last executing test programs: 15.981358846s ago: executing program 2 (id=73): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x20}, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x1) 13.827540802s ago: executing program 2 (id=81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 12.911608643s ago: executing program 1 (id=84): socket$inet6(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) close(0x3) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 12.680849827s ago: executing program 2 (id=86): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) 11.06080861s ago: executing program 3 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x24048044) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket(0x10, 0x803, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) 10.916618793s ago: executing program 1 (id=88): add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x275, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x4c8541, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100, &(0x7f0000000200)={0xd, 0x1000f7, 0x140000, {r1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write$binfmt_misc(r2, &(0x7f0000000540)="f64b", 0x2) 10.579413011s ago: executing program 1 (id=91): r0 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 9.774946627s ago: executing program 3 (id=92): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) setreuid(0xee01, 0xee01) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) 9.742587394s ago: executing program 4 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setrlimit(0xf, &(0x7f0000000180)={0xa58, 0x7f}) poll(0x0, 0x0, 0x72) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x20000000) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0xfffffffd, 0x6, 0xef, 0x1, 0x0, "2f3718cb92da1eafff06f5d4dccb1f5b5de0ef"}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) 8.143928783s ago: executing program 4 (id=94): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4b3f, 0x4) sendto$inet(r1, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) shutdown(r1, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x1b, 0x0, 0x0) fsmount(r0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8.123368548s ago: executing program 0 (id=95): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8, 0x103) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000440)) 7.198506971s ago: executing program 2 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0xe20, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x9, 0x9}, &(0x7f0000000b40)=0x8) 7.173638137s ago: executing program 4 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20020084, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) 7.144318543s ago: executing program 2 (id=98): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000040000000000000000000000000000000006364") 7.051530935s ago: executing program 0 (id=99): socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 6.229063374s ago: executing program 4 (id=100): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5.459114002s ago: executing program 1 (id=101): setreuid(0xee00, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002040)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 5.453060543s ago: executing program 3 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 5.42304361s ago: executing program 0 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00'}, 0x18) 4.602415359s ago: executing program 4 (id=104): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c61) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r2 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00003f7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) read$FUSE(r1, 0x0, 0x0) 4.581705404s ago: executing program 3 (id=105): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) 4.283102803s ago: executing program 1 (id=106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x80000000) 4.220317677s ago: executing program 0 (id=107): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4) 3.714175404s ago: executing program 2 (id=108): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) unshare(0x22020600) r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) pread64(r2, 0x0, 0x0, 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0xaa3a6000) timer_settime(r1, 0x1, &(0x7f0000000680)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000840)) 3.447500916s ago: executing program 3 (id=109): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.429487849s ago: executing program 4 (id=110): socket(0x2, 0x80805, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x844, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@uni_xlateno}, {@utf8}, {@numtail}, {@utf8}, {@shortname_win95}, {@rodir}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@rodir}, {@utf8}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@fat=@nfs}, {@utf8}, {@utf8no}]}, 0x1, 0x292, &(0x7f0000000340)="$eJzs3c9qM1UUAPAz+dMkn4tk4UoEB3Th6uOrT9AiFcSCoGShLrTYFKQJhRYCVTHtyifwCXweN+IL+ACKO7sQR6Yz+SeT0GraFP39Nrmce0/uuXdu29Xcfvbq6PT47OLk+uufo91OorYXe3GTRC9qMXUVlX76tToOADxxN1kWv2WFVhG6XB7RXJHZqD14cQDAg1j8+7/tWgCAx/HhRx+/t394ePBBmrYjRt+O+0kUn0X//kl8EcMYxIvoxh8R2UzRfufdw4NopLlevDGajPt55ujTH8rv3/8l4jZ/N7rRq87fTQsL+ZNxvxnPyvn3hjF4//voxsvV+W/N89tR5kd/J958faH+59GNHz+PsxjGcVnbNP+b3TR9O/vu968+yaN5fjIZ91uzceXoeudRnwwAAAAAAAAAAAAAAAAAAAAAAP9lz9OZ3vL9O9OL/9f0r7kfaLJwP8+LNE2zpBg/z2/EK41obHPtAAAAAAAAAAAAAAAAAAAA8FRcXH55ejQcDs432pi+1l/RFX8uR1oRcZdvblV0lbNc3amwop6o55+tiGEScb91NfO0WJMV7aKeQf2eO9aJiOHgPGnE5h5BMot0Frtei2KuPNIpGguRfz17O24b09N1epTEoLZ2n9tVh2QDjazi+NVXZu38PdIpV1AxuLNm9p2X/lHNWXdFVxIRzdlmLo+5/SF7Nj+Qzc3u4WP89gEAAAAAAAAAAAAAAAAAABbNX/qt6LzeQkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsAXz//9/j8akTF41JqvnjUaUkS0vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//wAFaIA==") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.401522267s ago: executing program 0 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 1.060360416s ago: executing program 1 (id=112): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$sndpcmc(0x0, 0x5, 0x802) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x5080, 0x0, 0x0, 0x0, 0x0) unshare(0xe000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) 783.75412ms ago: executing program 0 (id=113): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x90, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1deb, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 3 (id=114): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 63.962264][ T4173] cgroup: Unknown subsys name 'net' [ 64.137656][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.622303][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.178928][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.197775][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 67.233665][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.273583][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.282909][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.396907][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.404591][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.413204][ T4197] device bridge_slave_0 entered promiscuous mode [ 67.443835][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.451119][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.459736][ T4197] device bridge_slave_1 entered promiscuous mode [ 