last executing test programs: 13.876715355s ago: executing program 0 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 13.733449707s ago: executing program 0 (id=417): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) 12.651742045s ago: executing program 0 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) 12.413422935s ago: executing program 0 (id=425): setregid(0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) socket(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) 7.732335608s ago: executing program 0 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0xa}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x8d0) 7.471292699s ago: executing program 2 (id=458): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c2a, 0x8, @local, 0x9}, 0x74) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.019188416s ago: executing program 2 (id=460): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) 5.806705105s ago: executing program 2 (id=464): setregid(0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) socket(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) 4.685474457s ago: executing program 4 (id=467): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000000380)="11a686", 0x3}], 0x2}}], 0x1, 0x0) 4.564521497s ago: executing program 4 (id=469): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001200)={{0x2, 0x200, @broadcast}, {0x1, @random="253e00315db9"}, 0xca, {0x2, 0x4e24, @multicast2}, 'veth0_to_bridge\x00'}) 4.425901968s ago: executing program 4 (id=472): socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r3, r4, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 4.181677518s ago: executing program 3 (id=476): unshare(0x400) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 3.609314935s ago: executing program 3 (id=477): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98549c4e16001d8cb60000000000000000000000120003006269746d61703a69702c6d61630000004c00078008000a400000002008001740000000000800124000000401080013400000000e080013400000010108001340000000071800018014000240fc0100000000000000000000000000011400078005001500fe000000080011400000009c050005000a00000005000100060000008fcc010f7b0e9d8bf1cc340ee6776f57e4e62aa8a665526de4b92e0c02a6b50b5b18ce65bad98be37dc7d9bff69fab7ce85ebb8c5b276fefac6769d15be591a2dd0d4afb06693e8ca7a39008321786d7cca3deb558148f001b02de"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4004804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc8a5}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1}, 0x48002) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00'}, 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x7c, &(0x7f00000002c0)="010000000980ffff", 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl812\x00', [0x2f00, 0x5, 0xd09a, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x0, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x5, 0x70f]}) 3.465532057s ago: executing program 4 (id=478): r0 = socket(0x2a, 0x2, 0xfffffffc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x80, 0x0, 0x53, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2={0xff, 0x5}, 0x700, 0x0, 0x27, 0xfffffffd}}) 3.073563379s ago: executing program 4 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57) 2.499520095s ago: executing program 0 (id=481): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x67) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) vmsplice(r1, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)="015a3c52eb64d54e06f9eea919637b3e88b9ebd0f3009f8d8b4dcee4206375efba00cf25b23693f9700a1984", 0x2c}, {&(0x7f00000003c0)="b89cfb0c51b202735f37413c36fbdac3c3bfb01cdec6ce4f07ce10d9bf71b4acc66e25f8495e367866c50997bfc0667d2f0ebd1c042ef7c9d54d774c74ea1411339fa70258fd85ca9d497bb66adc9240d791c3a51bb70fda873e0639f104c098081bd92590afe839200a71befc4706ab26621af90758cb4a286d49adadf1ef64dfb3fe5eb97e50ec20fb61604a72c568a3d550b716a3be", 0x97}, {0x0}], 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r4, 0x0, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.269134545s ago: executing program 3 (id=482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.137474635s ago: executing program 4 (id=483): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 2.08445744s ago: executing program 3 (id=484): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/248, 0xf8}], 0x2, 0xe9, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff05, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f00000003c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xff8, &(0x7f00000014c0)=""/4088, 0x0, 0xc}, 0x94) 2.052154352s ago: executing program 1 (id=485): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000005240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005180)={0x14, 0x0, 0x109, 0x0, 0x25dfdbfd}, 0x14}}, 0x84) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.829491351s ago: executing program 1 (id=486): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2c000891, 0x0, 0x0) 1.749346317s ago: executing program 1 (id=487): syz_init_net_socket$ax25(0x3, 0x2, 0xcd) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e63200944d4ecee2741a09daf3650edb6a8dca6dc705873b78767c0e942a766c8be2bf425eeba3c277f09332f84fe9f24272059625703661763ed5efd08af27a1b6ccc3a7ae63ff339676e5caa6447e4a0575131495bc643681ca8e18b95bc7db66366c50cd89c9a59746da83dcced2526003b48e250bb7a20eabaf34e950fd1eeb6cce37de630e51a067e786dc3ecde5d2218962d33adde6734636adcf597b93be0cc3f307127d2b0df08a75d14f41ed41237db5e7b10fdacd56231cd781566b26080a06edbd7af51e6310233f0cea9aea8fe2c08a94cdc1ae11c6bef6f0fb5d4155567b47db0c4fc61940d157fc5a1df14ff33bd638b56b200b032cd99504751cb6c29d8252e6ebd0c1ac4c3df73d335aaf060f54d6a4f1c225eaca5e3f313a1d29f940d7a9fcaa040d7cab55550954a3c4d8bd772890fff6eadf3de96a396758e0a3d21cba8f2b1bbbc2ce9dbc8818bb3ca8967fc89e130ef4409db59a858f81b29c9019c3954754777af852162d61ff916ad98d6ee6ab4c0a5d25339e7923c1db2386df6596a5059ffb169fa9991d82573587fa4edd83649ece1a1976755b6d622e75ec6b342df6b30c8ea280daacfd1cfa82909f295ad96130d439abf3ebf9f48e8b138b89ea93c751c5c416e727c49c764559ca5dba38a894b056e3c9569f20bd56c638eb74429f5a89fdf1b3d3bd7e38993b0a39446ece8359a57894e28136fc0305e43bfa4adb63c9d85951207eb506bac375a3e203eed305fcd1cc6984f4dc67dc9e50391e4a01effe62fce188da0eead8dabebe5a3e74c7223c240bc0443b3e4c53d677bbccc58a7dfbb0b69dac81cf9ec689f1762a0ba768d73aeb38b4718d735defdfc3ac9376eea3412e5c388f1cf89d7b1caf2550cdafb8deeb8df3b75993b98665b47f29e213c2b2a0541b4d7a8a458cfa92548d03c5b74b5fda560ee3fbf972640a5", 0x44d}], 0x1}}], 0x1, 0x400c0) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.724627149s ago: executing program 2 (id=488): socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) dup3(r3, r4, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.34946714s ago: executing program 1 (id=489): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) 1.143409767s ago: executing program 3 (id=490): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0xfffe, 0x7}, 0x8) 697.001393ms ago: executing program 2 (id=491): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 241.438781ms ago: executing program 1 (id=492): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0xff00) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 121.48561ms ago: executing program 2 (id=493): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98549c4e16001d8cb60000000000000000000000120003006269746d61703a69702c6d61630000004c00078008000a400000002008001740000000000800124000000401080013400000000e080013400000010108001340000000071800018014000240fc0100000000000000000000000000011400078005001500fe000000080011400000009c050005000a00000005000100060000008fcc010f7b0e9d8bf1cc340ee6776f57e4e62aa8a665526de4b92e0c02a6b50b5b18ce65bad98be37dc7d9bff69fab7ce85ebb8c5b276fefac6769d15be591a2dd0d4afb06693e8ca7a39008321786d7cca3deb558148f001b02de"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4004804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc8a5}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1}, 0x48002) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00'}, 0x10) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x7c, &(0x7f00000002c0)="010000000980ffff", 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl812\x00', [0x2f00, 0x5, 0xd09a, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x0, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x5, 0x70f]}) 121.30696ms ago: executing program 1 (id=494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 0s ago: executing program 3 (id=495): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x44) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 65.445569][ T4171] cgroup: Unknown subsys name 'net' [ 65.574490][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.065679][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.608738][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 68.622704][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.646540][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 