last executing test programs: 1m32.41404804s ago: executing program 0 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) mount(0x0, 0x0, 0x0, 0x100018, 0x0) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000b00)={[{@numtail}, {@fat=@discard}, {@utf8no}, {}, {@numtail}, {@rodir}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@smackfshat={'smackfshat', 0x3d, '-#($$:'}}]}, 0x7, 0x2b1, &(0x7f0000000c40)="$eJzs3U+LG2UcB/Df5M8m0UNy8CRCB/TgqXTFF7CLVFAXBCUH9aCLjVAyobALgbRi7MmLV1+Br8eLePTiC1C82YM4MplJSNrJtlmbVrafz2V//J7nm+eZ2ZCc5skXr03Gt+683bj/9W/R7SbROIqjeJDEIBqx9G3U+uWP+j4A8D/3IM/jz7zUKVuzzRntLclWY++bAwD2Yv37f2PgCb7d732/v30BAPvz8SeffnB8cnLzozTtRky+mw6TKP+W48dfxe3IYhQ3oh9/R+QrZf3ueyc3o5UWBvHGZD4dFsnJ5z9Vr3/8e8Qifxj9GNTnD9PSWn4+HbbjpWr9oyxGH/4Y/XilyPz6/nLvy/xbNfkYHsSbr6/t/3r04+cv405kceuh/DeHafpO/sNf9z4rukU+mU+HndW8anbzWf1PAAAAAAAAAAAAAAAAAAAAAAC4+q6nK4PN83eWB/9fMP7o+UC95QE/87XzfW6kaZon5fxFvhURw1a82lpUAAAAAAAAAAAAAAAAAAAA8MI7n90dn2a9iFgU2eis7GSziNjs7FAsH+uvGYp/NjudiLjMEmVxbddUNKutZUlxye148ng7Oovk4yc3d7yK4vZno7OkFZe94Y8WyarTK4toRJydX4tyraLTK4u1zn9evRvlWpXxaXL7Malu3ZvkKRR5zduvuTV18HCnV11BzeTeBasfvHypPef9LUNJRLRXN/Pi12k/3Xu49iHR3P/nEAAAAAAAAAAAAAAAAAAAUD7/31g89FszeP85bAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnoPz2d3x6eL3/3co5lV425y8WRStqDo1yx4848sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgivs3AAD//7vhWeM=") mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./trace\x00', 0x1ff) 1m31.524585051s ago: executing program 0 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x14b442, 0x82) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r3, 0x1f00, 0x18, 0x19, &(0x7f0000000f00)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000f40)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000001000)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 1m30.630219963s ago: executing program 0 (id=186): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() statfs(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x9c}}, 0x0) 1m29.636052295s ago: executing program 0 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x210408, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x185093, 0x0) 1m29.515296067s ago: executing program 0 (id=197): r0 = fsopen(&(0x7f0000000080)='afs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xfe) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x1c, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1000, 0xff5, &(0x7f0000000200)=""/4085, 0x41000, 0xc, '\x00', 0x0, @fallback=0xf, r1, 0x8, &(0x7f0000001300)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x1, 0x0, &(0x7f0000001400)=[{0x5, 0x1, 0x7}], 0x10, 0x8}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r3], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m27.976229025s ago: executing program 0 (id=206): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1m27.974839555s ago: executing program 32 (id=206): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3.585060052s ago: executing program 2 (id=609): r0 = syz_io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000440)) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000440)) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000440)) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(r1, r2) syz_io_uring_complete(r1, r2) io_uring_enter(r0, 0x0, 0x1, 0x1, 0x0, 0x0) close(r0) 3.206697231s ago: executing program 2 (id=621): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020) 2.567985236s ago: executing program 1 (id=612): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000271106600000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001e00030e"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200000}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e21, 0x0, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x29, 0x0, 0xee00}, {0x10, 0xc, 0x2, 0x6, 0x40, 0x6, 0xc, 0x9}, {0x7, 0x77, 0x4}, 0xfffffffd, 0x6e6bbe, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d4, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x105732d8200d70b1, 0x0, 0x4, 0x2, 0x8000, 0x4}}, 0xe8) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x2d, 0x4, 0x0, {0x1, 0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 2.52963363s ago: executing program 5 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r5, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r5, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.476288136s ago: executing program 3 (id=614): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000800)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44) r2 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000780)={0x1, 0x0, 0x68f, 0x4, 0xabb, 0x0, 0x5}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000400)={{0x84, @multicast2, 0x4e22, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcd, 0x4}}, 0x44) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f00000006c0)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 2.474488876s ago: executing program 3 (id=615): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000009c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x2) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000bc0)) kexec_load(0x0, 0x1, &(0x7f0000000c00)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) 2.466917667s ago: executing program 1 (id=616): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32], 0x67, 0xc54, &(0x7f0000002500)="$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") getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x7ff}}, 0xfe68) 1.886545956s ago: executing program 2 (id=617): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xd82, 0x0, 0x0, 0x1000, 0x100003, 0x0, 0x0, 0x162}}}, &(0x7f0000000500)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1d, 0x2, 0x6) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9825, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2b, 0x80, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x1, 0x1, 0x2000033d}}], 0x1, 0x0, 0x0) 1.761016799s ago: executing program 4 (id=619): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = io_uring_setup(0xde4, &(0x7f0000000100)={0x0, 0xbb2e, 0x0, 0x3, 0x28c}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x278, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x22c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xef, 0x4, "6444c608ec8f7f60ad42eacdbbf384244bf859503df842ce8b3cbc987d959d9859d407bdeb773b1012eeb7005b089995e9b52a964425aeb1cfcdd30430096035ebdf2772753f1f82cc95986dc19d9ffdd39c7de42d20073c337db853573f2d5b39d451ef8dbf6d04858d3c309dc7902dc1dee637e6aa739e8aa9133ec528c61dd43bc370f0e6042aeccbefdce472b32ff5666cb76f96393d9987ab88afbab9a50aeae687adc3f1e03dc89bad6f985bf70041d9e7c377e28e2f9297210294b8b16a01357d564d0757e27f7cef7d9a006f95936bf116b4327445163ea89ad55a7f68294ac1b2c9852e5969f5"}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "a638"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}%)}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xbf, 0x5, "b51b7d74751d1c34d110f8e2088f9282f2703c80ab491e7e25f77c6c176f677560849a6bd795ba16ede08b64d8c8eca7dba43eb448773c3076b4285d658289a44d0ec714a1fd323e1f3194510d7620dda5af172cf7a4c416815e94f0402e174a8b12150e6f6e9b0ecf0b60fa277a6810130f0e3178e9bbae0c5aad1d76cbef9512424eb1f7502a1b3c192ed9a6156e1a5e342e05763339659497eaadb5062f67391d6b526959f8ce56ea5d87a87139e6949af4714e4ffcf96e17c8"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7ff7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xc3}]}, 0x278}, 0x1, 0x0, 0x0, 0x4008000}, 0x860) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) close(r0) r5 = socket(0x40000000015, 0x5, 0x0) getpeername$packet(r5, 0x0, 0x0) 1.683795607s ago: executing program 5 (id=620): socket$packet(0x11, 0x2, 0x300) r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r0, &(0x7f0000000180)='Y\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000240)={'filter\x00', 0x7, "818cdb265bd579"}, &(0x7f0000000140)=0x2f) read$FUSE(0xffffffffffffffff, &(0x7f0000002fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r3) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001040)={r5, 0x0, 0x20e}, 0x0, 0x0, &(0x7f0000002080)=""/4) 1.621174464s ago: executing program 2 (id=622): openat(0xffffffffffffff9c, 0x0, 0x302, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003500)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x106}, 0x1c) close(r1) 1.595185266s ago: executing program 3 (id=623): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000480)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32\x00'}}) 1.575443068s ago: executing program 5 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 1.573451808s ago: executing program 4 (id=625): close(0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010417000000000000000a00000a0900010073"], 0x78}, 0x1, 0x0, 0x0, 0x40090}, 0x200450c0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.560786079s ago: executing program 1 (id=626): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 1.472287279s ago: executing program 4 (id=627): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2000000, r3}, 0x10) 1.194288577s ago: executing program 1 (id=628): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r6 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.142388122s ago: executing program 1 (id=629): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020) 1.028052614s ago: executing program 4 (id=630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x2, 0x3, 0x1}, 0x2, 0x5, 0x80008d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000008c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 705.886747ms ago: executing program 3 (id=631): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) r0 = fanotify_init(0x40, 0x80000) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x4400, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 704.702367ms ago: executing program 5 (id=632): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x0, 0x1a2, &(0x7f00000002c0)="$eJzs0bFrE2EYx/Hv897lchGqRsWhgg1YPC9Umruig1NwUsiBg4tg0CM92+JVSS+DLS1mkYJU+y/oIDqqoJOIgnNxEBy0Lt2kGYqDOEjkkjeCf4PvZ/nd8xx37/s+73zWzorA773VFnUGLPbzEcEGJmTYU2qYr3X9XefmMDiv6w2dz3SOZ8srN+M0TZYq5yqU/2kAPyrFMvxtZS84qigJdeTz3morlusR/TqLajai3KD6AKtJ23/IuD3GkWtY9L0NLira4jXgwHTHZTpbXjm9sBjPJXPJrTCcOXuXWu1Mvv80qb1C/PuieMQafkQxouSvUWhyb8vex5Qg/rzatqTaw2myuWWdOjHVQ/m79BHeeT2KX20HdZmTuFfzA5U4LDzGiphscFBhc2MhTWoXkEvqpQT2J/tnQeF2Lctt3U5n168o+eU8rcuuK8EOBS8grAbM5KPhEO9Z36arh8rONybkTb7KaK724N1zXR3jOE8c7sSdzlLgwAfxIsIuhGUYG/xORUzmF8xb/Y0OvoweDMMwDMMwDMMwjP/AnwAAAP//EAldpA==") r1 = socket$netlink(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) pipe2(0x0, 0x80) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r0, 0x8b18, &(0x7f0000000040)) 655.534302ms ago: executing program 2 (id=633): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2815000, &(0x7f0000000fc0)={[{@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800}}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@noblock_validity}, {@jqfmt_vfsold}, {@quota}, {@nouid32}, {@jqfmt_vfsold}, {@resuid}, {@stripe={'stripe', 0x3d, 0x1ff}}, {@resuid}]}, 0x1, 0x5c1, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) r1 = openat(r0, 0x0, 0x101042, 0x160) pwrite64(r1, 0x0, 0x0, 0x9ef) socket(0x11, 0x3, 0xff) gettid() timer_create(0x0, 0x0, 0x0) lseek(r1, 0x4d, 0x4) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 650.883343ms ago: executing program 3 (id=634): r0 = socket$key(0xf, 0x3, 0x2) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0xfe) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000280)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/profiling', 0x149a82, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0) 599.464628ms ago: executing program 5 (id=635): r0 = openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000800)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x2b, 0x5, 0x0) clock_gettime(0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40000) syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000900)={&(0x7f0000000940)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000980)={0x0}, 0x7}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000009c0)) 550.649413ms ago: executing program 4 (id=636): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x6, 0x0, 0x0) timer_getoverrun(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1fc, 0x6, 0xfffffffd, 0x0, 0x6, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 548.889523ms ago: executing program 5 (id=637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf0, 0x5, 0x0, 0x80000000, 0x6cb3, 0xd97, 0x26e, 0x4, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x2, 0xae20, 0x2}, 0x47}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200dc0f14000e0005000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 467.965051ms ago: executing program 2 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 344.281254ms ago: executing program 3 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xa, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x14e4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001640)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001680)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000016c0), 