last executing test programs: 13.814108541s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000e3ff0001000000000000180100002020000000000000000000007b1af8ff00000000f7ff000000000000b70300000000000085000000060000009500007a05376bb0f200000000000000000000000000009f14b67b8590e0d1e1447eafff010cd802a65200adcf2ecd685d7509ee38053cc37ecc0359d18e331d6b5f456bc7b60a40175a85f3ec330f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vxcan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x40, 0x3a, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="9dfa5f8a"]}, @typed={0xc, 0x3, 0x0, 0x0, @u64}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private1}]}, 0x40}}, 0x0) 12.800709381s ago: executing program 0 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2, 0x8}}, 0x20) 7.803358858s ago: executing program 0 (id=21): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000140)='2', 0x1}], 0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x1ff) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x2a00810, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRESHEX, @ANYRES64], 0x1, 0x1fb, &(0x7f0000000280)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x808800, &(0x7f0000000100)=ANY=[], 0x0, 0x2c3, &(0x7f0000003600)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 6.474396564s ago: executing program 0 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fsmount(r1, 0x0, 0x6) 6.454132864s ago: executing program 4 (id=25): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000", @ANYBLOB="00000013"], 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x18100, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000180)="f7", 0x1, 0x200980) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000cc0)=ANY=[], 0x200002e6) 6.13598215s ago: executing program 0 (id=26): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 5.855711856s ago: executing program 0 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r1, 0x301, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0xa6ff}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = gettid() tkill(r3, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000280), &(0x7f0000000140)=r5}, 0x22) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00'}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) ioctl$TIOCL_SETSEL(r10, 0x541c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000004000000010001000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) ioctl$TIOCL_SETSEL(r10, 0x541c, 0x0) 5.303243687s ago: executing program 4 (id=31): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000500)="d694a46634", 0x5}], 0x1) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 4.915977464s ago: executing program 4 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) 4.586982151s ago: executing program 4 (id=36): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 4.300498066s ago: executing program 4 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.909674584s ago: executing program 4 (id=41): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a3100000000050001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.221310877s ago: executing program 2 (id=59): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x3, 0x0, 0x0}) 2.08552226s ago: executing program 2 (id=62): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x4a040, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 2.000014271s ago: executing program 3 (id=63): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r1, 0x0, {0x2, 0xf0}, 0xff}, 0x18, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8084) 1.871650404s ago: executing program 2 (id=65): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3800813, &(0x7f0000001300)=ANY=[@ANYBLOB='block=0x0000000000000200,iocharset=iso8859-13,nojoliet,unhide,hide,overriderockperm,dmode=0x0000000000000003,nocompress,mode=0x0000000000000080,hide,block=0x0000000000000200,overriderockperm,showassoc,check=relaxed,gid=', @ANYRESHEX=0x0, @ANYBLOB="7000a756ca89ad16c280e92006c1e11bb7301f2daee40bca386b38293c9c349695a703c54eaa8e3136f01e0c2da2014d8abc61f3b8e5f4d2fc0ff785baae0acdfb07ede45826cb07d9cf03d9c523662a8d60228056195aaa230f374b00d54f5fba197ff3a5255fcc8d5f892e9809d966299ee7f06eb5fc285c75a1f52ac6c51a024c002b5f4ad69212672cd62b20c4fbfc8dc1a2a3be4877471188553fbe33f41ca98616af94d8156e007d5b08ff2f6accd9f62590b6410463db843ab6ddc6128148e8ec7132e32ef3c93e6f3e7513da03c5d2e55f9078d8f4a88f0bc11cefde2a8cf1ab9d6fa42e26ad39"], 0x5, 0xa62, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1.587141089s ago: executing program 2 (id=68): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) 1.397717103s ago: executing program 2 (id=70): sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x20040050) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000140)="e9", 0x1) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0xffff]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xc0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10) r8 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r8, 0x4c08, 0x6e) 1.047384309s ago: executing program 3 (id=71): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x7}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000740)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, 'P~Y', 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a}], "359464030f0f85ed"}}}}}}}, 0x0) 964.021071ms ago: executing program 1 (id=72): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 952.073721ms ago: executing program 3 (id=73): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x442, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 912.449392ms ago: executing program 1 (id=74): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 791.961075ms ago: executing program 1 (id=75): socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x28e2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x84, r0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5f92}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6b7}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x931}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf509}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r2, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3, 0x0, 0x800000000006}, 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @empty, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x2, 0x3c, 0x40, 0x68, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xd0, 0x3, 0x6}]}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x2, 0x0, 0x0, 0x7, 0x3, 0x4, 0x4e24, 0x4e21, 0x1}}}}}}, 0x0) 651.231558ms ago: executing program 1 (id=76): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) close(r0) 351.037353ms ago: executing program 2 (id=77): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 252.015705ms ago: executing program 3 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kyber_throttled\x00'}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 251.769385ms ago: executing program 1 (id=79): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 188.524177ms ago: executing program 3 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 63.519449ms ago: executing program 3 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 0s ago: executing program 1 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts. [ 56.823807][ T4171] cgroup: Unknown subsys name 'net' [ 56.954558][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.475454][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.954916][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.985574][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.067069][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.137548][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.201930][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.209858][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.217801][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.229193][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.236257][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.244383][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.274254][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.291474][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.298823][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.306582][ T4185] device bridge_slave_0 entered promiscuous mode [ 60.317592][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.324864][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.332799][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.345135][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.352412][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.360941][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.375137][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.382540][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.390549][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.418870][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.465877][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.496629][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.506599][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.514116][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.522060][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.532092][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.549864][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.566567][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.573829][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.582184][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.590602][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.602637][ T4187] team0: Port device team_slave_0 added [ 60.637733][ T4187] team0: Port device team_slave_1 added [ 60.661353][ T4185] team0: Port device team_slave_0 added [ 60.697006][ T4185] team0: Port device team_slave_1 added [ 60.703263][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.710477][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.718683][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.727723][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.739795][ T4183] team0: Port device team_slave_0 added [ 60.747046][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.758914][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.765916][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.792080][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.811056][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.818504][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.826320][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.834981][ T4183] team0: Port device team_slave_1 added [ 60.850162][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.857154][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.883338][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.930264][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.937237][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.963520][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.997163][ T4186] team0: Port device team_slave_0 added [ 61.013756][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.021035][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.047538][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.061076][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.070960][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.078328][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.104298][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.117022][ T4186] team0: Port device team_slave_1 added [ 61.135788][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.145431][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.157590][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.183681][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.206377][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.213395][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.242482][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.249858][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.276228][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.323141][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.330183][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.356458][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.377617][ T4184] team0: Port device team_slave_0 added [ 61.407295][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.414197][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.421414][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.429391][ T4183] Cannot create hsr debugfs directory [ 61.436282][ T4184] team0: Port device team_slave_1 added [ 61.445667][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.452566][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.459749][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.467322][ T4185] Cannot create hsr debugfs directory [ 61.517714][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.524896][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.531606][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.539300][ T4186] Cannot create hsr debugfs directory [ 61.585519][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.592704][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.618785][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.630313][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 61.636537][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.643825][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 61.644429][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.675888][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.708093][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 61.708093][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 61.714398][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 61.850989][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.858122][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.864652][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.873291][ T4184] Cannot create hsr debugfs directory [ 62.026577][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.049746][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.059537][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.070394][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.130052][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.146710][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.157089][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.175951][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.224763][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.235433][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.267703][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.283556][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.297542][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.313168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.322851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.352748][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.362643][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.373790][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.393467][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.416139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.426296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.435741][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.443326][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.452174][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.484034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.492375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.502305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.512655][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.519777][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.528032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