67.483770][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.491649][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.499879][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.521546][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.528643][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.537072][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.552143][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.559237][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.567575][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.575449][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.582954][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.591159][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.598571][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.605842][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.614217][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.635842][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.643085][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.652075][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.659101][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.666203][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.674402][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.681925][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.689009][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.697021][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.713626][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.750790][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.768713][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.785534][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.803383][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.814133][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.825650][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.836552][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.848026][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.891303][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.909802][ T4197] team0: Port device team_slave_0 added [ 67.918372][ T4188] team0: Port device team_slave_0 added [ 67.933040][ T4188] team0: Port device team_slave_1 added [ 67.953733][ T4197] team0: Port device team_slave_1 added [ 67.962839][ T4186] team0: Port device team_slave_0 added [ 67.971354][ T4187] team0: Port device team_slave_0 added [ 67.986373][ T4189] team0: Port device team_slave_0 added [ 67.999744][ T4186] team0: Port device team_slave_1 added [ 68.008616][ T4187] team0: Port device team_slave_1 added [ 68.021549][ T4189] team0: Port device team_slave_1 added [ 68.028348][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.035710][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.062319][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.106632][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.113690][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.139733][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.151516][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.158484][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.184504][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.205953][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.213047][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.239443][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.258268][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.265356][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.291573][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.317536][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.327067][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.353810][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.366282][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.373523][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.399531][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.412435][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.419426][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.445702][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.469589][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.476850][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.502886][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.546406][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.553725][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.579943][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.606914][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.613961][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.624664][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.631688][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.638441][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.646424][ T4188] Cannot create hsr debugfs directory [ 68.669421][ T4197] device hsr_slave_0 entered promiscuous mode [ 68.676540][ T4197] device hsr_slave_1 entered promiscuous mode [ 68.683699][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.691884][ T4197] Cannot create hsr debugfs directory [ 68.702925][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.711122][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.718091][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.725830][ T4187] Cannot create hsr debugfs directory [ 68.796982][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.804595][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.811778][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.819370][ T4189] Cannot create hsr debugfs directory [ 68.881068][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 68.881068][ T4191] Bluetooth: hci2: command 0x0409 tx timeout [ 68.882520][ T4191] Bluetooth: hci3: command 0x0409 tx timeout [ 68.887325][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 68.919623][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 69.147067][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.160343][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.176669][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.189070][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.231025][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.241353][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.253407][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.269188][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.328623][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.338759][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.354539][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.385287][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.419066][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.429371][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.467481][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.477151][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.495415][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.517105][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.529740][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.557951][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.601255][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.621896][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.655856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.669001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.680182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.689249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.713517][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.728182][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.748656][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.762301][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.772246][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.779498][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.791138][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.823701][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.833559][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.842595][