last executing test programs: 32.353649516s ago: executing program 4 (id=5): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r0, &(0x7f0000005c80)="a9", 0x1, 0xc00000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r2, 0x2000022a, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)='`', 0x8200, 0x600}]) 29.27984999s ago: executing program 4 (id=10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x10000000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_usb_connect(0x6, 0xfef0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 15.758221112s ago: executing program 3 (id=37): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 15.698147263s ago: executing program 1 (id=38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) syz_mount_image$fuse(0x0, 0x0, 0x4028, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r4, &(0x7f0000000500)=ANY=[], 0xff2e) readv(r4, &(0x7f0000000280)=[{0x0}], 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@volatile}]}) write$FUSE_LSEEK(r0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r5, 0x100101) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0xd4, 0x50, 0x800}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1e1902, 0x5e) 14.990043741s ago: executing program 0 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000dc0008804c0000800400098024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e210000000700000003000000000000000000000001d20600003c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e230a01010100000000000000005000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a0000ee0ef749d259ddff0000000000000000000000000003000000060005000400000024000300b08073e8d44e7ff0bfca0f771dbe44bb885c69e269c8e9d835b114293a4ddc6e14000200776732"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) 14.19594231s ago: executing program 2 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7ffffffc, 0xfff}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0xe6eedc45313651a9, 0x94, 0x1}, 0x9c) socket$nl_netfilter(0x10, 0x3, 0xc) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 13.946122413s ago: executing program 32 (id=10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x10000000000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_usb_connect(0x6, 0xfef0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 13.890861773s ago: executing program 0 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x4040000) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0xd01, 0x0) 12.672205207s ago: executing program 1 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 12.492688299s ago: executing program 2 (id=44): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x23, &(0x7f0000000c00)=ANY=[], 0x0, 0x6d4, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12.203227472s ago: executing program 0 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/246, 0xf6}], 0x1, &(0x7f0000002280)=[{&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/53, 0x35}], 0x5, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) io_uring_setup(0x46eb, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) setrlimit(0x40000000000008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) semop(r3, &(0x7f0000000280)=[{0x1, 0xbbdd, 0x1000}, {0x2, 0x11, 0x800}], 0x2) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_CMAP(r5, 0x4b71, 0x0) semctl$SETALL(r3, 0x0, 0x11, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x2045aef2}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000240)={r6, 0x1}, 0x8) 12.148145933s ago: executing program 3 (id=46): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) 11.432818121s ago: executing program 2 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 11.315013142s ago: executing program 1 (id=48): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) shmctl$SHM_LOCK(0x0, 0xb) r3 = semget$private(0x0, 0x4000, 0x555) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000003c0)={0x1f, &(0x7f0000000280)=[{0x11, '\x00', @data=0x3, 0xfffff801}]}) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_newrule={0x4c, 0x20, 0x803, 0x70bd26, 0x25dfdbfb, {0xa, 0x10, 0x80, 0x8, 0xdd, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller1\x00'}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) 10.920084167s ago: executing program 3 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/246, 0xf6}], 0x1, &(0x7f0000002280)=[{&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/53, 0x35}], 0x5, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setrlimit(0x40000000000008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 10.327557333s ago: executing program 0 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) fcntl$getown(r2, 0x9) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) 7.371551467s ago: executing program 3 (id=51): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) 4.267907322s ago: executing program 1 (id=52): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x60) fsync(r0) 4.243463612s ago: executing program 2 (id=53): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) syz_mount_image$fuse(0x0, 0x0, 0x4028, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r4, &(0x7f0000000500)=ANY=[], 0xff2e) readv(r4, &(0x7f0000000280)=[{0x0}], 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@volatile}]}) write$FUSE_LSEEK(r0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r5, 0x100101) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0xd4, 0x50, 0x800}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1e1902, 0x5e) 3.004617596s ago: executing program 3 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x4040000) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0xd01, 0x0) 3.004304246s ago: executing program 0 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7ffffffc, 0xfff}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r4, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0xe6eedc45313651a9, 0x94, 0x1}, 0x9c) socket$nl_netfilter(0x10, 0x3, 0xc) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 2.538156911s ago: executing program 1 (id=56): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x23, &(0x7f0000000c00)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000018280000c804daa7f96c875b90c48ff8d0eaaa232218dd797d76dfa693a5a479898026f7f377cfac74811ec073e291578aa8e71ef982004b3aee", @ANYRES8, @ANYRES8], 0x0, 0x6d4, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 537.587314ms ago: executing program 2 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 537.366914ms ago: executing program 1 (id=58): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) 131.508618ms ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/246, 0xf6}], 0x1, &(0x7f0000002280)=[{&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/53, 0x35}], 0x5, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) io_uring_setup(0x46eb, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) setrlimit(0x40000000000008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) semop(r3, &(0x7f0000000280)=[{0x1, 0xbbdd, 0x1000}, {0x2, 0x11, 0x800}], 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, 0x0) semctl$SETALL(r3, 