68.674991][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.767798][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.867624][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.875284][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.884390][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.903138][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.910658][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.919106][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.926880][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.934092][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.942632][ T4195] device bridge_slave_0 entered promiscuous mode [ 68.951409][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.958878][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.966878][ T4195] device bridge_slave_1 entered promiscuous mode [ 68.975150][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.982676][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.990790][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.998256][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.005367][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.013731][ T4182] device bridge_slave_0 entered promiscuous mode [ 69.025030][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.032309][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.040546][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.070772][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.078326][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.086465][ T4182] device bridge_slave_1 entered promiscuous mode [ 69.140604][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.153286][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.167138][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.196315][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.208245][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.219505][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.230874][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.241207][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.248690][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.257120][ T4189] device bridge_slave_0 entered promiscuous mode [ 69.292810][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.303060][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.310589][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.319108][ T4189] device bridge_slave_1 entered promiscuous mode [ 69.366509][ T4183] team0: Port device team_slave_0 added [ 69.375077][ T4195] team0: Port device team_slave_0 added [ 69.383558][ T4184] team0: Port device team_slave_0 added [ 69.406640][ T4183] team0: Port device team_slave_1 added [ 69.415077][ T4195] team0: Port device team_slave_1 added [ 69.423323][ T4184] team0: Port device team_slave_1 added [ 69.431909][ T4182] team0: Port device team_slave_0 added [ 69.440129][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.478886][ T4182] team0: Port device team_slave_1 added [ 69.486237][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.534258][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.541314][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.567916][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.580615][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.587582][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.613619][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.625250][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.632725][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.659924][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.693721][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.701016][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.727796][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.739673][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.746755][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.773453][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.785150][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.792339][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.820661][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.837108][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.844662][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.871181][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.885195][ T4189] team0: Port device team_slave_0 added [ 69.901698][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.908805][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.935297][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.948482][ T4189] team0: Port device team_slave_1 added [ 70.036694][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.043945][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.070639][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.085512][ T4182] device hsr_slave_0 entered promiscuous mode [ 70.092653][ T4182] device hsr_slave_1 entered promiscuous mode [ 70.102577][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.109691][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.116302][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.124468][ T4183] Cannot create hsr debugfs directory [ 70.133775][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.140789][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.147746][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.155572][ T4184] Cannot create hsr debugfs directory [ 70.164253][ T4195] device hsr_slave_0 entered promiscuous mode [ 70.171754][ T4195] device hsr_slave_1 entered promiscuous mode [ 70.178583][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.186233][ T4195] Cannot create hsr debugfs directory [ 70.192615][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.200608][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.200832][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 70.233463][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.234062][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 70.251038][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 70.278118][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.290723][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 70.400041][ T4189] device hsr_slave_0 entered promiscuous mode [ 70.407369][ T4189] device hsr_slave_1 entered promiscuous mode [ 70.414413][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.422327][ T4189] Cannot create hsr debugfs directory [ 70.682059][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.694744][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.705876][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.716764][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.758494][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.776243][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.804133][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.813878][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.876437][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.913631][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.927627][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.939101][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.023611][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.053775][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.063124][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.091338][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.102890][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.113854][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.126108][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.137558][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.147277][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.165570][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.211025][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.219072][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.227113][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.237047][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.250045][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.257449][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.266750][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.277221][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.286901][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.294155][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.302520][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.311391][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.320836][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.328006][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.337266][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.346442][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.355578][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.362728][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.371100][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.380381][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.389297][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.400360][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.402554][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.415013][