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.852167][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.862046][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.869127][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.876921][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.888038][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.896721][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.903849][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.912465][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.922926][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.932045][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.939219][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.947558][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.959400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.972358][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.992923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.002524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.012463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.022338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.031320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.040670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.065183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.073859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.083559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.094776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.103919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.113299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.122301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.130847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.139157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.148013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.158759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.167666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.175965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.188979][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.199086][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.210408][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.225015][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.236837][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.244721][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.254402][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.263829][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.273440][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.281983][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.289055][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.297579][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.306583][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.316794][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.328191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.338016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.346612][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.353724][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.367758][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.379320][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.390878][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.410118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.425150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.434240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.444909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.454221][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.461349][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.469092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.478484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.487822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.496433][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.503538][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.512196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.541618][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.550978][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.559951][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.567085][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.590733][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.612314][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.621340][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.630967][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.639585][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.662081][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.681906][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.692758][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.701946][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.711036][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.719596][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.729807][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.738016][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.746153][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.766920][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.779026][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.797194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.811585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.830467][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.837645][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.855658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.864324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.874161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.885752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.894960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.916619][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.940700][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.964705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.975388][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 70.984558][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 70.994941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.003459][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 71.011854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.020695][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 71.026838][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 71.033991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.048203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.057168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.066459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.105732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.113938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.128745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.139340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.148297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.158657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.168461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.176385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.197282][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.207447][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.214062][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.224046][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.237582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.247233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.278006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.302183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.362833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.372935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.438609][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.467007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.476534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.497205][ T4197] device veth0_vlan entered promiscuous mode [ 71.514000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.541126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.558354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.566647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.605163][ T4197] device veth1_vlan entered promiscuous mode [ 71.622740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.631848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.648612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.671199][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.700315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.708350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.717765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.735003][ T4197] device veth0_macvtap entered promiscuous mode [ 71.747339][ T4189] device veth0_vlan entered promiscuous mode [ 71.760528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.769047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.778801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.789009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.798275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.806077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.816182][ T4197] device veth1_macvtap entered promiscuous mode [ 71.829347][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.847816][ T4189] device veth1_vlan entered promiscuous mode [ 71.855965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.864910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.873936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.882448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.890175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.906618][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.916519][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.956864][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.974175][ T4189] device veth0_macvtap entered promiscuous mode [ 71.982237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.992245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.001909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.013857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.022386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.032206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.041372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.050029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.068319][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.094767][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.104030][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.114909][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.123599][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.133907][ T4189] device veth1_macvtap entered promiscuous mode [ 72.149965][ T4186] device veth0_vlan entered promiscuous mode [ 72.161071][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.169585][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.178926][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.187804][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.197370][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.206365][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.215616][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.224682][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.233100][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.243562][ T4188] device veth0_vlan entered promiscuous mode [ 72.252700][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.261682][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.271499][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.281914][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.319561][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.333471][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.345887][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.359684][ T4186] device veth1_vlan entered promiscuous mode [ 72.373197][ T4188] device veth1_vlan entered promiscuous mode [ 72.384553][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.392960][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.403383][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.413995][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.425050][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.435962][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.447330][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.477240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.491291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.515950][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.529011][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.538916][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.547770][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.564528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.573240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.587991][ T4187] device veth0_vlan entered promiscuous mode [ 72.623580][ T4186] device veth0_macvtap entered promiscuous mode [ 72.631373][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.639783][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.650024][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.660185][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.669011][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.677877][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.686002][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.701026][ T4188] device veth0_macvtap entered promiscuous mode [ 72.721616][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.739811][ T4186] device veth1_macvtap entered promiscuous mode [ 72.749376][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.783632][ T4188] device veth1_macvtap entered promiscuous mode [ 72.791300][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.799148][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.811649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.822226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.830569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.839639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.848338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.894954][ T4187] device veth1_vlan entered promiscuous mode [ 72.913520][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.929361][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.941664][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.953036][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.969428][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.002972][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.015627][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.029401][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.037744][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.047960][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 73.054311][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 73.064633][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.071697][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 73.084021][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 73.086800][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.104765][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.115753][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.126070][ T4191] Bluetooth: hci2: command 0x040f tx timeout [ 