last executing test programs: 9.329618246s ago: executing program 4 (id=240): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x8}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="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", 0x125}, {&(0x7f0000000840)="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", 0x17b}], 0x2}, 0x1) 9.003078386s ago: executing program 2 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000180), 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r5, 0x0, 0x0, 0x7) syz_emit_ethernet(0x36, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4, 0x11, r6, 0x100000000) 7.60229462s ago: executing program 1 (id=243): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 7.332291428s ago: executing program 2 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911093000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 7.29041657s ago: executing program 0 (id=246): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0xb0000010}) 7.197819412s ago: executing program 4 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25106000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x103) connect$unix(r2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d4, 0x0) 6.186431154s ago: executing program 2 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) 6.160954705s ago: executing program 0 (id=249): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) ftruncate(0xffffffffffffffff, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x8, 0x3, 0x10000, 0x0, 0x6, 0x1, 0x74c3924ecb75b6cd}}) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f00000002c0)="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", 0x1d5}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e6", 0xfff}, {&(0x7f0000002440)}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0x7f4}], 0x6}}], 0x1, 0x0) 6.098662417s ago: executing program 3 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061030000000000000400000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x0, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x4e22, @private}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)='x', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x1, @private1, 0x1}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000002b01fe8000000000000000000000000000bbfe8000000000004ac8ae91000000dc5d93b3986c02e8fd17757ba28984c41dff55d155d756afd28092949c2ced56d65bcf6e717dd8f489add7f25e8f93cc95cbedf439929703b1d12990e4efc5916b865261244b33c1d0213cd2248c02cf8f69a8baa8857ffd71b27bb013fb029f58141e05e3673178c9eb1bfc4b35407e2ed0be5fdceba574f9cd619724ec14532dcf2caa232500"/199], 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4, 0x11, r6, 0x100000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="43750db86fee", @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x4d, 0x0, {0x6, 0x4, 0x1, 0x9, 0x35a, 0x68, 0x2, 0x2, 0x2e, 0x0, @broadcast, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x8}]}}, "13264916"}}}}}, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 4.625766094s ago: executing program 0 (id=251): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r1, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000080)) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100) fchdir(r2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100), 0x0) 4.625279574s ago: executing program 2 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x23de}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.603734994s ago: executing program 1 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) 4.598531195s ago: executing program 0 (id=254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xc}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x4000003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="19", 0x1}], 0x1}, 0x4) 4.513599988s ago: executing program 4 (id=255): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000002a80)={[{@inode_readahead_blks}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@sysvgroups}, {@resgid, 0x32}], [{@uid_gt}, {@obj_type}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") 4.298346624s ago: executing program 3 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x9}}, 0x0, @val={0x8c, 0x10, {0xb04, "8101c39cce7e", @short="3961bc13d6679f1e"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) 3.490722369s ago: executing program 1 (id=257): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000002c40)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.427250931s ago: executing program 2 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 3.381372513s ago: executing program 3 (id=259): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x24000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r2, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000080)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100) fchdir(r3) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100), 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000300)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)={r9}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) mount$nfs4(&(0x7f0000000200)='/\'+.&\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x2008000, &(0x7f00000003c0)={[{'\x00'}, {'}!\\D%\x16#}'}, {'*.$'}, {'SET\x00'}, {}, {')T)'}, {'mangle\x00'}]}) 3.236051778s ago: executing program 0 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7fffefff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0xc4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) 2.505073071s ago: executing program 1 (id=261): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r4 = fcntl$dupfd(r1, 0x0, r0) close(r3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x30000, 0xff8, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x8f8, 0x7, 0x4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.345564286s ago: executing program 4 (id=262): socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2.305162897s ago: executing program 2 (id=263): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000e00)=ANY=[@ANYBLOB="756e695f786c6174653d302c696f636861727365743d63703836312c726f6469722c756e695f786c6174653d312c696f636861727365743d63703835302c73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d342c71756965742c73686f72746e616d653d6c6f7765722c696f636861727365743d63703933362c73686f72746e616d653d77696e6e742c726f6469722c757466383d302c666c7573682c00dff6d66f75a91be5f84ca1a787f0bac384746c6713f02d1d47d38af67fc7bf761ec3753e753c6f25ca1f98804a4b35fcc794ec7ba4e9f43d2c964f6f3802d20631fd6bc5fe6fd406f6bae330d1e34b5b2e4f223b765a6caaddc40ebc8b3abacc8d8b13700c0b14f50ac1aa3e38c79dbcd4455f559436cea93494a2e6239a7c95407ea31b3e570faada4251e0d55be21ad7dc4d0b2108f772c1cf062d9dfd7ed18dd9d3ad233767bea1ecb8de67fd46ed"], 0x29, 0x344, &(0x7f0000000f80)="$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") io_setup(0x20fe, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)=ANY=[@ANYBLOB="756e695f786c6174653d302c696f636861727365743d63703934392c756e695f786c6174653d312c757466383d312c757466383d302c757466383d312c757466383d302c73686f7274df616d653d6c6f7765722c696f636861727365743d6d6163696e7569742c73686f72746e616d653d6c6f7765722c696f636861727365743d6d6163726f6d616e69616e2c636f6465706167653d3835372c757466383d302c757466383d312c726f6469722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c00"], 0x1, 0x371, &(0x7f0000000c00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe88000000000000000000000000010164010100000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) socket$kcm(0x2, 0x5, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) shutdown(r0, 0x1) 2.008926286s ago: executing program 3 (id=264): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r1, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000080)) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100) fchdir(r2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100), 0x0) 1.509590942s ago: executing program 1 (id=265): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0xb0000010}) 1.483813673s ago: executing program 0 (id=266): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) 1.400148826s ago: executing program 4 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) 1.333530148s ago: executing program 3 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) 61.200308ms ago: executing program 1 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x23de}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 416.38µs ago: executing program 3 (id=270): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000680)="bad330fbbcb554491f88612250e1", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @random="98caca7122df"}, 0x14) sendto$packet(r5, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 0s ago: executing program 4 (id=271): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000002c40)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 54.852271][ T4177] cgroup: Unknown subsys name 'net' [ 54.966379][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.456407][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.800380][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 57.817429][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 57.862681][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 57.938060][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 57.991779][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 58.038312][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.045607][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.054158][ T4194] device bridge_slave_0 entered promiscuous mode [ 58.067911][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.075248][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.083130][ T4189] device bridge_slave_0 entered promiscuous mode [ 58.104247][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.111531][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.119305][ T4194] device bridge_slave_1 entered promiscuous mode [ 58.127010][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.134252][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.142423][ T4197] device bridge_slave_0 entered promiscuous mode [ 58.149674][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.156874][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.165361][ T4189] device bridge_slave_1 entered promiscuous mode [ 58.203779][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.211207][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.218917][ T4197] device bridge_slave_1 entered promiscuous mode [ 58.235886][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.243162][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.251589][ T4190] device bridge_slave_0 entered promiscuous mode [ 58.264929][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.272219][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.279944][ T4190] device bridge_slave_1 entered promiscuous mode [ 58.298702][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.309727][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.335116][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.345589][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.363936][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.406276][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.417918][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.428792][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.438368][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.445569][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.454171][ T4200] device bridge_slave_0 entered promiscuous mode [ 58.464260][ T4189] team0: Port device team_slave_0 added [ 58.470253][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.477462][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.485332][ T4200] device bridge_slave_1 entered promiscuous mode [ 58.518619][ T4189] team0: Port device team_slave_1 added [ 58.538836][ T4194] team0: Port device team_slave_0 added [ 58.547317][ T4190] team0: Port device team_slave_0 added [ 58.560293][ T4190] team0: Port device team_slave_1 added [ 58.581262][ T4194] team0: Port device team_slave_1 added [ 58.594572][ T4197] team0: Port device team_slave_0 added [ 58.608982][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.616186][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.642682][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.656105][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.671505][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.678472][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.704998][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.718191][ T4197] team0: Port device team_slave_1 added [ 58.724821][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.731942][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.758124][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.770792][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.793818][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.800805][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.827076][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.868543][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.875569][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.902392][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.921215][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.928191][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.954356][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.977050][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.984459][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.011082][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.024497][ T4200] team0: Port device team_slave_0 added [ 59.030694][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.037925][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.064128][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.099841][ T4200] team0: Port device team_slave_1 added [ 59.114037][ T4190] device hsr_slave_0 entered promiscuous mode [ 59.121017][ T4190] device hsr_slave_1 entered promiscuous mode [ 59.139967][ T4189] device hsr_slave_0 entered promiscuous mode [ 59.146747][ T4189] device hsr_slave_1 entered promiscuous mode [ 59.153750][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.162188][ T4189] Cannot create hsr debugfs directory [ 59.186333][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.193383][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.219643][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.238998][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.246314][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.272518][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.298568][ T4194] device hsr_slave_0 entered promiscuous mode [ 59.306782][ T4194] device hsr_slave_1 entered promiscuous mode [ 59.314028][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.322145][ T4194] Cannot create hsr debugfs directory [ 59.354032][ T4197] device hsr_slave_0 entered promiscuous mode [ 59.360725][ T4197] device hsr_slave_1 entered promiscuous mode [ 59.367756][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.375468][ T4197] Cannot create hsr debugfs directory [ 59.476200][ T4200] device hsr_slave_0 entered promiscuous mode [ 59.483273][ T4200] device hsr_slave_1 entered promiscuous mode [ 59.489885][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.498262][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 59.500307][ T4200] Cannot create hsr debugfs directory [ 59.510179][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 59.516469][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 59.571156][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 59.581295][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 59.765752][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.776388][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.788850][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.799026][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.844106][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.853879][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.866974][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.888655][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.921269][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.930101][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.948931][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.994152][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.072270][ T4200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.087869][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.104791][ T4200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.115552][ T4200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.126486][ T4200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.166100][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.173718][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.184953][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.195133][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.225382][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.233844][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.245462][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.266879][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.278767][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.288111][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.295340][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.304758][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.315148][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.323576][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.330610][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.338443][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.348790][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.358928][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.368566][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.375695][ T1246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.394040][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.402375][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.410848][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.423379][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.432407][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.440812][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.461878][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.475812][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.485564][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.494734][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.501844][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.509612][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.519868][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.528477][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.542584][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.553490][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.564035][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.590221][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.604060][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.615800][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.625087][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.633320][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.642035][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.650315][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.659235][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.667545][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.678870][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.690561][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.710715][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.719533][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.735692][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.746561][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.755676][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.765841][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.772969][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.781345][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.790033][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.799189][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.807467][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.830718][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.840613][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.866975][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.878749][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.893096][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.902867][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.911950][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.920647][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.929999][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.937109][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.949260][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.979289][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.987143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.008486][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.030804][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.041264][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.073784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.089159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.100499][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.123286][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.146338][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.159294][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.171786][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.182935][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.191939][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.199838][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.208248][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.216880][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.226557][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.235425][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.245602][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.254465][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.292846][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.299921][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.312385][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.327687][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.345130][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.352283][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.367640][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.377160][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.393306][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.400392][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.409456][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.418327][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.426239][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.458194][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.482513][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.493012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.510694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.532633][ T4189] device veth0_vlan entered promiscuous mode [ 61.560272][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.583844][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 61.588492][ T4200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.601058][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 61.607159][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 61.607175][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.626856][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.637696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.645837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.651242][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 61.655516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.659865][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 61.667870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.681281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.690067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.698804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.708012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.717875][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.727224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.736083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.746168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.758761][ T4189] device veth1_vlan entered promiscuous mode [ 61.771236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.783609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.793388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.808728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.873648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.887504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.896350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.905751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.914740][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.921849][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.930111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.938752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.947896][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.955168][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.965451][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.975456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.988054][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.016703][ T4189] device veth0_macvtap entered promiscuous mode [ 62.026000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.034528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.044981][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.055670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.065358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.097944][ T4189] device veth1_macvtap entered promiscuous mode [ 62.116579][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.127047][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.136652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.145896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.154780][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.163515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.173059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.182050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.195879][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.207968][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.241777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.258626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.267385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.276908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.310337][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.321586][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.329921][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.348362][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.357715][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.374072][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.388418][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.397256][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.405388][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.415822][ T4197] device veth0_vlan entered promiscuous mode [ 62.426900][ T4190] device veth0_vlan entered promiscuous mode [ 62.437523][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.451240][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.459459][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.470546][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.480165][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.489622][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.498012][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.509553][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.520704][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.530158][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.539549][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.548520][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.567455][ T4197] device veth1_vlan entered promiscuous mode [ 62.582304][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.590403][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.597991][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.610846][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.647258][ T4190] device veth1_vlan entered promiscuous mode [ 62.690395][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.706217][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.714925][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.724094][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.746164][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.755756][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.765026][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.788763][ T4197] device veth0_macvtap entered promiscuous mode [ 62.814212][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.823285][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.836821][ T4200] device veth0_vlan entered promiscuous mode [ 62.846444][ T4197] device veth1_macvtap entered promiscuous mode [ 62.872263][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.882345][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.890291][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.898722][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.907598][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.915930][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.930167][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.938542][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.948197][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.958167][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.973514][ T4194] device veth0_vlan entered promiscuous mode [ 62.992282][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.995253][ T4200] device veth1_vlan entered promiscuous mode [ 63.006478][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.018611][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.026743][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.035444][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.046023][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.055205][ T4190] device veth0_macvtap entered promiscuous mode [ 63.072214][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.083113][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.096898][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.117760][ T4194] device veth1_vlan entered promiscuous mode [ 63.133045][ T4190] device veth1_macvtap entered promiscuous mode [ 63.146239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.155262][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.168414][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.179682][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.192965][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.227364][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.228267][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.240675][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.245753][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.260234][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.269038][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.278123][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.289030][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.303418][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.312357][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.321359][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.336637][ T4194] device veth0_macvtap entered promiscuous mode [ 63.349404][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.364208][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.375213][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.386218][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.399213][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.423099][ T4194] device veth1_macvtap entered promiscuous mode [ 63.433427][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.447338][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.457596][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.468329][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.487696][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.498810][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.510639][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.526373][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.535982][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.545128][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.554050][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.563216][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.572239][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.614680][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.651593][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 63.658046][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 63.665576][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 