.565479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.575674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.585555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.595202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.613631][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.622635][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.631355][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.639919][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.656210][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.667550][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.686408][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.698633][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.710649][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.721678][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.730709][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.746200][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.760385][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.792052][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.805432][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.843707][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.873503][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.885247][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.898252][ T1402] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.905345][ T1402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.921305][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.936951][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.952460][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.961711][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.972272][ T1402] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.979408][ T1402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.008826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.016717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.024968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.034731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.050877][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.073096][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.086986][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.095973][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.105480][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.114474][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.124504][ T1402] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.131704][ T1402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.139981][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.179763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.191109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.200571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.210393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.219269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.227872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.238789][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.245869][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.254671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.263535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.277850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.286598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.295431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.305149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.314417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.327561][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.345631][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.355393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.365355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.375939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.394208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.405505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.414701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.422919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.434370][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.453316][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.465747][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.481871][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.494379][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.504584][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.524792][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.537458][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.559629][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.571961][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.590253][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.607109][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.616316][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.625301][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.635718][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.644850][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.653782][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.663608][ T1402] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.670968][ T1402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.694885][ T4187] device veth0_vlan entered promiscuous mode [ 63.705233][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.708745][ T4251] Bluetooth: hci2: command 0x041b tx timeout [ 63.725623][ T4251] Bluetooth: hci3: command 0x041b tx timeout [ 63.729618][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.741659][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.751510][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.765759][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.775354][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.784128][ T1402] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.788577][ T4251] Bluetooth: hci0: command 0x041b tx timeout [ 63.791260][ T1402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.798189][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 63.806912][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.817809][ T4251] Bluetooth: hci4: command 0x041b tx timeout [ 63.820581][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.833790][ T1402] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.840890][ T1402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.854127][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.881792][ T4187] device veth1_vlan entered promiscuous mode [ 63.891403][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.902813][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.916393][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.927850][ T1402] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.935059][ T1402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.951472][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.961119][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.989113][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.997878][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.007383][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.018628][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.027442][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.036508][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.045991][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.054001][ T1402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.069152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.078920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.087503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.098597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.126539][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.147007][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.157684][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.173564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.181612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.190184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.197644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.206710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.215589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.225406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.234349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.243734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.252542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.261500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.271819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.283853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.292355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.302034][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.311874][ T4187] device veth0_macvtap entered promiscuous mode [ 64.323805][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.341700][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.366413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.377069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.402292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.417414][ T4187] device veth1_macvtap entered promiscuous mode [ 64.470614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.483870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.504190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.526621][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.563108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.583044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.596957][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.618273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.626947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.663390][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.687558][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.697197][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.706653][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.719845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.733494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.744116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.760069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.783236][ T4183] device veth0_vlan entered promiscuous mode [ 64.810405][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.829630][ T4183] device veth1_vlan entered promiscuous mode [ 64.836974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.845561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.853163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.862468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.870699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.905089][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.926531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.937325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.946707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.956124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.995364][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.012355][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.021747][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.030673][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.039947][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.051823][ T4185] device veth0_vlan entered promiscuous mode [ 65.068856][ T4184] device veth0_vlan entered promiscuous mode [ 65.081654][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.091370][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.107801][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.117456][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.140913][ T4184] device veth1_vlan entered promiscuous mode [ 65.166346][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.175397][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.189180][ T4185] device veth1_vlan entered promiscuous mode [ 65.210663][ T4183] device veth0_macvtap entered promiscuous mode [ 65.218971][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.227113][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.239261][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.263070][ T4183] device veth1_macvtap entered promiscuous mode [ 65.279811][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.288641][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.297091][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.309446][ T4184] device veth0_macvtap entered promiscuous mode [ 65.328287][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.336301][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.336308][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.359273][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.373631][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.389187][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.397714][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.407635][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.416216][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.425268][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.433936][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.444311][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.453040][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.471571][ T4184] device veth1_macvtap entered promiscuous mode [ 65.482412][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.494618][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.506608][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.518421][ T4186] device veth0_vlan entered promiscuous mode [ 65.525784][ T4185] device veth0_macvtap entered promiscuous mode [ 65.541360][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.550320][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.559723][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.570513][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.580254][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.591063][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.600097][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.609099][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.617799][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.643926][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.647026][ T4186] device veth1_vlan entered promiscuous mode [ 65.662412][ T4185] device veth1_macvtap entered promiscuous mode [ 65.663697][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.672587][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.684461][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.694021][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.702624][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.717041][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.729432][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.739591][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.750539][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.762286][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.787503][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.800908][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.808252][ T2286] Bluetooth: hci3: command 0x040f tx timeout [ 65.813642][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.827380][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.834021][ T2286] Bluetooth: hci2: command 0x040f tx timeout [ 65.838944][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.854295][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.865598][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.873902][ T2286] Bluetooth: hci4: command 0x040f tx timeout [ 65.880546][ T2286] Bluetooth: hci1: command 0x040f tx timeout [ 65.886670][ T2286] Bluetooth: hci0: command 0x040f tx