73.138069][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.148153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.156534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.169425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.178373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.186659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.195942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.206598][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.217745][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.227906][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.238762][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.250124][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.268758][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.281931][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.294440][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.306303][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.322491][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.354863][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.382930][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.397972][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.406870][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.416417][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.425718][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.435084][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.458007][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.467846][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.477284][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.486269][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.517184][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.538206][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.568062][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.577077][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.599250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.617526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.635705][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.662870][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.675550][ T4187] device veth0_macvtap entered promiscuous mode [ 73.701206][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.718377][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.763242][ T4187] device veth1_macvtap entered promiscuous mode [ 73.800650][ T4274] device syzkaller0 entered promiscuous mode [ 73.827877][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.838727][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.853140][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.864657][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.874842][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.885542][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.896164][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.907013][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.918589][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.019964][ T4279] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 74.030132][ T4279] FAULT_INJECTION: forcing a failure. [ 74.030132][ T4279] name failslab, interval 1, probability 0, space 0, times 1 [ 74.032148][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.046614][ T4279] CPU: 0 PID: 4279 Comm: syz.2.3 Not tainted syzkaller #0 [ 74.060880][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.070981][ T4279] Call Trace: [ 74.074289][ T4279] [ 74.075924][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.077261][ T4279] dump_stack_lvl+0x188/0x250 [ 74.087211][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.091764][ T4279] ? show_regs_print_info+0x20/0x20 [ 74.107415][ T4279] ? load_image+0x410/0x410 [ 74.111956][ T4279] ? __might_sleep+0xf0/0xf0 [ 74.116586][ T4279] ? __lock_acquire+0x7b50/0x7b50 [ 74.121664][ T4279] should_fail+0x383/0x4b0 [ 74.124856][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.126111][ T4279] should_failslab+0x5/0x20 [ 74.136004][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.140425][ T4279] slab_pre_alloc_hook+0x51/0xc0 [ 74.140455][ T4279] __kmalloc_node+0x6d/0x3a0 [ 74.160507][ T4279] ? kvmalloc_node+0x84/0x130 [ 74.162146][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.165215][ T4279] ? rcu_is_watching+0x11/0xa0 [ 74.179820][ T4279] kvmalloc_node+0x84/0x130 [ 74.183899][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.184360][ T4279] ceph_msg_new2+0x162/0x4a0 [ 74.194867][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.199388][ T4279] ceph_monc_init+0x5e0/0xa00 [ 74.213896][ T4279] ceph_create_client+0x221/0x300 [ 74.218965][ T4279] ceph_get_tree+0xf6/0x1290 [ 74.223587][ T4279] ? bpf_lsm_capable+0x5/0x10 [ 74.228296][ T4279] ? security_capable+0x85/0xb0 [ 74.233181][ T4279] vfs_get_tree+0x88/0x270 [ 74.233782][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.237634][ T4279] vfs_fsconfig_locked+0x22f/0x400 [ 74.245414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.249968][ T4279] __se_sys_fsconfig+0x69e/0x7e0 [ 74.262418][ T4279] ? __x64_sys_fsconfig+0xc0/0xc0 [ 74.267498][ T4279] ? lockdep_hardirqs_on+0x94/0x140 [ 74.272726][ T4279] ? __x64_sys_fsconfig+0x1c/0xc0 [ 74.277787][ T4279] do_syscall_64+0x4c/0xa0 [ 74.282237][ T4279] ? clear_bhb_loop+0x30/0x80 [ 74.285156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.286962][ T4279] ? clear_bhb_loop+0x30/0x80 [ 74.297308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.299640][ T4279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.313635][ T4279] RIP: 0033:0x7fd793f15159 [ 74.318083][ T4279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.326707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.337733][ T4279] RSP: 002b:00007fd79216d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 74.337759][ T4279] RAX: ffffffffffffffda RBX: 00007fd79419cfa0 RCX: 00007fd793f15159 [ 74.337775][ T4279] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 74.361622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.362178][ T4279] RBP: 00007fd793fac06b R08: 0000000000000000 R09: 0000000000000000 [ 74.386248][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.394245][ T4279] R13: 00007fd79419d038 R14: 00007fd79419cfa0 R15: 00007ffdd51d9368 [ 74.402267][ T4279] [ 74.416513][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.426270][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.442157][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.449708][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465035][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.476697][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.559384][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.579195][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.592341][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.600921][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.636515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.645581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.680838][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.698119][ T4281] device syzkaller0 entered promiscuous mode [ 74.708551][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.749711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.843732][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.867973][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.907792][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.922179][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.032556][ T4287] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.052770][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.062359][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.721013][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 