last executing test programs: 3.168322744s ago: executing program 0 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xf3f, 0x4070bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0x7, 0xfff3}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x44080) 2.756061429s ago: executing program 3 (id=9): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 2.317689764s ago: executing program 0 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x800e805) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) read$FUSE(r1, &(0x7f00000045c0)={0x2020}, 0x2020) 2.210476921s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.04516753s ago: executing program 0 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x102b, &(0x7f0000002c40)=ANY=[], 0x0) 2.022522602s ago: executing program 3 (id=15): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x200000b, 0x13, r2, 0x0) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) 1.826240103s ago: executing program 0 (id=16): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {r2, r3+60000000}}, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.795616515s ago: executing program 2 (id=17): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xc0000004}) splice(r2, 0x0, r1, 0x0, 0xffff, 0x0) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x4404000, 0x96, 0x5800, 0x3, 0x11c489e6, 0x0, 0x0, 0x10, 0x2}}, 0x50) sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="b7", 0x1}], 0x1, 0x0, 0x0, 0x20000080}}], 0x1, 0x0) 1.649056234s ago: executing program 3 (id=18): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1.574897788s ago: executing program 0 (id=19): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000140)=[{r1, 0x601}, {r1, 0x2304}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.504432162s ago: executing program 2 (id=20): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r0, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.271784375s ago: executing program 2 (id=21): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0xab0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x81, @empty, 0x80000000}}}, 0x90) 1.112943125s ago: executing program 2 (id=23): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000003780)={0x2020}, 0x2020) 970.296023ms ago: executing program 3 (id=24): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000080)=[@request_death], 0x1, 0x0, &(0x7f00000000c0)='c'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000013c0)={0xc, 0x0, &(0x7f0000001280)=[@dead_binder_done], 0x0, 0x0, 0x0}) 856.06841ms ago: executing program 3 (id=26): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x7) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 688.66323ms ago: executing program 1 (id=28): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) close_range(r0, 0xffffffffffffffff, 0x0) 558.982187ms ago: executing program 0 (id=29): openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/key-users\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8, @ANYBLOB="05", @ANYRES16], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) fanotify_init(0x8, 0x1000) 534.962829ms ago: executing program 1 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x80007, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)='\x00', 0x1}], 0x1}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000140)=0x5, 0x4) 506.48607ms ago: executing program 3 (id=31): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f40)={0x1, &(0x7f0000000f00)=[{0x6}]}) 409.876446ms ago: executing program 1 (id=32): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000000)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @local}, 0x14) 292.317123ms ago: executing program 1 (id=33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000280)=""/46, 0x2e, 0x40010052, 0x0, 0x0) 166.392601ms ago: executing program 2 (id=34): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000ac0)={0x2, 0x0, {&(0x7f0000000940)=""/116, 0x74, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 131.131453ms ago: executing program 1 (id=35): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) 70.321856ms ago: executing program 2 (id=36): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0xeeb17c614e722bcc, 0x0, {0x7, 0x29, 0x8, 0x94c0148, 0x35, 0x2, 0xf296, 0xfc8, 0x0, 0x0, 0x2, 0x3}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x1c2) 0s ago: executing program 1 (id=37): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xc9bc, 0x8, 0x2, 0x801ef}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 51.168102][ T4251] cgroup: Unknown subsys name 'net' [ 51.326570][ T4251] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.625016][ T4251] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.906800][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.914816][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.923073][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.930828][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.938891][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.946777][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.955722][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.963582][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.965944][ T4269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.971018][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.985863][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.999256][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.007276][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.015112][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.016153][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.022988][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.037251][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.044620][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.044944][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.051865][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.059513][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.083615][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.091325][ T4269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.093145][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.099551][ T4269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.106293][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.113698][ T4269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.131955][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.139484][ T4269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.147158][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.453812][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 54.584434][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 54.594930][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 54.630825][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 54.675838][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 54.690073][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.699508][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.708033][ T4266] device bridge_slave_0 entered promiscuous mode [ 54.724251][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.731346][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.739367][ T4266] device bridge_slave_1 entered promiscuous mode [ 54.811795][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.844155][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.880402][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.887685][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.896255][ T4275] device bridge_slave_0 entered promiscuous mode [ 54.908642][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.918401][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.926272][ T4271] device bridge_slave_0 entered promiscuous mode [ 54.940535][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.947754][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.956215][ T4281] device bridge_slave_0 entered promiscuous mode [ 54.964160][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.971262][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.979753][ T4275] device bridge_slave_1 entered promiscuous mode [ 54.989998][ T4266] team0: Port device team_slave_0 added [ 54.998081][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.007263][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.015626][ T4271] device bridge_slave_1 entered promiscuous mode [ 55.027975][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.036234][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.045605][ T4281] device bridge_slave_1 entered promiscuous mode [ 55.059147][ T4266] team0: Port device team_slave_1 added [ 55.071704][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.079129][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.087470][ T4270] device bridge_slave_0 entered promiscuous mode [ 55.113180][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.126578][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.134750][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.142715][ T4270] device bridge_slave_1 entered promiscuous mode [ 55.162468][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.176368][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.196004][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.205826][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.213147][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.239090][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.252409][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.262100][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.269058][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.295004][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.316867][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.345636][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.367977][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.380975][ T4275] team0: Port device team_slave_0 added [ 55.397299][ T4271] team0: Port device team_slave_0 added [ 55.417958][ T4275] team0: Port device team_slave_1 added [ 55.425831][ T4281] team0: Port device team_slave_0 added [ 55.434175][ T4281] team0: Port device team_slave_1 added [ 55.442842][ T4271] team0: Port device team_slave_1 added [ 55.488764][ T4266] device hsr_slave_0 entered promiscuous mode [ 55.495798][ T4266] device hsr_slave_1 entered promiscuous mode [ 55.505582][ T4270] team0: Port device team_slave_0 added [ 55.532094][ T4270] team0: Port device team_slave_1 added [ 55.543128][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.550094][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.576457][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.588327][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.596168][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.622383][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.633901][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.640864][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.670249][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.691898][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.698858][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.724761][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.736430][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.743502][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.769413][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.780896][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.790979][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.817375][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.840444][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.850429][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.879127][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.924675][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.934556][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.960762][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.993121][ T4275] device hsr_slave_0 entered promiscuous mode [ 56.000057][ T4275] device hsr_slave_1 entered promiscuous mode [ 56.007011][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.015052][ T4275] Cannot create hsr debugfs directory [ 56.023462][ T4271] device hsr_slave_0 entered promiscuous mode [ 56.031239][ T4271] device hsr_slave_1 entered promiscuous mode [ 56.039982][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.047720][ T4271] Cannot create hsr debugfs directory [ 56.074731][ T4281] device hsr_slave_0 entered promiscuous mode [ 56.081485][ T4281] device hsr_slave_1 entered promiscuous mode [ 56.088485][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.096122][ T4281] Cannot create hsr debugfs directory [ 56.142286][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 56.142295][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 56.142471][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 56.148504][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 