0x0, 0x11, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x2045aef2}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={r5, 0x1}, 0x8) 131.161918ms ago: executing program 0 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/246, 0xf6}], 0x1, &(0x7f0000002280)=[{&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/53, 0x35}], 0x5, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setrlimit(0x40000000000008, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 0s ago: executing program 2 (id=61): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$pagemap(r0, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) shmctl$SHM_LOCK(0x0, 0xb) semctl$IPC_RMID(0x0, 0x0, 0x0) setgroups(0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f00000003c0)={0x1f, &(0x7f0000000280)=[{0x11, '\x00', @data=0x3, 0xfffff801}]}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv6_newrule={0x4c, 0x20, 0x803, 0x70bd26, 0x25dfdbfb, {0xa, 0x10, 0x80, 0x8, 0xdd, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller1\x00'}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. syzkaller login: [ 66.058040][ T4259] cgroup: Unknown subsys name 'net' [ 66.190845][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.728526][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.190697][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.190699][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.191461][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.213404][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.213581][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.221217][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.229293][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.243372][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.243477][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.251119][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.258544][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.265163][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.272349][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.286640][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.287531][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.294140][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.301384][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.308278][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.322595][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.330479][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.337954][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.345329][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.353111][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.353190][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.367922][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.375498][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.392211][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.400473][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.445380][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.453176][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.812131][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 69.909071][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 70.000533][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 70.009878][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 70.027776][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.035076][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.043324][ T4283] device bridge_slave_0 entered promiscuous mode [ 70.062270][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 70.083856][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.090998][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.101204][ T4283] device bridge_slave_1 entered promiscuous mode [ 70.162531][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.169944][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.177911][ T4273] device bridge_slave_0 entered promiscuous mode [ 70.208310][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.222975][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.233540][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.240921][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.250475][ T4273] device bridge_slave_1 entered promiscuous mode [ 70.318992][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.326290][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.334285][ T4272] device bridge_slave_0 entered promiscuous mode [ 70.356052][ T4283] team0: Port device team_slave_0 added [ 70.363219][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.372970][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.380563][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.388516][ T4272] device bridge_slave_1 entered promiscuous mode [ 70.398658][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.406977][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.414919][ T4274] device bridge_slave_0 entered promiscuous mode [ 70.432343][ T4283] team0: Port device team_slave_1 added [ 70.439670][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.457117][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.464283][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.474541][ T4274] device bridge_slave_1 entered promiscuous mode [ 70.524458][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.531815][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.540260][ T4282] device bridge_slave_0 entered promiscuous mode [ 70.549406][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.562128][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.587456][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.600114][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.609989][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.620693][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.629718][ T4282] device bridge_slave_1 entered promiscuous mode [ 70.651238][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.658335][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.684417][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.699538][ T4273] team0: Port device team_slave_0 added [ 70.707572][ T4273] team0: Port device team_slave_1 added [ 70.754301][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.761725][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.787757][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.800996][ T4272] team0: Port device team_slave_0 added [ 70.809365][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.821200][ T4274] team0: Port device team_slave_0 added [ 70.841511][ T4272] team0: Port device team_slave_1 added [ 70.850550][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.861387][ T4274] team0: Port device team_slave_1 added [ 