_slave_0 entered promiscuous mode [ 117.815809][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.991577][ T4731] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.145813][ T4731] device bridge_slave_1 entered promiscuous mode [ 118.360937][ T4731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.388338][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.398163][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.406927][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.414468][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.706479][ T4764] loop2: detected capacity change from 0 to 32768 [ 118.759970][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 118.802728][ T4731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.827903][ T4764] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.132 (4764) [ 119.077026][ T4764] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 119.086335][ T4764] BTRFS info (device loop2): turning on sync discard [ 119.093574][ T4764] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 119.103311][ T4764] BTRFS info (device loop2): use zstd compression, level 3 [ 119.110555][ T4764] BTRFS info (device loop2): turning on async discard [ 119.117580][ T4764] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 119.128444][ T4764] BTRFS info (device loop2): trying to use backup root at mount time [ 119.136576][ T4764] BTRFS info (device loop2): enabling auto defrag [ 119.143113][ T4764] BTRFS info (device loop2): using free space tree [ 119.149643][ T4764] BTRFS info (device loop2): has skinny extents [ 119.409201][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.902803][ T4305] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 119.964128][ T4764] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 119.974116][ T4343] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 119.997857][ T4764] BTRFS warning (device loop2): couldn't read tree root [ 120.006066][ T4764] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 120.016463][ T4764] BTRFS warning (device loop2): couldn't read tree root [ 120.063309][ T4764] BTRFS info (device loop2): enabling ssd optimizations [ 120.071626][ T4764] BTRFS info (device loop2): clearing free space tree [ 120.079706][ T4764] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.089940][ T4764] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.134930][ T4764] BTRFS info (device loop2): creating free space tree [ 120.144359][ T4764] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.154007][ T4764] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.372723][ T4777] loop1: detected capacity change from 0 to 131072 [ 120.473371][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.531090][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.442917][ T4777] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.724839][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.779439][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.814729][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 121.825895][ T4777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.828453][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.878792][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.897341][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.946448][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.969059][ T4731] team0: Port device team_slave_0 added [ 121.992089][ T4178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4178) [ 122.036664][ T4731] team0: Port device team_slave_1 added [ 122.906339][ T4662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.984041][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.006084][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.023914][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.094619][ T4731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.111927][ T4731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.199598][ T4731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.882228][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 124.045638][ T4731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.052637][ T4731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.312005][ T4731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.368472][ T4731] device hsr_slave_0 entered promiscuous mode [ 124.397774][ T4731] device hsr_slave_1 entered promiscuous mode [ 124.453784][ T4842] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by ""[4842] [ 125.051013][ T4731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.092524][ T4731] Cannot create hsr debugfs directory [ 125.413696][ T4662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.511009][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.527171][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.365088][ T4731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.431985][ T4731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.574813][ T4731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.776048][ T4731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.396568][ T4870] device syzkaller0 entered promiscuous mode [ 128.418916][ T4731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.541799][ T4731] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.578797][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.599624][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.694182][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.714022][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.829803][ T4662] device veth0_vlan entered promiscuous mode [ 128.956237][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.035689][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.255684][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.474635][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.767824][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.775023][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.783005][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.792031][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.802853][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.810029][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.911813][ T4897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.145'. [ 129.923916][ T4897] siw: device registration error -23 [ 130.011986][ T4302] device hsr_slave_0 left promiscuous mode [ 130.636709][ T4302] device hsr_slave_1 left promiscuous mode [ 130.658515][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.704893][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.740508][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.782761][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.792750][ T4302] device bridge_slave_1 left promiscuous mode [ 130.810090][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.828094][ T4302] device bridge_slave_0 left promiscuous mode [ 130.849974][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.915635][ T4302] device veth1_macvtap left promiscuous mode [ 130.922306][ T4302] device veth0_macvtap left promiscuous mode [ 130.941835][ T4302] device veth1_vlan left promiscuous mode [ 130.958317][ T4302] device veth0_vlan left promiscuous mode [ 132.101362][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 132.118961][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 132.137152][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.822810][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.899040][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905424][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.973322][ T4302] bond0 (unregistering): Released all slaves [ 133.170399][ T4662] device veth1_vlan entered promiscuous mode [ 