56.186844][ T4270] device hsr_slave_0 entered promiscuous mode [ 56.194236][ T4270] device hsr_slave_1 entered promiscuous mode [ 56.200739][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.208493][ T4270] Cannot create hsr debugfs directory [ 56.221851][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 56.479480][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.509107][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.524647][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.535326][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.565088][ T4281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.579904][ T4281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.595676][ T4281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.616211][ T4281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.683527][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.715727][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.728544][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.753522][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.783881][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.816557][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.829933][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.840396][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.856558][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.866091][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.885843][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.906530][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.947815][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.957702][ T4270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.983967][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.996378][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.006413][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.013646][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.028171][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.038161][ T4270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.051406][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.060176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.069695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.078709][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.085962][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.103098][ T4270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.112262][ T4270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.123583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.145909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.153924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.171413][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.189068][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.198022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.207794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.216203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.224260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.234109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.252289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.260234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.270429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.279612][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.286754][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.295394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.304226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.312979][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.320037][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.327965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.337789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.383272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.395998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.404845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.414313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.423884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.433018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.441337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.459769][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.482205][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.509522][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.519196][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.529049][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.538184][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.546913][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.554067][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.562108][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.569785][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.577915][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.589203][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.597891][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.608428][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.617147][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.624283][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.632059][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.640785][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.649246][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.659660][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.688535][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.719432][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.728916][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.749974][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.759525][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.768596][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.777930][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.787113][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.794265][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.803824][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.813471][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.824574][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.831704][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.839689][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.849557][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.858869][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.867730][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.877219