75.727254][ T1109] Bluetooth: hci1: command 0x0419 tx timeout [ 75.733711][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 75.739847][ T1109] Bluetooth: hci4: command 0x0419 tx timeout [ 75.746302][ T1109] Bluetooth: hci2: command 0x0419 tx timeout [ 75.922110][ T4287] kvm [4286]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x800100000080 [ 75.946785][ T4287] kvm [4286]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 75.982706][ T4287] kvm [4286]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x800000000000 [ 77.611645][ T4231] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 77.930248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.950237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.960242][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.970238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.980238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.990237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.000235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.010236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.020235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.030234][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.682826][ T4306] ima: policy update failed [ 79.435228][ T26] audit: type=1807 audit(1790318384.222:2): action=measure UNKNOWN=u res=0 [ 79.498539][ T26] audit: type=1802 audit(1790318384.222:3): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.12" res=0 errno=0 [ 81.307134][ T26] audit: type=1802 audit(1790318384.752:4): pid=4306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.12" res=0 errno=0 [ 82.340454][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.650393][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 84.580468][ T4233] usb 5-1: unable to get BOS descriptor set [ 84.661797][ T4233] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 84.737231][ T4233] usb 5-1: can't read configurations, error -71 [ 85.652265][ T4340] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 85.920850][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 86.800199][ C1] sched: RT throttling activated [ 86.958853][ T7] cfg80211: failed to load regulatory.db [ 87.319607][ T4348] device syzkaller0 entered promiscuous mode [ 87.393700][ T4348] tipc: Started in network mode [ 87.399729][ T4348] tipc: Node identity 324d3e65c959, cluster identity 4711 [ 87.589094][ T4348] tipc: Enabled bearer , priority 0 [ 87.733905][ T4345] tipc: Resetting bearer [ 88.069202][ T4345] tipc: Disabling bearer [ 92.930318][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.470436][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.686784][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.699733][ T13] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 93.709176][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.734773][ T4405] loop1: detected capacity change from 0 to 128 [ 93.751704][ T13] usb 4-1: config 0 descriptor?? [ 94.311135][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 94.323340][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 94.535153][ T13] usb 4-1: USB disconnect, device number 3 [ 94.617123][ T4415] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4415] [ 96.063429][ T4420] loop1: detected capacity change from 0 to 8 [ 96.077073][ T4420] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 96.590091][ T4179] udevd[4179]: incorrect cramfs checksum on /dev/loop1 [ 97.142331][ T4179] udevd[4179]: incorrect cramfs checksum on /dev/loop1 [ 97.803025][ T4420] syz.1.39 (4420): drop_caches: 2 [ 98.341633][ T4431] device syzkaller0 entered promiscuous mode [ 98.620922][ T4431] netlink: 53 bytes leftover after parsing attributes in process `syz.3.42'. [ 99.038662][ T4439] netlink: 64 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.404989][ T4441] loop1: detected capacity change from 0 to 40427 [ 99.502604][ T4447] device syzkaller0 entered promiscuous mode [ 99.607161][ T4451] ======================================================= [ 99.607161][ T4451] WARNING: The mand mount option has been deprecated and [ 99.607161][ T4451] and is ignored by this kernel. Remove the mand [ 99.607161][ T4451] option from the mount to silence this warning. [ 99.607161][ T4451] ======================================================= [ 99.739041][ T4441] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 99.745734][ T4441] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 99.759703][ T4441] F2FS-fs (loop1): invalid crc value [ 100.009766][ T4441] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 100.187312][ T4441] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 100.194549][ T4441] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.055293][ T4460] attempt to access beyond end of device [ 101.055293][ T4460] loop1: rw=10241, want=53256, limit=40427 [ 101.889856][ T4187] attempt to access beyond end of device [ 101.889856][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 103.344660][ T4473] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.538534][ T4478] loop2: detected capacity change from 0 to 1024 [ 103.552849][ T4473] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.581253][ T4471] MPTCP: addr_signal error, rm_addr=1 [ 103.609987][ T4476] nvmet_rdma: address family 255 not supported [ 104.319447][ C1] net_ratelimit: 42 callbacks suppressed [ 105.869652][ T4496] loop0: detected capacity change from 0 to 128 [ 106.372843][ T4504] ip6t_REJECT: ECHOREPLY is not supported [ 106.387791][ T4496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 106.635437][ T4496] System zones: 1-3, 19-19 [ 106.644052][ T4496] , 35-36 [ 106.935556][ T4496] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 107.042933][ T4496] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.645160][ T4502] device syzkaller0 entered promiscuous mode [ 109.045994][ T4528] loop3: detected capacity change from 0 to 512 [ 109.137831][ T4528] EXT4-fs (loop3): Ignoring removed nobh option [ 109.258914][ T4528] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.66: invalid indirect mapped block 256 (level 2) [ 109.354694][ T4528] EXT4-fs (loop3): 2 truncates cleaned up [ 109.362877][ T4528] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 110.040255][ C1] net_ratelimit: 40 callbacks suppressed [ 110.643940][ T4527] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.66: bg 0: block 5: invalid block bitmap [ 111.164011][ T4534] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.567654][ T4527] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 111.580371][ T4527] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.580371][ T4527] [ 111.590229][ T4527] EXT4-fs (loop3): Total free blocks count 0 [ 111.596234][ T4527] EXT4-fs (loop3): Free/Dirty block details [ 111.602210][ T4527] EXT4-fs (loop3): free_blocks=0 [ 111.607225][ T4527] EXT4-fs (loop3): dirty_blocks=33 [ 111.612394][ T4527] EXT4-fs (loop3): Block reservation details [ 111.618395][ T4527] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 111.729699][ T4527] syz.3.66 (4527) used greatest stack depth: 20880 bytes left [ 112.686253][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 112.878192][ T4559] loop0: detected capacity change from 0 to 4096 [ 112.991142][ T4561] device syzkaller0 entered promiscuous mode [ 113.165964][ T4563] device syzkaller0 entered promiscuous mode [ 115.206402][ C1] net_ratelimit: 56 callbacks suppressed [ 116.219811][ T4587] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.229064][ T4587] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.237809][ T4587] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.246541][ T4587] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.256674][ T4587] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.616940][ T4587] team0: Port device vxlan0 added [ 116.640898][ T4592] tipc: Started in network mode [ 116.650342][ T4592] tipc: Node identity 4, cluster identity 4711 [ 116.660411][ T4592] tipc: Node number set to 4 [ 116.704047][ T4592] tipc: Enabled bearer , priority 0 [ 116.782619][ T4592] tipc: Resetting bearer [ 116.915008][ T4592] tipc: Disabling bearer [ 120.380153][ C1] net_ratelimit: 46 callbacks suppressed [ 123.212691][ T4657] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 123.980057][ T4671] loop1: detected capacity change from 0 to 512 [ 124.245548][ T4671] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.262510][ T4671] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.344577][ T4677] loop4: detected capacity change from 0 to 256 [ 124.406369][ T4671] EXT4-fs (loop1): 1 truncate cleaned up [ 124.509485][ T4671] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 125.464591][ C1] net_ratelimit: 53 callbacks suppressed [ 125.552167][ T4687] process 'syz.1.106' launched './file0' with NULL argv: empty string added [ 125.601213][ T4687] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 126.548426][ T4674] kvm [4673]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x800100000080 [ 126.601663][ T4677] device syzkaller0 entered promiscuous mode [ 126.630537][ T4674] kvm [4673]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 126.725751][ T4674] kvm [4673]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x800000000000 [ 127.720646][ T4696] device syzkaller0 entered promiscuous mode [ 127.872263][ T4696] ================================================================== [ 127.880748][ T4696] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 127.889390][ T4696] Read of size 2 at addr ffff88807e6fadfb by task syz.0.113/4696 [ 127.897142][ T4696] [ 127.899510][ T4696] CPU: 0 PID: 4696 Comm: syz.0.113 Not tainted syzkaller #0 [ 127.906825][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.916914][ T4696] Call Trace: [ 127.920214][ T4696] [ 127.923174][ T4696] dump_stack_lvl+0x188/0x250 [ 127.927893][ T4696] ? show_regs_print_info+0x20/0x20 [ 127.933125][ T4696] ? _printk+0xda/0x130 [ 127.937317][ T4696] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 127.943600][ T4696] ? load_image+0x410/0x410 [ 127.948146][ T4696] print_address_description+0x60/0x2d0 [ 127.953730][ T4696] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 127.960030][ T4696] kasan_report+0xdf/0x130 [ 127.964485][ T4696] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 127.970770][ T4696] ieee80211_monitor_select_queue+0x23a/0x240 [ 127.976872][ T4696] ? ieee80211_recalc_smps_work+0x20/0x20 [ 127.982627][ T4696] netdev_core_pick_tx+0x12c/0x300 [ 127.987780][ T4696] __dev_queue_xmit+0x797/0x2e50 [ 127.992779][ T4696] ? __might_sleep+0xf0/0xf0 [ 127.997422][ T4696] ? dev_queue_xmit+0x20/0x20 [ 128.002132][ T4696] ? virtio_net_hdr_to_skb+0xc33/0x1260 [ 128.007723][ T4696] ? packet_cached_dev_get+0x270/0x270 [ 128.013227][ T4696] packet_sendmsg+0x3b4f/0x4de0 [ 128.018135][ T4696] ? sched_move_task+0x180/0x4f0 [ 128.023306][ T4696] ? aa_sk_perm+0x7dc/0x910 [ 128.027876][ T4696] ? packet_getsockopt+0x9a0/0x9a0 [ 128.033037][ T4696] ? apparmor_setprocattr+0x426/0x6a0 [ 128.038441][ T4696] ? apparmor_socket_sendmsg+0x88/0x230 [ 128.044026][ T4696] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 128.049349][ T4696] ? security_socket_sendmsg+0x7c/0xa0 [ 128.054844][ T4696] ? packet_getsockopt+0x9a0/0x9a0 [ 128.059999][ T4696] ____sys_sendmsg+0x5be/0x8f0 [ 128.064814][ T4696] ? __sys_sendmsg_sock+0x30/0x30 [ 128.069885][ T4696] ? import_iovec+0x6f/0xa0 [ 128.074425][ T4696] ___sys_sendmsg+0x236/0x2e0 [ 128.079147][ T4696] ? __sys_sendmsg+0x290/0x290 [ 128.083987][ T4696] __se_sys_sendmsg+0x1b7/0x2a0 [ 128.088911][ T4696] ? __x64_sys_sendmsg+0x80/0x80 [ 128.093882][ T4696] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.099917][ T4696] ? lockdep_hardirqs_on+0x94/0x140 [ 128.105164][ T4696] do_syscall_64+0x4c/0xa0 [ 128.109607][ T4696] ? clear_bhb_loop+0x30/0x80 [ 128.114317][ T4696] ? clear_bhb_loop+0x30/0x80 [ 128.119036][ T4696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.124957][ T4696] RIP: 0033:0x7f08b2225159 [ 128.125005][ T4696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.125033][ T4696] RSP: 002b:00007f08b047d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.125058][ T4696] RAX: ffffffffffffffda RBX: 00007f08b24acfa0 RCX: 00007f08b2225159 [ 128.165741][ T4696] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 128.165763][ T4696] RBP: 00007f08b22bc06b R08: 0000000000000000 R09: 0000000000000000 [ 128.181745][ T4696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.181763][ T4696] R13: 00007f08b24ad038 R14: 00007f08b24acfa0 R15: 00007fff783932d8 [ 128.181796][ T4696] [ 128.181805][ T4696] [ 128.181812][ T4696] Allocated by task 3558: [ 128.181823][ T4696] __kasan_kmalloc+0xaf/0xe0 [ 128.181849][ T4696] tomoyo_realpath_from_path+0xed/0x5e0 [ 128.181874][ T4696] tomoyo_check_open_permission+0x1eb/0x410 [ 128.181897][ T4696] security_file_open+0x5e/0xa0 [ 128.200958][ T4696] do_dentry_open+0x321/0xf90 [ 128.200981][ T4696] path_openat+0x2718/0x2fb0 [ 128.201020][ T4696] do_filp_open+0x1df/0x400 [ 128.207955][ T4696] do_sys_openat2+0x14b/0x500 [ 128.218094][ T4696] __x64_sys_openat+0x135/0x160 [ 128.228863][ T4696] do_syscall_64+0x4c/0xa0 [ 128.228890][ T4696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.228914][ T4696] [ 128.228921][ T4696] Freed by task 3558: [ 128.228930][ T4696] kasan_set_track+0x4b/0x70 [ 128.228953][ T4696] kasan_set_free_info+0x1f/0x40 [ 128.228976][ T4696] ____kasan_slab_free+0xd5/0x110 [ 128.228998][ T4696] slab_free_freelist_hook+0xec/0x170 [ 128.229027][ T4696] kfree+0xef/0x2a0 [ 128.229045][ T4696] tomoyo_realpath_from_path+0x5ad/0x5e0 [ 128.229070][ T4696] tomoyo_check_open_permission+0x1eb/0x410 [ 128.229092][ T4696] security_file_open+0x5e/0xa0 [ 128.229114][ T4696] do_dentry_open+0x321/0xf90 [ 128.229132][ T4696] path_openat+0x2718/0x2fb0 [ 128.229152][ T4696] do_filp_open+0x1df/0x400 [ 128.229172][ T4696] do_sys_openat2+0x14b/0x500 [ 128.229190][ T4696] __x64_sys_openat+0x135/0x160 [ 128.229209][ T4696] do_syscall_64+0x4c/0xa0 [ 128.229229][ T4696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.229251][ T4696] [ 128.229257][ T4696] The buggy address belongs to the object at ffff88807e6fa000 [ 128.229257][ T4696] which belongs to the cache kmalloc-4k of size 4096 [ 128.229276][ T4696] The buggy address is located 3579 bytes inside of [ 128.229276][ T4696] 4096-byte region [ffff88807e6fa000, ffff88807e6fb000) [ 128.229297][ T4696] The buggy address belongs to the page: [ 128.229322][ T4696] page:ffffea0001f9be00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e6f8 [ 128.229347][ T4696] head:ffffea0001f9be00 order:3 compound_mapcount:0 compound_pincount:0 [ 128.229364][ T4696] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 128.229403][ T4696] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c42140 [ 128.229422][ T4696] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 128.229435][ T4696] page dumped because: kasan: bad access detected [ 128.229450][ T4696] page_owner tracks the page as allocated [ 128.229458][ T4696] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3558, ts 107153164271, free_ts 107126035646 [ 128.229492][ T4696] get_page_from_freelist+0x24f6/0x2670 [ 128.229517][ T4696] __alloc_pages+0x1ee/0x480 [ 128.229539][ T4696] new_slab+0xc0/0x4b0 [ 128.229557][ T4696] ___slab_alloc+0x807/0xdd0 [ 128.229575][ T4696] __kmalloc+0x11d/0x340 [ 128.229592][ T4696] tomoyo_realpath_from_path+0xed/0x5e0 [ 128.229615][ T4696] tomoyo_path_perm+0x23f/0x5d0 [ 