63.666771][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.689516][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.700008][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.718583][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.729560][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.752862][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.820326][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 63.826575][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 63.835623][ T4200] device veth0_macvtap entered promiscuous mode [ 63.846226][ T4200] device veth1_macvtap entered promiscuous mode [ 63.865248][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.876070][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.885971][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.896960][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.907428][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.918697][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.929600][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.942342][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.960264][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.019981][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.100540][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.215325][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.260490][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.357241][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.384568][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.428303][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.477090][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.539669][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.554812][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.567083][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.577988][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.588107][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.599956][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.609989][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.622111][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.635129][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.655988][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.676533][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.686683][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.697475][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.707533][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.718245][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.728592][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.739233][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.752277][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.760839][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.777838][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.788489][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.804049][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.846438][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.858587][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.868438][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.877406][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.902921][ T4200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.915510][ T4200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.924581][ T4200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.935576][ T4200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.175102][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.277310][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.588855][ T1246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.611328][ T1246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.732143][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 65.740001][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 65.867468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.889692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.898412][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 65.921153][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 65.927247][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 66.001119][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.011916][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.029206][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.075752][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.097626][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.107093][ T4282] loop1: detected capacity change from 0 to 512 [ 66.138680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.161592][ T1246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.169458][ T1246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.182870][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.190727][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.226271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.236289][ T4282] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 66.240796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.249203][ T4282] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.297807][ T4282] EXT4-fs (loop1): shut down requested (0) [ 66.304326][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.317681][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.344448][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.364624][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.375711][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.402155][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.440622][ T4284] loop3: detected capacity change from 0 to 8192 [ 66.539758][ T4284] loop3: p2 p3 p4 [ 66.562873][ T4284] loop3: partition table partially beyond EOD, truncated [ 66.575390][ T4293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 66.608836][ T4284] loop3: p2 size 588341 extends beyond EOD, truncated [ 66.638906][ T4293] device bond0 entered promiscuous mode [ 66.652295][ T4284] loop3: p3 start 65280 is beyond EOD, truncated [ 66.689134][ T4293] device bond_slave_0 entered promiscuous mode [ 66.707180][ T4293] device bond_slave_1 entered promiscuous mode [ 66.717677][ T4297] loop1: detected capacity change from 0 to 128 [ 66.726976][ T4284] loop3: p4 start 219873280 is beyond EOD, truncated [ 66.743014][ T4293] device batadv0 entered promiscuous mode [ 66.766336][ T4293] device hsr1 entered promiscuous mode [ 66.785462][ T4293] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 66.801960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 66.871822][ T4297] ======================================================= [ 66.871822][ T4297] WARNING: The mand mount option has been deprecated and [ 66.871822][ T4297] and is ignored by this kernel. Remove the mand [ 66.871822][ T4297] option from the mount to silence this warning. [ 66.871822][ T4297] ======================================================= [ 66.987009][ T4300] loop4: detected capacity change from 0 to 2048 [ 66.990606][ T4297] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.070189][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 67.082227][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.154781][ T4300] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.191566][ T4300] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.253913][ T4306] Cannot find del_set index 0 as target [ 67.299133][ T4300] fs-verity: sha512 using implementation "sha512-avx2" [ 67.340996][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 67.471628][ T21] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 67.504304][ T21] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 67.541060][ T21] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 67.572528][ T4310] device syzkaller0 entered promiscuous mode [ 67.587769][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.786532][ T4314] netlink: 92 bytes leftover after parsing attributes in process `syz.3.15'. [ 67.829641][ T4314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'. [ 67.924383][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 67.988938][ T1108] usb 1-1: USB disconnect, device number 2 [ 70.054338][ T4345] loop1: detected capacity change from 0 to 1024 [ 70.236572][ T4350] loop4: detected capacity change from 0 to 512 [ 70.268423][ T4345] EXT4-fs (loop1): Ignoring removed bh option [ 70.319071][ T4345] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 70.378163][ T4345] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.23: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 70.434376][ T4350] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.24: inode has both inline data and extents flags [ 70.455772][ T4350] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.24: couldn't read orphan inode 15 (err -117) [ 70.499494][ T4345] EXT4-fs (loop1): Remounting filesystem read-only [ 70.506439][ T4345] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 70.723653][ T4350] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.620924][ C1] sched: RT throttling activated [ 71.932897][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.939441][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.779352][ T4373] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 73.036283][ T4373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.015992][ T4389] loop4: detected capacity change from 0 to 256 [ 74.142388][ T4389] FAT-fs (loop4): Directory bread(block 64) failed [ 74.183111][ T4389] FAT-fs (loop4): Directory bread(block 65) failed [ 74.218811][ T4389] FAT-fs (loop4): Directory bread(block 66) failed [ 74.225960][ T4389] FAT-fs (loop4): Directory bread(block 67) failed [ 74.246177][ T4389] FAT-fs (loop4): Directory bread(block 68) failed [ 74.282442][ T4389] FAT-fs (loop4): Directory bread(block 69) failed [ 74.306889][ T4389] FAT-fs (loop4): Directory bread(block 70) failed [ 74.330498][ T4389] FAT-fs (loop4): Directory bread(block 71) failed [ 74.360504][ T4389] FAT-fs (loop4): Directory bread(block 72) failed [ 74.377560][ T4389] FAT-fs (loop4): Directory bread(block 73) failed [ 74.751505][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.759930][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.864881][ T4391] netlink: 68 bytes leftover after parsing attributes in process `syz.4.34'. [ 75.617671][ T4394] netlink: 4480 bytes leftover after parsing attributes in process `syz.4.35'. [ 76.320929][ T26] audit: type=1326 audit(1778900157.334:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 76.431529][ T26] audit: type=1326 audit(1778900157.334:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 76.455311][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.550443][ T26] audit: type=1326 audit(1778900157.354:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 76.554919][ T1326] cfg80211: failed to load regulatory.db [ 76.597209][ T26] audit: type=1326 audit(1778900157.354:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 76.621005][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.674910][ T26] audit: type=1326 audit(1778900157.354:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 76.703017][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.757834][ T26] audit: type=1326 audit(1778900157.364:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 76.813576][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.832377][ T26] audit: type=1326 audit(1778900157.364:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 