][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.885641][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.893849][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.901690][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.909805][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.922119][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.930768][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.947244][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.956385][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.965316][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.972438][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.984404][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.993325][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.002407][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.009462][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.017645][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.026966][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.039801][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.059357][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.077669][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.101853][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.112174][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.133026][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.156070][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.177173][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.192601][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.207405][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.221985][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 58.226990][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 58.228015][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 58.234050][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 58.244241][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.254526][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.265951][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.277800][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.293383][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.302508][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 58.358885][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.378397][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.398989][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.407543][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.420780][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.431092][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.439990][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.448597][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.457019][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.466064][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.474728][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.484466][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.500908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.512528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.521226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.537725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.569210][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.602949][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.616787][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.649327][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.673350][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.728686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.763422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.797779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.822487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.849583][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.898321][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.923329][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.943502][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.959067][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.969876][ T4266] device veth0_vlan entered promiscuous mode [ 58.989232][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.002850][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.016576][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.057848][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.087208][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.103378][ T4266] device veth1_vlan entered promiscuous mode [ 59.143868][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.163542][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.175180][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.183256][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.196291][ T4281] device veth0_vlan entered promiscuous mode [ 59.212610][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.221849][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.230833][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.239853][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.249758][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.269643][ T4266] device veth0_macvtap entered promiscuous mode [ 59.288517][ T4281] device veth1_vlan entered promiscuous mode [ 59.316641][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.325674][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.340995][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.350097][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.359637][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.369111][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.377317][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.385075][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.395654][ T4266] device veth1_macvtap entered promiscuous mode [ 59.410333][ T4275] device veth0_vlan entered promiscuous mode [ 59.419930][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.429171][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.452740][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.473385][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.485624][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.503109][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.520856][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.552141][ T4281] device veth0_macvtap entered promiscuous mode [ 59.565124][ T4281] device veth1_macvtap entered promiscuous