last executing test programs: 5.335302057s ago: executing program 3 (id=768): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 4.829526679s ago: executing program 3 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4000054) 4.332089531s ago: executing program 2 (id=780): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)="ff5fb99772024d", 0x800}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) 3.305189477s ago: executing program 2 (id=788): bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xf9f2, 0x0, 0xea, 0x44, 0x0, 0x8, 0x5}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 3.071298923s ago: executing program 2 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008010}, 0x48000) 3.014462225s ago: executing program 2 (id=791): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff) 2.636521424s ago: executing program 2 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000001c0)="100c060847f763ff07eed2000086", 0xe, 0xfffffffffffffffd) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x14, r5, 0x1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x12f4bc83d0d69c04}, 0x4000001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2.569881406s ago: executing program 3 (id=796): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa3", 0x9}], 0x1}}], 0x1, 0xf5) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) sendmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}], 0x1}}], 0x1, 0xf5) 2.531695417s ago: executing program 1 (id=798): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)="ff5fb99772024d", 0x800}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) 2.144722636s ago: executing program 0 (id=799): chdir(&(0x7f0000000180)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.125616817s ago: executing program 0 (id=801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20840}, 0xc000) 2.066541859s ago: executing program 0 (id=804): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket(0x28, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockname$packet(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 2.033813799s ago: executing program 4 (id=805): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff) 1.935416051s ago: executing program 4 (id=806): r0 = socket$inet_sctp(0x2, 0x1, 0x84) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x224}}, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xf9f2, 0x0, 0xea, 0x44, 0x0, 0x8, 0x5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200008c4) sendmmsg(r0, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000005c0)="a7", 0x1}], 0x1}}], 0x1, 0x4054) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 1.506297432s ago: executing program 2 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4000054) 1.505252682s ago: executing program 1 (id=808): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x110, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}]}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40), 0x0, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.476817483s ago: executing program 1 (id=809): r0 = socket$inet_sctp(0x2, 0x1, 0x84) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68010000000a01030000000000000000010000000900010073797a30000000006800060099b6770cba4b96d54e0564fd3c29e674a6c6be9a0295878f456b889ac018bc219c81c9372d53b32694e190b7df65b5b446607b201c2fc4b8e2de353661987744188fe1f37a67a472f667adffb0a44f6a6ef555777e87b5a9f79b4b79363dece9ee9c28dd690006008301f0dfeff0619747d132396e4b37ad571180f66e9e5f6f88d8a432e3d5c27fe0a7eba19570ecf7514b6d116494fe6ae662fa12a42d95f777e9127c7ecf7aa6b7923483deedfce5cae91d4b7214a8499f5e175d933e68cf800b2a82927d602120babbaa4d0000000c000440000000000000000365000600a80f2f2108305d71c694fc24d3421d6574273a64dd17588dcda7987e8604c6c4f7113836d86465a827066acdfa1180c5758cb9e80a8f9e37a6181e9027386ffe29431b612e8de28fd5e36c9785ed2a3c0e599ef02bffe176bde8f1d348d071ec4900000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100060008000b40000000000900010073797a30000000002c0004802800018008000100666962001c000280080003400000000108000140000000020800024000000001140000"], 0x224}}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xf9f2, 0x0, 0xea, 0x44, 0x0, 0x8, 0x5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200008c4) sendmmsg(r0, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000005c0)="a7", 0x1}], 0x1}}], 0x1, 0x4054) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 1.032224374s ago: executing program 4 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40001) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) epoll_pwait(r3, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x5, 0x7fffffff, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x86808, &(0x7f0000000180)=ANY=[]) fcntl$getownex(r3, 0x10, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c000380"], 0x38}}, 0x0) 993.587146ms ago: executing program 0 (id=811): chdir(&(0x7f0000000180)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000100)=""/51, 0x33) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 984.378446ms ago: executing program 3 (id=812): syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 938.067107ms ago: executing program 0 (id=813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 814.11734ms ago: executing program 3 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x48000) 532.969647ms ago: executing program 1 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20840}, 0xc000) 489.890348ms ago: executing program 0 (id=816): r0 = socket$inet_sctp(0x2, 0x1, 0x84) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x224}}, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xf9f2, 0x0, 0xea, 0x44, 0x0, 0x8, 0x5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200008c4) sendmmsg(r0, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000005c0)="a7", 0x1}], 0x1}}], 0x1, 0x4054) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 483.448919ms ago: executing program 3 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000001c0)="100c060847f763ff07eed2000086", 0xe, 0xfffffffffffffffd) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x14, r5, 0x1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x12f4bc83d0d69c04}, 0x4000001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a0502070000002cbd7000fde7df2505001a007f000001000000000000000000000000000000000000000000000000000000004be7ff"], 0x38}}, 0x40004) 385.91381ms ago: executing program 1 (id=818): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x40800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xf9f2, 0x0, 0xea, 0x44, 0x0, 0x8, 0x5}, 0x20) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 120.472357ms ago: executing program 1 (id=819): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)="ff5fb99772024d", 0x800}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 45.366929ms ago: executing program 4 (id=820): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x110, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}]}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40), 0x0, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 26.56236ms ago: executing program 4 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) setrlimit(0x6, &(0x7f0000000280)={0xe425, 0x1}) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 0s ago: executing program 4 (id=822): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa3", 0x9}], 0x1}}], 0x1, 0xf5) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0), 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) sendmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}], 0x1}}], 0x1, 0xf5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.83' (ED25519) to the list of known hosts. [ 28.587974][ T4315] cgroup: Unknown subsys name 'net' [ 28.889532][ T4315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.164326][ T4315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.900004][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.901679][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.903668][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.904908][ T4341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.906304][ T4341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.907583][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.909053][ T4341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.910777][ T4341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.912271][ T4341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.913558][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.914824][ T4341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.916198][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.917889][ T4341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.919184][ T4341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.919768][ T4342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.920547][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.922074][ T4342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.922813][ T4341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.923914][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.924923][ T4341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.925630][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.926973][ T4341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.928274][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.929236][ T4341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.931331][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.941690][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.942969][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.949259][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.970067][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.972150][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.067613][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.090576][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.120503][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.123518][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.131839][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.133178][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.134629][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.151008][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.152245][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.153812][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.168891][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.170134][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.171545][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.182018][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.183207][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.184651][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.187752][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.191737][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.192795][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.194488][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.196177][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.198010][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.199523][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.204034][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.209230][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.210357][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.211739][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.213202][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.214327][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.215792][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.229217][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.232070][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.235636][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.238620][ T4327] team0: Port device team_slave_0 added [ 30.242316][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.252158][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.254136][ T4327] team0: Port device team_slave_1 added [ 