70.867946][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.875476][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.901594][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.941932][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.950856][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.980890][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.010619][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.018708][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.045111][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.063820][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.071085][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.097058][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.118380][ T4283] device hsr_slave_0 entered promiscuous mode [ 71.126627][ T4283] device hsr_slave_1 entered promiscuous mode [ 71.135488][ T4282] team0: Port device team_slave_0 added [ 71.143584][ T4282] team0: Port device team_slave_1 added [ 71.150062][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.160237][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.186778][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.217102][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.224085][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.253517][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.302686][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.309990][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.336530][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.362724][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.369844][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.396172][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.410087][ T4273] device hsr_slave_0 entered promiscuous mode [ 71.417510][ T4273] device hsr_slave_1 entered promiscuous mode [ 71.424119][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.431938][ T4273] Cannot create hsr debugfs directory [ 71.435633][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 71.440605][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 71.449875][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.456917][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.467565][ T4272] device hsr_slave_0 entered promiscuous mode [ 71.474528][ T4272] device hsr_slave_1 entered promiscuous mode [ 71.481117][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.488848][ T4272] Cannot create hsr debugfs directory [ 71.514866][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 71.524244][ T4274] device hsr_slave_0 entered promiscuous mode [ 71.530476][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 71.530632][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 71.543103][ T4274] device hsr_slave_1 entered promiscuous mode [ 71.549754][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.557451][ T4274] Cannot create hsr debugfs directory [ 71.621133][ T4282] device hsr_slave_0 entered promiscuous mode [ 71.627940][ T4282] device hsr_slave_1 entered promiscuous mode [ 71.634580][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.642453][ T4282] Cannot create hsr debugfs directory [ 71.957326][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.971568][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.001116][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.017502][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.027363][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.042287][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.056951][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.073207][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.103436][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.113589][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.151810][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.173969][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.241613][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.274892][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.286188][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.315457][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.344511][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.369636][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.385750][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.398672][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.410931][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.424869][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.432657][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.451891][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.477459][ T4282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.490552][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.500898][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.510668][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.517902][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.529074][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.538229][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.546843][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.553901][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.563557][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.573078][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.581981][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.589187][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.604844][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.614177][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.622944][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.647345][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.654554][ T4282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.668239][ T4282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.679591][ T4282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.707118][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.718380][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.727644][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.737933][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.745116][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.753010][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.771798][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.792646][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.802180][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.812207][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.820983][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.829435][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.843243][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.852547][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.886217][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.894364][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.903459][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.912323][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.920997][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.930887][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.939662][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.946821][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.955353][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.963972][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.972511][