76.856338][ T26] audit: type=1326 audit(1778900157.364:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 76.906330][ T26] audit: type=1326 audit(1778900157.364:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 76.960790][ T26] audit: type=1326 audit(1778900157.364:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.36" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd892c18e59 code=0x7ffc0000 [ 77.414879][ T4384] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.424126][ T4384] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.433057][ T4384] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.443505][ T4384] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.548638][ T4384] syz.1.32 (4384) used greatest stack depth: 20784 bytes left [ 77.609804][ T4404] overlayfs: upper fs does not support file handles, falling back to index=off. [ 78.818564][ T4413] Zero length message leads to an empty skb [ 79.743375][ T4424] loop2: detected capacity change from 0 to 256 [ 80.066083][ T4424] FAT-fs (loop2): Directory bread(block 64) failed [ 80.072924][ T4424] FAT-fs (loop2): Directory bread(block 65) failed [ 80.079822][ T4424] FAT-fs (loop2): Directory bread(block 66) failed [ 80.087334][ T4424] FAT-fs (loop2): Directory bread(block 67) failed [ 80.094469][ T4424] FAT-fs (loop2): Directory bread(block 68) failed [ 80.101146][ T4424] FAT-fs (loop2): Directory bread(block 69) failed [ 80.108475][ T4424] FAT-fs (loop2): Directory bread(block 70) failed [ 80.115260][ T4424] FAT-fs (loop2): Directory bread(block 71) failed [ 80.122252][ T4424] FAT-fs (loop2): Directory bread(block 72) failed [ 80.128922][ T4424] FAT-fs (loop2): Directory bread(block 73) failed [ 80.874129][ T4435] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 80.971934][ T4435] Cannot find add_set index 0 as target [ 82.449268][ T4448] loop3: detected capacity change from 0 to 1024 [ 83.365353][ T4455] device syzkaller0 entered promiscuous mode [ 83.421493][ T4462] device syzkaller0 entered promiscuous mode [ 86.268939][ T4469] loop0: detected capacity change from 0 to 1024 [ 86.470635][ T4469] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 86.502558][ T4469] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.518038][ T4469] __quota_error: 6 callbacks suppressed [ 86.518055][ T4469] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 86.534094][ T4469] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 86.549002][ T4469] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 86.567221][ T4469] EXT4-fs (loop0): 1 truncate cleaned up [ 86.573067][ T4469] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,resgid=0x000000000000ee00,nolazytime,,errors=continue. Quota mode: writeback. [ 86.576892][ T4481] Cannot find add_set index 0 as target [ 86.919394][ T4489] loop3: detected capacity change from 0 to 256 [ 87.654607][ T4489] FAT-fs (loop3): Directory bread(block 64) failed [ 87.661358][ T4489] FAT-fs (loop3): Directory bread(block 65) failed [ 87.669105][ T4489] FAT-fs (loop3): Directory bread(block 66) failed [ 87.676057][ T4489] FAT-fs (loop3): Directory bread(block 67) failed [ 87.682990][ T4489] FAT-fs (loop3): Directory bread(block 68) failed [ 87.689694][ T4489] FAT-fs (loop3): Directory bread(block 69) failed [ 87.696619][ T4489] FAT-fs (loop3): Directory bread(block 70) failed [ 87.703319][ T4489] FAT-fs (loop3): Directory bread(block 71) failed [ 87.710150][ T4489] FAT-fs (loop3): Directory bread(block 72) failed [ 87.716843][ T4489] FAT-fs (loop3): Directory bread(block 73) failed [ 89.951526][ T4502] loop1: detected capacity change from 0 to 1024 [ 90.798067][ T4517] device syzkaller0 entered promiscuous mode [ 91.214006][ T4521] loop2: detected capacity change from 0 to 1024 [ 92.846778][ T4521] EXT4-fs (loop2): inline encryption not supported [ 93.006046][ T4521] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,inlinecrypt,,errors=continue. Quota mode: none. [ 93.024659][ T4521] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.304683][ T4535] Cannot find add_set index 0 as target [ 94.542333][ T4542] loop3: detected capacity change from 0 to 128 [ 95.353513][ T4546] loop0: detected capacity change from 0 to 256 [ 95.422522][ T4542] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.584096][ T4546] FAT-fs (loop0): Directory bread(block 64) failed [ 95.590912][ T4546] FAT-fs (loop0): Directory bread(block 65) failed [ 95.597789][ T4546] FAT-fs (loop0): Directory bread(block 66) failed [ 95.604551][ T4546] FAT-fs (loop0): Directory bread(block 67) failed [ 95.611489][ T4546] FAT-fs (loop0): Directory bread(block 68) failed [ 95.618150][ T4546] FAT-fs (loop0): Directory bread(block 69) failed [ 95.625123][ T4546] FAT-fs (loop0): Directory bread(block 70) failed [ 95.631775][ T4546] FAT-fs (loop0): Directory bread(block 71) failed [ 95.638407][ T4546] FAT-fs (loop0): Directory bread(block 72) failed [ 95.645010][ T4546] FAT-fs (loop0): Directory bread(block 73) failed [ 95.867460][ T4542] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.688428][ T4562] loop4: detected capacity change from 0 to 256 [ 97.808086][ T4562] FAT-fs (loop4): Directory bread(block 64) failed [ 97.818749][ T4562] FAT-fs (loop4): Directory bread(block 65) failed [ 97.918889][ T4562] FAT-fs (loop4): Directory bread(block 66) failed [ 97.940787][ T4562] FAT-fs (loop4): Directory bread(block 67) failed [ 97.950383][ T4562] FAT-fs (loop4): Directory bread(block 68) failed [ 98.043729][ T4569] loop3: detected capacity change from 0 to 256 [ 98.868933][ T4562] FAT-fs (loop4): Directory bread(block 69) failed [ 98.927988][ T4562] FAT-fs (loop4): Directory bread(block 70) failed [ 98.934960][ T4562] FAT-fs (loop4): Directory bread(block 71) failed [ 98.942773][ T4562] FAT-fs (loop4): Directory bread(block 72) failed [ 98.949603][ T4562] FAT-fs (loop4): Directory bread(block 73) failed [ 99.097301][ T4569] FAT-fs (loop3): Directory bread(block 64) failed [ 99.104207][ T4569] FAT-fs (loop3): Directory bread(block 65) failed [ 99.111232][ T4569] FAT-fs (loop3): Directory bread(block 66) failed [ 99.118002][ T4569] FAT-fs (loop3): Directory bread(block 67) failed [ 99.124939][ T4569] FAT-fs (loop3): Directory bread(block 68) failed [ 99.131634][ T4569] FAT-fs (loop3): Directory bread(block 69) failed [ 99.138551][ T4569] FAT-fs (loop3): Directory bread(block 70) failed [ 99.145267][ T4569] FAT-fs (loop3): Directory bread(block 71) failed [ 99.152199][ T4569] FAT-fs (loop3): Directory bread(block 72) failed [ 99.158862][ T4569] FAT-fs (loop3): Directory bread(block 73) failed [ 101.400638][ T4591] device syzkaller0 entered promiscuous mode [ 101.430444][ T4592] device syzkaller0 entered promiscuous mode [ 102.025356][ T4602] Illegal XDP return value 51, expect packet loss! [ 102.947944][ T4606] loop3: detected capacity change from 0 to 256 [ 103.631619][ T4612] loop1: detected capacity change from 0 to 256 [ 105.327798][ T4606] FAT-fs (loop3): Directory bread(block 64) failed [ 105.334456][ T4606] FAT-fs (loop3): Directory bread(block 65) failed [ 105.341110][ T4606] FAT-fs (loop3): Directory bread(block 66) failed [ 105.347650][ T4606] FAT-fs (loop3): Directory bread(block 67) failed [ 105.354303][ T4606] FAT-fs (loop3): Directory bread(block 68) failed [ 105.360840][ T4606] FAT-fs (loop3): Directory bread(block 69) failed [ 105.367476][ T4606] FAT-fs (loop3): Directory bread(block 70) failed [ 105.374051][ T4606] FAT-fs (loop3): Directory bread(block 71) failed [ 105.380631][ T4606] FAT-fs (loop3): Directory bread(block 72) failed [ 105.387191][ T4606] FAT-fs (loop3): Directory bread(block 73) failed [ 105.518827][ T4612] FAT-fs (loop1): Directory bread(block 64) failed [ 105.604989][ T4612] FAT-fs (loop1): Directory bread(block 65) failed [ 105.611726][ T4612] FAT-fs (loop1): Directory bread(block 66) failed [ 105.618269][ T4612] FAT-fs (loop1): Directory bread(block 67) failed [ 105.624903][ T4612] FAT-fs (loop1): Directory bread(block 68) failed [ 105.631786][ T4612] FAT-fs (loop1): Directory bread(block 69) failed [ 105.638379][ T4612] FAT-fs (loop1): Directory bread(block 70) failed [ 105.644980][ T4612] FAT-fs (loop1): Directory bread(block 71) failed [ 105.651639][ T4612] FAT-fs (loop1): Directory bread(block 72) failed [ 105.658175][ T4612] FAT-fs (loop1): Directory bread(block 73) failed [ 105.715081][ T4199] Bluetooth: hci4: link tx timeout [ 105.720483][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.453401][ T4191] Bluetooth: hci4: link tx timeout [ 106.458772][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.472192][ T4191] Bluetooth: hci4: link tx timeout [ 106.477480][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.491877][ T4191] Bluetooth: hci4: link tx timeout [ 106.497433][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.518768][ T4191] Bluetooth: hci4: link tx timeout [ 106.524268][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.537599][ T4191] Bluetooth: hci4: link tx timeout [ 106.636515][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.653873][ T4191] Bluetooth: hci4: link tx timeout [ 106.659043][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.666914][ T4191] Bluetooth: hci4: link tx timeout [ 106.672085][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.008654][ T4639] loop2: detected capacity change from 0 to 512 [ 107.027037][ T4631] netlink: 68 bytes leftover after parsing attributes in process `syz.1.100'. [ 107.086498][ T4638] loop0: detected capacity change from 0 to 1024 [ 107.190774][ T4639] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.106: inode has both inline data and extents flags [ 107.196309][ T4638] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 107.217910][ T4638] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.236302][ T4639] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.106: couldn't read orphan inode 15 (err -117) [ 107.240468][ T4638] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.107: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.269634][ T4638] EXT4-fs (loop0): Remounting filesystem read-only [ 107.331624][ T4638] EXT4-fs (loop0): 1 orphan inode deleted [ 107.340966][ T4639] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: writeback. [ 107.371502][ T4638] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 107.434044][ T4651] device syzkaller0 entered promiscuous mode [ 107.499358][ T4653] loop4: detected capacity change from 0 to 1024 [ 107.511975][ T4638] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.107: iget: bad i_size value: 1970324836974602 [ 107.611350][ T4653] EXT4-fs (loop4): inodes count not valid: 150994976 vs 32 [ 107.639911][ T4656] loop2: detected capacity change from 0 to 512 [ 107.737812][ T1111] Bluetooth: hci4: command 0x0406 tx timeout [ 107.806790][ T4656] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 107.841946][ T4658] sctp: [Deprecated]: syz.0.113 (pid 4658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.841946][ T4658] Use struct sctp_sack_info instead [ 107.863441][ T4656] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 107.941961][ T4656] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.112: Failed to acquire dquot type 1 [ 107.993649][ T4656] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 108.008392][ T4656] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 108.021360][ T4656] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.112: Failed to acquire dquot type 1 [ 108.138099][ T4669] loop4: detected capacity change from 0 to 256 [ 108.149667][ T4656] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.112: bg 0: block 248: padding at end of block bitmap is not set [ 108.283990][ T4669] FAT-fs (loop4): Directory bread(block 64) failed [ 108.290751][ T4669] FAT-fs (loop4): Directory bread(block 65) failed [ 108.297837][ T4669] FAT-fs (loop4): Directory bread(block 66) failed [ 108.304596][ T4669] FAT-fs (loop4): Directory bread(block 67) failed [ 108.311468][ T4669] FAT-fs (loop4): Directory bread(block 68) failed [ 108.318124][ T4669] FAT-fs (loop4): Directory bread(block 69) failed [ 108.325101][ T4669] FAT-fs (loop4): Directory bread(block 70) failed [ 108.331868][ T4669] FAT-fs (loop4): Directory bread(block 71) failed [ 108.338746][ T4669] FAT-fs (loop4): Directory bread(block 72) failed [ 108.345444][ T4669] FAT-fs (loop4): Directory bread(block 73) failed [ 108.777040][ T4656] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 108.882158][ T4656] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 108.936725][ T4191] Bluetooth: hci4: link tx timeout [ 108.942143][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.972120][ T4656] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 108.986846][ T4191] Bluetooth: hci4: link tx timeout [ 108.992054][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.001380][ T4191] Bluetooth: hci4: link tx timeout [ 109.006511][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.015552][ T4191] Bluetooth: hci4: link tx timeout [ 109.020712][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.031282][ T4191] Bluetooth: hci4: link tx timeout [ 109.036425][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.044645][ T4191] Bluetooth: hci4: link tx timeout [ 109.049775][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.058784][ T4191] Bluetooth: hci4: link tx timeout [ 109.064822][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.073792][ T4191] Bluetooth: hci4: link tx timeout [ 109.078928][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.087144][ T4191] Bluetooth: hci4: link tx timeout [ 109.092508][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.100605][ T4191] Bluetooth: hci4: link tx timeout [ 109.105848][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.114298][ T4191] Bluetooth: hci4: link tx timeout [ 109.119436][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.127693][ T4191] Bluetooth: hci4: link tx timeout [ 109.132912][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.140810][ T4191] Bluetooth: hci4: link tx timeout [ 109.146278][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.162854][ T4191] Bluetooth: hci4: link tx timeout [ 109.168973][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.231119][ T4656] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.112: Failed to acquire dquot type 1 [ 109.390179][ T4656] EXT4-fs (loop2): 1 orphan inode deleted [ 109.421518][ T4656] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.458019][ T4678] Cannot find add_set index 0 as target [ 109.500761][ T4656] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.631136][ T4656] EXT4-fs (loop2): shut down requested (1) [ 109.964533][ T4687] loop0: detected capacity change from 0 to 8 [ 110.066970][ T4687] SQUASHFS error: Failed to read block 0x6e6: -5 [ 110.085670][ T4687] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 110.100660][ T4687] SQUASHFS error: Unable to read directory block [631:26] [ 110.222230][ T4693] device syzkaller0 entered promiscuous mode [ 110.245416][ T4689] loop2: detected capacity change from 0 to 512 [ 110.346127][ T4689] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.455463][ T4689] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 110.528508][ T4689] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 110.539488][ T4689] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.121: Failed to acquire dquot type 1 [ 110.585760][ T4689] EXT4-fs (loop2): 1 truncate cleaned up [ 110.751658][ T4689] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.754735][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 111.985673][ T4711] loop3: detected capacity change from 0 to 256 [ 112.116480][ T4720] device syzkaller0 entered promiscuous mode [ 112.215417][ T4711] FAT-fs (loop3): Directory bread(block 64) failed [ 112.222341][ T4711] FAT-fs (loop3): Directory bread(block 65) failed [ 112.231442][ T4711] FAT-fs (loop3): Directory bread(block 66) failed [ 112.242420][ T4711] FAT-fs (loop3): Directory bread(block 67) failed [ 112.250110][ T4711] FAT-fs (loop3): Directory bread(block 68) failed [ 112.257606][ T4711] FAT-fs (loop3): Directory bread(block 69) failed [ 112.282378][ T4711] FAT-fs (loop3): Directory bread(block 70) failed [ 112.288964][ T4711] FAT-fs (loop3): Directory bread(block 71) failed [ 112.418275][ T4711] FAT-fs (loop3): Directory bread(block 72) failed [ 112.426880][ T4711] FAT-fs (loop3): Directory bread(block 73) failed [ 112.683734][ T4730] Cannot find add_set index 0 as target [ 112.977531][ T4735] netlink: 68 bytes leftover after parsing attributes in process `syz.3.129'. [ 113.322248][ T4736] loop2: detected capacity change from 0 to 256 [ 113.330428][ T4191] Bluetooth: hci4: link tx timeout [ 113.337056][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.528368][ T4736] FAT-fs (loop2): Directory bread(block 64) failed [ 113.535160][ T4736] FAT-fs (loop2): Directory bread(block 65) failed [ 113.542206][ T4736] FAT-fs (loop2): Directory bread(block 66) failed [ 113.548885][ T4736] FAT-fs (loop2): Directory bread(block 67) failed [ 113.555806][ T4736] FAT-fs (loop2): Directory bread(block 68) failed [ 113.562517][ T4736] FAT-fs (loop2): Directory bread(block 69) failed [ 113.570352][ T4736] FAT-fs (loop2): Directory bread(block 70) failed [ 113.577578][ T4736] FAT-fs (loop2): Directory bread(block 71) failed [ 113.584618][ T4736] FAT-fs (loop2): Directory bread(block 72) failed [ 113.591370][ T4736] FAT-fs (loop2): Directory bread(block 73) failed [ 115.256325][ T4745] loop3: detected capacity change from 0 to 256 [ 115.631587][ T4750] device syzkaller0 entered promiscuous mode [ 116.020207][ T4745] FAT-fs (loop3): Directory bread(block 64) failed [ 116.048434][ T4745] FAT-fs (loop3): Directory bread(block 65) failed [ 116.082609][ T4745] FAT-fs (loop3): Directory bread(block 66) failed [ 116.119860][ T4745] FAT-fs (loop3): Directory bread(block 67) failed [ 116.170645][ T4745] FAT-fs (loop3): Directory bread(block 68) failed [ 116.208089][ T4745] FAT-fs (loop3): Directory bread(block 69) failed [ 116.277248][ T4745] FAT-fs (loop3): Directory bread(block 70) failed [ 116.328074][ T4745] FAT-fs (loop3): Directory bread(block 71) failed [ 116.385581][ T4745] FAT-fs (loop3): Directory bread(block 72) failed [ 116.431019][ T4745] FAT-fs (loop3): Directory bread(block 73) failed [ 116.720931][ T4776] loop1: detected capacity change from 0 to 256 [ 117.432551][ T4775] loop4: detected capacity change from 0 to 1024 [ 120.362631][ T4781] Cannot find add_set index 0 as target [ 120.370408][ T4782] Cannot find add_set index 0 as target [ 120.573509][ T4788] loop0: detected capacity change from 0 to 256 [ 120.744971][ T4788] FAT-fs (loop0): Directory bread(block 64) failed [ 120.782459][ T4788] FAT-fs (loop0): Directory bread(block 65) failed [ 120.790311][ T4788] FAT-fs (loop0): Directory bread(block 66) failed [ 120.844544][ T4795] loop3: detected capacity change from 0 to 256 [ 120.956151][ T4795] FAT-fs (loop3): Directory bread(block 64) failed [ 120.963056][ T4795] FAT-fs (loop3): Directory bread(block 65) failed [ 120.970120][ T4795] FAT-fs (loop3): Directory bread(block 66) failed [ 120.976861][ T4795] FAT-fs (loop3): Directory bread(block 67) failed [ 120.983801][ T4795] FAT-fs (loop3): Directory bread(block 68) failed [ 120.990462][ T4795] FAT-fs (loop3): Directory bread(block 69) failed [ 120.997378][ T4795] FAT-fs (loop3): Directory bread(block 70) failed [ 121.004065][ T4795] FAT-fs (loop3): Directory bread(block 71) failed [ 121.010922][ T4795] FAT-fs (loop3): Directory bread(block 72) failed [ 121.017586][ T4795] FAT-fs (loop3): Directory bread(block 73) failed [ 121.231703][ T4788] FAT-fs (loop0): Directory bread(block 67) failed [ 121.457660][ T4788] FAT-fs (loop0): Directory bread(block 68) failed [ 121.540979][ T4788] FAT-fs (loop0): Directory bread(block 69) failed [ 121.601355][ T4788] FAT-fs (loop0): Directory bread(block 70) failed [ 121.607938][ T4788] FAT-fs (loop0): Directory bread(block 71) failed [ 121.907936][ T4788] FAT-fs (loop0): Directory bread(block 72) failed [ 122.657721][ T4788] FAT-fs (loop0): Directory bread(block 73) failed [ 122.977275][ T4797] device syzkaller0 entered promiscuous mode [ 123.436758][ T4788] netlink: 68 bytes leftover after parsing attributes in process `syz.0.157'. [ 123.754431][ T4191] Bluetooth: hci4: link tx timeout [ 123.759839][ T4191] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 123.768041][ T4191] Bluetooth: hci4: link tx timeout [ 123.773489][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.386363][ T4831] loop3: detected capacity change from 0 to 256 [ 124.444674][ T4831] FAT-fs (loop3): Directory bread(block 64) failed [ 124.453158][ T4831] FAT-fs (loop3): Directory bread(block 65) failed [ 124.460074][ T4831] FAT-fs (loop3): Directory bread(block 66) failed [ 124.467921][ T4831] FAT-fs (loop3): Directory bread(block 67) failed [ 124.474875][ T4831] FAT-fs (loop3): Directory bread(block 68) failed [ 124.481572][ T4831] FAT-fs (loop3): Directory bread(block 69) failed [ 124.488618][ T4831] FAT-fs (loop3): Directory bread(block 70) failed [ 124.495318][ T4831] FAT-fs (loop3): Directory bread(block 71) failed [ 124.502231][ T4831] FAT-fs (loop3): Directory bread(block 72) failed [ 124.508889][ T4831] FAT-fs (loop3): Directory bread(block 73) failed [ 124.807471][ T4826] Cannot find add_set index 0 as target [ 126.609852][ T4835] loop0: detected capacity change from 0 to 1024 [ 126.622287][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 126.947602][ T4840] Cannot find add_set index 0 as target [ 127.428658][ T4856] loop0: detected capacity change from 0 to 256 [ 130.336280][ T4856] FAT-fs (loop0): Directory bread(block 64) failed [ 130.342968][ T4856] FAT-fs (loop0): Directory bread(block 65) failed [ 130.349565][ T4856] FAT-fs (loop0): Directory bread(block 66) failed [ 130.356579][ T4856] FAT-fs (loop0): Directory bread(block 67) failed [ 130.364834][ T4856] FAT-fs (loop0): Directory bread(block 68) failed [ 130.371486][ T4856] FAT-fs (loop0): Directory bread(block 69) failed [ 130.378115][ T4856] FAT-fs (loop0): Directory bread(block 70) failed [ 130.384741][ T4856] FAT-fs (loop0): Directory bread(block 71) failed [ 130.391420][ T4856] FAT-fs (loop0): Directory bread(block 72) failed [ 130.397956][ T4856] FAT-fs (loop0): Directory bread(block 73) failed [ 131.563075][ T4867] loop4: detected capacity change from 0 to 256 [ 131.633128][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.640675][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.654486][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.661133][ T4867] FAT-fs (loop4): Directory bread(block 64) failed [ 131.663521][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.668366][ T4867] FAT-fs (loop4): Directory bread(block 65) failed [ 131.676798][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.691602][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.699043][ T4867] FAT-fs (loop4): Directory bread(block 66) failed [ 131.707617][ T4867] FAT-fs (loop4): Directory bread(block 67) failed [ 131.720387][ T4867] FAT-fs (loop4): Directory bread(block 68) failed [ 131.727096][ T4867] FAT-fs (loop4): Directory bread(block 69) failed [ 131.734927][ T4867] FAT-fs (loop4): Directory bread(block 70) failed [ 131.742019][ T4867] FAT-fs (loop4): Directory bread(block 71) failed [ 131.748731][ T4867] FAT-fs (loop4): Directory bread(block 72) failed [ 131.755733][ T4867] FAT-fs (loop4): Directory bread(block 73) failed [ 131.854367][ T4871] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 132.063461][ T4877] loop0: detected capacity change from 0 to 512 [ 132.225605][ T4877] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.234333][ T4877] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.181: corrupted inode contents [ 132.251005][ T4877] EXT4-fs (loop0): Remounting filesystem read-only [ 132.257595][ T4877] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 132.268546][ T4877] EXT4-fs (loop0): Remounting filesystem read-only [ 132.275166][ T4877] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.181: corrupted inode contents [ 132.289499][ T4877] EXT4-fs (loop0): Remounting filesystem read-only [ 132.296141][ T4877] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.181: mark_inode_dirty error [ 132.311397][ T4877] EXT4-fs (loop0): Remounting filesystem read-only [ 132.318066][ T4877] EXT4-fs (loop0): 1 orphan inode deleted [ 132.323970][ T4877] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x0000000000010000,errors=remount-ro,quota,resgid=0x0000000000000000,acl,init_itable=0x000000000000d3d0,. Quota mode: writeback. [ 132.624689][ T2358] Bluetooth: hci4: command 0x0405 tx timeout [ 133.435785][ T4875] bond1: (slave veth3): Enslaving as an active interface with a down link [ 133.451373][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.457769][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.647928][ T4879] bond1: (slave dummy0): making interface the new active one [ 133.678373][ T4879] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 133.702021][ T4898] Cannot find add_set index 0 as target [ 134.003342][ T4899] device syzkaller0 entered promiscuous mode [ 135.231306][ T4923] loop3: detected capacity change from 0 to 8192 [ 135.336186][ T4923] loop3: AHDI p1 p2 [ 135.444537][ T4932] loop2: detected capacity change from 0 to 256 [ 135.783423][ T4932] FAT-fs (loop2): Directory bread(block 64) failed [ 135.791156][ T4932] FAT-fs (loop2): Directory bread(block 65) failed [ 135.798130][ T4932] FAT-fs (loop2): Directory bread(block 66) failed [ 135.805085][ T4932] FAT-fs (loop2): Directory bread(block 67) failed [ 135.812298][ T4932] FAT-fs (loop2): Directory bread(block 68) failed [ 135.819028][ T4932] FAT-fs (loop2): Directory bread(block 69) failed [ 135.826053][ T4932] FAT-fs (loop2): Directory bread(block 70) failed [ 135.832737][ T4932] FAT-fs (loop2): Directory bread(block 71) failed [ 135.839654][ T4932] FAT-fs (loop2): Directory bread(block 72) failed [ 135.846351][ T4932] FAT-fs (loop2): Directory bread(block 73) failed [ 137.741536][ T4934] device syzkaller0 entered promiscuous mode [ 138.958361][ T4957] loop2: detected capacity change from 0 to 256 [ 139.081536][ T4957] FAT-fs (loop2): Directory bread(block 64) failed [ 139.091004][ T4957] FAT-fs (loop2): Directory bread(block 65) failed [ 139.107117][ T4957] FAT-fs (loop2): Directory bread(block 66) failed [ 139.124164][ T4957] FAT-fs (loop2): Directory bread(block 67) failed [ 139.153169][ T4957] FAT-fs (loop2): Directory bread(block 68) failed [ 139.160106][ T4957] FAT-fs (loop2): Directory bread(block 69) failed [ 139.185238][ T4957] FAT-fs (loop2): Directory bread(block 70) failed [ 139.192190][ T4957] FAT-fs (loop2): Directory bread(block 71) failed [ 139.198970][ T4957] FAT-fs (loop2): Directory bread(block 72) failed [ 139.205934][ T4957] FAT-fs (loop2): Directory bread(block 73) failed [ 142.164220][ T4987] loop4: detected capacity change from 0 to 512 [ 142.367083][ T4987] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.378708][ T4987] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.208: corrupted inode contents [ 142.399437][ T4987] EXT4-fs (loop4): Remounting filesystem read-only [ 142.406153][ T4987] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 142.416999][ T4987] EXT4-fs (loop4): Remounting filesystem read-only [ 142.423794][ T4987] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.208: corrupted inode contents [ 142.437663][ T4987] EXT4-fs (loop4): Remounting filesystem read-only [ 142.444316][ T4987] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.208: mark_inode_dirty error [ 142.464884][ T4987] EXT4-fs (loop4): Remounting filesystem read-only [ 142.472079][ T4987] EXT4-fs (loop4): 1 orphan inode deleted [ 142.477911][ T4987] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x0000000000010000,errors=remount-ro,quota,resgid=0x0000000000000000,acl,init_itable=0x000000000000d3d0,. Quota mode: writeback. [ 143.154437][ T4991] loop0: detected capacity change from 0 to 256 [ 143.646259][ T4991] FAT-fs (loop0): Directory bread(block 64) failed [ 143.652978][ T4991] FAT-fs (loop0): Directory bread(block 65) failed [ 143.659919][ T4991] FAT-fs (loop0): Directory bread(block 66) failed [ 143.666653][ T4991] FAT-fs (loop0): Directory bread(block 67) failed [ 143.673643][ T4991] FAT-fs (loop0): Directory bread(block 68) failed [ 143.680312][ T4991] FAT-fs (loop0): Directory bread(block 69) failed [ 143.687275][ T4991] FAT-fs (loop0): Directory bread(block 70) failed [ 143.693946][ T4991] FAT-fs (loop0): Directory bread(block 71) failed [ 143.700893][ T4991] FAT-fs (loop0): Directory bread(block 72) failed [ 143.707559][ T4991] FAT-fs (loop0): Directory bread(block 73) failed [ 144.126670][ T5001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 144.171409][ T5001] bond0: invalid ARP target 0.0.0.0 specified for addition [ 144.241116][ T5001] bond0: option arp_ip_target: invalid value (0) [ 145.910044][ T5009] Cannot find add_set index 0 as target [ 145.967640][ T5016] loop1: detected capacity change from 0 to 512 [ 146.068536][ T5016] EXT4-fs (loop1): Ignoring removed nobh option [ 146.081162][ T5016] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 146.141013][ T5016] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.233057][ T5016] EXT4-fs (loop1): 1 truncate cleaned up [ 146.239793][ T5016] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 148.285955][ T5035] loop2: detected capacity change from 0 to 256 [ 149.649366][ T5040] device syzkaller0 entered promiscuous mode [ 150.496631][ T5055] loop3: detected capacity change from 0 to 256 [ 150.623719][ T5056] loop1: detected capacity change from 0 to 512 [ 150.845510][ T5056] EXT4-fs (loop1): orphan cleanup on readonly fs [ 150.884225][ T5056] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.222: corrupted inode contents [ 150.946661][ T5056] EXT4-fs (loop1): Remounting filesystem read-only [ 150.975058][ T5056] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 151.017481][ T5056] EXT4-fs (loop1): Remounting filesystem read-only [ 151.049596][ T5056] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.222: corrupted inode contents [ 151.098675][ T5056] EXT4-fs (loop1): Remounting filesystem read-only [ 151.130514][ T5056] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.222: mark_inode_dirty error [ 151.219913][ T5056] EXT4-fs (loop1): Remounting filesystem read-only [ 151.470612][ T5056] EXT4-fs (loop1): 1 orphan inode deleted [ 151.476906][ T5056] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x0000000000010000,errors=remount-ro,quota,resgid=0x0000000000000000,acl,init_itable=0x000000000000d3d0,. Quota mode: writeback. [ 151.498076][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.571607][ T5069] vxcan0: tx address claim with dest, not broadcast [ 151.748278][ T5070] loop2: detected capacity change from 0 to 256 [ 151.811839][ T5066] Cannot find add_set index 0 as target [ 152.139169][ T5070] FAT-fs (loop2): Directory bread(block 64) failed [ 152.145866][ T5070] FAT-fs (loop2): Directory bread(block 65) failed [ 152.152549][ T5070] FAT-fs (loop2): Directory bread(block 66) failed [ 152.159118][ T5070] FAT-fs (loop2): Directory bread(block 67) failed [ 152.165795][ T5070] FAT-fs (loop2): Directory bread(block 68) failed [ 152.172409][ T5070] FAT-fs (loop2): Directory bread(block 69) failed [ 152.179031][ T5070] FAT-fs (loop2): Directory bread(block 70) failed [ 152.185735][ T5070] FAT-fs (loop2): Directory bread(block 71) failed [ 152.192518][ T5070] FAT-fs (loop2): Directory bread(block 72) failed [ 152.199093][ T5070] FAT-fs (loop2): Directory bread(block 73) failed [ 152.441840][ T5077] loop4: detected capacity change from 0 to 512 [ 152.526378][ T5077] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.851985][ T5077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 153.871867][ T5077] System zones: 1-12 [ 153.952318][ T5077] EXT4-fs (loop4): 1 truncate cleaned up [ 153.981139][ T5077] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 154.006090][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.064238][ T5104] loop3: detected capacity change from 0 to 256 [ 156.511639][ T5104] FAT-fs (loop3): Directory bread(block 64) failed [ 156.518352][ T5104] FAT-fs (loop3): Directory bread(block 65) failed [ 156.525405][ T5104] FAT-fs (loop3): Directory bread(block 66) failed [ 156.532166][ T5104] FAT-fs (loop3): Directory bread(block 67) failed [ 156.539183][ T5104] FAT-fs (loop3): Directory bread(block 68) failed [ 156.545877][ T5104] FAT-fs (loop3): Directory bread(block 69) failed [ 156.552894][ T5104] FAT-fs (loop3): Directory bread(block 70) failed [ 156.559579][ T5104] FAT-fs (loop3): Directory bread(block 71) failed [ 156.566452][ T5104] FAT-fs (loop3): Directory bread(block 72) failed [ 156.573152][ T5104] FAT-fs (loop3): Directory bread(block 73) failed [ 157.133476][ T5118] Cannot find add_set index 0 as target [ 161.321690][ T5154] process 'syz.4.247' launched './file2' with NULL argv: empty string added [ 161.511054][ T5162] Cannot find add_set index 0 as target [ 161.542236][ T5161] device syzkaller0 entered promiscuous mode [ 161.814152][ T5169] loop4: detected capacity change from 0 to 512 [ 161.941143][ T5169] EXT4-fs (loop4): inline encryption not supported [ 162.761758][ T5169] EXT4-fs (loop4): Unrecognized mount option "resgid=0x00000000000000002uid>00000000000000000000" or missing value [ 163.309901][ T5190] Cannot find add_set index 0 as target [ 164.213437][ T5208] loop2: detected capacity change from 0 to 256 [ 164.657215][ T5208] FAT-fs (loop2): Directory bread(block 64) failed [ 164.706751][ T5211] Cannot find add_set index 0 as target [ 164.716245][ T5208] FAT-fs (loop2): Directory bread(block 65) failed [ 164.754225][ T5208] FAT-fs (loop2): Directory bread(block 66) failed [ 164.830962][ T5208] FAT-fs (loop2): Directory bread(block 67) failed [ 164.837709][ T5208] FAT-fs (loop2): Directory bread(block 68) failed [ 164.912744][ T5208] FAT-fs (loop2): Directory