mode [ 59.573724][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.584148][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.593056][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.601493][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.610327][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.622313][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.632329][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.655172][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.674675][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.688902][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.701381][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.721711][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.730437][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.739505][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.765268][ T4275] device veth1_vlan entered promiscuous mode [ 59.788917][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.803790][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.828936][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.843637][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.855169][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.879662][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.889201][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.900459][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.916197][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.948861][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.964557][ T4270] device veth0_vlan entered promiscuous mode [ 59.978543][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.989029][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.999392][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.007974][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.019346][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.027392][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.047721][ T4275] device veth0_macvtap entered promiscuous mode [ 60.058906][ T4275] device veth1_macvtap entered promiscuous mode [ 60.078408][ T4281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.097507][ T4281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.107899][ T4281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.116877][ T4281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.127775][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.139772][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.149098][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.159890][ T4270] device veth1_vlan entered promiscuous mode [ 60.218800][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.227760][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.238579][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.247371][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.259682][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.271486][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.283455][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.293954][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.304335][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 60.304354][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 60.310327][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 60.316846][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 60.325821][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.344239][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.353530][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.373277][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.381996][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 60.387354][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.398807][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.410729][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.424980][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.438181][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.448258][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.459009][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.470792][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.506345][ T4271] device veth0_vlan entered promiscuous mode [ 60.521471][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.531005][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.539896][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.549522][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.558302][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.566760][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.578958][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.587813][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.596698][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.605867][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.634587][ T4271] device veth1_vlan entered promiscuous mode [ 60.645105][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.654779][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.663554][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.674428][ T4270] device veth0_macvtap entered promiscuous mode [ 60.687596][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.699092][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.709125][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.731164][ T4270] device veth1_macvtap entered promiscuous mode [ 60.792368][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.800229][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.810891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.836758][ T4271] device veth0_macvtap entered promiscuous mode [ 60.868324][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.904545][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.919189][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.930362][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.940695][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.955540][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.967219][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.987162][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.997702][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.012286][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.022338][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.045723][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.071262][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.083994][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.095176][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.104465][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.116571][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.128535][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.140551][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.151211][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.164986][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.179775][ T4271] device veth1_macvtap entered promiscuous mode [ 61.194434][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.212589][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.226374][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.235986][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.257539][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.267818][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.283190][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.290726][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.299775][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.309674][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.341843][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.424747][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.442305][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.451787][ T26] audit: type=1326 audit(1770688868.249:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.1.2" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e4ef9af79 code=0x0 [ 61.476208][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.488734][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.500775][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.513060][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.523129][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.533901][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.546418][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.564464][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.576554][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.603297][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.611162][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.623726][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.651943][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.671713][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.691305][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.701245][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.712121][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.722008][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.732633][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.759768][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.784225][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.798086][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.809344][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.839971][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.849731][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.859327][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.869157][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.948606][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.967089][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.983235][ T4396] loop3: detected capacity change from 0 to 64 [ 62.002058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.088787][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.108649][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.126459][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.217887][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.260703][ T4399] loop3: detected capacity change from 0 to 512 [ 62.277338][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.324516][ T4399] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.340852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.377570][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.385969][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 62.392043][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 62.398068][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 62.405448][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 62.444206][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.450522][ T4399] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 62.462107][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 62.491310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.509231][ T4399] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.9: bg 0: block 248: padding at end of block bitmap is not set [ 62.536875][ T4408] process 'syz.1.10' launched '/dev/fd/-1/./file3' with NULL argv: empty string added [ 62.547513][ T4399] Quota error (device loop3): write_blk: dquota write failed [ 62.556099][ T4399] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 62.567710][ T4399] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.9: Failed to acquire dquot type 1 [ 62.584136][ T4399] EXT4-fs (loop3): 1 truncate cleaned up [ 62.589970][ T4399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.898204][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 62.922658][ T11] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 62.949413][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 1 [ 63.071688][ T129] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.261920][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 63.271850][ T129] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 63.311023][ T129] usb 5-1: config 0 has no interface number 0 [ 63.341943][ T129] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.370641][ T129] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 63.410856][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.438388][ T129] usb 5-1: Product: syz [ 63.452873][ T129] usb 5-1: Manufacturer: syz [ 63.481169][ T129] usb 5-1: SerialNumber: syz [ 63.493115][ T129] usb 5-1: config 0 descriptor?? [ 63.510456][ T129] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 63.529953][ T129] em28xx 5-1:0.132: Video interface 132 found: [ 63.831855][ T4442] "syz.1.22" (4442) uses obsolete ecb(arc4) skcipher [ 63.919819][ T129] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 64.349625][ T129] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 64.378342][ T129] em28xx 5-1:0.132: board has no eeprom [ 64.459224][ T26] audit: type=1326 