30.256612][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.269877][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.280057][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.281272][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.285038][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.290460][ T4330] team0: Port device team_slave_0 added [ 30.291694][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.292821][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.294244][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.296397][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.297675][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.301610][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.304567][ T4329] team0: Port device team_slave_0 added [ 30.306329][ T4329] team0: Port device team_slave_1 added [ 30.311435][ T4330] team0: Port device team_slave_1 added [ 30.312465][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.313703][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.315324][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.323748][ T4328] team0: Port device team_slave_0 added [ 30.329132][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.330303][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.334152][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.336269][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.337340][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.341322][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.345722][ T4328] team0: Port device team_slave_1 added [ 30.351343][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.352429][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.356200][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.418736][ T4327] device hsr_slave_0 entered promiscuous mode [ 30.457281][ T4327] device hsr_slave_1 entered promiscuous mode [ 30.499756][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.500924][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.504719][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.507390][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.508550][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.512379][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.520307][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.521435][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.525098][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.529058][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.531866][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.578193][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.617231][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.657059][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.658365][ T4330] Cannot create hsr debugfs directory [ 30.672662][ T4331] team0: Port device team_slave_0 added [ 30.708196][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.759507][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.797075][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.798440][ T4329] Cannot create hsr debugfs directory [ 30.810340][ T4331] team0: Port device team_slave_1 added [ 30.868190][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.907265][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.947107][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.948385][ T4328] Cannot create hsr debugfs directory [ 30.959338][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.960530][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.964470][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.971453][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.972576][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.976531][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.058835][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.097304][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.140622][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.141832][ T4331] Cannot create hsr debugfs directory [ 31.212374][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.272829][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.308164][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.348969][ T4327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.396553][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.439833][ T4327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.478131][ T4327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.519299][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.558219][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.598040][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.638386][ T4327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.684321][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.736303][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.769132][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.808130][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.841668][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.910520][ T4331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.937367][ T4338] Bluetooth: hci3: command 0x0409 tx timeout [ 31.961305][ T4331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.998637][ T4331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.017330][ T4337] Bluetooth: hci0: command 0x0409 tx timeout [ 32.018367][ T4337] Bluetooth: hci1: command 0x0409 tx timeout [ 32.019300][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 32.020235][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 32.042106][ T4331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.110362][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.114086][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.131051][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.132935][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.135742][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.140237][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.143833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.145287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.154079][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.155897][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.160482][ T1695] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.161713][ T1695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.163341][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.164875][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.166452][ T1695] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.167576][ T1695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.169988][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.171632][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.173059][ T1695] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.174178][ T1695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.175605][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.177540][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.184957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.194519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.196247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.198219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.199585][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.200978][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.206067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.208455][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.209996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.212785][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.217755][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.222383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.223856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.225195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.227836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.230922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.232318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.234287][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.239624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.241182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.243573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.245377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.251705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.253799][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.258837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.260478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.261848][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.262976][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.264699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.266159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.270025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.271514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.273001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.286082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.288862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.290411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.291906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.293569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.295513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.296876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.300182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.301753][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.302930][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.304241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.305822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.310559][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.315821][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.319111][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.321119][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.322689][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.324173][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.325654][ T1695] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.326741][ T1695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.336825][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.338913][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.340814][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.344876][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.349641][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.351292][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.352836][ T1695] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.353957][ T1695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.355503][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.356975][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.375021][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.376678][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.379202][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.381091][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.382839][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.384493][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.386039][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.389354][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.391081][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.392577][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.395316][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.396782][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.399119][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.402016][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.406546][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.420331][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.421722][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.428950][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.430182][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.431432][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.433795][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.436402][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.441161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.442914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.444419][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.445527][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.458977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.467871][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.469783][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.471251][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.472371][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.475279][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.476847][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.479949][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.498916][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.501265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.502592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.506679][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.510907][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.512711][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.516645][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.523337][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.524901][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.542608][ T4327] device veth0_vlan entered promiscuous mode [ 32.546149][ T4327] device veth1_vlan entered promiscuous mode [ 32.559022][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.560819][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.562381][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.563789][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.565096][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.568122][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.569600][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.570956][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.572393][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.573892][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.575333][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.576641][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.582638][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.593025][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.594688][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.596462][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.598181][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.599382][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.601082][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.602989][ T4330] device veth0_vlan entered promiscuous mode [ 32.605962][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.614986][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.616707][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.619092][ T4327] device veth0_macvtap entered promiscuous mode [ 32.620899][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.622334][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.623479][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.626130][ T4327] device veth1_macvtap entered promiscuous mode [ 32.638516][ T4330] device veth1_vlan entered promiscuous mode [ 32.648739][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.659194][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.662006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.663575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.664932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.666342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.670471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.672219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.673758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.690006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.691703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.693161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.694439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.696641][ T4328] device veth0_vlan entered promiscuous mode [ 32.700120][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.704305][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.705873][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.709078][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.710605][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.712512][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.714018][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.716426][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.718582][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.719914][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721219][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.725013][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.726283][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.732010][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.750384][ T4328] device veth1_vlan entered promiscuous mode [ 32.754731][ T4330] device veth0_macvtap entered promiscuous mode [ 32.756433][ T4329] device veth0_vlan entered promiscuous mode [ 32.758202][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.759934][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.761390][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.762792][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.764322][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.779235][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.780758][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.782644][ T4329] device veth1_vlan entered promiscuous mode [ 32.791704][ T4330] device veth1_macvtap entered promiscuous mode [ 32.798945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.800395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.801804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.803208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.804660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.811190][ T4328] device veth0_macvtap entered promiscuous mode [ 32.813698][ T4328] device veth1_macvtap entered promiscuous mode [ 32.824150][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.825970][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.832055][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.835560][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.837144][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.838552][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.840122][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.844445][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.846094][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.847841][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.849335][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.851562][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.854972][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.856374][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.859845][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.861642][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.863197][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.872391][ T4329] device veth0_macvtap entered promiscuous mode [ 32.874500][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.876109][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.879169][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.882691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.882809][ T1695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.884347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.885177][ T1695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.886652][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.893486][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.895086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.898169][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.899888][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.901494][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.903103][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.905258][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.912008][ T4329] device veth1_macvtap entered promiscuous mode [ 32.913864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.915294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.916665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.919213][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.921329][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.922724][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.924079][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.925345][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.940315][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.941992][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.945129][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.946560][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.948540][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.950050][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.955987][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.958825][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.960392][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.962060][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.963516][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.965111][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.968746][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.970294][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.972033][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.973668][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.975279][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.986357][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.989241][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.015000][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.016731][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.019131][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.020989][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.022942][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.024564][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.028130][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.030766][ T4331] device veth0_vlan entered promiscuous mode [ 33.034764][ T4331] device veth1_vlan entered promiscuous mode [ 33.043440][ T4331] device veth0_macvtap entered promiscuous mode [ 33.045929][ T4331] device veth1_macvtap entered promiscuous mode [ 33.052665][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.054346][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.055857][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.059646][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.061207][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.062872][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.064476][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.066088][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.071444][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.073687][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.075361][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.078344][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.080124][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.082144][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.083823][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.085410][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.088416][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.090799][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.094507][ T4331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.095903][ T4331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.097606][ T4331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.098863][ T4331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.109228][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.110850][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.112356][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.113841][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.115320][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.116771][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.119029][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.120700][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.122183][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.123764][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.125193][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.126783][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.145488][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.146909][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.149005][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.150331][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.250062][ T4410] binder: 4407:4410 ioctl c0306201 0 returned -14 [ 33.261319][ T4410] binder: 4407:4410 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.263496][ T4410] binder: 4410 RLIMIT_NICE not set [ 33.327282][ T4411] binder: 4407:4411 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 34.027076][ T4338] Bluetooth: hci3: command 0x041b tx timeout [ 34.097205][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 34.098326][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 34.099306][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 34.100369][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 34.277180][ T1695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.278460][ T1695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.333799][ T1695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.351251][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.352699][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.354065][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.355235][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.356603][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.359425][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.372825][ T1603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.374128][ T1603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.375521][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.676590][ T1603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.678486][ T1695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.681814][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.681968][ T1695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.683160][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.684551][ T1603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.685600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.689115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.690631][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.704594][ T1603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.706133][ T1603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.708345][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.785574][ T4420] loop3: detected capacity change from 0 to 4096 [ 35.301698][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3'. [ 35.454945][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.456565][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.664664][ T4437] loop0: detected capacity change from 0 to 4096 [ 35.735853][ T4439] loop4: detected capacity change from 0 to 4096 [ 35.812894][ T4420] EXT4-fs: Ignoring removed bh option [ 35.815362][ T4437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.818509][ T4420] EXT4-fs (loop3): Test dummy encryption mode enabled [ 35.822856][ T4420] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 36.097547][ T4338] Bluetooth: hci3: command 0x040f tx timeout [ 36.171634][ T4439] EXT4-fs: Ignoring removed bh option [ 36.173996][ T4439] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.175780][ T4439] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 36.188559][ T4338] Bluetooth: hci0: command 0x040f tx timeout [ 36.188578][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 36.190070][ T4338] Bluetooth: hci4: command 0x040f tx timeout [ 36.190727][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 36.391438][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 37.323046][ T4460] loop1: detected capacity change from 0 to 4096 [ 37.335489][ T4460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.424868][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 37.545085][ T4463] loop3: detected capacity change from 0 to 4096 [ 37.873511][ T4463] EXT4-fs: Ignoring removed bh option [ 37.899923][ T4463] EXT4-fs (loop3): Test dummy encryption mode enabled [ 37.901493][ T4463] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 38.109941][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 38.458720][ T4344] Bluetooth: hci4: command 0x0419 tx timeout [ 38.458751][ T4337] Bluetooth: hci1: command 0x0419 tx timeout [ 38.460984][ T4344] Bluetooth: hci3: command 0x0419 tx timeout [ 38.461002][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 38.463185][ T4344] Bluetooth: hci2: command 0x0419 tx timeout [ 39.665096][ T4501] loop0: detected capacity change from 0 to 4096 [ 40.201594][ T4501] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 40.207493][ T4501] ntfs3: loop0: Failed to load $Extend. [ 41.645689][ T4516] binder: 4509:4516 ioctl c0306201 0 returned -14 [ 41.673400][ T4516] binder: 4509:4516 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 42.016991][ C0] sched: RT throttling activated [ 42.584031][ T4327] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 42.588510][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 42.602462][ T4327] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 42.654416][ T4531] loop0: detected capacity change from 0 to 4096 [ 42.660357][ T4531] EXT4-fs: Ignoring removed bh option [ 42.663732][ T4530] loop4: detected capacity change from 0 to 4096 [ 42.673360][ T4531] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.674825][ T4531] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 42.712015][ T4530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.537584][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 44.161696][ T4550] loop2: detected capacity change from 0 to 4096 [ 44.219774][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 44.233175][ T4550] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 44.235846][ T4550] ntfs3: loop2: Failed to load $Extend. [ 44.756123][ T4567] loop4: detected capacity change from 0 to 4096 [ 45.149254][ T4575] loop0: detected capacity change from 0 to 4096 [ 45.155583][ T4567] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.156841][ T4575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.256720][ T4582] loop3: detected capacity change from 0 to 4096 [ 45.263329][ T4582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.387990][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 45.952165][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 46.447112][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 46.680709][ T4330] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 46.682560][ T4330] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 46.930224][ T4596] binder: 4592:4596 ioctl c0306201 0 returned -14 [ 46.941920][ T4596] binder: 4592:4596 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 47.054843][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 47.898069][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 47.898295][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 47.978882][ T4606] binder: 4604:4606 tried to acquire reference to desc 0, got 1 instead [ 47.985568][ T4600] loop2: detected capacity change from 0 to 4096 [ 47.989862][ T4606] binder: 4604:4606 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.991856][ T4606] binder: 4606 RLIMIT_NICE not set [ 47.992499][ T4606] binder: 4606 RLIMIT_NICE not set [ 47.994026][ T4606] binder: release 4604:4606 transaction 15 out, still active [ 47.995260][ T4606] binder: release 4604:4606 transaction 8 in, still active [ 47.996304][ T4606] binder: undelivered TRANSACTION_COMPLETE [ 47.999053][ T4606] binder: 4604:4606 got reply transaction with bad transaction stack, transaction 8 has target 0:0 [ 48.000581][ T4606] binder: 4604:4606 transaction reply to 0:0 failed 16/29201/-71, size 0-0 line 2961 [ 48.009135][ T4376] binder: release 4604:4606 transaction 8 out, still active [ 48.010351][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 48.011331][ T4376] binder: send failed reply for transaction 15, target dead [ 48.012479][ T4376] binder: send failed reply for transaction 8, target dead [ 48.013610][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.057726][ T4600] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 48.066837][ T4600] ntfs3: loop2: Failed to load $Extend. [ 48.206611][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 49.664139][ T4330] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 49.684176][ T4330] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 50.905480][ T4652] loop2: detected capacity change from 0 to 4096 [ 50.934043][ T4652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.953631][ T4659] binder: 4657:4659 tried to acquire reference to desc 0, got 1 instead [ 50.958853][ T4659] binder: 4657:4659 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.961149][ T4659] binder: 4659 RLIMIT_NICE not set [ 50.962087][ T4659] binder: 4659 RLIMIT_NICE not set [ 50.963582][ T4659] binder: release 4657:4659 transaction 28 out, still active [ 51.140136][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 51.972650][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 52.024986][ T4669] loop3: detected capacity change from 0 to 4096 [ 52.029252][ T4671] loop1: detected capacity change from 0 to 4096 [ 52.055117][ T4669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.086458][ T4671] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 52.091558][ T4671] ntfs3: loop1: Failed to load $Extend. [ 52.260053][ T4681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 52.935466][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 53.626422][ T4329] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 53.628945][ T4329] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 53.661257][ T4699] loop3: detected capacity change from 0 to 4096 [ 53.668262][ T4699] EXT4-fs: Ignoring removed bh option [ 53.682287][ T4699] EXT4-fs (loop3): Test dummy encryption mode enabled [ 53.758324][ T4699] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 55.870043][ T4742] fuse: Bad value for 'fd' [ 55.893483][ T4743] syz.4.77 uses obsolete (PF_INET,SOCK_PACKET) [ 56.687741][ T24] cfg80211: failed to load regulatory.db [ 57.902661][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 58.035892][ T4767] binder_user_error: 1 callbacks suppressed [ 58.035902][ T4767] binder: 4766:4767 got reply transaction with no transaction stack [ 58.042007][ T4767] binder_debug: 8 callbacks suppressed [ 58.042024][ T4767] binder: 4766:4767 transaction reply to 0:0 failed 30/29201/-71, size 0-0 line 2946 [ 58.045451][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.081952][ T4773] Zero length message leads to an empty skb [ 59.049074][ T4795] loop4: detected capacity change from 0 to 4096 [ 59.099748][ T4796] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.101527][ T4796] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 59.108268][ T4795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.234911][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 59.312986][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 59.590788][ T4812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'. [ 59.886259][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 60.011179][ T4821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 60.118511][ T4826] device syzkaller0 entered promiscuous mode [ 61.598239][ T4853] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 61.605963][ T4853] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 61.613310][ T4857] loop9: detected capacity change from 0 to 7 [ 61.618323][ T4317] Dev loop9: unable to read RDB block 7 [ 61.619473][ T4317] loop9: unable to read partition table [ 61.620590][ T4317] loop9: partition table beyond EOD, truncated [ 61.627461][ T4857] Dev loop9: unable to read RDB block 7 [ 61.629298][ T4857] loop9: unable to read partition table [ 61.630380][ T4857] loop9: partition table beyond EOD, truncated [ 61.631423][ T4857] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 61.635733][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 62.082533][ T4874] loop4: detected capacity change from 0 to 4096 [ 62.119192][ T4874] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 62.214206][ T4874] ntfs3: loop4: Failed to load $Extend. [ 63.387516][ T4331] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 63.389072][ T4331] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 63.394453][ T4884] device syzkaller0 entered promiscuous mode [ 64.528399][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.530316][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.886477][ T4910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.128'. [ 65.042090][ T4916] loop4: detected capacity change from 0 to 4096 [ 65.101191][ T4916] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 65.106675][ T4916] ntfs3: loop4: Failed to load $Extend. [ 65.656876][ T4928] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 65.659049][ T4928] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 66.109172][ T4935] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 66.111630][ T4935] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 66.117258][ T4331] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 66.118501][ T4331] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 66.185439][ T4940] binder: 4939:4940 got transaction to invalid handle, 1 [ 66.186872][ T4940] binder: 4940:4939 cannot find target node [ 66.190325][ T4940] binder: 4939:4940 transaction async to 0:0 failed 34/29201/-22, size 0-24 line 3045 [ 66.204450][ T3432] binder: undelivered TRANSACTION_ERROR: 29201 [ 66.293084][ T4946] binder: 4945:4946 tried to acquire reference to desc 0, got 1 instead [ 66.296138][ T4946] binder: 4945:4946 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 66.298948][ T4946] binder: 4946 RLIMIT_NICE not set [ 66.300055][ T4946] binder: 4946 RLIMIT_NICE not set [ 66.301492][ T4946] binder_alloc: 4945: binder_alloc_buf, no vma [ 66.302739][ T4946] binder: cannot allocate buffer: vma cleared, target dead or dying [ 66.302774][ T4946] binder: 4945:4946 transaction call to 4945:4946 failed 49/29189/-3, size 0-0 line 3230 [ 66.358075][ T4948] binder: 4945:4948 got reply transaction with no transaction stack [ 66.362055][ T4948] binder: 4945:4948 transaction reply to 0:0 failed 50/29201/-71, size 0-0 line 2946 [ 66.584863][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 67.118453][ T3900] binder: release 4945:4946 transaction 42 out, still active [ 67.119669][ T3900] binder: undelivered TRANSACTION_COMPLETE [ 67.120592][ T3900] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.126121][ T4482] binder: release 4945:4946 transaction 42 in, still active [ 67.804098][ T4992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.158'. [ 68.339880][ T4993] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 68.349054][ T4993] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 68.515784][ T5004] binder: 5002:5004 got transaction to invalid handle, 1 [ 68.519384][ T5004] binder: 5002:5004 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.526306][ T5006] loop4: detected capacity change from 0 to 512 [ 68.530403][ T5004] binder: 5004 RLIMIT_NICE not set [ 68.531953][ T5006] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.534068][ T5006] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.536532][ T5006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 68.539034][ T5006] System zones: 1-12 [ 68.541760][ T5006] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.164: bad orphan inode 16 [ 68.544004][ T5006] ext4_test_bit(bit=15, block=4) = 0 [ 68.545082][ T5006] EXT4-fs (loop4): 1 orphan inode deleted [ 68.546061][ T5006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 68.895058][ T5014] binder: 5002:5014 got transaction to invalid handle, 3 [ 70.306091][ T5040] binder: 5039:5040 ioctl c0306201 0 returned -14 [ 70.591855][ T5054] device syzkaller0 entered promiscuous mode [ 71.247317][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 71.254526][ T5055] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.270183][ T5055] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 72.470376][ T5087] device syzkaller0 entered promiscuous mode [ 73.783921][ T5105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.190'. [ 73.855786][ T5102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.191'. [ 74.535143][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 75.133738][ T5123] binder_user_error: 9 callbacks suppressed [ 75.133748][ T5123] binder: 5122:5123 tried to acquire reference to desc 0, got 1 instead [ 75.340235][ T5123] binder: 5122:5123 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.347305][ T5123] binder: 5123 RLIMIT_NICE not set [ 75.407122][ T5138] binder: 5122:5138 got reply transaction with no transaction stack [ 75.408532][ T5138] binder_debug: 26 callbacks suppressed [ 75.408537][ T5138] binder: 5122:5138 transaction reply to 0:0 failed 96/29201/-71, size 0-0 line 2946 [ 75.534285][ T4480] binder: release 5122:5123 transaction 88 out, still active [ 75.535641][ T4480] binder: undelivered TRANSACTION_COMPLETE [ 75.536482][ T4480] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.537768][ T4480] binder: send failed reply for transaction 95 to 5122:5123 [ 75.539043][ T4480] binder: undelivered TRANSACTION_COMPLETE [ 75.539920][ T4480] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.540911][ T4480] binder: send failed reply for transaction 88, target dead [ 75.996705][ T5170] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 76.018435][ T5170] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 76.208200][ T5182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.204'. [ 76.603800][ T5184] binder: 5179:5184 tried to acquire reference to desc 0, got 1 instead [ 76.618582][ T5184] binder: 5179:5184 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.620744][ T5184] binder: 5184 RLIMIT_NICE not set [ 76.623719][ T5184] binder: release 5179:5184 transaction 109 out, still active [ 76.625066][ T5184] binder: undelivered TRANSACTION_COMPLETE [ 76.631781][ T5184] binder: 5179:5184 got reply transaction with bad transaction stack, transaction 102 has target 5179:0 [ 76.721026][ T5186] device macsec1 entered promiscuous mode [ 79.710260][ T5257] device syzkaller0 entered promiscuous mode [ 80.028055][ T5261] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 80.039301][ T5261] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 81.971919][ T5286] binder: 5283:5286 tried to acquire reference to desc 0, got 1 instead [ 81.976467][ T5286] binder: 5283:5286 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.978978][ T5286] binder: 5286 RLIMIT_NICE not set [ 81.979937][ T5286] binder: 5286 RLIMIT_NICE not set [ 81.981483][ T5286] binder: 5283:5286 ioctl c0306201 0 returned -14 [ 82.043739][ T5292] binder: 5283:5292 got reply transaction with no transaction stack [ 82.046429][ T5292] binder_debug: 6 callbacks suppressed [ 82.046455][ T5292] binder: 5283:5292 transaction reply to 0:0 failed 122/29201/-71, size 0-0 line 2946 [ 82.511412][ T5301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 82.726802][ T5302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 82.775389][ T4546] binder: release 5283:5286 transaction 115 out, still active [ 82.776688][ T4546] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.778179][ T4546] binder: release 5283:5286 transaction 115 in, still active [ 82.780127][ T4546] binder: send failed reply for transaction 115, target dead [ 83.241671][ T5314] binder: 5304:5314 ioctl c0306201 0 returned -14 [ 83.243351][ T5314] binder: 5304:5314 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 83.245190][ T5314] binder: 5314 RLIMIT_NICE not set [ 85.360992][ T5323] device syzkaller0 entered promiscuous mode [ 85.395668][ T5333] loop0: detected capacity change from 0 to 512 [ 85.399512][ T5333] EXT4-fs: inline encryption not supported [ 85.400997][ T5333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.408197][ T5333] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 85.413524][ T5333] EXT4-fs (loop0): 1 truncate cleaned up [ 85.414464][ T5333] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.463724][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.473395][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.479693][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.483707][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.486304][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.489751][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.492059][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.495707][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.500432][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.504529][ T5333] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.251: bad extra_isize 62 (inode size 256) [ 85.643108][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 85.691232][ T5343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.701165][ T5343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.739922][ T5371] loop2: detected capacity change from 0 to 512 [ 87.038274][ T5371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.680653][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 87.775168][ T5377] loop4: detected capacity change from 0 to 512 [ 87.959362][ T5377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.542903][ T5383] loop2: detected capacity change from 0 to 512 [ 88.555756][ T5383] EXT4-fs: inline encryption not supported [ 88.565516][ T5383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.583558][ T5383] EXT4-fs (loop2): 1 truncate cleaned up [ 88.584583][ T5383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.673833][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.697866][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.713675][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.720223][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.726028][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.735109][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.748483][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.756958][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.766526][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.774824][ T5383] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.259: bad extra_isize 62 (inode size 256) [ 88.782841][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 88.940712][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 89.206840][ T5406] loop3: detected capacity change from 0 to 512 [ 90.139743][ T5406] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.308342][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 90.346813][ T5414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.353002][ T5414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.036534][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.065422][ T5444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.069557][ T5444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.080320][ T5439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.084668][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.117305][ T5440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.201628][ T5456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.203177][ T5456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.332739][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.335420][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.505012][ T5464] loop2: detected capacity change from 0 to 512 [ 100.555778][ T5464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.574919][ T5472] loop3: detected capacity change from 0 to 512 [ 