133.184032][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.192658][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.200955][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.210557][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.221514][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.231159][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.267530][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.278908][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.350495][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.360429][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.371292][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.414354][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.449152][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.503698][ T4662] device veth0_macvtap entered promiscuous mode [ 133.515348][ T4731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.534345][ T4731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.556928][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.572835][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.601858][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.634999][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.679613][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.698273][ T4662] device veth1_macvtap entered promiscuous mode [ 133.794321][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.803520][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.892186][ T4662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.919805][ T4662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.938460][ T4662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.952225][ T4662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.972823][ T4662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.099766][ T4662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.202247][ T4957] xt_bpf: check failed: parse error [ 134.209690][ T4662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.225118][ T4662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.244918][ T4662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.601781][ T4662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.766933][ T4662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.886229][ T4662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.920337][ T4662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.954786][ T4662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.009409][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.037621][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.046954][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.063884][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.095278][ T4662] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.134142][ T4662] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.168188][ T4662] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.192010][ T4662] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.209421][ T4969] MPTCP: addr_signal error, rm_addr=1 [ 135.448394][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.459420][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.495037][ T4731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.533576][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.580543][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.599108][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.630746][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.649350][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.691372][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.631844][ T4999] netlink: 79 bytes leftover after parsing attributes in process `syz.5.105'. [ 136.654762][ T5005] loop3: detected capacity change from 0 to 128 [ 136.695294][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.105'. [ 136.714361][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.105'. [ 136.755779][ T5005] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 136.783666][ T4997] netlink: 'syz.5.105': attribute type 11 has an invalid length. [ 137.850382][ T5016] loop1: detected capacity change from 0 to 512 [ 137.942436][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.961115][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.054717][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.117678][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.201857][ T4343] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 138.244878][ T4731] device veth0_vlan entered promiscuous mode [ 138.348515][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.460025][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.849383][ T4731] device veth1_vlan entered promiscuous mode [ 138.943590][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.117959][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.138592][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.278171][ T4731] device veth0_macvtap entered promiscuous mode [ 139.963395][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.021100][ T4731] device veth1_macvtap entered promiscuous mode [ 140.243335][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.317863][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.356039][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.393205][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.428972][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.441551][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.452219][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.491426][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.639303][ T4731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.688544][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.699188][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.709315][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.719901][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.729850][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.740539][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.750546][ T4731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.761361][ T4731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.780349][ T4731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.803767][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.888420][ T5055] blk_update_request: I/O error, dev loop11, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 140.900478][ T5055] hfsplus: unable to find HFS+ superblock [ 141.460286][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.496184][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.550234][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.625834][ T4731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.657419][ T4731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.687016][ T4731] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.723553][ T4731] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.594124][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.177'. [ 144.763762][ T26] audit: type=1326 audit(2000000002.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 144.867712][ T5091] loop2: detected capacity change from 0 to 7 [ 144.874040][ T26] audit: type=1326 audit(2000000002.930:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 144.936203][ T4176] loop2: [ 144.939463][ T4176] loop2: partition table partially beyond EOD, truncated [ 144.978173][ T26] audit: type=1326 audit(2000000002.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 145.013043][ T26] audit: type=1326 audit(2000000002.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 145.048695][ T5091] loop2: [ 145.051709][ T5091] loop2: partition table partially beyond EOD, truncated [ 145.056402][ T26] audit: type=1326 audit(2000000002.