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.979605][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.987976][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.020011][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.032620][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.042318][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.057293][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.085868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.094267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.105308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.113904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.126387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.135450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.143677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.153601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.166248][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.178283][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.207463][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.230887][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.241767][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.251251][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.262113][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.300096][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.313505][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.325121][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.338680][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.348315][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.357878][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.368051][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.377333][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.391381][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.401878][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.422112][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.448426][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.467445][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.486285][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.515165][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 73.520161][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.525600][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 73.542622][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.561217][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.591711][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.595520][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 73.598889][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.604965][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 73.612687][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 73.632436][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.655589][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.692493][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.699699][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.715805][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.725509][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.786427][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.806311][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.825528][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.844810][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.851955][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.860326][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.869775][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.884220][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.891395][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.919491][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.936483][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.955528][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.976875][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.993849][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.003060][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.011679][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.022123][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.031026][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.042397][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.051768][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.067334][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.095566][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.103095][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.127398][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.153519][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.168330][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.188772][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.202581][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.210780][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.225598][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.234876][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.244543][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.254022][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.263156][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.271727][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.290419][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.309721][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.330004][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.361971][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.372473][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.390593][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.403714][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.421471][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.516196][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.541851][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.556686][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.574386][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.605366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.627740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.647219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.665943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.714000][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.731286][ T4272] device veth0_vlan entered promiscuous mode [ 74.746996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.754531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.775095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.783406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.792714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.802913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.831418][ T4273] device veth0_vlan entered promiscuous mode [ 74.863069][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.882771][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.922482][ T4273] device veth1_vlan entered promiscuous mode [ 74.940711][ T4272] device veth1_vlan entered