timeout [ 65.893157][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.901787][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.911647][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.923929][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.933195][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.949859][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.967298][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.977690][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.988436][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.000813][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.011887][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.029721][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.048383][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.064612][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.075234][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.086009][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.098408][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.123937][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.133772][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.143120][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.155236][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.167005][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.176285][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.186141][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.195580][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.210475][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.225696][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.234973][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.249560][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.359431][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.377406][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.456418][ T4186] device veth0_macvtap entered promiscuous mode [ 66.483617][ T4186] device veth1_macvtap entered promiscuous mode [ 66.491930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.500301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.513211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.586540][ T4297] loop3: detected capacity change from 0 to 128 [ 66.635833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.661161][ T4297] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 66.682278][ T4297] attempt to access beyond end of device [ 66.682278][ T4297] loop3: rw=0, want=6491538, limit=128 [ 66.693990][ T4297] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 66.710772][ T4297] attempt to access beyond end of device [ 66.710772][ T4297] loop3: rw=0, want=6491538, limit=128 [ 66.722193][ T4297] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 66.923304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.209953][ T4187] sysv_free_block: flc_count > flc_size [ 67.215788][ T4187] sysv_free_block: flc_count > flc_size [ 67.244973][ T4187] sysv_free_block: flc_count > flc_size [ 67.252103][ T4187] sysv_free_block: flc_count > flc_size [ 67.257693][ T4187] sysv_free_block: flc_count > flc_size [ 67.263927][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.264480][ T4187] sysv_free_block: flc_count > flc_size [ 67.280770][ T4187] sysv_free_block: flc_count > flc_size [ 67.282026][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.286331][ T4187] sysv_free_block: flc_count > flc_size [ 67.296288][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.296305][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.296316][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.296329][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.303211][ T4187] sysv_free_block: flc_count > flc_size [ 67.313360][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.331575][ T4187] sysv_free_block: flc_count > flc_size [ 67.333433][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.344386][ T4187] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 67.361373][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.403722][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.404431][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.413452][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.430940][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.447902][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.467617][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.485091][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.500424][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.510766][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.532554][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.544724][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.576601][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.594385][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.599518][ T4302] loop3: detected capacity change from 0 to 128 [ 67.608952][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.620402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.632686][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.646082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.659461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.670575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.741554][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.756064][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.765902][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.775450][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.822676][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.846639][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.862049][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.868520][ T2286] Bluetooth: hci2: command 0x0419 tx timeout [ 67.889098][ T2286] Bluetooth: hci3: command 0x0419 tx timeout [ 67.907162][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.951007][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 67.954109][ T2286] Bluetooth: hci1: command 0x0419 tx timeout [ 67.969884][ T2286] Bluetooth: hci4: command 0x0419 tx timeout [ 67.987785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.996094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.010903][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.026504][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.036945][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.180597][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.202172][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.211167][ T4310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.265739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.277867][ T4311] loop4: detected capacity change from 0 to 2048 [ 68.305780][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.320181][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.329054][ T4314] devtmpfs: Too few inodes for current use [ 68.350084][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.350618][ T4228] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.373478][ T4311] UDF-fs: error (device loop4): udf_read_inode: (ino 1312) failed !bh [ 68.382455][ T4314] loop1: detected capacity change from 0 to 512 [ 68.406224][ T4311] UDF-fs: Scanning with blocksize 512 failed [ 68.454694][ T4314] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.455236][ T4311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 68.528412][ T4311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 68.575717][ T4311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 68.587291][ T4311] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 68.598551][ T4311] UDF-fs: Scanning with blocksize 1024 failed [ 68.624567][ T4314] EXT4-fs (loop1): 1 orphan inode deleted [ 68.629469][ T4311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 68.633717][ T4314] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.654099][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 