100.576419][ T5472] EXT4-fs: inline encryption not supported [ 100.589533][ T5475] loop0: detected capacity change from 0 to 512 [ 100.589675][ T5472] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.592751][ T5475] EXT4-fs: inline encryption not supported [ 100.595499][ T5475] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.605841][ T5475] EXT4-fs (loop0): 1 truncate cleaned up [ 100.606714][ T5475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.609675][ T5472] EXT4-fs (loop3): 1 truncate cleaned up [ 100.610803][ T5472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.628041][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.632663][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.634996][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.639875][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.642730][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.646226][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.650719][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.654095][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.656543][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.661381][ T5475] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.283: bad extra_isize 62 (inode size 256) [ 100.662045][ T5479] device syzkaller0 entered promiscuous mode [ 100.683867][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 100.693200][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 100.705704][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 100.710549][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 100.715348][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 100.726053][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 100.750067][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 100.767474][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 100.819706][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 100.822275][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 100.824595][ T5472] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.281: bad extra_isize 62 (inode size 256) [ 101.190048][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 101.251508][ T5492] loop0: detected capacity change from 0 to 512 [ 101.253530][ T5494] loop4: detected capacity change from 0 to 512 [ 101.262746][ T5492] EXT4-fs: inline encryption not supported [ 101.266403][ T5492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.279259][ T5494] EXT4-fs: inline encryption not supported [ 101.283769][ T5494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.290764][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 101.293018][ T5492] EXT4-fs (loop0): 1 truncate cleaned up [ 101.294080][ T5492] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.321929][ T5494] EXT4-fs (loop4): 1 truncate cleaned up [ 101.323441][ T5494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.452709][ T5499] loop3: detected capacity change from 0 to 512 [ 101.454184][ T5499] EXT4-fs: inline encryption not supported [ 101.459438][ T5499] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.475278][ T5499] EXT4-fs (loop3): 1 truncate cleaned up [ 101.476219][ T5499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.488341][ T5494] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.288: bad extra_isize 62 (inode size 256) [ 101.494589][ T5494] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.288: bad extra_isize 62 (inode size 256) [ 101.502883][ T5494] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.288: bad extra_isize 62 (inode size 256) [ 101.503427][ T5499] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.289: bad extra_isize 62 (inode size 256) [ 101.507791][ T5499] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.289: bad extra_isize 62 (inode size 256) [ 101.510197][ T5499] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.289: bad extra_isize 62 (inode size 256) [ 101.510583][ T5494] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.288: bad extra_isize 62 (inode size 256) [ 101.514500][ T5499] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.289: bad extra_isize 62 (inode size 256) [ 101.517538][ T5499] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.289: bad extra_isize 62 (inode size 256) [ 101.520930][ T5494] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.288: bad extra_isize 62 (inode size 256) [ 101.525572][ T5494] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.288: bad extra_isize 62 (inode size 256) [ 101.546855][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 101.560984][ T5499] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.289: bad extra_isize 62 (inode size 256) [ 101.564373][ T5494] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.288: bad extra_isize 62 (inode size 256) [ 101.576208][ T5502] EXT4-fs (loop4): shut down requested (2) [ 101.577615][ T5501] EXT4-fs (loop3): shut down requested (2) [ 101.581262][ T5494] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #15: comm syz.4.288: bad extra_isize 62 (inode size 256) [ 101.585572][ T5499] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.289: bad extra_isize 62 (inode size 256) [ 101.630312][ T5504] loop0: detected capacity change from 0 to 512 [ 101.631764][ T5504] EXT4-fs: inline encryption not supported [ 101.677583][ T5504] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.754485][ T5504] EXT4-fs (loop0): 1 truncate cleaned up [ 101.755449][ T5504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.776051][ T5504] EXT4-fs (loop0): shut down requested (2) [ 101.923829][ T5510] loop2: detected capacity change from 0 to 512 [ 102.240506][ T5510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.648926][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 102.660125][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 102.879154][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 104.041516][ T5524] loop4: detected capacity change from 0 to 512 [ 104.150349][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 104.161635][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.492189][ T5531] loop0: detected capacity change from 0 to 512 [ 104.493597][ T5531] EXT4-fs: inline encryption not supported [ 105.158763][ T5534] loop2: detected capacity change from 0 to 512 [ 105.512648][ T5534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.847828][ T5531] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.859128][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 105.867994][ T5531] EXT4-fs (loop0): 1 truncate cleaned up [ 105.868845][ T5531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.054529][ T5531] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.296: bad extra_isize 62 (inode size 256) [ 106.087355][ T5531] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.296: bad extra_isize 62 (inode size 256) [ 106.119789][ T5548] EXT4-fs (loop0): shut down requested (2) [ 106.135724][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 106.591320][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 106.986471][ T5558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.988913][ T5558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.121703][ T5562] loop0: detected capacity change from 0 to 512 [ 107.327546][ T5562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 107.895719][ T5567] loop3: detected capacity change from 0 to 512 [ 107.915924][ T5567] EXT4-fs: inline encryption not supported [ 107.924161][ T5567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.929191][ T5568] loop2: detected capacity change from 0 to 512 [ 107.930649][ T5568] EXT4-fs: inline encryption not supported [ 107.942581][ T5567] EXT4-fs (loop3): 1 truncate cleaned up [ 107.943653][ T5567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.945297][ T5568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.965044][ T5568] EXT4-fs (loop2): 1 truncate cleaned up [ 107.966298][ T5568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.037897][ T5567] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.305: bad extra_isize 62 (inode size 256) [ 108.052044][ T5567] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.305: bad extra_isize 62 (inode size 256) [ 108.054670][ T5568] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.304: bad extra_isize 62 (inode size 256) [ 108.060157][ T5567] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.305: bad extra_isize 62 (inode size 256) [ 108.065806][ T5568] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.304: bad extra_isize 62 (inode size 256) [ 108.072886][ T5567] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.305: bad extra_isize 62 (inode size 256) [ 108.075301][ T5568] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.304: bad extra_isize 62 (inode size 256) [ 108.086795][ T5567] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.305: bad extra_isize 62 (inode size 256) [ 108.091803][ T5568] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.304: bad extra_isize 62 (inode size 256) [ 108.097405][ T5567] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.305: bad extra_isize 62 (inode size 256) [ 108.099747][ T5568] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.304: bad extra_isize 62 (inode size 256) [ 108.106978][ T5567] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.305: bad extra_isize 62 (inode size 256) [ 108.110772][ T5568] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.304: bad extra_isize 62 (inode size 256) [ 108.115845][ T5567] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.305: bad extra_isize 62 (inode size 256) [ 108.137252][ T5571] EXT4-fs (loop3): shut down requested (2) [ 108.140919][ T5568] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5972: inode #15: comm syz.2.304: bad extra_isize 62 (inode size 256) [ 108.141642][ T5572] EXT4-fs (loop2): shut down requested (2) [ 108.145724][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 109.849753][ T5580] loop0: detected capacity change from 0 to 512 [ 110.116233][ T5580] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.546343][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 110.624376][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 110.752931][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 111.864095][ T5600] loop1: detected capacity change from 0 to 512 [ 111.865595][ T5600] EXT4-fs: inline encryption not supported [ 111.883317][ T5600] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.963836][ T5600] EXT4-fs (loop1): 1 truncate cleaned up [ 111.965040][ T5600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.378417][ T5600] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #15: comm syz.1.313: bad extra_isize 62 (inode size 256) [ 112.381062][ T5600] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #15: comm syz.1.313: bad extra_isize 62 (inode size 256) [ 112.389512][ T5600] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #15: comm syz.1.313: bad extra_isize 62 (inode size 256) [ 112.396409][ T5600] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #15: comm syz.1.313: bad extra_isize 62 (inode size 256) [ 112.402883][ T5600] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #15: comm syz.1.313: bad extra_isize 62 (inode size 256) [ 112.416144][ T5600] EXT4-fs error (device loop1): __ext4_expand_extra_isize:5972: inode #15: comm syz.1.313: bad extra_isize 62 (inode size 256) [ 112.421658][ T5613] EXT4-fs (loop1): shut down requested (2) [ 112.554816][ T5617] loop3: detected capacity change from 0 to 512 [ 113.659464][ T5619] loop0: detected capacity change from 0 to 512 [ 118.059752][ T5619] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 118.075449][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 118.078442][ T5617] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 118.514388][ T5634] loop1: detected capacity change from 0 to 512 [ 118.939293][ T5634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.520057][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 120.134038][ T5655] loop1: detected capacity change from 0 to 512 [ 120.431113][ T5655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.224736][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 