0x56) sendmsg$kcm(r4, &(0x7f0000001700)={&(0x7f0000001740)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001800)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 15.675988ms ago: executing program 1 (id=640): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000400)=r0, 0x1) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f00000011c0)='\x00', 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r6], 0x3c}}, 0x0) write(r3, &(0x7f0000000240)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 0s ago: executing program 4 (id=641): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x11, 0xa, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0) epoll_create1(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x6, 0x23, 0x7, 0xfffffff8}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 28.409142][ T4317] cgroup: Unknown subsys name 'net' [ 28.631856][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.906749][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.086857][ T4339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.087632][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.091107][ T4342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.092509][ T4342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.094104][ T4342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.095413][ T4342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.096630][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.097972][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.099861][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.101181][ T4342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.102899][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.104274][ T4342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.105815][ T4342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.107168][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.108587][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.109356][ T4344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.110860][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.111580][ T4344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.113878][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.113902][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.116824][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.117011][ T4345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.119941][ T4342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.122422][ T4342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.123290][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.130551][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.134683][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.136160][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.144336][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.145770][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.147199][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.163043][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.169427][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.171694][ T4335] rdma_rxe: rxe_register_device failed with error -23 [ 30.173070][ T4335] rdma_rxe: failed to add rxe_eth0 [ 30.187462][ T4340] rdma_rxe: rxe_register_device failed with error -23 [ 30.188827][ T4340] rdma_rxe: failed to add rxe_eth0 [ 30.202327][ T4337] rdma_rxe: rxe_register_device failed with error -23 [ 30.203633][ T4337] rdma_rxe: failed to add rxe_eth0 [ 30.214141][ T4330] infiniband rxe0: set active [ 30.215273][ T4330] infiniband rxe0: added rxe_eth0 [ 30.217842][ T3902] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.221022][ T4340] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.234726][ T4330] RDS/IB: rxe0: added [ 30.235570][ T4330] smc: adding ib device rxe0 with port count 1 [ 30.236622][ T4330] smc: ib device rxe0 port 1 has pnetid [ 30.237862][ T3902] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.260283][ T4335] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.303059][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.305243][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 30.330684][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.348725][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.350983][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.352655][ T4340] device bridge_slave_0 entered promiscuous mode [ 30.368271][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.369880][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.375752][ T4340] device bridge_slave_1 entered promiscuous mode [ 30.385300][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.421996][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.423565][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.449411][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.484714][ T4340] team0: Port device team_slave_0 added [ 30.486617][ T4340] team0: Port device team_slave_1 added [ 30.497885][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.500406][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.502216][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.505768][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.517918][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.521209][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.524732][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.572388][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.574683][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.575770][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.581330][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.584315][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.585485][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.591508][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.598331][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.600192][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.601778][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.604998][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.608582][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.618832][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.620564][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.622134][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.625247][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.631100][ T4335] team0: Port device team_slave_0 added [ 30.633240][ T4335] team0: Port device team_slave_1 added [ 30.638667][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.642255][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.646655][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.700329][ T4340] device hsr_slave_0 entered promiscuous mode [ 30.719635][ T4340] device hsr_slave_1 entered promiscuous mode [ 30.762894][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.764149][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.768357][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.773454][ T3995] infiniband rxe0: set active [ 30.775603][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.786854][ T3902] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.789287][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.805136][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.809298][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.810690][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.812295][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.850112][ T4335] device hsr_slave_0 entered promiscuous mode [ 30.899253][ T4335] device hsr_slave_1 entered promiscuous mode [ 30.939061][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.940462][ T4335] Cannot create hsr debugfs directory [ 30.949941][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.951281][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.952738][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.963104][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.964379][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.965953][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.972003][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.974504][ T4329] team0: Port device team_slave_0 added [ 30.975671][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.977018][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.978502][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.987719][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.989986][ T4329] team0: Port device team_slave_1 added [ 30.995463][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.996637][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.001648][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.012979][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.014168][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.018440][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.023953][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.030803][ T4337] team0: Port device team_slave_0 added [ 31.033791][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.040139][ T4337] team0: Port device team_slave_1 added [ 31.062232][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.063491][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.067697][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.077435][ T4330] team0: Port device team_slave_0 added [ 31.079499][ T4330] team0: Port device team_slave_1 added [ 31.085331][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.086559][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.093181][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.095678][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.096932][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.101572][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.103835][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.105017][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.109703][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.130658][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.171417][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.209136][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.210406][ T4329] Cannot create hsr debugfs directory [ 31.260202][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.309206][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.349055][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.350437][ T4330] Cannot create hsr debugfs directory [ 31.430097][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.469225][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.519071][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.520450][ T4337] Cannot create hsr debugfs directory [ 31.552047][ T4340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.610131][ T4340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.670197][ T4340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.725578][ T4340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.787063][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.834066][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.881033][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.920073][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.954200][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.010450][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.050741][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.090377][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.169545][ T4339] Bluetooth: hci1: command 0x0409 tx timeout [ 32.169594][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 32.170778][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 32.180604][ T4337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.210882][ T4329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.249058][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 32.250084][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 32.260134][ T4329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.302208][ T4337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.340384][ T4329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.371040][ T4329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.415258][ T4337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.460354][ T4337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.524784][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.547610][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.550366][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.557335][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.563204][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.574213][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.576293][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.578002][ T1750] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.579356][ T1750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.583045][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.591368][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.592913][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.602686][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.606179][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.608039][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.611375][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.612577][ T1750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.616909][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.627436][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.629360][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.630886][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.632098][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.633602][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.635228][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.646657][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.648291][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.650588][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.652443][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.653785][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.655281][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.657186][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.658866][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.664955][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.666636][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.670391][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.675158][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.676815][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.678250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.685815][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.690149][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.691819][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.693778][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.703719][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.706939][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.709098][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.710794][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.712281][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.713781][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.715397][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.722686][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.726035][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.727629][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.730136][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.731818][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.733504][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.735240][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.736479][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.738126][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.740749][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.744908][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.747578][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.749317][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.751040][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.752649][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.753890][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.755761][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.762040][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.763964][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.766910][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.768591][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.771355][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.772654][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.774223][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.775947][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.777976][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.779264][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.782178][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.784061][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.796646][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.798421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.802851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.804462][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.806594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.808228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.812105][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.813778][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.817611][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.823369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.827176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.830204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.845722][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.848075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.850780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.852535][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.854262][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.855401][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.856806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.858408][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.871834][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.873980][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.878913][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.880944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.882588][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.884195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.885820][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.886908][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.888275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.892165][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.893878][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.895867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.897668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.899764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.901303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.902997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.904673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.906231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.909527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.915332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.916683][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.924609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.926444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.928119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.931435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.933021][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.935005][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.936633][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.938385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.944349][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.947634][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.952029][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.964202][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.966047][ T1750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.972834][ T4340] device veth0_vlan entered promiscuous mode [ 32.975906][ T4340] device veth1_vlan entered promiscuous mode [ 32.981137][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.982838][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.984689][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.986317][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.987902][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.991464][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.995804][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.012538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.014087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.021655][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.023495][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.028499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.030876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.035197][ T4340] device veth0_macvtap entered promiscuous mode [ 33.037848][ T4340] device veth1_macvtap entered promiscuous mode [ 33.046612][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.048304][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.050744][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.052140][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.058229][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.065735][ T4335] device veth0_vlan entered promiscuous mode [ 33.067562][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.069760][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.071579][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.073006][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.082196][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.083749][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.085462][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.091939][ T4335] device veth1_vlan entered promiscuous mode [ 33.098835][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.103827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.105607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.107232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.108854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.124106][ T4340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.125664][ T4340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.127038][ T4340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.128491][ T4340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.133796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.135168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.136519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.138228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.142782][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.153025][ T4335] device veth0_macvtap entered promiscuous mode [ 33.155642][ T4335] device veth1_macvtap entered promiscuous mode [ 33.157320][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.158895][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.161740][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.163875][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.167223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.168632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.198011][ T4330] device veth0_vlan entered promiscuous mode [ 33.205347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.207014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.215806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.217451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.220051][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.221922][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.224293][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.234536][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.243662][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.245507][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.256340][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.258219][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.262112][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.267054][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.268884][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.274441][ T4330] device veth1_vlan entered promiscuous mode [ 33.278111][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.280093][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.281570][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.283042][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.298554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.300747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.302360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.303910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.308874][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.310804][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.313322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.314988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.316747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.335028][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.336750][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.340678][ T4337] device veth0_vlan entered promiscuous mode [ 33.345232][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.346882][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.356953][ T4337] device veth1_vlan entered promiscuous mode [ 