audit(1770688871.259:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.3.31" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7fa52793c399 code=0x0 [ 64.501736][ T129] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 64.519443][ T129] em28xx 5-1:0.132: analog set to bulk mode. [ 64.536630][ T129] em28xx 5-1:0.132: Registering V4L2 extension [ 64.657778][ T129] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 64.658997][ T7] usb 5-1: USB disconnect, device number 2 [ 64.672410][ T129] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 64.674887][ T7] em28xx 5-1:0.132: Disconnecting em28xx [ 64.711623][ T4255] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.884097][ T4479] loop2: detected capacity change from 0 to 512 [ 64.901687][ T4479] EXT4-fs: Ignoring removed orlov option [ 64.929726][ T4255] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 64.950752][ T4479] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 64.968099][ T4255] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.985029][ T129] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 64.996440][ T4479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 65.002622][ T4255] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.010142][ T129] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 65.016113][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.030312][ T4255] usb 1-1: SerialNumber: syz [ 65.049959][ T4479] EXT4-fs error (device loop2): ext4_iget_extra_inode:4756: inode #15: comm syz.2.36: corrupted in-inode xattr [ 65.061421][ T129] em28xx 5-1:0.132: No AC97 audio processor [ 65.069945][ T4479] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.36: couldn't read orphan inode 15 (err -117) [ 65.083496][ T4479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.088217][ T129] usb 5-1: Decoder not found [ 65.140984][ T129] em28xx 5-1:0.132: failed to create media graph [ 65.168832][ T129] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 65.207084][ T4485] ================================================================== [ 65.208297][ T129] em28xx 5-1:0.132: Remote control support is not available for this card. [ 65.215164][ T4485] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 65.215204][ T4485] Read of size 8 at addr ffff88807ae2c738 by task v4l_id/4485 [ 65.215216][ T4485] [ 65.215231][ T4485] CPU: 0 PID: 4485 Comm: v4l_id Not tainted syzkaller #0 [ 65.215246][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 65.215254][ T4485] Call Trace: [ 65.215263][ T4485] [ 65.215270][ T4485] dump_stack_lvl+0x188/0x24e [ 65.215293][ T4485] ? __lock_acquire+0x7d10/0x7d10 [ 65.215314][ T4485] ? show_regs_print_info+0x12/0x12 [ 65.228098][ T4479] EXT4-fs error (device loop2): ext4_ind_map_blocks:604: inode #18: comm syz.2.36: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 65.230791][ T4485] ? load_image+0x400/0x400 [ 65.230817][ T4485] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 65.230834][ T4485] ? __virt_addr_valid+0x188/0x540 [ 65.230855][ T4485] ? __virt_addr_valid+0x465/0x540 [ 65.230874][ T4485] ? v4l2_fh_open+0xc6/0x430 [ 65.318497][ T4485] print_report+0xa8/0x210 [ 65.322913][ T4485] kasan_report+0x10b/0x140 [ 65.327414][ T4485] ? v4l2_fh_open+0xc6/0x430 [ 65.332001][ T4485] v4l2_fh_open+0xc6/0x430 [ 65.336416][ T4485] em28xx_v4l2_open+0x152/0x990 [ 65.341254][ T4485] ? __lock_acquire+0x7d10/0x7d10 [ 65.346274][ T4485] v4l2_open+0x20b/0x360 [ 65.350504][ T4485] chrdev_open+0x5c5/0x6a0 [ 65.354912][ T4485] ? cd_forget+0x160/0x160 [ 65.359315][ T4485] ? fsnotify_perm+0x39b/0x550 [ 65.364068][ T4485] ? cd_forget+0x160/0x160 [ 65.368470][ T4485] do_dentry_open+0x7e9/0x10d0 [ 65.373228][ T4485] path_openat+0x2635/0x2ee0 [ 65.377811][ T4485] ? verify_lock_unused+0x140/0x140 [ 65.383001][ T4485] ? do_syscall_64+0x4c/0xa0 [ 65.387581][ T4485] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.393640][ T4485] ? do_filp_open+0x430/0x430 [ 65.398308][ T4485] do_filp_open+0x1f1/0x430 [ 65.402802][ T4485] ? vfs_tmpfile+0x480/0x480 [ 65.407384][ T4485] ? _raw_spin_unlock+0x24/0x40 [ 65.412221][ T4485] ? alloc_fd+0x58f/0x630 [ 65.416544][ T4485] do_sys_openat2+0x150/0x4b0 [ 65.421212][ T4485] ? up_read+0x20/0x20 [ 65.425271][ T4485] ? do_sys_open+0xe0/0xe0 [ 65.429677][ T4485] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 65.435651][ T4485] ? lock_chain_count+0x20/0x20 [ 65.440493][ T4485] __x64_sys_openat+0x135/0x160 [ 65.445336][ T4485] do_syscall_64+0x4c/0xa0 [ 65.449748][ T4485] ? clear_bhb_loop+0x60/0xb0 [ 65.454415][ T4485] ? clear_bhb_loop+0x60/0xb0 [ 65.459077][ T4485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.464980][ T4485] RIP: 0033:0x7f2dae4a7407 [ 65.469389][ T4485] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 65.488986][ T4485] RSP: 002b:00007fffc795fbe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 65.497392][ T4485] RAX: ffffffffffffffda RBX: 00007f2daebf1880 RCX: 00007f2dae4a7407 [ 65.505350][ T4485] RDX: 0000000000000000 RSI: 00007fffc7960f1d RDI: ffffffffffffff9c [ 65.513306][ T4485] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 65.521266][ T4485] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 65.529222][ T4485] R13: 00007fffc795fe30 R14: 00007f2daed50000 R15: 0000562aee84d4d8 [ 65.537187][ T4485] [ 65.540195][ T4485] [ 65.542518][ T4485] Allocated by task 129: [ 65.546742][ T4485] kasan_set_track+0x4b/0x70 [ 65.551325][ T4485] __kasan_kmalloc+0x8e/0xa0 [ 65.555909][ T4485] em28xx_v4l2_init+0x107/0x2e70 [ 65.560835][ T4485] em28xx_init_extension+0x118/0x1b0 [ 65.566111][ T4485] process_one_work+0x8a2/0x1160 [ 65.571037][ T4485] worker_thread+0xaa2/0x1270 [ 65.575699][ T4485] kthread+0x29d/0x330 [ 65.579751][ T4485] ret_from_fork+0x1f/0x30 [ 65.584156][ T4485] [ 65.586462][ T4485] Freed by task 129: [ 65.590337][ T4485] kasan_set_track+0x4b/0x70 [ 65.594915][ T4485] kasan_save_free_info+0x2d/0x50 [ 65.599940][ T4485] ____kasan_slab_free+0x126/0x1e0 [ 65.605064][ T4485] slab_free_freelist_hook+0x131/0x1a0 [ 65.610521][ T4485] __kmem_cache_free+0xb6/0x1f0 [ 65.615362][ T4485] em28xx_v4l2_init+0x166c/0x2e70 [ 65.620375][ T4485] em28xx_init_extension+0x118/0x1b0 [ 65.625651][ T4485] process_one_work+0x8a2/0x1160 [ 65.630575][ T4485] worker_thread+0xaa2/0x1270 [ 65.635236][ T4485] kthread+0x29d/0x330 [ 65.639287][ T4485] ret_from_fork+0x1f/0x30 [ 65.643695][ T4485] [ 65.646004][ T4485] The buggy address belongs to the object at ffff88807ae2c000 [ 65.646004][ T4485] which belongs to the cache kmalloc-8k of size 8192 [ 65.660044][ T4485] The buggy address is