promiscuous mode [ 74.992612][ T4274] device veth0_vlan entered promiscuous mode [ 75.018233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.037022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.078736][ T4274] device veth1_vlan entered promiscuous mode [ 75.097343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.112264][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.123564][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.140039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.150927][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.179344][ T4272] device veth0_macvtap entered promiscuous mode [ 75.188069][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.198852][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.207687][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.216947][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.226324][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.233760][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.249815][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.260621][ T4273] device veth0_macvtap entered promiscuous mode [ 75.270687][ T4272] device veth1_macvtap entered promiscuous mode [ 75.286542][ T4273] device veth1_macvtap entered promiscuous mode [ 75.304425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.313704][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.322474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.331022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.341781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.361762][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.384154][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.393418][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.402473][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.412184][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.431459][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.442666][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.463610][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.485585][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.499619][ T4274] device veth0_macvtap entered promiscuous mode [ 75.508846][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.518420][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.527148][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.536176][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.544979][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.558621][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.568032][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.577881][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.587556][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.605186][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 75.606697][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.611240][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 75.622321][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.642207][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.653747][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.663092][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.674118][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.683334][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 75.683377][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 75.689420][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 75.690782][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.714251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.723870][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.732380][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.740997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.750269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.759567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.795921][ T4283] device veth0_vlan entered promiscuous mode [ 75.806440][ T4274] device veth1_macvtap entered promiscuous mode [ 75.827417][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.839619][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.848439][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.869292][ T4283] device veth1_vlan entered promiscuous mode [ 75.914521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.935529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.971384][ T4282] device veth0_vlan entered promiscuous mode [ 75.982722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.991485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.000490][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.014674][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.024528][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.035271][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.047874][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.080962][ T4282] device veth1_vlan entered promiscuous mode [ 76.093051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.103624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.113011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.124210][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.135118][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.146257][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.161969][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.173178][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.191473][ T4283] device veth0_macvtap entered promiscuous mode [ 76.217861][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.227999][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.237871][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.246544][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.255488][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.263913][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.277526][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.286447][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.295699][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.305689][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.342079][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.345729][ T4283] device veth1_macvtap entered promiscuous mode [ 76.351380][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.370000][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.410042][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.444823][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.452933][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.465626][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.473429][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.482769][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.510874][ T4282] device veth0_macvtap entered promiscuous mode [ 76.539532][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.543240][ T4282] device veth1_macvtap entered promiscuous mode [ 