33.362002][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.363624][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.365447][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.367014][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.368559][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.372091][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.373945][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.376239][ T4330] device veth0_macvtap entered promiscuous mode [ 33.381329][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.382632][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.383959][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.385716][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.387268][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.391274][ T4329] device veth0_vlan entered promiscuous mode [ 33.398600][ T4330] device veth1_macvtap entered promiscuous mode [ 33.418029][ T4329] device veth1_vlan entered promiscuous mode [ 33.425255][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.426912][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.428461][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.430614][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.433178][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.435475][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.436314][ T4337] device veth0_macvtap entered promiscuous mode [ 33.436733][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.442759][ T4337] device veth1_macvtap entered promiscuous mode [ 33.445928][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.447612][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.450483][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.452178][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.453731][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.455352][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.456894][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.458636][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.466375][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.471106][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.473070][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.474750][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.476563][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.480987][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.487571][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.490013][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.491826][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.494767][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.496429][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.498138][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.506412][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.508302][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.510590][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.512180][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.513836][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.515446][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.520199][ T4460] Bluetooth: MGMT ver 1.22 [ 33.527162][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.528520][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.530721][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.532166][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.533880][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.535339][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.538959][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.542263][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.544028][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.545585][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.547312][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.549695][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.551337][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.553479][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.556625][ T4337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.558039][ T4337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.560050][ T4337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.561627][ T4337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.566476][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.568291][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.578065][ T4329] device veth0_macvtap entered promiscuous mode [ 33.581371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.583033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.588001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.624823][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.625810][ T48] Bluetooth: hci4: unexpected subevent 0x01 length: 19 > 18 [ 33.626145][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.627378][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 33.628623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.646982][ T4329] device veth1_macvtap entered promiscuous mode [ 33.652834][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.654212][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.655733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.657303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.674137][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.676336][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.678182][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.680450][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.682238][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.684051][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.685560][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.687303][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.691566][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.695031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.696761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.698499][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.702194][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.704132][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.704263][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.705483][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.708392][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.710748][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.712761][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.784318][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.786268][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.795841][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.023123][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.024958][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.026511][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.028173][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.031294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.033041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.034855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.078162][ T4444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.080672][ T4444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.082169][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.102121][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.103675][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.105217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.119937][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.121452][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.122832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.148013][ T4471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.201483][ T4471] netlink: 'syz.1.2': attribute type 6 has an invalid length. [ 34.203024][ T4471] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.253142][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 34.253223][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 34.254554][ T4345] Bluetooth: hci2: command 0x041b tx timeout [ 34.256873][ T4339] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 34.586413][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 34.587569][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 34.654224][ T4494] loop2: detected capacity change from 0 to 8 [ 34.683725][ T4494] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 34.687903][ T4490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.704141][ T4490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.737327][ T4479] loop4: detected capacity change from 0 to 32768 [ 34.856034][ T4502] loop3: detected capacity change from 0 to 512 [ 34.860876][ T4502] ext4: Unknown parameter 'permit_directio' [ 35.045593][ T4479] loop4: p1 p9 p11 [ 35.459900][ T27] audit: type=1326 audit(35.450:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.7" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x7fc00000 [ 35.468851][ T27] audit: type=1326 audit(35.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.7" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff86f7a228 code=0x7fc00000 [ 36.001059][ T4526] bridge0: port 3(macvlan2) entered blocking state [ 36.002615][ T4526] bridge0: port 3(macvlan2) entered disabled state [ 36.004254][ T4526] device macvlan2 entered promiscuous mode [ 36.005637][ T4526] bridge0: port 3(macvlan2) entered blocking state [ 36.006854][ T4526] bridge0: port 3(macvlan2) entered forwarding state [ 36.011648][ T4526] Zero length message leads to an empty skb [ 36.108117][ T4529] loop1: detected capacity change from 0 to 256 [ 36.356623][ T4344] Bluetooth: hci1: command 0x040f tx timeout [ 36.356640][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 36.357855][ T4344] Bluetooth: hci0: command 0x040f tx timeout [ 36.472172][ T4534] loop2: detected capacity change from 0 to 512 [ 36.720900][ T4344] Bluetooth: hci4: command 0x040f tx timeout [ 36.722353][ T4345] Bluetooth: hci3: command 0x040f tx timeout [ 36.838174][ T4537] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.449669][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 38.451056][ T4344] Bluetooth: hci1: command 0x0419 tx timeout [ 38.452202][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 38.729679][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 38.731414][ T4345] Bluetooth: hci3: command 0x0419 tx timeout [ 38.750338][ T4558] mount: server 127. not responding, timed out [ 39.247698][ T4586] loop1: detected capacity change from 0 to 256 [ 39.279549][ T4586] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.323736][ T4586] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 39.325978][ T4586] FAT-fs (loop1): Filesystem has been set read-only [ 39.339474][ T4586] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 40.640403][ T4591] sched: RT throttling activated [ 40.651417][ T4336] Bluetooth: hci0: command 0x0c1a tx timeout [ 42.698023][ T4626] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 44.458028][ T4656] smc: net device team0 applied user defined pnetid SYZ2 [ 44.570848][ T4656] smc: removing net device team0 with user defined pnetid SYZ2 [ 44.588614][ T4656] team0 (unregistering): Port device team_slave_0 removed [ 44.605952][ T4664] ======================================================= [ 44.605952][ T4664] WARNING: The mand mount option has been deprecated and [ 44.605952][ T4664] and is ignored by this kernel. Remove the mand [ 44.605952][ T4664] option from the mount to silence this warning. [ 44.605952][ T4664] ======================================================= [ 44.606243][ T4656] team0 (unregistering): Port device team_slave_1 removed [ 46.660331][ T4382] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.698387][ T4693] loop2: detected capacity change from 0 to 2048 [ 46.711630][ T4693] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 46.717061][ T4702] netlink: 'syz.4.56': attribute type 1 has an invalid length. [ 46.990154][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 47.108303][ T4702] device veth0_virt_wifi entered promiscuous mode [ 49.303459][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 49.352260][ T4767] futex_wake_op: syz.1.68 tries to shift op by 144; fix this program [ 52.762176][ T4821] futex_wake_op: syz.3.86 tries to shift op by 144; fix this program [ 52.840323][ T4828] loop2: detected capacity change from 0 to 8 [ 52.904756][ T4828] squashfs image failed sanity check [ 53.648647][ T4834] block device autoloading is deprecated and will be removed. [ 54.037796][ T4850] netlink: 'syz.1.93': attribute type 10 has an invalid length. [ 54.051887][ T4850] team0: Port device netdevsim0 added [ 55.466531][ T4882] loop4: detected capacity change from 0 to 2048 [ 55.484300][ T4882] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 55.554479][ T4831] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.606052][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 55.682098][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 55.693662][ T4885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.700128][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 55.702296][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 55.732575][ T4887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.742069][ T4887] bond1: (slave bond0): making interface the new active one [ 55.746221][ T4887] bond1: (slave bond0): Enslaving as an active interface with an up link [ 55.753639][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.755734][ T4885] bond1: (slave bond0): Releasing active interface [ 55.805330][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.806943][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.812135][ T4885] device bridge_slave_0 left promiscuous mode [ 55.813862][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.862073][ T4885] device bridge_slave_1 left promiscuous mode [ 55.863506][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.891453][ T4885] bond0: (slave bond_slave_0): Releasing backup interface [ 55.976351][ T4885] bond0: (slave bond_slave_1): Releasing backup interface [ 56.518583][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.520379][ T4885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.540001][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.545191][ T4885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.672150][ T4906] loop0: detected capacity change from 0 to 164 [ 56.786124][ T4908] bridge0: port 4(syz_tun) entered blocking state [ 56.787427][ T4908] bridge0: port 4(syz_tun) entered disabled state [ 56.790932][ T4908] device syz_tun entered promiscuous mode [ 56.792182][ T4908] bridge0: port 4(syz_tun) entered blocking state [ 56.793307][ T4908] bridge0: port 4(syz_tun) entered forwarding state [ 56.803516][ T4908] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 56.812385][ T4908] bridge0: port 4(syz_tun) entered disabled state [ 56.818628][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.821564][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.833467][ T4908] bridge0: port 3(macvlan2) entered disabled state [ 57.667933][ T4923] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 57.678443][ T4923] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.681846][ T4928] loop3: detected capacity change from 0 to 2048 [ 57.683642][ T4928] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 57.691071][ T4923] bond0: (slave team0): Enslaving as an active interface with an up link [ 57.712022][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 57.721574][ T4929] loop2: detected capacity change from 0 to 2048 [ 57.746431][ T4929] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.908349][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 58.693774][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 58.701155][ T4954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.716141][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 58.717750][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 58.728249][ T4954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.732286][ T4954] bond1: (slave bond0): making interface the new active one [ 58.735837][ T4954] bond1: (slave bond0): Enslaving as an active interface with an up link [ 58.737501][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 58.744000][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 58.933146][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.935209][ T4954] bond1: (slave bond0): Releasing active interface [ 58.984323][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.991120][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.994566][ T4954] device bridge_slave_0 left promiscuous mode [ 58.996072][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.040156][ T4954] device bridge_slave_1 left promiscuous mode [ 59.041453][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.080662][ T4954] bond0: (slave bond_slave_0): Releasing backup interface [ 59.185848][ T4954] bond0: (slave bond_slave_1): Releasing backup interface [ 59.302527][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 59.523921][ T4954] team0: Port device team_slave_0 removed [ 59.533489][ T4954] team0: Port device team_slave_1 removed [ 59.536087][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.538671][ T4954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.544280][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.545861][ T4954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.364200][ T4985] loop2: detected capacity change from 0 to 764 [ 60.579789][ T4989] netlink: 'syz.4.132': attribute type 1 has an invalid length. [ 61.434276][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 61.466567][ T5008] bond1: (slave veth3): Enslaving as an active interface with an up link [ 61.845795][ T5016] netlink: 'syz.4.139': attribute type 1 has an invalid length. [ 61.869723][ T5016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.971334][ T5016] bond2: (slave dummy0): making interface the new active one [ 61.976279][ T5016] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 61.980660][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 64.651277][ T5045] loop4: detected capacity change from 0 to 764 [ 65.411851][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.413117][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.844217][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 66.352631][ T5075] ip_tables: iptables: counters copy to user failed while replacing table [ 66.355607][ T5075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'. [ 66.419033][ T5077] loop3: detected capacity change from 0 to 256 [ 67.361212][ T5090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 67.378524][ T5090] device bond1 entered promiscuous mode [ 67.416961][ T5095] raw_sendmsg: syz.0.161 forgot to set AF_INET. Fix it! [ 70.352241][ T1516] cfg80211: failed to load regulatory.db [ 70.700285][ T5137] loop0: detected capacity change from 0 to 256 [ 70.712020][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 71.695718][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.768467][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.780001][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.785035][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.793108][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.821361][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.827530][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.833718][ T5150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.838885][ T5150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.163922][ T5177] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 72.163922][ T5177] The task syz.2.183 (5177) triggered the difference, watch for misbehavior. [ 72.737591][ T5194] tipc: Started in network mode [ 72.738876][ T5194] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 72.742520][ T5194] tipc: Enabled bearer , priority 10 [ 72.746754][ T5194] tipc: Enabled bearer , priority 10 [ 73.145708][ T5207] loop2: detected capacity change from 0 to 512 [ 73.620889][ T5213] loop2: detected capacity change from 0 to 512 [ 73.643314][ T4337] bridge0: port 4(syz_tun) entered disabled state [ 73.822095][ T5213] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.856292][ T5225] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.857760][ T5225] overlayfs: failed to set xattr on upper [ 73.858710][ T5225] overlayfs: ...falling back to index=off,metacopy=off. [ 73.937455][ T5216] loop3: detected capacity change from 0 to 131072 [ 73.944907][ T5216] F2FS-fs (loop3): Test dummy encryption mode enabled [ 73.946872][ T5216] F2FS-fs (loop3): invalid crc value [ 73.974785][ T4337] device syz_tun left promiscuous mode [ 73.975794][ T4337] bridge0: port 4(syz_tun) entered disabled state [ 73.986041][ T5216] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.998175][ T5216] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.023482][ T1516] tipc: Node number set to 4269801491 [ 74.337152][ T5240] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 74.832214][ T4336] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.834537][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.836461][ T4336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.838271][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.841873][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.843741][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.872291][ T5213] EXT4-fs (loop2): unmounting filesystem. [ 75.584401][ T4466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.595853][ T5246] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.652495][ T4466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.730990][ T4466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.736049][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 75.758898][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.763033][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.764901][ T5246] device bridge_slave_0 entered promiscuous mode [ 75.767871][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.772370][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.774176][ T5246] device bridge_slave_1 entered promiscuous mode [ 75.969849][ T4466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.976244][ T5278] device ip6gre1 entered promiscuous mode [ 75.985889][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.988640][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.002628][ T5246] team0: Port device team_slave_0 added [ 76.013167][ T5246] team0: Port device team_slave_1 added [ 76.084083][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.085420][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.095051][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.100292][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.101759][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.106253][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.414288][ T4424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.415950][ T4424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.439314][ T4424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.461791][ T5246] device hsr_slave_0 entered promiscuous mode [ 76.500739][ T5246] device hsr_slave_1 entered promiscuous mode [ 76.549115][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.551090][ T5246] Cannot create hsr debugfs directory [ 76.609306][ T1516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.642045][ T5246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.674806][ T5246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.710545][ T5246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.770656][ T5246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.889138][ T4345] Bluetooth: hci3: command 0x0409 tx timeout [ 76.972946][ T4466] bridge0: port 3(macvlan2) entered disabled state [ 77.010669][ T4466] device macvlan2 left promiscuous mode [ 77.012018][ T4466] bridge0: port 3(macvlan2) entered disabled state [ 77.220383][ T5317] device syzkaller0 entered promiscuous mode [ 77.225557][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 77.235780][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 77.277835][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.343979][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.345703][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.347288][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 77.377942][ T1516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 77.425454][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.430827][ T5326] device bridge_slave_0 left promiscuous mode [ 77.431984][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.473891][ T5326] device bridge_slave_1 left promiscuous mode [ 77.475033][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.510906][ T5326] bond0: (slave bond_slave_0): Releasing backup interface [ 77.565878][ T5326] bond0: (slave bond_slave_1): Releasing backup interface [ 77.611666][ T5326] team0: Port device team_slave_0 removed [ 77.620225][ T5326] team0: Port device team_slave_1 removed [ 77.621692][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.623027][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.624795][ T5326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.626128][ T5326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.636059][ T5326] team0: Port device netdevsim0 removed [ 77.637818][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 77.640196][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.725450][ T5344] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 77.732228][ T5344] device bond2 entered promiscuous mode [ 77.733546][ T5344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.736339][ T5345] netlink: 'syz.4.223': attribute type 13 has an invalid length. [ 77.752627][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.759279][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.761215][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.809752][ T4382] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 77.823680][ T5350] bond2: (slave bridge1): making interface the new active one [ 77.825076][ T5350] device bridge1 entered promiscuous mode [ 77.827103][ T5350] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 77.850296][ T4382] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.540342][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 78.542378][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.544228][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.545836][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.547633][ T4840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.549620][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.551969][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.553654][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.555058][ T4840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.556541][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.558416][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.561341][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.563222][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.565049][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.566899][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.568627][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.571233][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.624623][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.627080][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.636997][ T5246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.639624][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.643374][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.645219][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.766338][ T5379] bridge0: port 3(vxlan0) entered blocking state [ 78.775566][ T5379] bridge0: port 3(vxlan0) entered disabled state [ 78.777261][ T5379] device vxlan0 entered promiscuous mode [ 78.799415][ T5374] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 78.969654][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 79.250365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.252211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.819222][ T5420] Core dump to core aborted: cannot preserve file permissions [ 79.898844][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.011583][ T5433] loop3: detected capacity change from 0 to 1024 [ 80.277635][ T5443] loop4: detected capacity change from 0 to 40427 [ 80.281011][ T5443] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 80.282616][ T5443] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 80.285273][ T5443] F2FS-fs (loop4): invalid crc value [ 80.287574][ T5443] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.302500][ T5443] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 80.304034][ T5443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.322145][ T5433] netlink: 'syz.3.244': attribute type 11 has an invalid length. [ 80.381300][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.385690][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.388142][ T4688] hfsplus: b-tree write err: -5, ino 25 [ 80.390058][ T4688] hfsplus: b-tree write err: -5, ino 4 [ 80.391200][ T4688] hfsplus: b-tree write err: -5, ino 2 [ 80.429182][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.430953][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.438479][ T5246] device veth0_vlan entered promiscuous mode [ 80.444565][ T5443] syz.4.246: attempt to access beyond end of device [ 80.444565][ T5443] loop4: rw=2049, sector=53248, nr_sectors = 128 limit=40427 [ 80.461300][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.462953][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.466920][ T5246] device veth1_vlan entered promiscuous mode [ 80.501020][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.502832][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.504747][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.760206][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.809335][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.851010][ T4466] device hsr_slave_0 left promiscuous mode [ 80.872091][ T4329] syz-executor: attempt to access beyond end of device [ 80.872091][ T4329] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 80.879974][ T4466] device hsr_slave_1 left promiscuous mode [ 80.939488][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.941121][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.945658][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.947054][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.951914][ T5492] Bluetooth: ISO socket layer initialized [ 80.953629][ T4466] device bridge_slave_1 left promiscuous mode [ 80.955323][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.983187][ T4466] device bridge_slave_0 left promiscuous mode [ 80.985625][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.050134][ T4345] Bluetooth: hci3: command 0x040f tx timeout [ 81.052931][ T4336] Bluetooth: hci3: Opcode 0x2044 failed: -110 [ 81.054219][ T4336] Bluetooth: hci3: Unable to create PA: -110 [ 81.120644][ T4466] device veth1_macvtap left promiscuous mode [ 81.121834][ T4466] device veth0_macvtap left promiscuous mode [ 81.122861][ T4466] device veth1_vlan left promiscuous mode [ 81.124199][ T4466] device veth0_vlan left promiscuous mode [ 81.520486][ T4466] bond1 (unregistering): (slave veth3): Releasing backup interface [ 81.563286][ T4466] bond1 (unregistering): Released all slaves [ 83.129084][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 83.541486][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 83.703180][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 83.869459][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.059960][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.219523][ T4339] Bluetooth: hci3: command 0x2044 tx timeout [ 85.319535][ T4466] bond0 (unregistering): (slave team0): Releasing backup interface [ 85.500700][ T4466] bond0 (unregistering): Released all slaves [ 85.772727][ T5246] device veth0_macvtap entered promiscuous mode [ 85.775591][ T5246] device veth1_macvtap entered promiscuous mode [ 85.777258][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.778851][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.810907][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 85.886385][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.888677][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.891147][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.893046][ T5508] device bridge_slave_0 left promiscuous mode [ 85.894095][ T5508] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.921394][ T5508] device bridge_slave_1 left promiscuous mode [ 85.923037][ T5508] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.149704][ T5508] bond0: (slave bond_slave_0): Releasing backup interface [ 86.193058][ T5508] bond0: (slave bond_slave_1): Releasing backup interface [ 86.255240][ T5508] team0: Port device team_slave_0 removed [ 86.261773][ T5508] team0: Port device team_slave_1 removed [ 86.263300][ T5508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.264841][ T5508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.266701][ T5508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.268068][ T5508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.273207][ T5508] device vxlan0 left promiscuous mode [ 86.274386][ T5508] bridge0: port 3(vxlan0) entered disabled state [ 86.320155][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 86.345060][ T5524] netlink: 96 bytes leftover after parsing attributes in process `syz.1.256'. [ 86.357290][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.359852][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.363089][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.380180][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.382794][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.384632][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.388754][ T5246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.393618][ T5246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.395355][ T5246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.397002][ T5246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.813645][ T5027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.822282][ T5027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.830166][ T5542] loop4: detected capacity change from 0 to 1024 [ 86.846155][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.860274][ T5027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.861756][ T5027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.864195][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.900995][ T5542] netlink: 'syz.4.262': attribute type 11 has an invalid length. [ 86.942767][ T5027] hfsplus: b-tree write err: -5, ino 25 [ 86.943988][ T5027] hfsplus: b-tree write err: -5, ino 4 [ 86.945114][ T5027] hfsplus: b-tree write err: -5, ino 2 [ 86.998351][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 87.015827][ T5553] device bond3 entered promiscuous mode [ 87.017125][ T5553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.033067][ T5553] device erspan1 entered promiscuous mode [ 87.034519][ T5553] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 87.036458][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 87.101350][ T5562] lo: Caught tx_queue_len zero misconfig [ 87.102712][ T5562] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 87.230080][ T5571] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 87.244524][ T5571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.262142][ T5571] bond2: (slave gretap1): making interface the new active one [ 87.264062][ T5571] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 87.265613][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 87.290618][ T5574] loop5: detected capacity change from 0 to 4096 [ 87.340853][ T5576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 87.358940][ T5574] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 87.383090][ T5576] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 88.713885][ T5608] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 88.742441][ T5610] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 89.449058][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.097997][ T5643] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4340] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5643] [ 90.541290][ T5627] loop4: detected capacity change from 0 to 40427 [ 90.547396][ T5627] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 90.549077][ T5627] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 90.552229][ T5627] F2FS-fs (loop4): invalid crc value [ 90.554937][ T5627] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.875698][ T5627] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 90.876978][ T5627] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.890880][ T5661] futex_wake_op: syz.3.285 tries to shift op by 144; fix this program [ 93.675918][ T5720] loop3: detected capacity change from 0 to 2048 [ 93.706956][ T5720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.724063][ T5722] netlink: 'syz.4.299': attribute type 2 has an invalid length. [ 93.837646][ T5728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.839196][ T5728] IPv6: NLM_F_CREATE should be set when creating new route [ 94.171173][ T5733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.302'. [ 94.180571][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.185429][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.225005][ T5711] ceph: No mds server is up or the cluster is laggy [ 94.376221][ T5750] loop5: detected capacity change from 0 to 512 [ 94.992195][ T5772] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 95.346364][ T5783] tipc: Failed to remove unknown binding: 66,0,0/0:798701919/798701921 [ 95.348052][ T5775] tipc: Failed to remove unknown binding: 66,0,0/0:4097988091/4097988092 [ 95.349636][ T5775] tipc: Failed to remove unknown binding: 66,0,0/0:4097988091/4097988092 [ 95.404220][ T5787] IPVS: stopping master sync thread 5772 ... [ 95.428828][ T5791] device ipip0 entered promiscuous mode [ 95.486057][ T5791] loop2: detected capacity change from 0 to 8192 [ 95.528793][ T5791] loop2: p1 p2 p3 p4 [ 95.534082][ T5791] loop2: partition table partially beyond EOD, truncated [ 95.535701][ T5791] loop2: p1 start 16777216 is beyond EOD, truncated [ 95.545310][ T5791] loop2: p2 start 151126016 is beyond EOD, truncated [ 95.546817][ T5791] loop2: p3 start 655105 is beyond EOD, truncated [ 95.555511][ T5791] loop2: p4 size 33554432 extends beyond EOD, truncated [ 95.692004][ T4336] Bluetooth: hci3: command 0x0405 tx timeout [ 96.566537][ T5828] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 96.585676][ T5791] syz.2.312 (5791): drop_caches: 2 [ 96.587327][ T5828] device bond4 entered promiscuous mode [ 96.590982][ T5828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.665082][ T5828] bond4: (slave bridge1): making interface the new active one [ 96.673572][ T5828] device bridge1 entered promiscuous mode [ 96.680875][ T5828] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 96.684567][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 96.732606][ T5828] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 96.734933][ T5828] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 97.914072][ T5871] netlink: 156 bytes leftover after parsing attributes in process `syz.3.329'. [ 99.374844][ T5870] mmap: syz.2.328 (5870) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.428043][ T5874] device syzkaller0 entered promiscuous mode [ 99.430503][ T5874] tipc: Started in network mode [ 99.433141][ T5874] tipc: Node identity 080211, cluster identity 4711 [ 99.434598][ T5874] tipc: Enabled bearer , priority 0 [ 99.468202][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.334'. [ 99.870598][ T27] audit: type=1326 audit(867.