68.658447][ T4314] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.659638][ T4311] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 68.709147][ T4311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 68.863999][ T4311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 69.037145][ T4311] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 69.143125][ T4311] UDF-fs: Scanning with blocksize 2048 failed [ 69.247334][ T4311] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 69.341933][ T4311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 69.417953][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.427971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.498275][ T4311] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 69.534368][ T4311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 69.558347][ T4311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 69.573703][ T4311] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 69.582071][ T4311] UDF-fs: Scanning with blocksize 4096 failed [ 69.603675][ T4311] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 69.768817][ T4228] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 69.781527][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.800679][ T4228] usb 4-1: Product: syz [ 69.804900][ T4228] usb 4-1: Manufacturer: syz [ 69.809895][ T4228] usb 4-1: SerialNumber: syz [ 69.831617][ T4228] usb 4-1: config 0 descriptor?? [ 69.994974][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 70.016790][ T4339] autofs4:pid:4339:autofs_fill_super: called with bogus options [ 70.044280][ T4337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13'. [ 70.205448][ T4340] loop1: detected capacity change from 0 to 128 [ 70.449999][ T4340] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 70.468310][ T4340] attempt to access beyond end of device [ 70.468310][ T4340] loop1: rw=0, want=6491538, limit=128 [ 70.479498][ T4340] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 70.493542][ T4340] attempt to access beyond end of device [ 70.493542][ T4340] loop1: rw=0, want=6491538, limit=128 [ 70.504818][ T4340] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 70.522056][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.531087][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 70.540174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 70.549250][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 70.760873][ T4228] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 70.767553][ T4228] usb 4-1: No valid video chain found. [ 70.822239][ T4184] sysv_free_block: flc_count > flc_size [ 70.827874][ T4184] sysv_free_block: flc_count > flc_size [ 71.021465][ T4184] sysv_free_block: flc_count > flc_size [ 71.034280][ T4337] loop4: detected capacity change from 0 to 4096 [ 71.041223][ T4184] sysv_free_block: flc_count > flc_size [ 71.042846][ T4228] usb 4-1: USB disconnect, device number 2 [ 71.052785][ T4184] sysv_free_block: flc_count > flc_size [ 71.068935][ T4184] sysv_free_block: flc_count > flc_size [ 71.083476][ T4184] sysv_free_block: flc_count > flc_size [ 71.091998][ T4184] sysv_free_block: flc_count > flc_size [ 71.099854][ T4184] sysv_free_block: flc_count > flc_size [ 71.106002][ T4184] sysv_free_block: flc_count > flc_size [ 71.168599][ T4348] loop2: detected capacity change from 0 to 128 [ 71.231173][ T4184] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 71.394117][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.402062][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.887891][ T4348] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 71.903897][ T4347] attempt to access beyond end of device [ 71.903897][ T4347] loop2: rw=0, want=6491538, limit=128 [ 71.916221][ T4347] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 71.927072][ T4347] attempt to access beyond end of device [ 71.927072][ T4347] loop2: rw=0, want=6491538, limit=128 [ 71.938213][ T4347] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 72.022092][ T4337] ntfs: (device loop4): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 72.086756][ T4351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14'. [ 72.115104][ T4337] ntfs: volume version 3.1. [ 72.172544][ T4186] sysv_free_block: flc_count > flc_size [ 72.199939][ T4186] sysv_free_block: flc_count > flc_size [ 72.205530][ T4186] sysv_free_block: flc_count > flc_size [ 72.228817][ T4186] sysv_free_block: flc_count > flc_size [ 72.285204][ T4186] sysv_free_block: flc_count > flc_size [ 72.357270][ T4186] sysv_free_block: flc_count > flc_size [ 72.368776][ T4357] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 72.446457][ T4186] sysv_free_block: flc_count > flc_size [ 72.540140][ T4186] sysv_free_block: flc_count > flc_size [ 72.642756][ T4186] sysv_free_block: flc_count > flc_size [ 72.759741][ T4186] sysv_free_block: flc_count > flc_size [ 72.904838][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 73.015104][ T4357] openvswitch: netlink: Actions may not be safe on all matching packets [ 73.336022][ T4351] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 73.444025][ T4355] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 74.485216][ T4355] syz.1.14 (4355) used greatest stack depth: 21152 bytes left [ 74.505259][ T4381] loop2: detected capacity change from 0 to 256 [ 74.567576][ T4384] loop0: detected capacity change from 0 to 512 [ 74.598761][ T4381] exfat: Unknown parameter '' [ 74.690796][ T4365] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18'. [ 74.705647][ T4365] openvswitch: netlink: Key 0 has unexpected len 3060 expected 0 [ 74.785240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 74.892061][ T4389] loop0: detected capacity change from 0 to 8 [ 75.089703][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.192125][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.239413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.416359][ T4389] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 75.501246][ T26] audit: type=1800 audit(1757895399.510:2): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.21" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 75.812796][ T26] audit: type=1326 audit(1757895399.830:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4390 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 75.855996][ T4363] loop3: detected capacity change from 0 to 32768 [ 75.864467][ T26] audit: type=1326 audit(1757895399.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4390 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 75.922614][ T26] audit: type=1326 audit(1757895399.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4390 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 75.944727][ T4268] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.953215][ T4363] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.19 (4363) [ 75.967491][ T4395] process 'syz.1.23' launched './file0' with NULL argv: empty string added [ 76.004120][ T26] audit: type=1326 audit(1757895399.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4390 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 76.063819][ T4363] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 76.084307][ T26] audit: type=1326 audit(1757895399.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4390 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 76.119657][ T4363] BTRFS info (device loop3): metadata ratio 4 [ 76.127836][ T4363] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 76.154935][ T4363] BTRFS info (device loop3): force lzo compression, level 0 [ 76.169169][ T26] audit: type=1326 audit(1757895399.880:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4390 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 76.191695][ T4268] usb 3-1: device descriptor read/64, error -71 [ 76.204538][ T4363] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 76.224240][ T4363] BTRFS info (device loop3): trying to use backup root at mount time [ 76.233000][ T26] audit: type=1326 audit(1757895399.