123.049087][ T5685] loop3: detected capacity change from 0 to 512 [ 123.065447][ T5685] EXT4-fs (loop3): Test dummy encryption mode enabled [ 123.079713][ T5685] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 124.000819][ T5685] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 124.002129][ T5685] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.083359][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 124.343857][ T5706] loop3: detected capacity change from 0 to 256 [ 124.552866][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 125.463206][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000864fefca: rx timeout, send abort [ 125.670775][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x00000000864fefca: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 125.673442][ C1] vxcan1: j1939_tp_rxtimer: 0x000000009f10ffc8: rx timeout, send abort [ 125.675116][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x000000009f10ffc8: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 125.953918][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.956183][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.103519][ T5727] loop0: detected capacity change from 0 to 64 [ 126.625495][ T5743] loop2: detected capacity change from 0 to 64 [ 126.640329][ T5745] loop4: detected capacity change from 0 to 64 [ 127.068468][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 127.145376][ T5753] loop2: detected capacity change from 0 to 64 [ 128.094985][ T5768] loop1: detected capacity change from 0 to 256 [ 128.096336][ T5768] ======================================================= [ 128.096336][ T5768] WARNING: The mand mount option has been deprecated and [ 128.096336][ T5768] and is ignored by this kernel. Remove the mand [ 128.096336][ T5768] option from the mount to silence this warning. [ 128.096336][ T5768] ======================================================= [ 128.190051][ T5768] FAT-fs (loop1): Directory bread(block 64) failed [ 128.191426][ T5768] FAT-fs (loop1): Directory bread(block 65) failed [ 128.192504][ T5768] FAT-fs (loop1): Directory bread(block 66) failed [ 128.193579][ T5768] FAT-fs (loop1): Directory bread(block 67) failed [ 128.194560][ T5768] FAT-fs (loop1): Directory bread(block 68) failed [ 128.195603][ T5768] FAT-fs (loop1): Directory bread(block 69) failed [ 128.196708][ T5768] FAT-fs (loop1): Directory bread(block 70) failed [ 128.211266][ T5768] FAT-fs (loop1): Directory bread(block 71) failed [ 128.212423][ T5768] FAT-fs (loop1): Directory bread(block 72) failed [ 128.213503][ T5768] FAT-fs (loop1): Directory bread(block 73) failed [ 128.268194][ T5768] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.313573][ T5802] loop3: detected capacity change from 0 to 512 [ 130.326969][ T5802] EXT4-fs: inline encryption not supported [ 130.331127][ T5802] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.355897][ T5802] EXT4-fs (loop3): 1 truncate cleaned up [ 130.357236][ T5802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.382857][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.385574][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.394418][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.403510][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.406097][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.408373][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.410837][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.413383][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.415757][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.421123][ T5802] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #15: comm syz.3.360: bad extra_isize 62 (inode size 256) [ 130.792027][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 132.149431][ T5837] loop4: detected capacity change from 0 to 512 [ 132.778904][ T5837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.176625][ T5819] loop1: detected capacity change from 0 to 32768 [ 133.204417][ T5819] (syz.1.364,5819,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.591582][ T5819] (syz.1.364,5819,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.691365][ T5819] JBD2: Ignoring recovery information on journal [ 133.831063][ T5819] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 133.840684][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 134.365284][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 137.266635][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 137.601253][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 137.667905][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.380'. [ 137.684728][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 140.957387][ C0] vxcan1: j1939_tp_rxtimer: 0x000000002ac06380: rx timeout, send abort [ 140.963470][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x000000002ac06380: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 140.965925][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000e141e319: rx timeout, send abort [ 141.664945][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x00000000e141e319: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.050293][ T5990] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 144.051494][ T5990] PKCS7: Only support pkcs7_signedData type [ 145.728884][ T6001] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 145.729982][ T6001] PKCS7: Only support pkcs7_signedData type [ 148.669104][ T6052] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 148.670187][ T6052] PKCS7: Only support pkcs7_signedData type [ 150.164552][ T6067] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 150.165822][ T6067] PKCS7: Only support pkcs7_signedData type [ 150.281729][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 152.775483][ T6106] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 152.776539][ T6106] PKCS7: Only support pkcs7_signedData type [ 153.608809][ T6132] loop2: detected capacity change from 0 to 256 [ 153.617420][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 153.618548][ T4344] Bluetooth: hci2: command 0x0406 tx timeout [ 153.619529][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 153.620637][ T4338] Bluetooth: hci1: command 0x0406 tx timeout [ 153.731504][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 155.582427][ T6172] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 155.583572][ T6172] PKCS7: Only support pkcs7_signedData type [ 155.622685][ T6173] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 155.623842][ T6173] PKCS7: Only support pkcs7_signedData type [ 155.638076][ T6177] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 155.639305][ T6177] PKCS7: Only support pkcs7_signedData type [ 156.045705][ T6183] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 156.046871][ T6183] PKCS7: Only support pkcs7_signedData type [ 156.134436][ T6184] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 156.135628][ T6184] PKCS7: Only support pkcs7_signedData type [ 156.902812][ T6193] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 156.903971][ T6193] PKCS7: Only support pkcs7_signedData type [ 157.436128][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 157.809349][ T6218] loop3: detected capacity change from 0 to 2048 [ 157.840497][ T6218] loop3: p1 p3 p4 [ 157.843476][ T6218] loop3: p4 size 589824 extends beyond EOD, truncated [ 157.849632][ T3938] loop3: p1 p3 p4 [ 157.851106][ T3938] loop3: p4 size 589824 extends beyond EOD, truncated [ 160.472289][ T5442] udevd[5442]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 160.477439][ T5468] udevd[5468]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 160.479534][ T5546] udevd[5546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 160.587886][ T5546] udevd[5546]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 160.613947][ T5442] udevd[5442]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 161.929595][ T6281] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 161.930819][ T6281] PKCS7: Only support pkcs7_signedData type [ 162.996856][ T6284] loop2: detected capacity change from 0 to 64 [ 164.405016][ T6297] syz.1.481 sent an empty control message without MSG_MORE. [ 165.962824][ T6317] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 165.963942][ T6317] PKCS7: Only support pkcs7_signedData type [ 167.419323][ T6328] loop3: detected capacity change from 0 to 256 [ 167.893945][ T6340] loop3: detected capacity change from 0 to 512 [ 168.138052][ T6340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.649142][ T6345] process 'syz.0.494' launched './file0' with NULL argv: empty string added [ 169.234761][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 169.475572][ T6358] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 169.476817][ T6358] PKCS7: Only support pkcs7_signedData type [ 170.990645][ T6391] loop3: detected capacity change from 0 to 1024 [ 170.992474][ T6391] EXT4-fs: Ignoring removed bh option [ 171.012222][ T6391] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 172.229045][ T6391] EXT4-fs error (device loop3): ext4_read_inline_dir:1619: inode #12: block 7: comm syz.3.508: path /108/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 172.236283][ T6391] EXT4-fs (loop3): Remounting filesystem read-only [ 172.269529][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 172.294793][ T6406] loop0: detected capacity change from 0 to 4096 [ 172.298376][ T6406] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 172.301828][ T6406] ntfs3: loop0: mft corrupted [ 172.302884][ T6406] ntfs3: loop0: Failed to load $MFT. [ 174.020784][ T6429] loop3: detected capacity change from 0 to 64 [ 176.968735][ T6466] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 176.969991][ T6466] PKCS7: Only support pkcs7_signedData type [ 177.509912][ T6482] loop0: detected capacity change from 0 to 256 [ 177.867661][ T6481] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 177.868768][ T6481] PKCS7: Only support pkcs7_signedData type [ 179.847998][ T6511] loop4: detected capacity change from 0 to 164 [ 179.863530][ T6513] loop0: detected capacity change from 0 to 512 [ 179.865387][ T6513] ext4: Unknown parameter 'fsuuid' [ 179.937343][ T5468] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.955129][ T5442] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.432066][ T6526] loop4: detected capacity change from 0 to 164 [ 181.320790][ T6532] loop2: detected capacity change from 0 to 512 [ 181.348977][ T6532] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.547: iget: bad i_size value: 38620345925642 [ 181.351517][ T6532] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.547: couldn't read orphan inode 15 (err -117) [ 181.353931][ T6532] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.330463][ T6551] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 182.331711][ T6551] PKCS7: Only support pkcs7_signedData type [ 182.600244][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 183.785810][ T6578] loop4: detected capacity change from 0 to 1024 [ 183.796433][ T6578] EXT4-fs: Ignoring removed bh option [ 183.869442][ T6578] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.916603][ T6578] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz.4.559: path /114/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 183.930433][ T6578] EXT4-fs (loop4): Remounting filesystem read-only [ 183.990988][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 183.991142][ T6586] loop2: detected capacity change from 0 to 1024 [ 183.993712][ T6586] EXT4-fs: Ignoring removed bh option [ 184.010298][ T6586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.043863][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 184.112830][ T6593] loop1: detected capacity change from 0 to 512 [ 184.121172][ T6593] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.563: iget: bad i_size value: 38620345925642 [ 184.123725][ T6593] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.563: couldn't read orphan inode 15 (err -117) [ 184.126660][ T6593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.192780][ T6599] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.563: bg 0: block 5: invalid block bitmap [ 184.205131][ T6599] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 184.222386][ T6599] EXT4-fs (loop1): This should not happen!! Data will be lost [ 184.222386][ T6599] [ 184.234533][ T6599] EXT4-fs (loop1): Total free blocks count 0 [ 184.242164][ T6599] EXT4-fs (loop1): Free/Dirty block details [ 184.248502][ T6599] EXT4-fs (loop1): free_blocks=0 [ 184.249166][ T6599] EXT4-fs (loop1): dirty_blocks=3192 [ 184.265684][ T6599] EXT4-fs (loop1): Block reservation details [ 184.272109][ T6599] EXT4-fs (loop1): i_reserved_data_blocks=3192 [ 184.350906][ T39] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1140 with error 28 [ 184.833261][ T6621] loop3: detected capacity change from 0 to 1024 [ 184.852561][ T6621] EXT4-fs: Ignoring removed bh option [ 184.903513][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'. [ 184.905272][ T6626] loop0: detected capacity change from 0 to 64 [ 184.992082][ T6621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.390489][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 186.930438][ T6679] device syzkaller0 entered promiscuous mode [ 186.954428][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 187.437547][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.439078][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.520031][ T6700] loop4: detected capacity change from 0 to 64 [ 187.532018][ T6698] loop1: detected capacity change from 0 to 1024 [ 187.533600][ T6698] EXT4-fs: Ignoring removed bh option [ 187.637514][ T6698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.405079][ T6698] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz.1.600: path /108/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 188.422451][ T6698] EXT4-fs (loop1): Remounting filesystem read-only [ 188.460243][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 188.940228][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 189.060038][ T6732] loop1: detected capacity change from 0 to 1024 [ 189.070925][ T6732] EXT4-fs: Ignoring removed bh option [ 189.090777][ T6732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.114431][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 189.667429][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000062644d4a: rx timeout, send abort [ 189.668993][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x0000000062644d4a: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 189.671317][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000f6d65cfb: rx timeout, send abort [ 189.672644][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x00000000f6d65cfb: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 190.112507][ T6765] loop2: detected capacity change from 0 to 1024 [ 190.124295][ T6765] EXT4-fs: Ignoring removed bh option [ 190.149742][ T6765] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 190.205720][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 190.623964][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'. [ 190.778491][ T6798] loop2: detected capacity change from 0 to 1024 [ 190.780236][ T6798] EXT4-fs: Ignoring removed bh option [ 191.093549][ T6798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 191.101848][ T6802] loop1: detected capacity change from 0 to 1024 [ 191.110198][ T6802] EXT4-fs: Ignoring removed bh option [ 191.118455][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 191.143710][ T6802] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.166766][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 191.775931][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000725d82d4: rx timeout, send abort [ 191.777737][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x00000000725d82d4: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 191.839931][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000fca01097: rx timeout, send abort [ 191.841518][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x00000000fca01097: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.336392][ C1] Unknown status report in ack skb [ 193.432070][ T6854] loop0: detected capacity change from 0 to 1024 [ 193.433609][ T6854] EXT4-fs: Ignoring removed bh option [ 193.747432][ T6854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 193.774406][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 193.862364][ C0] Unknown status report in ack skb [ 194.262868][ T6880] loop1: detected capacity change from 0 to 64 [ 195.949376][ T6905] loop1: detected capacity change from 0 to 1024 [ 195.965566][ T6905] EXT4-fs: Ignoring removed bh option [ 196.010419][ T6905] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.066632][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 196.587721][ T6931] loop2: detected capacity change from 0 to 64 [ 197.244492][ T6942] netlink: 104 bytes leftover after parsing attributes in process `syz.1.679'. [ 197.301623][ C0] vxcan1: j1939_tp_rxtimer: 0x0000000092739e3e: rx timeout, send abort [ 197.303200][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x0000000092739e3e: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 197.983798][ T6950] loop1: detected capacity change from 0 to 1024 [ 197.985286][ T6950] EXT4-fs: Ignoring removed bh option [ 198.196694][ T6959] netlink: 104 bytes leftover after parsing attributes in process `syz.4.684'. [ 198.688309][ T6950] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.742715][ C1] Unknown status report in ack skb [ 198.763029][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 198.920685][ T6971] device syzkaller0 entered promiscuous mode [ 199.016250][ T6979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.690'. [ 199.501850][ C0] Unknown status report in ack skb [ 199.510602][ T6993] loop2: detected capacity change from 0 to 1024 [ 199.512778][ T6993] EXT4-fs: Ignoring removed bh option [ 199.535716][ T6993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 199.656221][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 200.622503][ T7031] loop3: detected capacity change from 0 to 1024 [ 200.637614][ T7031] EXT4-fs: Ignoring removed bh option [ 200.646811][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000039dc6295: rx timeout, send abort [ 200.648442][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x0000000039dc6295: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 200.671633][ T7031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.686504][ C0] Unknown status report in ack skb [ 200.773289][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 201.132404][ T7057] device syzkaller0 entered promiscuous mode [ 201.374342][ T7072] loop2: detected capacity change from 0 to 1024 [ 201.379703][ T7072] EXT4-fs: Ignoring removed bh option [ 201.888971][ T7072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.933003][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 202.713557][ T7118] loop0: detected capacity change from 0 to 1024 [ 202.720630][ T7118] EXT4-fs: Ignoring removed bh option [ 202.728331][ T7118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.121092][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 203.151938][ C1] Unknown status report in ack skb [ 203.456696][ T7154] loop1: detected capacity change from 0 to 64 [ 204.057793][ T7166] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 204.059077][ T7166] PKCS7: Only support pkcs7_signedData type [ 204.385450][ T7174] device syzkaller0 entered promiscuous mode [ 205.307930][ T7200] loop0: detected capacity change from 0 to 64 [ 205.987395][ T7230] fuse: Bad value for 'fd' [ 207.648270][ T7268] loop4: detected capacity change from 0 to 1024 [ 207.661379][ T7268] EXT4-fs: Ignoring removed bh option [ 207.731479][ T7268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 207.963641][ T7273] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 207.964703][ T7273] PKCS7: Only support pkcs7_signedData type [ 208.085765][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 208.920770][ C0] vxcan1: j1939_tp_rxtimer: 0x0000000045a2a289: rx timeout, send abort [ 208.922268][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x0000000045a2a289: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 210.073241][ T7337] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 210.074372][ T7337] PKCS7: Only support pkcs7_signedData type [ 210.346805][ C0] ------------[ cut here ]------------ [ 210.347783][ C0] WARNING: CPU: 0 PID: 7342 at net/mac80211/tx.c:4946 __ieee80211_beacon_get+0xf78/0x12fc [ 210.349489][ C0] Modules linked in: [ 210.350173][ C0] CPU: 0 PID: 7342 Comm: syz.1.819 Not tainted syzkaller #0 [ 210.351512][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 210.353262][ C0] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 210.354503][ C0] pc : __ieee80211_beacon_get+0xf78/0x12fc [ 210.355567][ C0] lr : __ieee80211_beacon_get+0xf78/0x12fc [ 210.356604][ C0] sp : ffff800008007ae0 [ 210.357284][ C0] x29: ffff800008007b20 x28: ffff0000cc750e80 x27: ffffffffffffe520 [ 210.358732][ C0] x26: 00000000ffffffff x25: ffff0000cb75a000 x24: ffff0000ccdb1458 [ 210.359997][ C0] x23: dfff800000000000 x22: ffff800008007b8c x21: ffff0000f6472228 [ 210.361279][ C0] x20: 0000000000000000 x19: ffff0000f6472760 x18: 0000000000000000 [ 210.362547][ C0] x17: ffff80018a0be000 x16: ffff8000082dba2c x15: 0000000000000000 [ 210.363857][ C0] x14: 0000000000000007 x13: 0000000000ff0100 x12: ffff800017c5e288 [ 210.365223][ C0] x11: ff00800011461f8c x10: 0000000000000000 x9 : ffff800011461f8c [ 210.366636][ C0] x8 : ffff0000caf81c00 x7 : 0000000000000000 x6 : 0000000000000000 [ 210.368002][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800011461268 [ 210.369314][ C0] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 210.370745][ C0] Call trace: [ 210.371299][ C0] __ieee80211_beacon_get+0xf78/0x12fc [ 210.372189][ C0] ieee80211_beacon_get_tim+0x70/0x44c [ 210.373125][ C0] mac80211_hwsim_beacon_tx+0x1e4/0x8fc [ 210.374094][ C0] __iterate_interfaces+0x200/0x47c [ 210.375026][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 210.376202][ C0] mac80211_hwsim_beacon+0xc8/0x1b0 [ 210.377148][ C0] __hrtimer_run_queues+0x444/0xc58 [ 210.378067][ C0] hrtimer_run_softirq+0x164/0x408 [ 210.378925][ C0] handle_softirqs+0x318/0xc90 [ 210.379827][ C0] __do_softirq+0x14/0x20 [ 210.380538][ C0] ____do_softirq+0x14/0x20 [ 210.381355][ C0] call_on_irq_stack+0x30/0x48 [ 210.382200][ C0] do_softirq_own_stack+0x20/0x2c [ 210.383139][ C0] __irq_exit_rcu+0x23c/0x430 [ 210.383931][ C0] irq_exit_rcu+0x14/0x84 [ 210.384650][ C0] el1_interrupt+0x38/0x54 [ 210.385379][ C0] el1h_64_irq_handler+0x18/0x24 [ 210.386205][ C0] el1h_64_irq+0x64/0x68 [ 210.386908][ C0] arch_local_irq_restore+0x8/0x10 [ 210.387750][ C0] __might_resched+0x48/0x4e0 [ 210.388528][ C0] __might_sleep+0x94/0x110 [ 210.389335][ C0] __mutex_lock_common+0xd0/0x1f3c [ 210.390130][ C0] mutex_lock_nested+0x38/0x44 [ 210.390980][ C0] __unix_dgram_recvmsg+0x188/0xb20 [ 210.391956][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 210.392814][ C0] ____sys_recvmsg+0x270/0x754 [ 210.393655][ C0] do_recvmmsg+0x36c/0x9d8 [ 210.394379][ C0] __arm64_sys_recvmmsg+0x184/0x244 [ 210.395301][ C0] invoke_syscall+0x98/0x290 [ 210.396100][ C0] el0_svc_common+0x13c/0x258 [ 210.396913][ C0] do_el0_svc+0x5c/0x134 [ 210.397643][ C0] el0_svc+0x58/0x128 [ 210.398325][ C0] el0t_64_sync_handler+0x84/0xf0 [ 210.399196][ C0] el0t_64_sync+0x18c/0x190 [ 210.400071][ C0] irq event stamp: 78767 [ 210.400879][ C0] hardirqs last enabled at (78766): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 210.402555][ C0] hardirqs last disabled at (78767): [] el1_dbg+0x24/0x80 [ 210.404185][ C0] softirqs last enabled at (73060): [] handle_softirqs+0xb1c/0xc90 [ 210.405859][ C0] softirqs last disabled at (78763): [] __do_softirq+0x14/0x20 [ 210.407370][ C0] ---[ end trace 0000000000000000 ]--- [ 211.802118][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000b09675e8: rx timeout, send abort [ 211.803631][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x00000000b09675e8: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 220.177257][ T4344] Bluetooth: hci0: command 0x0406 tx timeout