76.550868][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.559107][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.579441][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.589593][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.600421][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.610580][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.621254][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.632463][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.655315][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.663356][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.672389][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.683476][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.691676][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.699665][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.709521][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.718727][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.731197][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.742131][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.752214][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.763085][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.773680][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.786062][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.799811][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.813995][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.828706][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.838718][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.847929][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.869699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.886376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.948291][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.982570][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.005304][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.023014][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.033600][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.045012][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.055163][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.065806][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.075874][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.086797][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.097927][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.106279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.118038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.127028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.164982][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.205152][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.224964][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.244945][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.280590][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.302093][ T4362] loop0: detected capacity change from 0 to 512 [ 77.303339][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.320362][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.331895][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.351676][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.363808][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.413609][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.435750][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.444572][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.465625][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.476436][ T4362] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 77.476569][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.504522][ T4362] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.523238][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.581384][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.630113][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.675305][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 77.681393][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 77.755180][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 77.761460][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 77.797949][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.816768][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.841970][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 77.892120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.935792][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.943684][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.033776][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.260146][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.330561][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.352121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.640657][ T4381] loop4: detected capacity change from 0 to 128 [ 79.039400][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.095057][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.206005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.044619][ C1] sched: RT throttling activated [ 82.157466][ T124] cfg80211: failed to load regulatory.db [ 82.209260][ T4393] kworker/u4:10: attempt to access beyond end of device [ 82.209260][ T4393] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 82.298276][ T4402] loop1: detected capacity change from 0 to 512 [ 82.341610][ T4402] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.448671][ T4402] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.476412][ T4405] loop3: detected capacity change from 0 to 2048 [ 83.171683][ T4402] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.11: bad orphan inode 131083 [ 83.196837][ T4405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.706251][ T4402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.040301][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 85.364516][ T4427] loop0: detected capacity change from 0 to 512 [ 85.384525][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 85.430856][ T4427] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 85.571258][ T4427] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.802649][ T4436] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 85.912980][ T4436] team0: Port device vlan2 added [ 85.975084][ T4439] Zero length message leads to an empty skb [ 86.638123][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 87.001798][ T4447] loop1: detected capacity change from 0 to 512 [ 87.009086][ T4447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.455714][ T4449] futex_wake_op: syz.0.19 tries to shift op by 32; fix this program [ 88.192418][ T4447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.214903][ T4447] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.459128][ T4447] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 88.595376][ T4447] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 88.688367][ T4447] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.20: Failed to acquire dquot type 1 [ 88.938633][ T4457] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 89.012378][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 89.501091][ T4460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.542399][ T4460] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 