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4394 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd938be3465 code=0x7ffc0000 [ 76.261459][ T4363] BTRFS info (device loop3): doing ref verification [ 76.272916][ T4363] BTRFS info (device loop3): enabling auto defrag [ 76.285290][ T4363] BTRFS info (device loop3): disabling tree log [ 76.294119][ T26] audit: type=1326 audit(1757895400.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4397 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3a4eaba9 code=0x7ffc0000 [ 76.325425][ T4363] BTRFS info (device loop3): using free space tree [ 76.334133][ T4363] BTRFS info (device loop3): has skinny extents [ 76.459676][ T4363] BTRFS error (device loop3): open_ctree failed: -12 [ 76.474812][ T4268] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.676499][ T4268] usb 3-1: device descriptor read/64, error -71 [ 76.765372][ T4202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4202) [ 76.798232][ T4268] usb usb3-port1: attempt power cycle [ 76.838569][ T4431] loop1: detected capacity change from 0 to 512 [ 76.934677][ T4431] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.28: casefold flag without casefold feature [ 77.004607][ T4431] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.28: couldn't read orphan inode 15 (err -117) [ 77.035493][ T4439] loop4: detected capacity change from 0 to 128 [ 77.067380][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 77.067395][ T26] audit: type=1800 audit(1757895401.080:27): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.31" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 77.099054][ T4431] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.107855][ T4439] attempt to access beyond end of device [ 77.107855][ T4439] loop4: rw=2049, want=140, limit=128 [ 77.224184][ T4268] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.341691][ T4268] usb 3-1: device descriptor read/8, error -71 [ 77.608166][ T4268] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 77.630062][ T4449] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 77.678149][ T4268] usb 3-1: device descriptor read/8, error -71 [ 77.759701][ T4451] tipc: Started in network mode [ 77.765065][ T4451] tipc: Node identity ac1414aa, cluster identity 4711 [ 77.798226][ T4268] usb usb3-port1: unable to enumerate USB device [ 77.842058][ T4451] tipc: Enabled bearer , priority 10 [ 78.401849][ T4470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41'. [ 78.637861][ T4477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.42'. [ 78.860301][ T13] tipc: Node number set to 2886997162 [ 78.892195][ T4489] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.904557][ T4481] loop2: detected capacity change from 0 to 8192 [ 79.411501][ T4504] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.466351][ T4496] loop1: detected capacity change from 0 to 8192 [ 79.559456][ T4496] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.662865][ T4512] loop3: detected capacity change from 0 to 2048 [ 79.774874][ T4512] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.846481][ T4521] netlink: 'syz.2.55': attribute type 11 has an invalid length. [ 80.200809][ T4536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 80.228441][ T4536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 80.262702][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 80.288046][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 80.425854][ T4543] sg_read: process 47 (syz.1.64) changed security contexts after opening file descriptor, this is not allowed. [ 80.510115][ T4545] loop2: detected capacity change from 0 to 1764 [ 80.641364][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062011800: rx timeout, send abort [ 81.142011][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062010c00: rx timeout, send abort [ 81.150798][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062011800: abort rx timeout. Force session deactivation [ 81.477583][ T26] audit: type=1326 audit(1757895405.490:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 81.519730][ T26] audit: type=1326 audit(1757895405.490:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 81.581860][ T26] audit: type=1326 audit(1757895405.490:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 81.650320][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062010c00: abort rx timeout. Force session deactivation [ 81.660052][ T26] audit: type=1326 audit(1757895405.490:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 81.683956][ T26] audit: type=1326 audit(1757895405.490:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 81.712084][ T26] audit: type=1326 audit(1757895405.490:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 81.734886][ T26] audit: type=1326 audit(1757895405.490:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 81.760382][ T26] audit: type=1326 audit(1757895405.490:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 81.790708][ T26] audit: type=1326 audit(1757895405.490:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4567 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd938bb0ba9 code=0x7ffc0000 [ 81.848889][ T1325] cfg80211: failed to load regulatory.db [ 82.105658][ T4580] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 82.298452][ T4585] netlink: 108 bytes leftover after parsing attributes in process `syz.1.82'. [ 82.359639][ C1] ------------[ cut here ]------------ [ 82.365527][ C1] WARNING: CPU: 1 PID: 4359 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 82.374952][ C1] Modules linked in: [ 82.379025][ C1] CPU: 1 PID: 4359 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 82.386604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.396853][ C1] Workqueue: bat_events batadv_nc_worker [ 82.402616][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 82.408887][ C1] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 82.428669][ C1] RSP: 0018:ffffc90000dd08b8 EFLAGS: 00010246 [ 82.434780][ C1] RAX: ffffffff819ed760 RBX: 0000000000000008 RCX: ffff888028031dc0 [ 82.442915][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.450974][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10050063b9 [ 82.459109][ C1] R10: ffffed10050063b9 R11: 1ffff110050063b8 R12: ffff888028033548 [ 82.467136][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0928 R15: 0000000000000000 [ 82.475214][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 82.484223][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.490900][ C1] CR2: 000055556fbcd000 CR3: 000000002e05f000 CR4: 00000000003506e0 [ 82.499226][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.507236][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.515329][ C1] Call Trace: [ 82.518782][ C1] [ 82.521664][ C1] bpf_probe_read_compat+0xdd/0x170 [ 82.526906][ C1] bpf_prog_ee60aafa828f4cb7+0x35/0xf40 [ 82.532557][ C1] bpf_trace_run2+0x15b/0x2d0 [ 82.537270][ C1] ? _raw_spin_unlock+0x24/0x40 [ 82.542216][ C1] ? mac80211_hwsim_tx_frame_no_nl+0x1382/0x15d0 [ 82.548639][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 82.553524][ C1] ? skb_release_data+0x6fe/0x850 [ 82.558657][ C1] ? skb_release_data+0x6fe/0x850 [ 82.563729][ C1] __bpf_trace_kfree+0x6e/0x90 [ 82.568606][ C1] ? skb_release_data+0x6fe/0x850 [ 82.573674][ C1] kfree+0x25f/0x2a0 [ 82.577609][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 82.583041][ C1] skb_release_data+0x6fe/0x850 [ 82.587998][ C1] consume_skb+0xa2/0x100 [ 82.592383][ C1] mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 82.598044][ C1] __iterate_interfaces+0x243/0x500 [ 82.603282][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 82.609716][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 82.616135][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 82.623282][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 82.628617][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 82.633862][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 