128.229635][ T4696] security_inode_getattr+0xcf/0x120 [ 128.229655][ T4696] vfs_getattr+0x26/0x3a0 [ 128.229675][ T4696] __x64_sys_newfstat+0x137/0x210 [ 128.229697][ T4696] do_syscall_64+0x4c/0xa0 [ 128.229716][ T4696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.229739][ T4696] page last free stack trace: [ 128.229746][ T4696] free_unref_page_prepare+0x637/0x6c0 [ 128.229769][ T4696] free_unref_page+0x8f/0x2a0 [ 128.229790][ T4696] __unfreeze_partials+0x188/0x1e0 [ 128.229811][ T4696] put_cpu_partial+0x12d/0x190 [ 128.251835][ T1201] sd 0:0:1:0: cmd ffff888023d36d28 CDB: 0x2a [ 128.253173][ T4696] qlist_free_all+0x35/0x90 [ 128.253200][ T4696] kasan_quarantine_reduce+0x150/0x160 [ 128.257778][ T1201] Added buffer head 146 to ffff88814791b800 [ 128.263665][ T4696] __kasan_slab_alloc+0x2f/0xc0 [ 128.263693][ T4696] slab_post_alloc_hook+0x4c/0x380 [ 128.270443][ T1201] sd 0:0:1:0: cmd ffff888023d37128 CDB: 0x2a [ 128.274774][ T4696] kmem_cache_alloc+0x15d/0x280 [ 128.279756][ T1201] Added buffer head 308 to ffff88814791b800 [ 128.284768][ T4696] getname_flags+0xb7/0x4f0 [ 128.290749][ T1201] sd 0:0:1:0: cmd ffff888023d37528 CDB: 0x2a [ 128.293952][ T4696] user_path_at_empty+0x2a/0x190 [ 128.299605][ T1201] Added buffer head 311 to ffff88814791b800 [ 128.305488][ T4696] do_readlinkat+0xd9/0x490 [ 128.310630][ T1201] sd 0:0:1:0: cmd ffff888023d37928 CDB: 0x2a [ 128.315047][ T4696] __x64_sys_readlink+0x7b/0x90 [ 128.319649][ T1201] Added buffer head 314 to ffff88814791b800 [ 128.324147][ T4696] do_syscall_64+0x4c/0xa0 [ 128.329066][ T1201] sd 0:0:1:0: cmd ffff888023d37d28 CDB: 0x2a [ 128.333687][ T4696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.333716][ T4696] [ 128.333721][ T4696] Memory state around the buggy address: [ 128.333733][ T4696] ffff88807e6fac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.333747][ T4696] ffff88807e6fad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.333760][ T4696] >ffff88807e6fad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.333771][ T4696] ^ [ 128.333784][ T4696] ffff88807e6fae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.333797][ T4696] ffff88807e6fae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.333809][ T4696] ================================================================== [ 128.333818][ T4696] Disabling lock debugging due to kernel taint [ 128.333889][ C0] virtqueue callback for ffff888022a47300 (ffffffff85491a80) [ 128.333930][ T4696] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.333943][ T4696] CPU: 0 PID: 4696 Comm: syz.0.113 Tainted: G B syzkaller #0 [ 128.333965][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.333978][ T4696] Call Trace: [ 128.333986][ T4696] [ 128.334001][ T4696] dump_stack_lvl+0x188/0x250 [ 128.334025][ T4696] ? show_regs_print_info+0x20/0x20 [ 128.334045][ T4696] ? load_image+0x410/0x410 [ 128.334070][ T4696] panic+0x2f8/0x850 [ 128.334095][ T4696] ? bpf_jit_dump+0xd0/0xd0 [ 128.334119][ T4696] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 128.334141][ T4696] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 128.334164][ T4696] ? _raw_spin_unlock+0x40/0x40 [ 128.334184][ T4696] ? print_memory_metadata+0x314/0x400 [ 128.334207][ T4696] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 128.334233][ T4696] check_panic_on_warn+0x80/0xa0 [ 128.334256][ T4696] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 128.334280][ T4696] end_report+0x6d/0xf0 [ 128.340371][ T1201] Added buffer head 317 to ffff88814791b800 [ 128.344605][ T4696] kasan_report+0x102/0x130 [ 128.346980][ T1201] sd 0:0:1:0: cmd ffff888023d38128 CDB: 0x2a [ 128.361014][ T4696] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 128.361047][ T4696] ieee80211_monitor_select_queue+0x23a/0x240 [ 128.361073][ T4696] ? ieee80211_recalc_smps_work+0x20/0x20 [ 128.374787][ T1201] Added buffer head 302 to ffff88814791b800 [ 128.380152][ T4696] netdev_core_pick_tx+0x12c/0x300 [ 128.390427][ T1201] sd 0:0:1:0: cmd ffff888023d38528 CDB: 0x2a [ 128.398623][ T4696] __dev_queue_xmit+0x797/0x2e50 [ 128.406696][ T1201] Added buffer head 141 to ffff88814791b800 [ 128.415173][ T4696] ? __might_sleep+0xf0/0xf0 [ 128.423877][ T1201] sd 0:0:1:0: cmd ffff888023d38928 CDB: 0x2a [ 128.430174][ T4696] ? dev_queue_xmit+0x20/0x20 [ 128.430196][ T4696] ? virtio_net_hdr_to_skb+0xc33/0x1260 [ 128.430234][ T4696] ? packet_cached_dev_get+0x270/0x270 [ 128.437887][ T1201] Added buffer head 320 to ffff88814791b800 [ 128.455901][ T4696] packet_sendmsg+0x3b4f/0x4de0 [ 128.471794][ T4186] send_to_group: group=ffff8881449b4800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807833a010 data_type=1 dir=0000000000000000 cookie=0 [ 128.474696][ T4696] ? sched_move_task+0x180/0x4f0 [ 128.478946][ T4186] inotify_handle_inode_event: group=ffff8881449b4800 mark=ffff8880230a9258 mask=8 [ 128.484538][ T4696] ? aa_sk_perm+0x7dc/0x910 [ 128.484567][ T4696] ? packet_getsockopt+0x9a0/0x9a0 [ 128.489443][ C1] virtqueue callback for ffff88814791b800 (ffffffff85068310) [ 128.494819][ T4696] ? apparmor_setprocattr+0x426/0x6a0 [ 128.499174][ C1] sd 0:0:1:0: cmd ffff888023d37128 response 0 status 0x0 sense_len 0 [ 128.504195][ T4696] ? apparmor_socket_sendmsg+0x88/0x230 [ 128.508622][ C1] sd 0:0:1:0: cmd ffff888023d37928 response 0 status 0x0 sense_len 0 [ 128.514504][ T4696] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 128.519180][ C1] sd 0:0:1:0: cmd ffff888023d38528 response 0 status 0x0 sense_len 0 [ 128.524630][ T4696] ? security_socket_sendmsg+0x7c/0xa0 [ 128.529309][ C1] sd 0:0:1:0: cmd ffff888023d38128 response 0 status 0x0 sense_len 0 [ 128.534425][ T4696] ? packet_getsockopt+0x9a0/0x9a0 [ 128.539190][ C1] sd 0:0:1:0: cmd ffff888023d38928 response 0 status 0x0 sense_len 0 [ 128.545170][ T4696] ____sys_sendmsg+0x5be/0x8f0 [ 128.549681][ C1] sd 0:0:1:0: cmd ffff888023d37d28 response 0 status 0x0 sense_len 0 [ 128.555152][ T4696] ? __sys_sendmsg_sock+0x30/0x30 [ 128.561042][ C1] sd 0:0:1:0: cmd ffff888023d36d28 response 0 status 0x0 sense_len 0 [ 128.565895][ T4696] ? import_iovec+0x6f/0xa0 [ 128.571006][ C1] sd 0:0:1:0: cmd ffff888023d37528 response 0 status 0x0 sense_len 0 [ 128.576982][ T4696] ___sys_sendmsg+0x236/0x2e0 [ 128.581851][ C1] No more buffers in queue [ 128.587755][ T4696] ? __sys_sendmsg+0x290/0x290 [ 128.610949][ T4325] sd 0:0:1:0: cmd ffff888023d38d28 CDB: 0x2a [ 128.613666][ T4696] __se_sys_sendmsg+0x1b7/0x2a0 [ 128.619611][ T4325] Added buffer head 311 to ffff88814791b800 [ 128.624472][ T4696] ? __x64_sys_sendmsg+0x80/0x80 [ 128.630532][ T4325] sd 0:0:1:0: cmd ffff888023d39128 CDB: 0x2a [ 128.634784][ T4696] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.642900][ T4325] Added buffer head 146 to ffff88814791b800 [ 128.646654][ T4696] ? lockdep_hardirqs_on+0x94/0x140 [ 128.649029][ T4325] sd 0:0:1:0: cmd ffff888023d39528 CDB: 0x2a [ 128.654640][ T4696] do_syscall_64+0x4c/0xa0 [ 128.654663][ T4696] ? clear_bhb_loop+0x30/0x80 [ 128.654684][ T4696] ? clear_bhb_loop+0x30/0x80 [ 128.654705][ T4696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.654727][ T4696] RIP: 0033:0x7f08b2225159 [ 128.654746][ T4696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.654762][ T4696] RSP: 002b:00007f08b047d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.654784][ T4696] RAX: ffffffffffffffda RBX: 00007f08b24acfa0 RCX: 00007f08b2225159 [ 128.654799][ T4696] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 128.654811][ T4696] RBP: 00007f08b22bc06b R08: 0000000000000000 R09: 0000000000000000 [ 128.654824][ T4696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.654836][ T4696] R13: 00007f08b24ad038 R14: 00007f08b24acfa0 R15: 00007fff783932d8 [ 128.654859][ T4696] [ 128.655224][ T4696] Kernel Offset: disabled [ 129.237483][ T4696] Rebooting in 86400 seconds..