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 145.088500][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.403425][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.985714][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.116692][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.140555][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.149057][ T26] audit: type=1326 audit(2000000002.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 146.254763][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.445519][ T26] audit: type=1326 audit(2000000002.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 146.863529][ T26] audit: type=1326 audit(2000000002.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 147.242285][ T5111] Cannot find add_set index 0 as target [ 147.355590][ T5113] netlink: 276 bytes leftover after parsing attributes in process `syz.2.188'. [ 147.409722][ T5113] tipc: Enabling of bearer rejected, failed to enable media [ 147.426455][ T26] audit: type=1326 audit(2000000002.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 148.403041][ T26] audit: type=1326 audit(2000000002.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5089 comm="syz.3.183" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2070590e99 code=0x7ffc0000 [ 148.542933][ T5134] device syzkaller0 entered promiscuous mode [ 148.716863][ T5140] 9pnet_virtio: no channels available for device syz [ 148.960584][ T5142] device syzkaller0 entered promiscuous mode [ 148.992968][ T5147] tipc: Enabled bearer , priority 0 [ 149.044413][ T5142] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 149.046731][ T5151] loop5: detected capacity change from 0 to 764 [ 149.886778][ T5147] tipc: Resetting bearer [ 150.729394][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 150.729651][ T26] audit: type=1107 audit(2000000008.330:14): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 152.046466][ T5141] tipc: Resetting bearer [ 152.092278][ T5141] tipc: Disabling bearer [ 152.266181][ T4175] tipc: Node number set to 2073520170 [ 153.748275][ T5191] ODEBUG: Out of memory. ODEBUG disabled [ 155.250402][ T5194] tipc: Enabled bearer , priority 0 [ 155.275151][ T5194] device syzkaller0 entered promiscuous mode [ 157.047678][ T5209] tipc: Resetting bearer [ 157.066627][ T4813] tipc: Node number set to 3361351201 [ 157.794710][ T5192] tipc: Resetting bearer [ 157.924573][ T5192] tipc: Disabling bearer [ 158.127526][ T5225] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 158.566765][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 158.839761][ T5219] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 158.856562][ T5233] loop2: detected capacity change from 0 to 64 [ 158.873996][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 158.965366][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 159.095880][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 159.158406][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 159.233428][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 159.243898][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 160.455882][ T5242] attempt to access beyond end of device [ 160.455882][ T5242] loop2: rw=2049, want=160, limit=64 [ 160.467513][ T5242] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 160.486439][ T26] audit: type=1800 audit(2000000018.550:15): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.215" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 161.362277][ T5242] attempt to access beyond end of device [ 161.362277][ T5242] loop2: rw=2049, want=161, limit=64 [ 161.700889][ T5242] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 161.731350][ T5242] attempt to access beyond end of device [ 161.731350][ T5242] loop2: rw=2049, want=162, limit=64 [ 162.479733][ T5263] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 162.590419][ T5270] gfs2: gfs2 mount does not exist [ 162.601247][ T5242] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 162.788126][ T5242] attempt to access beyond end of device [ 162.788126][ T5242] loop2: rw=2049, want=163, limit=64 [ 163.057476][ T5242] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 163.075755][ T5242] attempt to access beyond end of device [ 163.075755][ T5242] loop2: rw=2049, want=164, limit=64 [ 163.216883][ T5242] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 163.328473][ T5242] attempt to access beyond end of device [ 163.328473][ T5242] loop2: rw=2049, want=168, limit=64 [ 163.581175][ T5242] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 163.756225][ T5242] attempt to access beyond end of device [ 163.756225][ T5242] loop2: rw=2049, want=170, limit=64 [ 163.820814][ T5242] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 163.830684][ T5242] attempt to access beyond end of device [ 163.830684][ T5242] loop2: rw=2049, want=172, limit=64 [ 163.855597][ T5242] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 163.865021][ T5242] attempt to access beyond end of device [ 163.865021][ T5242] loop2: rw=2049, want=173, limit=64 [ 163.876722][ T5242] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 163.885529][ T5242] attempt to access beyond end of device [ 163.885529][ T5242] loop2: rw=2049, want=174, limit=64 [ 163.911444][ T5242] Buffer I/O error on dev loop2, logical block 173, lost async page write [ 163.966414][ T5273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.145516][ T5301] UBIFS error (pid: 5301): cannot open "./file0", error -22 [ 164.164978][ T5301] loop1: detected capacity change from 0 to 256 [ 164.193522][ T5300] loop2: detected capacity change from 0 to 256 [ 164.229472][ T5300] exfat: Bad value for 'time_offset' [ 167.304359][ T5322] Cannot find del_set index 0 as target [ 168.878713][ T5330] loop3: detected capacity change from 0 to 512 [ 168.951032][ T5330] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 169.136968][ T5330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 169.194815][ T5330] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.201211][ T5330] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.238: bad orphan inode 267 [ 169.259100][ T5330] EXT4-fs (loop3): Remounting filesystem read-only [ 169.341307][ T5330] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 169.931597][ T5327] ip6t_srh: unknown srh invflags 4000 [ 170.031106][ T5330] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.238: dx entry: limit 0 != root limit 125 [ 170.103391][ T5330] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.238: Corrupt directory, running e2fsck is recommended [ 170.173968][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 170.204624][ T5357] device dummy0 entered promiscuous mode [ 170.217113][ T5357] device macvtap1 entered promiscuous mode [ 171.691001][ T5377] loop1: detected capacity change from 0 to 128 [ 173.045613][ T5377] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 173.062492][ T5388] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 179.707004][ T5459] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 184.825351][ T5497] loop6: detected capacity change from 0 to 512 [ 184.954917][ T5497] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 184.968142][ T5497] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 187.071814][ T5497] EXT4-fs: error -4 creating inode table initialization thread [ 187.081179][ T5497] EXT4-fs (loop6): mount failed [ 188.989690][ T5541] device syzkaller0 entered promiscuous mode [ 189.358601][ T5552] netlink: 'syz.6.288': attribute type 10 has an invalid length. [ 189.408230][ T5552] team0: Device veth1_vlan failed to register rx_handler [ 189.875007][ T5550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.289'. [ 190.379983][ T5560] device syzkaller0 entered promiscuous mode [ 190.808464][ T5567] device syzkaller0 entered promiscuous mode [ 191.043981][ T5567] tipc: Enabled bearer , priority 0 [ 191.510637][ T4813] Bluetooth: hci2: command 0x0406 tx timeout [ 191.516898][ T5566] tipc: Resetting bearer [ 191.522887][ T4813] Bluetooth: hci1: command 0x0406 tx timeout [ 191.539614][ T4813] Bluetooth: hci3: command 0x0406 tx timeout [ 191.648990][ T5566] tipc: Disabling bearer [ 193.997764][ T5615] fuse: Bad value for 'fd' [ 194.197684][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.212616][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.847311][ T5613] device syzkaller0 entered promiscuous mode [ 196.231072][ T5643] device syzkaller0 entered promiscuous mode [ 197.113987][ T5663] device syzkaller0 entered promiscuous mode [ 198.144747][ T5680] netlink: 288 bytes leftover after parsing attributes in process `syz.2.315'. [ 200.315870][ T5698] device syzkaller0 entered promiscuous mode [ 200.381182][ T5692] device syzkaller0 entered promiscuous mode [ 200.451738][ T5700] loop3: detected capacity change from 0 to 2048 [ 200.494005][ T5700] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 200.511629][ T5700] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 200.810289][ T5700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.300477][ T5702] bond1: (slave ip6gretap1): making interface the new active one [ 202.317008][ T5702] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 202.649997][ T5719] loop5: detected capacity change from 0 to 40427 [ 203.135745][ T5726] loop6: detected capacity change from 0 to 512 [ 203.229700][ T5726] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 203.252918][ T5719] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 203.260824][ T5719] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 203.338529][ T5726] EXT4-fs (loop6): 1 truncate cleaned up [ 203.344287][ T5726] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 204.367545][ T26] audit: type=1800 audit(2000000062.340:16): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.325" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 204.425678][ T5719] F2FS-fs (loop5): Found nat_bits in checkpoint [ 204.503329][ T5719] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 204.510526][ T5719] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 204.572313][ T5745] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 204.702881][ T5719] handle_bad_sector: 6 callbacks suppressed [ 204.702902][ T5719] attempt to access beyond end of device [ 204.702902][ T5719] loop5: rw=2049, want=78008, limit=40427 [ 204.737599][ T5746] attempt to access beyond end of device [ 204.737599][ T5746] loop5: rw=2049, want=80464, limit=40427 [ 204.896593][ T5746] attempt to access beyond end of device [ 204.896593][ T5746] loop5: rw=2049, want=80472, limit=40427 [ 206.517761][ T5754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'. [ 206.550871][ T5761] device veth0 entered promiscuous mode [ 206.566386][ T5754] siw: device registration error -23 [ 206.595454][ T4346] attempt to access beyond end of device [ 206.595454][ T4346] loop5: rw=1, want=45104, limit=40427 [ 206.744530][ T5760] device veth0 left promiscuous mode [ 210.297769][ T5808] loop5: detected capacity change from 0 to 512 [ 210.543388][ T5808] EXT4-fs (loop5): Test dummy encryption mode enabled [ 210.595616][ T5808] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.745791][ T5808] EXT4-fs: failed to create workqueue [ 213.813681][ T5808] EXT4-fs (loop5): mount failed [ 215.022886][ T5836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.349'. [ 215.032324][ T5836] siw: device registration error -23 [ 217.505665][ T5864] netlink: 292 bytes leftover after parsing attributes in process `syz.5.357'. [ 218.642272][ T5874] loop5: detected capacity change from 0 to 1024 [ 220.115194][ T5888] netlink: 'syz.5.362': attribute type 1 has an invalid length. [ 220.274857][ T5888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.317792][ T5893] bond2: (slave veth3): Enslaving as an active interface with a down link [ 220.383430][ T5899] device bond2 entered promiscuous mode [ 222.382197][ T5916] device syzkaller0 entered promiscuous mode [ 224.286884][ T5938] fuse: Bad value for 'fd' [ 226.403615][ T5953] xt_HMARK: spi-set and port-set can't be combined [ 227.603233][ T5979] netlink: 'syz.6.381': attribute type 2 has an invalid length. [ 228.645653][ T5983] device syzkaller0 entered promiscuous mode [ 229.657244][ T26] audit: type=1326 audit(2000000086.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ac208e99 code=0x7ffc0000 [ 229.693972][ T26] audit: type=1326 audit(2000000086.710:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ac208e99 code=0x7ffc0000 [ 229.724603][ T26] audit: type=1326 audit(2000000086.710:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69ac1c96ce code=0x7ffc0000 [ 230.433822][ T26] audit: type=1326 audit(2000000086.710:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69ac1c96ce code=0x7ffc0000 [ 230.458699][ T26] audit: type=1326 audit(2000000086.710:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ac208e99 code=0x7ffc0000 [ 230.499467][ T26] audit: type=1326 audit(2000000086.710:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ac208e99 code=0x7ffc0000 [ 231.551029][ T6015] loop6: detected capacity change from 0 to 2048 [ 232.248599][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 232.952890][ T6017] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.025256][ T26] audit: type=1326 audit(2000000086.710:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f69ac208e99 code=0x7ffc0000 [ 233.535902][ T26] audit: type=1326 audit(2000000086.710:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ac208e99 code=0x7ffc0000 [ 233.560387][ T26] audit: type=1326 audit(2000000086.710:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ac208e99 code=0x7ffc0000 [ 233.584420][ T26] audit: type=1326 audit(2000000086.710:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.5.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f69ac1c96ce code=0x7ffc0000 [ 233.718779][ T6015] syz.6.395 (6015) used greatest stack depth: 19888 bytes left [ 233.728508][ T6022] device syzkaller0 entered promiscuous mode [ 234.206669][ T6024] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 235.034594][ T6038] loop1: detected capacity change from 0 to 16 [ 235.426134][ T6051] device syzkaller0 entered promiscuous mode [ 235.492250][ T6051] tipc: Started in network mode [ 235.527275][ T6038] erofs: (device loop1): mounted with root inode @ nid 36. [ 235.575390][ T6051] tipc: Node identity 429a01a0e103, cluster identity 4711 [ 235.764648][ T6051] tipc: Enabled bearer , priority 0 [ 236.545130][ T6055] tipc: Resetting bearer [ 237.413678][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 237.423590][ T6055] tipc: Disabling bearer [ 238.031256][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 238.340620][ T4175] tipc: Node number set to 2744713632 [ 238.490529][ T6079] tipc: Enabled bearer , priority 0 [ 238.498139][ T6079] device syzkaller0 entered promiscuous mode [ 238.515937][ T6079] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 241.609719][ T6096] tipc: Resetting bearer [ 241.652985][ T6112] loop1: detected capacity change from 0 to 256 [ 241.682455][ T6096] tipc: Disabling bearer [ 241.829564][ T6111] device syzkaller0 entered promiscuous mode [ 241.867439][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.6.418'. [ 241.876882][ T6115] siw: device registration error -23 [ 243.104028][ T6135] netlink: 'syz.1.417': attribute type 2 has an invalid length. [ 243.474871][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 243.946603][ T6141] loop2: detected capacity change from 0 to 256 [ 244.113678][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.872323][ T6181] process 'syz.2.431' launched '/dev/fd/6' with NULL argv: empty string added [ 249.786446][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.5.433'. [ 250.478894][ T6185] lo speed is unknown, defaulting to 1000 [ 251.267576][ T6185] lo