82.639944][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 82.645977][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 82.650880][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 82.656042][ C1] hrtimer_run_softirq+0x176/0x240 [ 82.661308][ C1] handle_softirqs+0x328/0x820 [ 82.666112][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 82.671073][ C1] ? do_softirq+0x200/0x200 [ 82.675636][ C1] __irq_exit_rcu+0x12f/0x220 [ 82.680418][ C1] ? irq_exit_rcu+0x20/0x20 [ 82.684987][ C1] irq_exit_rcu+0x5/0x20 [ 82.689328][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 82.695006][ C1] [ 82.698018][ C1] [ 82.700980][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 82.707003][ C1] RIP: 0010:kasan_check_range+0xf/0x290 [ 82.712656][ C1] Code: 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 41 56 <53> 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f 41 81 [ 82.732340][ C1] RSP: 0018:ffffc90003cffaa8 EFLAGS: 00000202 [ 82.738505][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff815c7a69 [ 82.746618][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d6991e8 [ 82.754695][ C1] RBP: ffffc90003cffbd0 R08: dffffc0000000000 R09: fffffbfff1ff7819 [ 82.762753][ C1] R10: fffffbfff1ff7819 R11: 1ffffffff1ff7818 R12: 00000000000001aa [ 82.770818][ C1] R13: dffffc0000000000 R14: ffff88801bec8c80 R15: 1ffff9200079ff64 [ 82.778890][ C1] ? lock_release+0xa9/0x870 [ 82.783542][ C1] lock_release+0xa9/0x870 [ 82.788097][ C1] ? rcu_lock_release+0x5/0x20 [ 82.793014][ C1] ? read_lock_is_recursive+0x10/0x10 [ 82.798475][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 82.803632][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.809713][ C1] batadv_nc_worker+0x25b/0x5c0 [ 82.814615][ C1] process_one_work+0x863/0x1000 [ 82.819730][ C1] ? worker_detach_from_pool+0x240/0x240 [ 82.825405][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 82.830773][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 82.835837][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 82.841294][ C1] ? wq_worker_running+0x97/0x170 [ 82.846355][ C1] worker_thread+0xaa8/0x12a0 [ 82.851107][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 82.857056][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 82.862354][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 82.868339][ C1] kthread+0x436/0x520 [ 82.872448][ C1] ? rcu_lock_release+0x20/0x20 [ 82.877337][ C1] ? kthread_blkcg+0xd0/0xd0 [ 82.882005][ C1] ret_from_fork+0x1f/0x30 [ 82.886476][ C1] [ 82.889574][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.896879][ C1] CPU: 1 PID: 4359 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 82.904455][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.914653][ C1] Workqueue: bat_events batadv_nc_worker [ 82.920344][ C1] Call Trace: [ 82.923655][ C1] [ 82.926637][ C1] dump_stack_lvl+0x168/0x230 [ 82.931362][ C1] ? show_regs_print_info+0x20/0x20 [ 82.936592][ C1] ? load_image+0x3b0/0x3b0 [ 82.941148][ C1] panic+0x2c9/0x7f0 [ 82.945075][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 82.949614][ C1] ? ret_from_fork+0x1f/0x30 [ 82.954235][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 82.959816][ C1] __warn+0x248/0x2b0 [ 82.963848][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 82.969424][ C1] report_bug+0x1b7/0x2e0 [ 82.973790][ C1] handle_bug+0x3a/0x70 [ 82.977972][ C1] exc_invalid_op+0x16/0x40 [ 82.982506][ C1] asm_exc_invalid_op+0x16/0x20 [ 82.987385][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 82.993571][ C1] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 83.013211][ C1] RSP: 0018:ffffc90000dd08b8 EFLAGS: 00010246 [ 83.019317][ C1] RAX: ffffffff819ed760 RBX: 0000000000000008 RCX: ffff888028031dc0 [ 83.027329][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.035344][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10050063b9 [ 83.043349][ C1] R10: ffffed10050063b9 R11: 1ffff110050063b8 R12: ffff888028033548 [ 83.051360][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0928 R15: 0000000000000000 [ 83.059382][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 83.064977][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 83.070557][ C1] bpf_probe_read_compat+0xdd/0x170 [ 83.075794][ C1] bpf_prog_ee60aafa828f4cb7+0x35/0xf40 [ 83.081377][ C1] bpf_trace_run2+0x15b/0x2d0 [ 83.086085][ C1] ? _raw_spin_unlock+0x24/0x40 [ 83.090973][ C1] ? mac80211_hwsim_tx_frame_no_nl+0x1382/0x15d0 [ 83.097391][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 83.102320][ C1] ? skb_release_data+0x6fe/0x850 [ 83.107394][ C1] ? skb_release_data+0x6fe/0x850 [ 83.112488][ C1] __bpf_trace_kfree+0x6e/0x90 [ 83.117302][ C1] ? skb_release_data+0x6fe/0x850 [ 83.122363][ C1] kfree+0x25f/0x2a0 [ 83.126278][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 83.131584][ C1] skb_release_data+0x6fe/0x850 [ 83.136451][ C1] consume_skb+0xa2/0x100 [ 83.140798][ C1] mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 83.146366][ C1] __iterate_interfaces+0x243/0x500 [ 83.151573][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 83.157964][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 83.164217][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 83.171280][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 83.176584][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 83.181798][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 83.187783][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 83.193806][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 83.198504][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 83.203640][ C1] hrtimer_run_softirq+0x176/0x240 [ 83.208794][ C1] handle_softirqs+0x328/0x820 [ 83.213764][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 83.218640][ C1] ? do_softirq+0x200/0x200 [ 83.223235][ C1] __irq_exit_rcu+0x12f/0x220 [ 83.227948][ C1] ? irq_exit_rcu+0x20/0x20 [ 83.232562][ C1] irq_exit_rcu+0x5/0x20 [ 83.236810][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 83.242459][ C1] [ 83.245395][ C1] [ 83.248337][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.254327][ C1] RIP: 0010:kasan_check_range+0xf/0x290 [ 83.259968][ C1] Code: 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 41 56 <53> 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f 41 81 [ 83.279583][ C1] RSP: 0018:ffffc90003cffaa8 EFLAGS: 00000202 [ 83.285680][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff815c7a69 [ 83.293665][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d6991e8 [ 83.301642][ C1] RBP: ffffc90003cffbd0 R08: dffffc0000000000 R09: fffffbfff1ff7819 [ 83.309621][ C1] R10: fffffbfff1ff7819 R11: 1ffffffff1ff7818 R12: 00000000000001aa [ 83.317602][ C1] R13: dffffc0000000000 R14: ffff88801bec8c80 R15: 1ffff9200079ff64 [ 83.325763][ C1] ? lock_release+0xa9/0x870 [ 83.330373][ C1] lock_release+0xa9/0x870 [ 83.334808][ C1] ? rcu_lock_release+0x5/0x20 [ 83.339588][ C1] ? read_lock_is_recursive+0x10/0x10 [ 83.345019][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 83.350069][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 83.356085][ C1] batadv_nc_worker+0x25b/0x5c0 [ 83.360959][ C1] process_one_work+0x863/0x1000 [ 83.365919][ C1] ? worker_detach_from_pool+0x240/0x240 [ 83.371565][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 83.376867][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 83.381912][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 83.387307][ C1] ? wq_worker_running+0x97/0x170 [ 83.392346][ C1] worker_thread+0xaa8/0x12a0 [ 83.397045][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 83.402956][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 83.408185][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 83.414132][ C1] kthread+0x436/0x520 [ 83.418232][ C1] ? rcu_lock_release+0x20/0x20 [ 83.423099][ C1] ? kthread_blkcg+0xd0/0xd0 [ 83.427708][ C1] ret_from_fork+0x1f/0x30 [ 83.432162][ C1] [ 83.435431][ C1] Kernel Offset: disabled [ 83.439780][ C1] Rebooting in 86400 seconds..