89.618042][ T4460] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 89.678808][ T4460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.719353][ T4460] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.793608][ T4460] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 89.810047][ T4460] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.830186][ T4460] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.858170][ T4460] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 89.874700][ T4460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.889800][ T4460] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.902609][ T4469] tipc: Started in network mode [ 89.908139][ T4470] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 89.908960][ T4469] tipc: Node identity ac14140f, cluster identity 4711 [ 89.930843][ T4460] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 89.941246][ T4469] tipc: New replicast peer: 255.255.255.255 [ 89.952915][ T4460] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.962174][ T4469] tipc: Enabled bearer , priority 10 [ 89.992721][ T4460] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 90.063216][ T4460] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 91.178320][ T4291] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.330700][ T124] tipc: Node number set to 2886997007 [ 91.635380][ T4486] netlink: 'syz.1.29': attribute type 3 has an invalid length. [ 91.676986][ T4486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 91.754713][ T4291] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.834932][ T4291] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.916130][ T4291] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.994834][ T4291] Bluetooth: hci4: command 0x0c1a tx timeout [ 93.195569][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 94.562007][ T4504] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 94.794944][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 94.801073][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 94.808256][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 94.814321][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 94.854821][ T4513] loop2: detected capacity change from 0 to 256 [ 94.950002][ T4513] FAT-fs (loop2): Directory bread(block 64) failed [ 94.989594][ T4513] FAT-fs (loop2): Directory bread(block 65) failed [ 95.065171][ T4513] FAT-fs (loop2): Directory bread(block 66) failed [ 95.080973][ T4513] FAT-fs (loop2): Directory bread(block 67) failed [ 95.113178][ T4513] FAT-fs (loop2): Directory bread(block 68) failed [ 95.139732][ T4518] loop3: detected capacity change from 0 to 4096 [ 95.161268][ T4513] FAT-fs (loop2): Directory bread(block 69) failed [ 95.197683][ T4513] FAT-fs (loop2): Directory bread(block 70) failed [ 95.205444][ T4513] FAT-fs (loop2): Directory bread(block 71) failed [ 95.210235][ T4518] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.212049][ T4513] FAT-fs (loop2): Directory bread(block 72) failed [ 95.225760][ T4513] FAT-fs (loop2): Directory bread(block 73) failed [ 95.912823][ T4522] sctp: failed to load transform for md5: -2 [ 98.075605][ T4518] fscrypt: Error allocating hmac(sha512): -2 [ 106.084650][ T4570] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 107.492815][ T4586] sctp: failed to load transform for md5: -2 [ 107.775666][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.784333][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.792469][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.803153][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.812701][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 107.820547][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.870426][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 111.036814][ T4629] ================================================================== [ 111.044959][ T4629] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 111.052205][ T4629] Read of size 8 at addr ffff8881483f9218 by task syz.2.61/4629 [ 111.059862][ T4629] [ 111.062211][ T4629] CPU: 1 PID: 4629 Comm: syz.2.61 Not tainted syzkaller #0 [ 111.069428][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.079504][ T4629] Call Trace: [ 111.082810][ T4629] [ 111.085773][ T4629] dump_stack_lvl+0x188/0x24e [ 111.090487][ T4629] ? read_lock_is_recursive+0x10/0x10 [ 111.095894][ T4629] ? show_regs_print_info+0x12/0x12 [ 111.101123][ T4629] ? load_image+0x400/0x400 [ 111.105655][ T4629] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 111.111147][ T4629] ? __virt_addr_valid+0x188/0x540 [ 111.116298][ T4629] ? __virt_addr_valid+0x465/0x540 [ 111.121442][ T4629] ? dvb_device_open+0xc6/0x370 [ 111.126323][ T4629] print_report+0xa8/0x210 [ 111.130775][ T4629] kasan_report+0x10b/0x140 [ 111.135312][ T4629] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 111.140982][ T4629] ? dvb_device_open+0xc6/0x370 [ 111.145907][ T4629] dvb_device_open+0xc6/0x370 [ 111.150620][ T4629] chrdev_open+0x5c5/0x6a0 [ 111.155157][ T4629] ? cd_forget+0x160/0x160 [ 111.159605][ T4629] ? fsnotify_perm+0x39b/0x550 [ 111.164396][ T4629] ? cd_forget+0x160/0x160 [ 111.168851][ T4629] do_dentry_open+0x7e9/0x10d0 [ 111.173656][ T4629] path_openat+0x2635/0x2ee0 [ 111.178284][ T4629] ? verify_lock_unused+0x140/0x140 [ 111.183521][ T4629] ? do_syscall_64+0x4c/0xa0 [ 111.188146][ T4629] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.194331][ T4629] ? do_filp_open+0x430/0x430 [ 111.199043][ T4629] do_filp_open+0x1f1/0x430 [ 111.203578][ T4629] ? vfs_tmpfile+0x480/0x480 [ 111.208201][ T4629] ? _raw_spin_unlock+0x24/0x40 [ 111.213086][ T4629] ? alloc_fd+0x58f/0x630 [ 111.217457][ T4629] do_sys_openat2+0x150/0x4b0 [ 111.222162][ T4629] ? up_read+0x20/0x20 [ 111.226264][ T4629] ? do_sys_open+0xe0/0xe0 [ 111.230842][ T4629] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 111.236857][ T4629] ? lock_chain_count+0x20/0x20 [ 111.241760][ T4629] __x64_sys_openat+0x135/0x160 [ 111.246644][ T4629] do_syscall_64+0x4c/0xa0 [ 111.251098][ T4629] ? clear_bhb_loop+0x60/0xb0 [ 111.255813][ T4629] ? clear_bhb_loop+0x60/0xb0 [ 111.260529][ T4629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.266462][ T4629] RIP: 0033:0x7fe8e595d60e [ 111.270886][ T4629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.290503][ T4629] RSP: 002b:00007fe8e68d8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.298933][ T4629] RAX: ffffffffffffffda RBX: 00007fe8e68d96c0 RCX: 00007fe8e595d60e [ 111.306915][ T4629] RDX: 0000000000000002 RSI: 00007fe8e68d8c00 RDI: ffffffffffffff9c [ 111.314898][ T4629] RBP: 00007fe8e68d8c00 R08: 0000000000000000 R09: 0000000000000000 [ 111.322877][ T4629] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 111.330947][ T4629] R13: 00007fe8e5c16218 R14: 00007fe8e5c16180 R15: 00007ffebf085378 [ 111.338935][ T4629] [ 111.341962][ T4629] [ 111.344289][ T4629] Allocated by task 1: [ 111.348360][ T4629] kasan_set_track+0x4b/0x70 [ 111.352969][ T4629] __kasan_kmalloc+0x8e/0xa0 [ 111.357573][ T4629] dvb_register_device+0x311/0x2150 [ 111.362810][ T4629] dvb_register_frontend+0x645/0x920 [ 111.368105][ T4629] vidtv_bridge_probe+0x9a1/0xf70 [ 111.373133][ T4629] platform_probe+0x137/0x1c0 [ 111.377812][ T4629] really_probe+0x2aa/0xc70 [ 111.382323][ T4629] __driver_probe_device+0x18c/0x330 [ 111.387633][ T4629] driver_probe_device+0x4f/0x420 [ 111.392668][ T4629] __driver_attach+0x44a/0x6e0 [ 111.397447][ T4629] bus_for_each_dev+0x182/0x1f0 [ 111.402309][ T4629] bus_add_driver+0x30a/0x5a0 [ 111.407003][ T4629] driver_register+0x32d/0x430 [ 111.411781][ T4629] vidtv_bridge_init+0x39/0x67 [ 111.416560][ T4629] do_one_initcall+0x26a/0x840 [ 111.421342][ T4629] do_initcall_level+0x137/0x1e4 [ 111.426296][ T4629] do_initcalls+0x4b/0x8a [ 111.430634][ T4629] kernel_init_freeable+0x415/0x5be [ 111.435844][ T4629] kernel_init+0x19/0x1b0 [ 111.440184][ T4629] ret_from_fork+0x1f/0x30 [ 111.444614][ T4629] [ 111.447039][ T4629] Freed by task 4570: [ 111.451028][ T4629] kasan_set_track+0x4b/0x70 [ 111.455629][ T4629] kasan_save_free_info+0x2d/0x50 [ 111.460667][ T4629] ____kasan_slab_free+0x126/0x1e0 [ 111.465878][ T4629] slab_free_freelist_hook+0x131/0x1a0 [ 111.471346][ T4629] __kmem_cache_free+0xb6/0x1f0 [ 111.476205][ T4629] dvb_device_open+0x2e7/0x370 [ 111.480988][ T4629] chrdev_open+0x5c5/0x6a0 [ 111.485409][ T4629] do_dentry_open+0x7e9/0x10d0 [ 111.490180][ T4629] path_openat+0x2635/0x2ee0 [ 111.494782][ T4629] do_filp_open+0x1f1/0x430 [ 111.499291][ T4629] do_sys_openat2+0x150/0x4b0 [ 111.503978][ T4629] __x64_sys_openat+0x135/0x160 [ 111.508842][ T4629] do_syscall_64+0x4c/0xa0 [ 111.513270][ T4629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.519173][ T4629] [ 111.521502][ T4629] The buggy address belongs to the object at ffff8881483f9200 [ 111.521502][ T4629] which belongs to the cache kmalloc-256 of size 256 [ 111.535561][ T4629] The buggy address is located 24 bytes inside of [ 111.535561][ T4629] 256-byte region [ffff8881483f9200, ffff8881483f9300) [ 111.548837][ T4629] [ 111.551168][ T4629] The buggy address belongs to the physical page: [ 111.557585][ T4629] page:ffffea000520fe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1483f8 [ 111.567831][ T4629] head:ffffea000520fe00 order:1 compound_mapcount:0 compound_pincount:0 [ 111.576161][ T4629] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 111.584236][ T4629] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 111.592823][ T4629] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 111.601408][ T4629] page dumped because: kasan: bad access detected [ 111.607821][ T4629] page_owner tracks the page as allocated [ 111.613534][ T4629] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13592662183, free_ts 0 [ 111.633335][ T4629] post_alloc_hook+0x173/0x1a0 [ 111.638113][ T4629] get_page_from_freelist+0x1a1e/0x1ab0 [ 111.643669][ T4629] __alloc_pages+0x1ec/0x4f0 [ 111.648269][ T4629] alloc_page_interleave+0x24/0x1e0 [ 111.653484][ T4629] alloc_slab_page+0x5d/0x160 [ 111.658167][ T4629] new_slab+0x87/0x2c0 [ 111.662255][ T4629] ___slab_alloc+0xbc6/0x1240 [ 111.666941][ T4629] __kmem_cache_alloc_node+0x1a0/0x260 [ 111.672404][ T4629] kmalloc_trace+0x26/0xe0 [ 111.676837][ T4629] bus_add_driver+0xda/0x5a0 [ 111.681528][ T4629] driver_register+0x32d/0x430 [ 111.686303][ T4629] usb_register_driver+0x202/0x3d0 [ 111.691445][ T4629] do_one_initcall+0x26a/0x840 [ 111.696219][ T4629] do_initcall_level+0x137/0x1e4 [ 111.701173][ T4629] do_initcalls+0x4b/0x8a [ 111.705510][ T4629] kernel_init_freeable+0x415/0x5be [ 111.710722][ T4629] page_owner free stack trace missing [ 111.716093][ T4629] [ 111.718419][ T4629] Memory state around the buggy address: [ 111.724056][ T4629] ffff8881483f9100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.732120][ T4629] ffff8881483f9180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.740187][ T4629] >ffff8881483f9200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.748252][ T4629] ^ [ 111.753103][ T4629] ffff8881483f9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.761169][ T4629] ffff8881483f9300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.769232][ T4629] ================================================================== [ 111.781456][ T4629] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.788692][ T4629] CPU: 1 PID: 4629 Comm: syz.2.61 Not tainted syzkaller #0 [ 111.795944][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.806020][ T4629] Call Trace: [ 111.809322][ T4629] [ 111.812272][ T4629] dump_stack_lvl+0x188/0x24e [ 111.816985][ T4629] ? memcpy+0x3c/0x60 [ 111.820988][ T4629] ? show_regs_print_info+0x12/0x12 [ 111.826744][ T4629] ? load_image+0x400/0x400 [ 111.831282][ T4629] panic+0x2e5/0x730 [ 111.835205][ T4629] ? bpf_jit_dump+0xd0/0xd0 [ 111.839744][ T4629] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 111.845758][ T4629] ? _raw_spin_unlock+0x40/0x40 [ 111.850640][ T4629] check_panic_on_warn+0x80/0xa0 [ 111.855606][ T4629] ? dvb_device_open+0xc6/0x370 [ 111.860490][ T4629] end_report+0x66/0x110 [ 111.864861][ T4629] kasan_report+0x118/0x140 [ 111.869395][ T4629] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 111.875060][ T4629] ? dvb_device_open+0xc6/0x370 [ 111.879946][ T4629] dvb_device_open+0xc6/0x370 [ 111.884654][ T4629] chrdev_open+0x5c5/0x6a0 [ 111.889104][ T4629] ? cd_forget+0x160/0x160 [ 111.893633][ T4629] ? fsnotify_perm+0x39b/0x550 [ 111.898428][ T4629] ? cd_forget+0x160/0x160 [ 111.902875][ T4629] do_dentry_open+0x7e9/0x10d0 [ 111.907678][ T4629] path_openat+0x2635/0x2ee0 [ 111.912320][ T4629] ? verify_lock_unused+0x140/0x140 [ 111.917557][ T4629] ? do_syscall_64+0x4c/0xa0 [ 111.922190][ T4629] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.928300][ T4629] ? do_filp_open+0x430/0x430 [ 111.933030][ T4629] do_filp_open+0x1f1/0x430 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.937574][ T4629] ? vfs_tmpfile+0x480/0x480 [ 111.942205][ T4629] ? _raw_spin_unlock+0x24/0x40 [ 111.947087][ T4629] ? alloc_fd+0x58f/0x630 [ 111.951467][ T4629] do_sys_openat2+0x150/0x4b0 [ 111.956187][ T4629] ? up_read+0x20/0x20 [ 111.960295][ T4629] ? do_sys_open+0xe0/0xe0 [ 111.964765][ T4629] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 111.970795][ T4629] ? lock_chain_count+0x20/0x20 [ 111.975687][ T4629] __x64_sys_openat+0x135/0x160 [ 111.980583][ T4629] do_syscall_64+0x4c/0xa0 [ 111.985057][ T4629] ? clear_bhb_loop+0x60/0xb0 [ 111.989781][ T4629] ? clear_bhb_loop+0x60/0xb0 [ 111.994498][ T4629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.000430][ T4629] RIP: 0033:0x7fe8e595d60e [ 112.004881][ T4629] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.024523][ T4629] RSP: 002b:00007fe8e68d8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.032983][ T4629] RAX: ffffffffffffffda RBX: 00007fe8e68d96c0 RCX: 00007fe8e595d60e [ 112.041008][ T4629] RDX: 0000000000000002 RSI: 00007fe8e68d8c00 RDI: ffffffffffffff9c [ 112.049025][ T4629] RBP: 00007fe8e68d8c00 R08: 0000000000000000 R09: 0000000000000000 [ 112.057121][ T4629] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 112.065139][ T4629] R13: 00007fe8e5c16218 R14: 00007fe8e5c16180 R15: 00007ffebf085378 [ 112.073158][ T4629] [ 112.076532][ T4629] Kernel Offset: disabled [ 112.080857][ T4629] Rebooting in 86400 seconds..