speed is unknown, defaulting to 1000 [ 251.456883][ T6209] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 251.460407][ T6185] lo speed is unknown, defaulting to 1000 [ 251.480642][ T6209] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 253.267741][ T6185] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 253.289887][ T6185] lo speed is unknown, defaulting to 1000 [ 253.297396][ T6185] lo speed is unknown, defaulting to 1000 [ 253.322802][ T6185] lo speed is unknown, defaulting to 1000 [ 253.335494][ T6185] lo speed is unknown, defaulting to 1000 [ 253.342275][ T6185] lo speed is unknown, defaulting to 1000 [ 253.349593][ T6185] lo speed is unknown, defaulting to 1000 [ 253.403747][ T6214] tc action pedit 'at' offset 4 out of bounds [ 253.982219][ T6227] loop3: detected capacity change from 0 to 4096 [ 254.778134][ T6229] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.783708][ T6227] NILFS (loop3): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 254.798258][ T6227] NILFS (loop3): error -5 getting root inode [ 254.882197][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.446'. [ 255.040826][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.445'. [ 255.222727][ T6238] tipc: Started in network mode [ 255.231225][ T6238] tipc: Node identity 4e5cbaedc18e, cluster identity 4711 [ 255.275362][ T6238] tipc: Enabled bearer , priority 0 [ 255.636353][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.640612][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 255.647185][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.282283][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 256.341366][ T6254] netlink: 'syz.5.449': attribute type 1 has an invalid length. [ 257.448924][ T6258] loop3: detected capacity change from 0 to 2048 [ 257.467809][ T6254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.490260][ T5690] tipc: Node number set to 2412952301 [ 257.507197][ T6230] tipc: Disabling bearer [ 257.543392][ T6264] device macvlan2 entered promiscuous mode [ 257.580938][ T6264] device bond3 entered promiscuous mode [ 257.643148][ T6258] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 257.678455][ T6264] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 257.726654][ T6264] team0: Port device macvlan2 added [ 257.740904][ T6269] bond3: (slave ip6gretap2): making interface the new active one [ 257.833115][ T6269] device ip6gretap2 entered promiscuous mode [ 257.902266][ T6269] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 257.979097][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 258.307287][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 258.458768][ T6269] syz.5.449 (6269) used greatest stack depth: 19632 bytes left [ 258.538779][ T4187] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 258.634681][ T6299] syz.6.454 uses obsolete (PF_INET,SOCK_PACKET) [ 259.153645][ T6313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.239343][ T6328] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 262.554773][ T6352] loop6: detected capacity change from 0 to 512 [ 264.912880][ T6352] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 265.051955][ T6362] netlink: 168 bytes leftover after parsing attributes in process `syz.2.469'. [ 265.103858][ T6352] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 265.245070][ T6366] loop2: detected capacity change from 0 to 2048 [ 265.265226][ T6352] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.316529][ T6370] tc action pedit 'at' offset -2147483648 out of bounds [ 265.330866][ T6366] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.469: Bad quota inum: 8, type: 2 [ 265.407462][ T6366] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=8). Please run e2fsck to fix. [ 265.501205][ T6366] EXT4-fs (loop2): mount failed [ 266.142630][ T6378] device syzkaller0 entered promiscuous mode [ 266.159599][ T6378] tipc: Enabled bearer , priority 0 [ 266.225279][ T6378] tipc: Resetting bearer [ 267.660066][ T6377] tipc: Resetting bearer [ 267.675046][ T6377] tipc: Disabling bearer [ 268.519006][ T6386] device syzkaller0 entered promiscuous mode [ 268.563401][ T6392] device syzkaller0 entered promiscuous mode [ 268.610088][ T6386] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.477'. [ 268.623427][ T6392] 0: reclassify loop, rule prio 0, protocol 800 [ 269.159246][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 269.169464][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 269.179665][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 269.189918][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 269.200048][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 270.414274][ T6412] device syzkaller0 entered promiscuous mode [ 271.025200][ T6411] tc action pedit 'at' offset 6 out of bounds [ 271.173523][ T6412] tipc: Enabled bearer , priority 0 [ 271.281346][ T6412] tipc: Resetting bearer [ 271.531353][ T6410] tipc: Resetting bearer [ 271.686032][ T6410] tipc: Disabling bearer [ 272.127624][ T6444] device syzkaller0 entered promiscuous mode [ 272.281205][ T6449] loop1: detected capacity change from 0 to 1024 [ 272.307919][ T6449] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 272.333180][ T6449] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.390100][ T6449] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,mblk_io_submit,,errors=continue. Quota mode: none. [ 274.404608][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 274.416821][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 274.424422][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 274.434511][ T4198] Workqueue: hci2 hci_rx_work [ 274.439261][ T4198] Call Trace: [ 274.442566][ T4198] [ 274.445529][ T4198] dump_stack_lvl+0x188/0x250 [ 274.450250][ T4198] ? show_regs_print_info+0x20/0x20 [ 274.455484][ T4198] ? load_image+0x410/0x410 [ 274.460036][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 274.465182][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 274.469887][ T4198] ? kthread+0x42e/0x520 [ 274.474195][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 274.479419][ T4198] kobject_add_internal+0x5ba/0xcd0 [ 274.484663][ T4198] kobject_add+0x160/0x230 [ 274.489142][ T4198] ? kobject_init+0x1c0/0x1c0 [ 274.493839][ T4198] ? __raw_spin_lock_init+0x41/0x100 [ 274.499141][ T4198] ? klist_children_get+0x50/0x50 [ 274.504181][ T4198] ? get_device_parent+0x121/0x3e0 [ 274.509309][ T4198] device_add+0x470/0x1050 [ 274.513765][ T4198] ? device_initialize+0x2a5/0x4d0 [ 274.518898][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 274.523861][ T4198] le_conn_complete_evt+0xc2e/0x14d0 [ 274.529177][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 274.534328][ T4198] ? __mutex_trylock_common+0x15c/0x260 [ 274.539922][ T4198] hci_le_meta_evt+0x285/0x3ca0 [ 274.544805][ T4198] ? hci_event_packet+0x363/0x1310 [ 274.549937][ T4198] ? __lock_acquire+0x7b50/0x7b50 [ 274.554990][ T4198] ? hci_remote_host_features_evt+0x240/0x240 [ 274.561078][ T4198] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 274.566733][ T4198] ? mark_lock+0x94/0x320 [ 274.571079][ T4198] ? mutex_unlock+0x10/0x10 [ 274.575596][ T4198] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 274.581719][ T4198] ? lock_chain_count+0x20/0x20 [ 274.586594][ T4198] ? __rwlock_init+0x140/0x140 [ 274.591393][ T4198] hci_event_packet+0xe0b/0x1310 [ 274.596356][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 274.601221][ T4198] ? rcu_lock_release+0x20/0x20 [ 274.606095][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 274.611309][ T4198] hci_rx_work+0x255/0xa10 [ 274.615755][ T4198] process_one_work+0x867/0xff0 [ 274.620637][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 274.626296][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 274.631605][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 