located 1848 bytes inside of [ 65.660044][ T4485] 8192-byte region [ffff88807ae2c000, ffff88807ae2e000) [ 65.673478][ T4485] [ 65.675789][ T4485] The buggy address belongs to the physical page: [ 65.682188][ T4485] page:ffffea0001eb8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ae28 [ 65.692328][ T4485] head:ffffea0001eb8a00 order:3 compound_mapcount:0 compound_pincount:0 [ 65.700637][ T4485] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 65.708612][ T4485] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442280 [ 65.717185][ T4485] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 65.725768][ T4485] page dumped because: kasan: bad access detected [ 65.732175][ T4485] page_owner tracks the page as allocated [ 65.737872][ T4485] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4257, tgid 4257 (syz-executor), ts 51494665357, free_ts 48293666757 [ 65.758566][ T4485] post_alloc_hook+0x173/0x1a0 [ 65.763329][ T4485] get_page_from_freelist+0x1a1e/0x1ab0 [ 65.768939][ T4485] __alloc_pages+0x1ec/0x4f0 [ 65.773543][ T4485] alloc_slab_page+0x5d/0x160 [ 65.778218][ T4485] new_slab+0x87/0x2c0 [ 65.782275][ T4485] ___slab_alloc+0xbc6/0x1240 [ 65.786939][ T4485] __kmem_cache_alloc_node+0x1a0/0x260 [ 65.792388][ T4485] kmalloc_trace+0x26/0xe0 [ 65.796798][ T4485] tomoyo_init_log+0x1090/0x1f80 [ 65.801723][ T4485] tomoyo_supervisor+0x35f/0x11a0 [ 65.806741][ T4485] tomoyo_env_perm+0x14e/0x1f0 [ 65.811493][ T4485] tomoyo_find_next_domain+0x1578/0x1a50 [ 65.817117][ T4485] tomoyo_bprm_check_security+0x100/0x150 [ 65.822825][ T4485] security_bprm_check+0x5e/0x90 [ 65.827788][ T4485] bprm_execve+0xa50/0x17e0 [ 65.832280][ T4485] do_execveat_common+0x51b/0x6c0 [ 65.837298][ T4485] page last free stack trace: [ 65.841952][ T4485] free_unref_page_prepare+0x8b4/0x9a0 [ 65.847401][ T4485] free_unref_page+0x2e/0x3f0 [ 65.852068][ T4485] __unfreeze_partials+0x1a5/0x200 [ 65.857165][ T4485] put_cpu_partial+0x17c/0x250 [ 65.861913][ T4485] qlist_free_all+0x76/0xe0 [ 65.866401][ T4485] kasan_quarantine_reduce+0x144/0x160 [ 65.871848][ T4485] __kasan_slab_alloc+0x1e/0x80 [ 65.876689][ T4485] slab_post_alloc_hook+0x4b/0x480 [ 65.881785][ T4485] kmem_cache_alloc+0x123/0x2f0 [ 65.886623][ T4485] vm_area_alloc+0x20/0xe0 [ 65.891022][ T4485] mmap_region+0xc18/0x1ca0 [ 65.895517][ T4485] do_mmap+0x964/0xfd0 [ 65.899575][ T4485] vm_mmap_pgoff+0x1c1/0x2d0 [ 65.904159][ T4485] ksys_mmap_pgoff+0x516/0x6f0 [ 65.908909][ T4485] do_syscall_64+0x4c/0xa0 [ 65.913314][ T4485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.919195][ T4485] [ 65.921502][ T4485] Memory state around the buggy address: [ 65.927117][ T4485] ffff88807ae2c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.935163][ T4485] ffff88807ae2c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.943207][ T4485] >ffff88807ae2c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.951247][ T4485] ^ [ 65.957121][ T4485] ffff88807ae2c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.965187][ T4485] ffff88807ae2c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.973235][ T4485] ================================================================== [ 65.985011][ T7] em28xx 5-1:0.132: Closing input extension [ 66.059567][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 66.107850][ T4255] usb 1-1: 0:2 : does not exist [ 66.136854][ T4255] usb 1-1: unit 5 not found! [ 66.171904][ T4255] usb 1-1: USB disconnect, device number 2 [ 66.252841][ T4485] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.260073][ T4485] CPU: 0 PID: 4485 Comm: v4l_id Not tainted syzkaller #0 [ 66.267130][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 66.277169][ T4485] Call Trace: [ 66.280443][ T4485] [ 66.283367][ T4485] dump_stack_lvl+0x188/0x24e [ 66.288040][ T4485] ? memcpy+0x3c/0x60 [ 66.292007][ T4485] ? show_regs_print_info+0x12/0x12 [ 66.297197][ T4485] ? load_image+0x400/0x400 [ 66.301691][ T4485] panic+0x2e5/0x730 [ 66.305572][ T4485] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 66.311894][ T4485] ? bpf_jit_dump+0xd0/0xd0 [ 66.316393][ T4485] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 66.322360][ T4485] ? _raw_spin_unlock+0x40/0x40 [ 66.327197][ T4485] check_panic_on_warn+0x80/0xa0 [ 66.332129][ T4485] ? v4l2_fh_open+0xc6/0x430 [ 66.336715][ T4485] end_report+0x66/0x110 [ 66.340951][ T4485] kasan_report+0x118/0x140 [ 66.345448][ T4485] ? v4l2_fh_open+0xc6/0x430 [ 66.350037][ T4485] v4l2_fh_open+0xc6/0x430 [ 66.354450][ T4485] em28xx_v4l2_open+0x152/0x990 [ 66.359286][ T4485] ? __lock_acquire+0x7d10/0x7d10 [ 66.364304][ T4485] v4l2_open+0x20b/0x360 [ 66.368536][ T4485] chrdev_open+0x5c5/0x6a0 [ 66.373028][ T4485] ? cd_forget+0x160/0x160 [ 66.377458][ T4485] ? fsnotify_perm+0x39b/0x550 [ 66.382213][ T4485] ? cd_forget+0x160/0x160 [ 66.386632][ T4485] do_dentry_open+0x7e9/0x10d0 [ 66.391406][ T4485] path_openat+0x2635/0x2ee0 [ 66.395991][ T4485] ? verify_lock_unused+0x140/0x140 [ 66.401180][ T4485] ? do_syscall_64+0x4c/0xa0 [ 66.405766][ T4485] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.411824][ T4485] ? do_filp_open+0x430/0x430 [ 66.416494][ T4485] do_filp_open+0x1f1/0x430 [ 66.420987][ T4485] ? vfs_tmpfile+0x480/0x480 [ 66.425568][ T4485] ? _raw_spin_unlock+0x24/0x40 [ 66.430404][ T4485] ? alloc_fd+0x58f/0x630 [ 66.434751][ T4485] do_sys_openat2+0x150/0x4b0 [ 66.439429][ T4485] ? up_read+0x20/0x20 [ 66.443490][ T4485] ? do_sys_open+0xe0/0xe0 [ 66.447898][ T4485] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 66.453876][ T4485] ? lock_chain_count+0x20/0x20 [ 66.458719][ T4485] __x64_sys_openat+0x135/0x160 [ 66.463566][ T4485] do_syscall_64+0x4c/0xa0 [ 66.467994][ T4485] ? clear_bhb_loop+0x60/0xb0 [ 66.472657][ T4485] ? clear_bhb_loop+0x60/0xb0 [ 66.477321][ T4485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.483201][ T4485] RIP: 0033:0x7f2dae4a7407 [ 66.487605][ T4485] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 66.507216][ T4485] RSP: 002b:00007fffc795fbe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 66.515635][ T4485] RAX: ffffffffffffffda RBX: 00007f2daebf1880 RCX: 00007f2dae4a7407 [ 66.523602][ T4485] RDX: 0000000000000000 RSI: 00007fffc7960f1d RDI: ffffffffffffff9c [ 66.531559][ T4485] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 66.539514][ T4485] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 66.547479][ T4485] R13: 00007fffc795fe30 R14: 00007f2daed50000 R15: 0000562aee84d4d8 [ 66.555448][ T4485] [ 66.558782][ T4485] Kernel Offset: disabled [ 66.563094][ T4485] Rebooting in 86400 seconds..