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f57a228 code=0x0 [ 100.107615][ T5891] loop2: detected capacity change from 0 to 131072 [ 100.112396][ T5891] F2FS-fs (loop2): Test dummy encryption mode enabled [ 100.114103][ T5891] F2FS-fs (loop2): invalid crc value [ 100.119005][ T5891] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.130883][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 100.135706][ T5891] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.225898][ T5907] UBIFS error (pid: 5907): cannot open "./file0", error -22 [ 100.229422][ T5907] loop5: detected capacity change from 0 to 256 [ 100.592869][ T4424] tipc: Node number set to 134353152 [ 101.019424][ T5920] binder: 5919:5920 ioctl c0306201 20000500 returned -14 [ 101.020879][ T5918] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 101.026126][ T5920] binder: 5919:5920 tried to acquire reference to desc 0, got 1 instead [ 101.035490][ T5920] binder_alloc: 5919: pid 5919 spamming oneway? 2 buffers allocated for a total size of 5120 [ 101.038244][ T5920] binder_alloc: 5919: pid 5919 spamming oneway? 3 buffers allocated for a total size of 5128 [ 101.052043][ T5918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.055728][ T4568] binder: undelivered TRANSACTION_COMPLETE [ 101.057224][ T4568] binder: undelivered TRANSACTION_COMPLETE [ 101.058383][ T4568] binder: undelivered TRANSACTION_COMPLETE [ 101.088588][ T4568] binder: undelivered transaction 6, process died. [ 101.089978][ T4568] binder: undelivered transaction 7, process died. [ 101.091252][ T4568] binder: undelivered transaction 5, process died. [ 101.103052][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'. [ 101.112324][ T5918] device bond1 entered promiscuous mode [ 101.152547][ T5918] bond1: (slave dummy0): making interface the new active one [ 101.154232][ T5918] device dummy0 entered promiscuous mode [ 101.156053][ T5918] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 101.463775][ T5913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.614101][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 102.828651][ T5951] loop4: detected capacity change from 0 to 512 [ 102.878998][ T5951] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 102.911331][ T5951] EXT4-fs (loop4): 1 truncate cleaned up [ 102.912434][ T5951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.973891][ T5961] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 103.475250][ T5977] block device autoloading is deprecated and will be removed. [ 103.548761][ T5977] md/raid10:md2: active with 1 out of 3 devices [ 103.550980][ T5977] md2: detected capacity change from 0 to 3840 [ 103.561075][ T5986] md: recovery of RAID array md2 [ 103.577044][ T5986] md: md2: recovery done. [ 103.704712][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 104.210228][ T6003] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 104.333247][ T6015] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 104.558833][ T6019] loop2: detected capacity change from 0 to 1024 [ 104.611787][ T6025] device ipip0 entered promiscuous mode [ 104.934642][ T6025] loop3: detected capacity change from 0 to 8192 [ 104.959561][ T6010] loop5: detected capacity change from 0 to 40427 [ 104.964160][ T6010] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 104.965669][ T6010] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 104.967730][ T6010] F2FS-fs (loop5): invalid crc value [ 104.982648][ T6019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.991792][ T6025] loop3: p1 p2 p3 p4 [ 104.992577][ T6025] loop3: partition table partially beyond EOD, truncated [ 104.993872][ T6025] loop3: p1 start 16777216 is beyond EOD, truncated [ 104.994996][ T6025] loop3: p2 start 151126016 is beyond EOD, truncated [ 104.996098][ T6025] loop3: p3 start 655105 is beyond EOD, truncated [ 104.997209][ T6025] loop3: p4 size 33554432 extends beyond EOD, truncated [ 106.113228][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 106.276032][ T6025] syz.3.359 (6025): drop_caches: 2 [ 106.284405][ T6010] F2FS-fs (loop5): Found nat_bits in checkpoint [ 106.328053][ T6010] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 106.329447][ T6010] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 106.594687][ T6078] loop4: detected capacity change from 0 to 256 [ 106.600670][ T6078] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.603489][ T6078] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.664259][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.666593][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.983517][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.301228][ T6116] netlink: 'syz.2.375': attribute type 39 has an invalid length. [ 108.423784][ T6131] loop3: detected capacity change from 0 to 8192 [ 108.481158][ T27] audit: type=1326 audit(876.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6112 comm="syz.5.376" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b57a228 code=0x0 [ 109.167905][ T6135] syz.4.378 sent an empty control message without MSG_MORE. [ 109.177168][ T6141] futex_wake_op: syz.1.379 tries to shift op by 144; fix this program [ 110.272560][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.274978][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.295842][ T6183] ip_tables: iptables: counters copy to user failed while replacing table [ 111.306385][ T6169] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.310084][ T6169] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.311619][ T6169] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.319595][ T6169] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.326948][ T6199] loop2: detected capacity change from 0 to 736 [ 111.561134][ T6210] xt_TPROXY: Can be used only with -p tcp or -p udp [ 111.564680][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.567123][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.574118][ T6210] ip_tables: iptables: counters copy to user failed while replacing table [ 111.579945][ T6210] ip_tables: iptables: counters copy to user failed while replacing table [ 111.712851][ T6217] loop4: detected capacity change from 0 to 256 [ 112.839314][ T6241] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 113.428141][ T27] audit: type=1326 audit(881.299:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.5.405" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b57a228 code=0x0 [ 114.051025][ T6257] loop3: detected capacity change from 0 to 512 [ 115.509276][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 115.828141][ T27] audit: type=1326 audit(883.674:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.4.418" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f7a228 code=0x0 [ 116.621978][ T6326] loop5: detected capacity change from 0 to 512 [ 116.657714][ T5528] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.554495][ T6342] loop2: detected capacity change from 0 to 764 [ 120.138623][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.5.432'. [ 120.202564][ T6360] netlink: 'syz.2.445': attribute type 4 has an invalid length. [ 121.699638][ T6375] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.807565][ T27] audit: type=1326 audit(889.621:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.438" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x0 [ 122.263659][ T6385] loop3: detected capacity change from 0 to 2048 [ 122.292764][ T6386] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.860807][ T6392] loop2: detected capacity change from 0 to 32768 [ 123.097227][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.098884][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.122190][ T6392] loop2: p1 p9 p11 [ 123.613349][ T6402] netlink: 104 bytes leftover after parsing attributes in process `syz.3.448'. [ 124.080334][ T6408] jffs2: notice: (6408) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.117241][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.121436][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.532110][ T6433] loop3: detected capacity change from 0 to 256 [ 127.543655][ T6433] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.545461][ T6433] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 127.548803][ T6433] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 127.551417][ T6433] exFAT-fs (loop3): failed to load alloc-bitmap [ 127.553534][ T6433] exFAT-fs (loop3): failed to recognize exfat type [ 134.712441][ T6413] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 134.715007][ T6437] tipc: Started in network mode [ 134.715927][ T6437] tipc: Node identity 4, cluster identity 4711 [ 134.716871][ T6437] tipc: Node number set to 4 [ 134.803303][ T6450] loop4: detected capacity change from 0 to 512 [ 135.470474][ T6446] netlink: 156 bytes leftover after parsing attributes in process `syz.2.461'. [ 136.046583][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 136.067663][ T6476] process 'syz.1.467' launched './file1' with NULL argv: empty string added [ 136.085934][ T6474] bond3: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 136.163393][ T6474] bond3: (slave ip_vti0): Error -95 calling set_mac_address [ 136.560502][ T6486] loop2: detected capacity change from 0 to 128 [ 136.643872][ T6486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.647310][ T6489] device syzkaller0 entered promiscuous mode [ 137.041419][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 137.091344][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 137.141457][ T6498] bridge2: port 1(veth3) entered blocking state [ 137.143636][ T6498] bridge2: port 1(veth3) entered disabled state [ 137.148522][ T6498] device veth3 entered promiscuous mode [ 137.178373][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.5.473'. [ 137.201875][ T6498] bridge2: port 2(veth0_to_bond) entered blocking state [ 137.205339][ T6498] bridge2: port 2(veth0_to_bond) entered disabled state [ 137.212163][ T6498] device veth0_to_bond entered promiscuous mode [ 138.583287][ T6517] ip_tables: iptables: counters copy to user failed while replacing table [ 138.600846][ T6507] bridge2: port 3(veth5) entered blocking state [ 138.604737][ T6507] bridge2: port 3(veth5) entered disabled state [ 138.611205][ T6507] device veth5 entered promiscuous mode [ 138.718157][ T6529] loop3: detected capacity change from 0 to 8 [ 138.727481][ T6526] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 138.751549][ T6529] SQUASHFS error: lzo decompression failed, data probably corrupt [ 138.753802][ T6529] SQUASHFS error: Failed to read block 0x91: -5 [ 138.755044][ T6529] SQUASHFS error: Unable to read metadata cache entry [8f] [ 138.756309][ T6529] SQUASHFS error: Unable to read inode 0x11f [ 139.810963][ T6557] loop5: detected capacity change from 0 to 2048 [ 140.880285][ T6570] usb usb8: usbfs: process 6570 (syz.5.493) did not claim interface 0 before use [ 140.915862][ T6566] FAULT_INJECTION: forcing a failure. [ 140.915862][ T6566] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.917955][ T6566] CPU: 1 PID: 6566 Comm: syz.3.491 Not tainted syzkaller #0 [ 140.919076][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 140.920740][ T6566] Call trace: [ 140.921306][ T6566] dump_backtrace+0x1c4/0x1f0 [ 140.922145][ T6566] show_stack+0x2c/0x3c [ 140.922838][ T6566] __dump_stack+0x30/0x40 [ 140.923584][ T6566] dump_stack_lvl+0xf4/0x15c [ 140.924340][ T6566] dump_stack+0x1c/0x5c [ 140.925042][ T6566] should_fail_ex+0x3cc/0x524 [ 140.925854][ T6566] should_fail+0x14/0x24 [ 140.926571][ T6566] should_fail_usercopy+0x20/0x30 [ 140.927408][ T6566] do_notify_resume+0x1110/0x2c84 [ 140.928266][ T6566] el0_svc+0x9c/0x12c [ 140.928959][ T6566] el0t_64_sync_handler+0x84/0xf0 [ 140.929789][ T6566] el0t_64_sync+0x18c/0x190 [ 141.352247][ T6576] device veth1_macvtap left promiscuous mode [ 141.353720][ T6576] device macsec0 entered promiscuous mode [ 141.429038][ T6586] netlink: 'syz.5.497': attribute type 1 has an invalid length. [ 141.543819][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.012405][ T6594] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.088194][ T6598] loop2: detected capacity change from 0 to 4096 [ 142.110685][ T6601] overlayfs: failed to clone lowerpath [ 142.110770][ T6598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.124436][ T6601] overlayfs: failed to clone lowerpath [ 142.163422][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.166102][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.298052][ T6621] loop4: detected capacity change from 0 to 1024 [ 143.321278][ T6621] EXT4-fs: Ignoring removed nobh option [ 143.322620][ T6621] EXT4-fs: Ignoring removed nobh option [ 143.335763][ T6621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.475921][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 144.138187][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 144.316484][ T6652] rxe_eth0 speed is unknown, defaulting to 1000 [ 144.327660][ T6644] loop2: detected capacity change from 0 to 512 [ 144.331406][ T6644] EXT4-fs (loop2): orphan cleanup on readonly fs [ 144.636690][ T6644] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.516: corrupted inode contents [ 144.644843][ T6644] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 144.649192][ T6644] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.516: corrupted inode contents [ 144.651737][ T6644] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.516: mark_inode_dirty error [ 144.654425][ T6644] EXT4-fs (loop2): 1 orphan inode deleted [ 144.655719][ T6644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.662461][ T27] audit: type=1326 audit(912.379:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6651 comm="syz.3.519" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f57a228 code=0x0 [ 144.703542][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 145.306330][ T6676] netlink: 550 bytes leftover after parsing attributes in process `syz.5.525'. [ 145.343881][ T4339] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 145.714923][ T6679] binder: 6678:6679 tried to acquire reference to desc 0, got 1 instead [ 145.717330][ T6679] binder: 6678:6679 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 145.720001][ T6679] binder: 6679 RLIMIT_NICE not set [ 145.721106][ T6679] binder: 6679 RLIMIT_NICE not set [ 145.722185][ T6679] binder: 6679 RLIMIT_NICE not set [ 145.723245][ T6679] binder: 6678:6679 got transaction with invalid offset (0, min 0 max 50) or object. [ 145.725250][ T6679] binder: 6678:6679 transaction reply to 6678:6679 failed 13/29201/-22, size 50-56 line 3363 [ 145.727082][ T6679] binder: send failed reply for transaction 12 to 6678:6679 [ 145.735629][ T4423] binder: undelivered TRANSACTION_COMPLETE [ 145.736940][ T4423] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.738214][ T4423] binder: undelivered TRANSACTION_ERROR: 29190 [ 147.417695][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.421952][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.451618][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.515734][ T6713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.519201][ T6720] netlink: 'syz.5.534': attribute type 3 has an invalid length. [ 147.521384][ T6720] netlink: 'syz.5.534': attribute type 3 has an invalid length. [ 148.399457][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 148.401381][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'. [ 148.421927][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 148.427877][ T6729] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.429734][ T6729] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.431242][ T6729] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.432896][ T6729] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.862128][ T6760] device vlan4 entered promiscuous mode [ 150.221618][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 151.862737][ T6793] loop4: detected capacity change from 0 to 512 [ 152.496923][ T6793] EXT4-fs: Ignoring removed nobh option [ 152.498050][ T6793] ext4: Unknown parameter 'fowner>00000000000000000000' [ 152.545546][ T6803] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 152.592511][ T6803] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.601779][ T6803] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.606426][ T6803] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.607823][ T6803] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.617639][ T6803] bond4: (slave geneve2): making interface the new active one [ 152.641493][ T6803] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 153.006842][ T6803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 153.015541][ T6803] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.539679][ T6830] loop4: detected capacity change from 0 to 1024 [ 153.553112][ T6830] netlink: 14 bytes leftover after parsing attributes in process `syz.4.569'. [ 153.554879][ T6830] tipc: Resetting bearer [ 153.647330][ T6830] bond2: (slave dummy0): Releasing active interface [ 153.697478][ T6830] tipc: Resetting bearer [ 153.699889][ T6830] tipc: Disabling bearer [ 153.703218][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.570'. [ 153.713364][ T6834] bridge2: port 1(veth5) entered blocking state [ 153.714834][ T6834] bridge2: port 1(veth5) entered disabled state [ 153.716468][ T6834] device veth5 entered promiscuous mode [ 153.764885][ T6833] bridge2: port 2(veth0_to_bond) entered blocking state [ 153.769988][ T6833] bridge2: port 2(veth0_to_bond) entered disabled state [ 153.776185][ T6833] device veth0_to_bond entered promiscuous mode [ 153.802994][ T6833] bridge2: port 3(veth7) entered blocking state [ 153.804263][ T6833] bridge2: port 3(veth7) entered disabled state [ 153.806327][ T6833] device veth7 entered promiscuous mode [ 153.876055][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 153.939143][ T6844] capability: warning: `syz.4.572' uses deprecated v2 capabilities in a way that may be insecure [ 153.961431][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 153.963419][ T6841] netlink: 'syz.1.573': attribute type 1 has an invalid length. [ 153.980033][ T6841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.016242][ T6848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.059179][ T6848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.069935][ T6848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.071835][ T6848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.077109][ T6848] bond2: (slave geneve2): making interface the new active one [ 154.079503][ T6848] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 154.088127][ T4848] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 154.484534][ T6867] "syz.4.577" (6867) uses obsolete ecb(arc4) skcipher [ 154.560998][ T6874] ip_tables: iptables: counters copy to user failed while replacing table [ 155.845193][ T6901] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 156.186438][ T6908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.584'. [ 156.211562][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.600665][ T27] audit: type=1326 audit(924.279:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.605219][ T27] audit: type=1326 audit(924.279:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.615381][ T27] audit: type=1326 audit(924.289:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.625386][ T27] audit: type=1326 audit(924.289:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.634769][ T27] audit: type=1326 audit(924.289:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.647002][ T27] audit: type=1326 audit(924.289:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.658687][ T27] audit: type=1326 audit(924.289:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.670270][ T27] audit: type=1326 audit(924.289:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.680759][ T27] audit: type=1326 audit(924.289:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.689672][ T27] audit: type=1326 audit(924.289:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.1.588" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff86f7a228 code=0x7ffc0000 [ 156.831476][ T6931] loop2: detected capacity change from 0 to 16 [ 156.853324][ T6931] erofs: (device loop2): mounted with root inode @ nid 36. [ 158.532190][ T6972] device ip6tnl1 entered promiscuous mode [ 158.549859][ T6967] loop5: detected capacity change from 0 to 4096 [ 158.704881][ T6967] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 159.007875][ T6967] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 159.588184][ T6995] loop4: detected capacity change from 0 to 16 [ 159.600766][ T6995] erofs: (device loop4): mounted with root inode @ nid 36. [ 160.231255][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.612'. [ 160.234511][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.612'. [ 160.294927][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.613'. [ 160.296830][ T7005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.829454][ T7005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.871320][ T7015] futex_wake_op: syz.2.617 tries to shift op by 144; fix this program [ 161.157536][ T7025] ip_tables: iptables: counters copy to user failed while replacing table [ 161.678834][ T7049] device syzkaller0 entered promiscuous mode [ 161.990196][ T7050] tipc: Enabled bearer , priority 0 [ 161.993514][ T7048] tipc: Resetting bearer [ 162.035037][ T7053] loop5: detected capacity change from 0 to 8 [ 162.038832][ T7056] loop2: detected capacity change from 0 to 1024 [ 162.045988][ T7053] squashfs: Unknown parameter '' [ 162.069360][ T6736] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.093671][ T7048] tipc: Disabling bearer [ 162.112698][ T7056] netlink: 14 bytes leftover after parsing attributes in process `syz.2.633'. [ 162.194634][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 162.766009][ T7074] device syzkaller0 entered promiscuous mode [ 162.781486][ T7074] ================================================================== [ 162.782862][ T7074] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x210/0x214 [ 162.784460][ T7074] Read of size 2 at addr ffff0000f4ca2dfb by task syz.3.639/7074 [ 162.785797][ T7074] [ 162.786187][ T7074] CPU: 1 PID: 7074 Comm: syz.3.639 Not tainted syzkaller #0 [ 162.787422][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 162.789184][ T7074] Call trace: [ 162.789742][ T7074] dump_backtrace+0x1c4/0x1f0 [ 162.790564][ T7074] show_stack+0x2c/0x3c [ 162.791355][ T7074] __dump_stack+0x30/0x40 [ 162.792188][ T7074] dump_stack_lvl+0xf4/0x15c [ 162.793040][ T7074] print_address_description+0x88/0x218 [ 162.794058][ T7074] print_report+0x50/0x68 [ 162.794864][ T7074] kasan_report+0xa8/0xfc [ 162.795758][ T7074] __asan_report_load2_noabort+0x2c/0x38 [ 162.796912][ T7074] ieee80211_monitor_select_queue+0x210/0x214 [ 162.798069][ T7074] netdev_core_pick_tx+0x130/0x320 [ 162.799060][ T7074] __dev_queue_xmit+0x730/0x3154 [ 162.800008][ T7074] dev_queue_xmit+0x24/0x34 [ 162.800873][ T7074] packet_sendmsg+0x2de8/0x3d64 [ 162.801774][ T7074] ____sys_sendmsg+0x588/0x90c [ 162.802655][ T7074] __sys_sendmsg+0x288/0x374 [ 162.803547][ T7074] __arm64_sys_sendmsg+0x80/0x94 [ 162.804530][ T7074] invoke_syscall+0x98/0x290 [ 162.805457][ T7074] el0_svc_common+0x13c/0x258 [ 162.806226][ T7074] do_el0_svc+0x5c/0x134 [ 162.806987][ T7074] el0_svc+0x58/0x12c [ 162.807702][ T7074] el0t_64_sync_handler+0x84/0xf0 [ 162.808578][ T7074] el0t_64_sync+0x18c/0x190 [ 162.809357][ T7074] [ 162.809775][ T7074] The buggy address belongs to the object at ffff0000f4ca2d00 [ 162.809775][ T7074] which belongs to the cache SMC of size 2712 [ 162.812082][ T7074] The buggy address is located 251 bytes inside of [ 162.812082][ T7074] 2712-byte region [ffff0000f4ca2d00, ffff0000f4ca3798) [ 162.814378][ T7074] [ 162.814790][ T7074] The buggy address belongs to the physical page: [ 162.815822][ T7074] page:000000001ab8f2e6 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f4ca0b40 pfn:0x134ca0 [ 162.817782][ T7074] head:000000001ab8f2e6 order:3 compound_mapcount:0 compound_pincount:0 [ 162.819209][ T7074] memcg:ffff0000f5c09001 [ 162.819943][ T7074] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 162.821353][ T7074] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000d68a3b00 [ 162.822786][ T7074] raw: ffff0000f4ca0b40 00000000800b0009 00000001ffffffff ffff0000f5c09001 [ 162.824244][ T7074] page dumped because: kasan: bad access detected [ 162.825300][ T7074] [ 162.825673][ T7074] Memory state around the buggy address: [ 162.826607][ T7074] ffff0000f4ca2c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.827984][ T7074] ffff0000f4ca2d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.829337][ T7074] >ffff0000f4ca2d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.830657][ T7074] ^ [ 162.832017][ T7074] ffff0000f4ca2e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.833377][ T7074] ffff0000f4ca2e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.834746][ T7074] ================================================================== [ 162.836163][ T7074] Disabling lock debugging due to kernel taint