274.636687][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 274.642252][ T4198] ? wq_worker_running+0x97/0x170 [ 274.647314][ T4198] worker_thread+0xad7/0x12a0 [ 274.652024][ T4198] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 274.657943][ T4198] kthread+0x42e/0x520 [ 274.662028][ T4198] ? rcu_lock_release+0x20/0x20 [ 274.666893][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 274.671490][ T4198] ret_from_fork+0x1f/0x30 [ 274.675933][ T4198] [ 274.685443][ T4198] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 274.698912][ T4198] Bluetooth: hci2: failed to register connection device [ 275.982310][ T6482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.500'. [ 275.991350][ T6482] siw: device registration error -23 [ 280.007226][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.5.513'. [ 280.414874][ T6522] device syzkaller0 entered promiscuous mode [ 280.593522][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 283.711918][ T6577] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 284.432815][ T6581] loop2: detected capacity change from 0 to 32768 [ 285.072055][ T6581] XFS: ikeep mount option is deprecated. [ 285.095524][ T6588] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 286.739735][ T6581] XFS (loop2): Mounting V5 Filesystem [ 286.862637][ T6581] XFS (loop2): Ending clean mount [ 286.877895][ T6581] XFS (loop2): Quotacheck needed: Please wait. [ 287.713932][ T6581] XFS (loop2): Quotacheck: Done. [ 287.752503][ T4193] XFS (loop2): Unmounting Filesystem [ 287.966141][ T6614] device syzkaller0 entered promiscuous mode [ 288.014641][ T6614] tipc: Enabled bearer , priority 0 [ 288.041110][ T6614] tipc: Resetting bearer [ 288.153634][ T6621] loop1: detected capacity change from 0 to 64 [ 288.213472][ T6613] tipc: Resetting bearer [ 288.257605][ T6613] tipc: Disabling bearer [ 288.520174][ T6623] loop5: detected capacity change from 0 to 4096 [ 290.757736][ T6633] device syzkaller0 entered promiscuous mode [ 290.787605][ T6635] loop1: detected capacity change from 0 to 512 [ 290.984523][ T6635] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.536: Unrecognised inode hash code 255 [ 291.329229][ T6635] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.536: Corrupt directory, running e2fsck is recommended [ 291.643144][ T6635] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 291.790101][ T6635] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.536: corrupted in-inode xattr [ 291.810624][ T6635] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.536: couldn't read orphan inode 15 (err -117) [ 291.822926][ T6635] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 292.361069][ T6652] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.536: Unrecognised inode hash code 255 [ 292.373030][ T6652] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.536: Corrupt directory, running e2fsck is recommended [ 292.388239][ T6652] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 4: comm syz.1.536: path /114/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 292.434732][ T6652] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 64: comm syz.1.536: path /114/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 292.528428][ T6641] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 293.680292][ T6674] hub 1-0:1.0: USB hub found [ 293.689301][ T6674] hub 1-0:1.0: 1 port detected [ 295.007881][ T6683] loop5: detected capacity change from 0 to 256 [ 296.514677][ T6702] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 297.728664][ T6698] device syzkaller0 entered promiscuous mode [ 298.045630][ T6709] syz.3.553 sent an empty control message without MSG_MORE. [ 299.759018][ T6720] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 299.768474][ T6720] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 299.778058][ T6720] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 299.827451][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 299.827466][ T26] audit: type=1800 audit(2000000155.814:32): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.556" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 300.196330][ T6728] loop1: detected capacity change from 0 to 32768 [ 300.502404][ T6737] lo speed is unknown, defaulting to 1000 [ 301.071997][ T6728] XFS: ikeep mount option is deprecated. [ 301.625790][ T6728] XFS (loop1): Mounting V5 Filesystem [ 302.803479][ T6728] XFS (loop1): log mount failed [ 305.452210][ T6780] 0: reclassify loop, rule prio 0, protocol 700 [ 305.804838][ T6798] tipc: Enabled bearer , priority 0 [ 306.465915][ T6792] tipc: Disabling bearer [ 306.782287][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.577'. [ 306.782874][ T6817] siw: device registration error -23 [ 307.669980][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.678450][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.686881][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.695275][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.703661][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.712020][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.720428][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.728836][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.737222][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.745612][ T6820] tc action pedit unable to extract header offset for header type (0x4) [ 307.754016][ T6820] 0: reclassify loop, rule prio 0, protocol 800 [ 309.939781][ T6849] input: syz0 as /devices/virtual/input/input6 [ 310.483843][ T6857] loop5: detected capacity change from 0 to 256 [ 310.596068][ T6857] exfat: Deprecated parameter 'utf8' [ 310.622616][ T6857] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 313.417325][ T6875] device syzkaller0 entered promiscuous mode [ 313.466582][ T6875] tipc: Enabled bearer , priority 0 [ 313.524597][ T6874] tipc: Resetting bearer [ 313.872468][ T6879] loop5: detected capacity change from 0 to 512 [ 313.897293][ T6874] tipc: Disabling bearer [ 313.946650][ T6879] EXT4-fs (loop5): inodes count not valid: 40 vs 32 [ 315.901638][ T6898] loop2: detected capacity change from 0 to 256 [ 316.789165][ T6909] loop1: detected capacity change from 0 to 256 [ 316.984269][ T6909] exfat: Deprecated parameter 'utf8' [ 317.076459][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.082952][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.098343][ T6909] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 317.164985][ T6916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.605'. [ 317.192401][ T6916] siw: device registration error -23 [ 317.436122][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'. [ 317.479508][ T6922] device syzkaller0 entered promiscuous mode [ 317.644716][ T6924] device syzkaller0 entered promiscuous mode [ 317.666395][ T6924] 0: reclassify loop, rule prio 0, protocol 800 [ 321.629834][ T6956] device syzkaller0 entered promiscuous mode [ 322.084780][ T6964] loop2: detected capacity change from 0 to 2048 [ 322.162619][ T6964] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 322.268590][ T6964] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 322.292079][ T6964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.507285][ T6984] autofs4:pid:6984:autofs_fill_super: called with bogus options [ 327.234559][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 327.242811][ T7018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 327.566277][ T7017] loop5: detected capacity change from 0 to 164 [ 327.715593][ T7018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.440033][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 332.450128][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 332.656229][ T7048] device veth0 entered promiscuous mode [ 333.130442][ T7042] device veth0 left promiscuous mode [ 333.440918][ T7057] loop3: detected capacity change from 0 to 