bread(block 69) failed [ 164.919412][ T5208] FAT-fs (loop2): Directory bread(block 70) failed [ 164.978964][ T5208] FAT-fs (loop2): Directory bread(block 71) failed [ 165.181761][ T5208] FAT-fs (loop2): Directory bread(block 72) failed [ 165.188480][ T5208] FAT-fs (loop2): Directory bread(block 73) failed [ 166.319182][ T5228] ================================================================== [ 166.327628][ T5228] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 166.336261][ T5228] Read of size 2 at addr ffff888024c051fb by task syz.1.269/5228 [ 166.344008][ T5228] [ 166.346350][ T5228] CPU: 0 PID: 5228 Comm: syz.1.269 Not tainted syzkaller #0 [ 166.353656][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.363740][ T5228] Call Trace: [ 166.367042][ T5228] [ 166.370007][ T5228] dump_stack_lvl+0x188/0x250 [ 166.374716][ T5228] ? show_regs_print_info+0x20/0x20 [ 166.379945][ T5228] ? load_image+0x400/0x400 [ 166.384469][ T5228] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 166.389953][ T5228] ? ieee80211_tx+0x460/0x460 [ 166.394657][ T5228] print_address_description+0x60/0x2d0 [ 166.400234][ T5228] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 166.406504][ T5228] kasan_report+0xdf/0x130 [ 166.410958][ T5228] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 166.417236][ T5228] ieee80211_monitor_select_queue+0x23a/0x240 [ 166.423332][ T5228] ? ieee80211_recalc_smps_work+0x20/0x20 [ 166.429079][ T5228] netdev_core_pick_tx+0x118/0x2e0 [ 166.434221][ T5228] __dev_queue_xmit+0x756/0x2f80 [ 166.439187][ T5228] ? __might_fault+0xb7/0x110 [ 166.443912][ T5228] ? dev_queue_xmit+0x20/0x20 [ 166.448632][ T5228] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 166.454226][ T5228] ? packet_cached_dev_get+0x270/0x270 [ 166.459716][ T5228] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 166.465736][ T5228] packet_sendmsg+0x3dba/0x5060 [ 166.470648][ T5228] ? __might_sleep+0xf0/0xf0 [ 166.475282][ T5228] ? aa_sk_perm+0x7dc/0x910 [ 166.479902][ T5228] ? packet_getsockopt+0x9a0/0x9a0 [ 166.485061][ T5228] ? aa_sock_msg_perm+0x94/0x150 [ 166.490029][ T5228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 166.495335][ T5228] ? security_socket_sendmsg+0x7c/0xa0 [ 166.500825][ T5228] ? packet_getsockopt+0x9a0/0x9a0 [ 166.505972][ T5228] ____sys_sendmsg+0x5b7/0x8f0 [ 166.510783][ T5228] ? __sys_sendmsg_sock+0x30/0x30 [ 166.515849][ T5228] ? import_iovec+0x6f/0xa0 [ 166.520391][ T5232] device syzkaller0 entered promiscuous mode [ 166.520388][ T5228] ___sys_sendmsg+0x236/0x2e0 [ 166.531082][ T5228] ? __sys_sendmsg+0x2a0/0x2a0 [ 166.535926][ T5228] __se_sys_sendmsg+0x1af/0x290 [ 166.540812][ T5228] ? __x64_sys_sendmsg+0x80/0x80 [ 166.545785][ T5228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 166.551818][ T5228] ? lockdep_hardirqs_on+0x94/0x140 [ 166.557056][ T5228] do_syscall_64+0x4c/0xa0 [ 166.561497][ T5228] ? clear_bhb_loop+0x30/0x80 [ 166.566198][ T5228] ? clear_bhb_loop+0x30/0x80 [ 166.570900][ T5228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.576837][ T5228] RIP: 0033:0x7fa8c8cbbe59 [ 166.581254][ T5228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.600884][ T5228] RSP: 002b:00007fa8c6f15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.609336][ T5228] RAX: ffffffffffffffda RBX: 00007fa8c8f34fa0 RCX: 00007fa8c8cbbe59 [ 166.617341][ T5228] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 166.625343][ T5228] RBP: 00007fa8c8d51d6f R08: 0000000000000000 R09: 0000000000000000 [ 166.633959][ T5228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.641952][ T5228] R13: 00007fa8c8f35038 R14: 00007fa8c8f34fa0 R15: 00007ffe5fbec918 [ 166.649972][ T5228] [ 166.653007][ T5228] [ 166.655341][ T5228] Allocated by task 4566: [ 166.659684][ T5228] __kasan_kmalloc+0xb5/0xf0 [ 166.664301][ T5228] __alloc_skb+0x22c/0x750 [ 166.668741][ T5228] __pskb_copy_fclone+0xa7/0x10a0 [ 166.673790][ T5228] hsr_create_tagged_frame+0x1eb/0xb30 [ 166.679270][ T5228] hsr_forward_skb+0xc1a/0x1700 [ 166.684139][ T5228] hsr_dev_xmit+0x1c2/0x2e0 [ 166.688660][ T5228] dev_hard_start_xmit+0x2a5/0x7e0 [ 166.693790][ T5228] __dev_queue_xmit+0x1a9b/0x2f80 [ 166.698850][ T5228] ip6_finish_output2+0x108c/0x1510 [ 166.704065][ T5228] ndisc_send_skb+0xc2a/0x1500 [ 166.708851][ T5228] addrconf_rs_timer+0x2d1/0x630 [ 166.713813][ T5228] call_timer_fn+0x17b/0x540 [ 166.718425][ T5228] __run_timers+0x53e/0x800 [ 166.722950][ T5228] run_timer_softirq+0x63/0xf0 [ 166.727729][ T5228] handle_softirqs+0x339/0x830 [ 166.732508][ T5228] __irq_exit_rcu+0x13b/0x230 [ 166.737668][ T5228] irq_exit_rcu+0x5/0x20 [ 166.741924][ T5228] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 166.747574][ T5228] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 166.753593][ T5228] [ 166.755929][ T5228] The buggy address belongs to the object at ffff888024c05000 [ 166.755929][ T5228] which belongs to the cache kmalloc-512 of size 512 [ 166.769996][ T5228] The buggy address is located 507 bytes inside of [ 166.769996][ T5228] 512-byte region [ffff888024c05000, ffff888024c05200) [ 166.783289][ T5228] The buggy address belongs to the page: [ 166.788933][ T5228] page:ffffea0000930100 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024c05000 pfn:0x24c04 [ 166.800407][ T5228] head:ffffea0000930100 order:2 compound_mapcount:0 compound_pincount:0 [ 166.808746][ T5228] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 166.816753][ T5228] raw: 00fff00000010200 ffffea000094b208 ffffea0001824008 ffff888016c41c80 [ 166.825440][ T5228] raw: ffff888024c05000 000000000010000f 00000001ffffffff 0000000000000000 [ 166.835194][ T5228] page dumped because: kasan: bad access detected [ 166.841627][ T5228] page_owner tracks the page as allocated [ 166.847360][ T5228] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4197, ts 57535344388, free_ts 55096760358 [ 166.866487][ T5228] get_page_from_freelist+0x1bbd/0x1ca0 [ 166.872064][ T5228] __alloc_pages+0x1ee/0x480 [ 166.876674][ T5228] new_slab+0xc0/0x4b0 [ 166.880760][ T5228] ___slab_alloc+0x80a/0xdd0 [ 166.885363][ T5228] __kmalloc_track_caller+0x1cb/0x330 [ 166.890872][ T5228] kmemdup+0x22/0x50 [ 166.894802][ T5228] ipv4_frags_init_net+0x10a/0x300 [ 166.899951][ T5228] ops_init+0x357/0x600 [ 166.904134][ T5228] setup_net+0x39e/0xa10 [ 166.908396][ T5228] copy_net_ns+0x348/0x5b0 [ 166.912829][ T5228] create_new_namespaces+0x3d3/0x6f0 [ 166.918133][ T5228] unshare_nsproxy_namespaces+0x116/0x160 [ 166.923874][ T5228] ksys_unshare+0x503/0x8c0 [ 166.928402][ T5228] __x64_sys_unshare+0x34/0x40 [ 166.933188][ T5228] do_syscall_64+0x4c/0xa0 [ 166.937618][ T5228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.943513][ T5228] page last free stack trace: [ 166.948334][ T5228] free_unref_page_prepare+0x637/0x6c0 [ 166.953873][ T5228] free_unref_page+0x8f/0x2a0 [ 166.958561][ T5228] __vunmap+0x8b9/0xa50 [ 166.962743][ T5228] kcov_mmap+0x89/0x120 [ 166.966948][ T5228] mmap_file+0x5d/0xb0 [ 166.971051][ T5228] mmap_region+0xf88/0x1650 [ 166.975579][ T5228] do_mmap+0x819/0xe90 [ 166.979649][ T5228] vm_mmap_pgoff+0x1c1/0x2d0 [ 166.984244][ T5228] ksys_mmap_pgoff+0x54b/0x790 [ 166.989024][ T5228] do_syscall_64+0x4c/0xa0 [ 166.993431][ T5228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.999320][ T5228] [ 167.001664][ T5228] Memory state around the buggy address: [ 167.007314][ T5228] ffff888024c05080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.015378][ T5228] ffff888024c05100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.023629][ T5228] >ffff888024c05180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.031719][ T5228] ^ [ 167.039718][ T5228] ffff888024c05200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.047779][ T5228] ffff888024c05280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.055835][ T5228] ================================================================== [ 167.063908][ T5228] Disabling lock debugging due to kernel taint [ 167.070219][ T5228] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.077424][ T5228] CPU: 0 PID: 5228 Comm: syz.1.269 Tainted: G B syzkaller #0 [ 167.086118][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.096191][ T5228] Call Trace: [ 167.099489][ T5228] [ 167.102432][ T5228] dump_stack_lvl+0x188/0x250 [ 167.107129][ T5228] ? show_regs_print_info+0x20/0x20 [ 167.112348][ T5228] ? load_image+0x400/0x400 [ 167.116878][ T5228] panic+0x2e5/0x810 [ 167.120797][ T5228] ? bpf_jit_dump+0xd0/0xd0 [ 167.125320][ T5228] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 167.131244][ T5228] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.137156][ T5228] ? _raw_spin_unlock+0x40/0x40 [ 167.142022][ T5228] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 167.148291][ T5228] check_panic_on_warn+0x80/0xa0 [ 167.153234][ T5228] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 167.159474][ T5228] end_report+0x6d/0xf0 [ 167.163627][ T5228] kasan_report+0x102/0x130 [ 167.168134][ T5228] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 167.174389][ T5228] ieee80211_monitor_select_queue+0x23a/0x240 [ 167.180451][ T5228] ? ieee80211_recalc_smps_work+0x20/0x20 [ 167.186169][ T5228] netdev_core_pick_tx+0x118/0x2e0 [ 167.191274][ T5228] __dev_queue_xmit+0x756/0x2f80 [ 167.196247][ T5228] ? __might_fault+0xb7/0x110 [ 167.200941][ T5228] ? dev_queue_xmit+0x20/0x20 [ 167.205640][ T5228] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 167.211326][ T5228] ? packet_cached_dev_get+0x270/0x270 [ 167.216794][ T5228] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 167.222830][ T5228] packet_sendmsg+0x3dba/0x5060 [ 167.227725][ T5228] ? __might_sleep+0xf0/0xf0 [ 167.232347][ T5228] ? aa_sk_perm+0x7dc/0x910 [ 167.236872][ T5228] ? packet_getsockopt+0x9a0/0x9a0 [ 167.242009][ T5228] ? aa_sock_msg_perm+0x94/0x150 [ 167.246973][ T5228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 167.252285][ T5228] ? security_socket_sendmsg+0x7c/0xa0 [ 167.257774][ T5228] ? packet_getsockopt+0x9a0/0x9a0 [ 167.262912][ T5228] ____sys_sendmsg+0x5b7/0x8f0 [ 167.267705][ T5228] ? __sys_sendmsg_sock+0x30/0x30 [ 167.272760][ T5228] ? import_iovec+0x6f/0xa0 [ 167.277296][ T5228] ___sys_sendmsg+0x236/0x2e0 [ 167.282008][ T5228] ? __sys_sendmsg+0x2a0/0x2a0 [ 167.286818][ T5228] __se_sys_sendmsg+0x1af/0x290 [ 167.291663][ T5228] ? __x64_sys_sendmsg+0x80/0x80 [ 167.296598][ T5228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 167.302579][ T5228] ? lockdep_hardirqs_on+0x94/0x140 [ 167.307801][ T5228] do_syscall_64+0x4c/0xa0 [ 167.312208][ T5228] ? clear_bhb_loop+0x30/0x80 [ 167.316876][ T5228] ? clear_bhb_loop+0x30/0x80 [ 167.321551][ T5228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.327459][ T5228] RIP: 0033:0x7fa8c8cbbe59 [ 167.331879][ T5228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.351500][ T5228] RSP: 002b:00007fa8c6f15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.359916][ T5228] RAX: ffffffffffffffda RBX: 00007fa8c8f34fa0 RCX: 00007fa8c8cbbe59 [ 167.367881][ T5228] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 167.375849][ T5228] RBP: 00007fa8c8d51d6f R08: 0000000000000000 R09: 0000000000000000 [ 167.383830][ T5228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.391810][ T5228] R13: 00007fa8c8f35038 R14: 00007fa8c8f34fa0 R15: 00007ffe5fbec918 [ 167.399849][ T5228] [ 167.402965][ T5228] Kernel Offset: disabled [ 167.407288][ T5228] Rebooting in 86400 seconds..