512 [ 333.574005][ T7057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.642: bg 0: block 5: invalid block bitmap [ 333.686950][ T7057] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 333.873843][ T7057] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.642: invalid indirect mapped block 3 (level 2) [ 334.529368][ T7057] EXT4-fs (loop3): 1 orphan inode deleted [ 334.546968][ T7057] EXT4-fs (loop3): 1 truncate cleaned up [ 334.552674][ T7057] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: writeback. [ 335.314918][ T7079] netlink: 292 bytes leftover after parsing attributes in process `syz.6.648'. [ 339.123128][ T7074] Set syz1 is full, maxelem 6117 reached [ 339.170714][ T7104] loop2: detected capacity change from 0 to 2048 [ 339.449705][ T7104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.966828][ T7150] device syzkaller0 entered promiscuous mode [ 348.772108][ T7199] loop3: detected capacity change from 0 to 256 [ 350.929153][ T7223] loop2: detected capacity change from 0 to 2048 [ 351.701580][ T7225] device syzkaller0 entered promiscuous mode [ 351.718146][ T7223] NILFS (loop2): unrecognized mount option "ÈÍÜÊûä¬V°l [ 351.718146][ T7223] ´šnorecovery" [ 351.865062][ T7232] loop3: detected capacity change from 0 to 256 [ 352.017259][ T7234] xt_HMARK: spi-set and port-set can't be combined [ 352.798520][ T7236] netlink: 'syz.3.686': attribute type 2 has an invalid length. [ 353.569421][ T7243] device syzkaller0 entered promiscuous mode [ 353.802831][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.699'. [ 353.811893][ T7250] siw: device registration error -23 [ 354.619091][ T7243] tipc: Enabled bearer , priority 0 [ 354.653444][ T7243] tipc: Resetting bearer [ 354.696355][ T7239] tipc: Resetting bearer [ 354.862320][ T7239] tipc: Disabling bearer [ 354.901050][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 356.253746][ T7277] tipc: Enabled bearer , priority 0 [ 356.283382][ T7277] device syzkaller0 entered promiscuous mode [ 357.596919][ T7277] tipc: Resetting bearer [ 357.715113][ T7289] xt_cgroup: path and classid specified [ 357.807516][ T7274] tipc: Resetting bearer [ 357.828840][ T7274] tipc: Disabling bearer [ 357.843149][ T5690] tipc: Node number set to 3288823610 [ 357.954820][ T7293] xt_HMARK: spi-set and port-set can't be combined [ 358.293718][ T7295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.707915][ T7303] netlink: 292 bytes leftover after parsing attributes in process `syz.3.702'. [ 359.495369][ T7308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.704'. [ 359.504394][ T7308] siw: device registration error -23 [ 361.294166][ T7318] netlink: 40 bytes leftover after parsing attributes in process `syz.6.707'. [ 361.303414][ T7318] siw: device registration error -23 [ 363.885965][ T7342] loop5: detected capacity change from 0 to 512 [ 363.964128][ T7342] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 364.093908][ T7350] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 364.134464][ T7350] team0: Device veth1_vlan failed to register rx_handler [ 364.400379][ T7342] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 364.631813][ T7342] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.612485][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 370.621565][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 370.630623][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 370.638296][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 370.645852][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 370.653356][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 370.660794][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 370.668376][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 370.676449][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 370.684041][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 370.691690][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 370.699719][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 370.707630][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 370.715597][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 370.728420][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.735975][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.950771][ T7408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.110353][ T7419] loop3: detected capacity change from 0 to 2048 [ 374.141121][ T7426] netlink: 'syz.5.735': attribute type 9 has an invalid length. [ 374.149017][ T7426] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.735'. [ 375.385310][ T7424] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.529653][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.536044][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.302230][ T7459] netlink: 'syz.1.746': attribute type 10 has an invalid length. [ 379.738110][ T7459] team0: Device veth1_vlan failed to register rx_handler [ 379.840566][ T7466] loop2: detected capacity change from 0 to 2048 [ 380.941676][ T7477] loop6: detected capacity change from 0 to 64 [ 380.965648][ T7466] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 383.882983][ C1] hrtimer: interrupt took 52719 ns [ 386.899870][ T7557] loop2: detected capacity change from 0 to 64 [ 389.451995][ T7580] netlink: 'syz.1.773': attribute type 9 has an invalid length. [ 389.459831][ T7580] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.773'. [ 391.913146][ T7602] loop1: detected capacity change from 0 to 256 [ 391.922342][ T7599] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 391.971251][ T7599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 392.078286][ T7602] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 393.874380][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 395.196504][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 395.464686][ T7636] loop6: detected capacity change from 0 to 512 [ 395.760641][ T7636] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.789: bg 0: block 5: invalid block bitmap [ 396.505187][ T7636] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 396.523401][ T7636] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.789: invalid indirect mapped block 3 (level 2) [ 396.773946][ T7636] EXT4-fs (loop6): 1 orphan inode deleted [ 396.779745][ T7636] EXT4-fs (loop6): 1 truncate cleaned up [ 396.813352][ T7636] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: writeback. [ 398.603784][ T7664] netlink: 'syz.1.795': attribute type 11 has an invalid length. [ 399.412221][ T7669] block device autoloading is deprecated and will be removed. [ 399.463534][ T7668] block device autoloading is deprecated and will be removed. [ 400.314706][ T7674] loop6: detected capacity change from 0 to 2048 [ 400.413518][ T7674] NILFS (loop6): unrecognized mount option "ÈÍÜÊûä¬V°l [ 400.413518][ T7674] ´šnorecovery" [ 402.340209][ T7688] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 402.557659][ T7691] loop2: detected capacity change from 0 to 512 [ 402.599535][ T7691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 402.671199][ T7691] EXT4-fs (loop2): 1 truncate cleaned up [ 402.677001][ T7691] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 403.903798][ T7703] loop2: detected capacity change from 0 to 1024 [ 404.825799][ T7703] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 404.833442][ T7703] EXT4-fs (loop2): Ignoring removed orlov option [ 404.908417][ T7703] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,orlov,nodiscard,,errors=continue. Quota mode: writeback. [ 405.586079][ T7720] loop2: detected capacity change from 0 to 128 [ 405.615487][ T7720] EXT4-fs (loop2): Test dummy encryption mode enabled [ 405.738146][ T7720] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 405.813569][ T7720] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.304965][ T7744] loop5: detected capacity change from 0 to 512 [ 409.282850][ T7744] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 409.432075][ T7744] EXT4-fs (loop5): 1 truncate cleaned up [ 409.437978][ T7744] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 413.827917][ T7800] device syzkaller0 entered promiscuous mode [ 417.329012][ T7822] tipc: Enabled bearer , priority 2 [ 418.170962][ T7842] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 418.182114][ T7842] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 419.575618][ T7867] loop3: detected capacity change from 0 to 512 [ 419.607864][ T7867] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 419.717389][ T7867] EXT4-fs (loop3): 1 truncate cleaned up [ 419.723498][ T7867] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 421.043843][ T7866] syz.5.857 (7866) used greatest stack depth: 18640 bytes left [ 429.745846][ T7943] futex_wake_op: syz.2.869 tries to shift op by 144; fix this program [ 430.094932][ T7958] [ 430.097320][ T7958] ====================================================== [ 430.104370][ T7958] WARNING: possible circular locking dependency detected [ 430.111427][ T7958] syzkaller #0 Not tainted [ 430.115866][ T7958] ------------------------------------------------------ [ 430.122904][ T7958] syz.1.875/7958 is trying to acquire lock: [ 430.128814][ T7958] ffff888145941aa0 (&sb->s_type->i_mutex_key#30){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 430.140358][ T7958] [ 430.140358][ T7958] but task is already holding lock: [ 430.147747][ T7958] ffff88806246b120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 430.156846][ T7958] [ 430.156846][ T7958] which lock already depends on the new lock. [ 430.156846][ T7958] [ 430.167271][ T7958] [ 430.167271][ T7958] the existing dependency chain (in reverse order) is: [ 430.176304][ T7958] [ 430.176304][ T7958] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 430.183982][ T7958] __mutex_lock_common+0x1e5/0x2400 [ 430.189742][ T7958] mutex_lock_nested+0x17/0x20 [ 430.195063][ T7958] tcm_set_name+0x26/0x90 [ 430.199947][ T7958] function_make+0x195/0x350 [ 430.205089][ T7958] configfs_mkdir+0x511/0x9e0 [ 430.210313][ T7958] vfs_mkdir+0x386/0x570 [ 430.215102][ T7958] do_mkdirat+0x1dd/0x5c0 [ 430.219985][ T7958] __x64_sys_mkdir+0x6a/0x80 [ 430.225117][ T7958] do_syscall_64+0x4c/0xa0 [ 430.230103][ T7958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.236545][ T7958] [ 430.236545][ T7958] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 430.244835][ T7958] __mutex_lock_common+0x1e5/0x2400 [ 430.250583][ T7958] mutex_lock_nested+0x17/0x20 [ 430.255892][ T7958] configfs_rmdir+0x638/0x980 [ 430.261116][ T7958] vfs_rmdir+0x19d/0x410 [ 430.265925][ T7958] do_rmdir+0x27f/0x710 [ 430.270629][ T7958] __x64_sys_rmdir+0x45/0x50 [ 430.275903][ T7958] do_syscall_64+0x4c/0xa0 [ 430.280870][ T7958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.287316][ T7958] [ 430.287316][ T7958] -> #0 (&sb->s_type->i_mutex_key#30){++++}-{3:3}: [ 430.296046][ T7958] __lock_acquire+0x2c66/0x7b50 [ 430.301453][ T7958] lock_acquire+0x19e/0x400 [ 430.306528][ T7958] down_write+0x38/0x60 [ 430.311255][ T7958] configfs_depend_item_unlocked+0x14f/0x430 [ 430.317786][ T7958] usbg_make_tpg+0x1f3/0x580 [ 430.322936][ T7958] target_fabric_make_tpg+0xa0/0x6d0 [ 430.328767][ T7958] configfs_mkdir+0x511/0x9e0 [ 430.334019][ T7958] vfs_mkdir+0x386/0x570 [ 430.338820][ T7958] do_mkdirat+0x1dd/0x5c0 [ 430.343702][ T7958] __x64_sys_mkdir+0x6a/0x80 [ 430.348842][ T7958] do_syscall_64+0x4c/0xa0 [ 430.353794][ T7958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.360225][ T7958] [ 430.360225][ T7958] other info that might help us debug this: [ 430.360225][ T7958] [ 430.370457][ T7958] Chain exists of: [ 430.370457][ T7958] &sb->s_type->i_mutex_key#30 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 430.370457][ T7958] [ 430.385161][ T7958] Possible unsafe locking scenario: [ 430.385161][ T7958] [ 430.392615][ T7958] CPU0 CPU1 [ 430.397990][ T7958] ---- ---- [ 430.403358][ T7958] lock(&opts->dep_lock); [ 430.407783][ T7958] lock(gadget_subsys.su_mutex); [ 430.415421][ T7958] lock(&opts->dep_lock); [ 430.422362][ T7958] lock(&sb->s_type->i_mutex_key#30); [ 430.427840][ T7958] [ 430.427840][ T7958] *** DEADLOCK *** [ 430.427840][ T7958] [ 430.435991][ T7958] 5 locks held by syz.1.875/7958: [ 430.441019][ T7958] #0: ffff888145d84460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 430.450264][ T7958] #1: ffff888059241aa0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 430.461078][ T7958] #2: ffffffff8cc23e70 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 430.470834][ T7958] #3: ffffffff8cf21328 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 430.480505][ T7958] #4: ffff88806246b120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 430.490091][ T7958] [ 430.490091][ T7958] stack backtrace: [ 430.495986][ T7958] CPU: 0 PID: 7958 Comm: syz.1.875 Not tainted syzkaller #0 [ 430.503278][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 430.513341][ T7958] Call Trace: [ 430.516659][ T7958] [ 430.519601][ T7958] dump_stack_lvl+0x188/0x250 [ 430.524300][ T7958] ? load_image+0x410/0x410 [ 430.528821][ T7958] ? show_regs_print_info+0x20/0x20 [ 430.534039][ T7958] ? print_circular_bug+0x12b/0x1a0 [ 430.539248][ T7958] check_noncircular+0x296/0x330 [ 430.544200][ T7958] ? add_chain_block+0x9b0/0x9b0 [ 430.549145][ T7958] ? lockdep_lock+0xf1/0x1f0 [ 430.553755][ T7958] ? mark_lock+0x94/0x320 [ 430.558109][ T7958] ? mark_lock+0x94/0x320 [ 430.562447][ T7958] ? _find_first_zero_bit+0xd1/0xf0 [ 430.567659][ T7958] __lock_acquire+0x2c66/0x7b50 [ 430.572538][ T7958] ? verify_lock_unused+0x140/0x140 [ 430.577905][ T7958] ? __mutex_trylock_common+0x15c/0x260 [ 430.583485][ T7958] ? rcu_lock_release+0x20/0x20 [ 430.588363][ T7958] lock_acquire+0x19e/0x400 [ 430.592925][ T7958] ? configfs_depend_item_unlocked+0x14f/0x430 [ 430.599102][ T7958] ? __might_sleep+0xf0/0xf0 [ 430.603706][ T7958] ? __kasan_kmalloc+0xc6/0xe0 [ 430.608485][ T7958] ? read_lock_is_recursive+0x10/0x10 [ 430.613883][ T7958] ? mutex_lock_io_nested+0x60/0x60 [ 430.619106][ T7958] down_write+0x38/0x60 [ 430.623279][ T7958] ? configfs_depend_item_unlocked+0x14f/0x430 [ 430.629456][ T7958] configfs_depend_item_unlocked+0x14f/0x430 [ 430.635451][ T7958] usbg_make_tpg+0x1f3/0x580 [ 430.640062][ T7958] ? mutex_lock_io_nested+0x60/0x60 [ 430.645273][ T7958] ? usbg_drop_tport+0x20/0x20 [ 430.650056][ T7958] ? vscnprintf+0x80/0x80 [ 430.654405][ T7958] target_fabric_make_tpg+0xa0/0x6d0 [ 430.659704][ T7958] ? target_fabric_release_wwn+0xa0/0xa0 [ 430.665352][ T7958] configfs_mkdir+0x511/0x9e0 [ 430.670055][ T7958] vfs_mkdir+0x386/0x570 [ 430.674317][ T7958] do_mkdirat+0x1dd/0x5c0 [ 430.678662][ T7958] ? vfs_mkdir+0x570/0x570 [ 430.683097][ T7958] ? getname_flags+0x1f9/0x4f0 [ 430.687873][ T7958] __x64_sys_mkdir+0x6a/0x80 [ 430.692479][ T7958] do_syscall_64+0x4c/0xa0 [ 430.696909][ T7958] ? clear_bhb_loop+0x30/0x80 [ 430.701599][ T7958] ? clear_bhb_loop+0x30/0x80 [ 430.706298][ T7958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.712220][ T7958] RIP: 0033:0x7f6877080e99 [ 430.716651][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.736271][ T7958] RSP: 002b:00007f68752d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 430.744707][ T7958] RAX: ffffffffffffffda RBX: 00007f6877308fa0 RCX: 00007f6877080e99 [ 430.752704][ T7958] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 430.760686][ T7958] RBP: 00007f6877116eaf R08: 0000000000000000 R09: 0000000000000000 [ 430.768672][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.776656][ T7958] R13: 00007f6877309038 R14: 00007f6877308fa0 R15: 00007ffd52782658 [ 430.784650][ T7958] [ 439.954612][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.960973][ T1421] ieee802154 phy1 wpan1: encryption failed: -22