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.426816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.446421][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.471410][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.483204][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.498819][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.507848][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.517449][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.526621][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.534803][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.556069][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.567698][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.578030][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.586049][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.596313][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.605313][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.614177][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.625163][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.633853][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.643146][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.659439][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.669257][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.677775][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.688480][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.697346][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.706462][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.715660][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.731668][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.760853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.770694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.779480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.788284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.796761][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.803893][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.815079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.824122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.832803][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.839925][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.849705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.858844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.868164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.923210][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.935337][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.951161][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.968972][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.977831][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.999750][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.012461][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.027269][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.036138][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.061578][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.157567][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.194658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.209121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.234321][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.251122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.264147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.279215][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 72.286133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.295184][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 72.302448][ T4173] Bluetooth: hci2: command 0x041b tx timeout [ 72.309680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.318763][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.325942][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.334341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.342453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.358443][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 72.367864][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.382179][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 72.391563][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.399587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.408408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.417504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.427811][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.434993][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.459574][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.484889][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.493963][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.504338][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.512582][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.521979][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.531974][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.562989][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.571604][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.580824][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.590588][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.598294][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.614345][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.630161][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.641489][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.651843][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.661333][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.670666][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.680080][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.689744][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.698899][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.707177][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.716614][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.727750][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.750244][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.766021][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.780006][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.789888][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.798528][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.807298][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.816756][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.823951][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.832199][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.841062][ T4182] device veth0_vlan entered promiscuous mode [ 72.864840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.875983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.887165][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.894339][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.913866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.943247][ T4182] device veth1_vlan entered promiscuous mode [ 72.971206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.981827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.991160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.001814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.010848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.024714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.032800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.041823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.050085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.059136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.071592][ T4184] device veth0_vlan entered promiscuous mode [ 73.096197][ T4184] device veth1_vlan entered promiscuous mode [ 73.135428][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.146455][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.156112][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.165728][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.174762][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.193136][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.202361][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.225339][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.238451][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.253688][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.263465][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.272882][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.283231][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.294988][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.304057][ T4195] device veth0_vlan entered promiscuous mode [ 73.331225][ T4182] device veth0_macvtap entered promiscuous mode [ 73.344158][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.353086][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.361762][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.370488][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.379170][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.394843][ T4184] device veth0_macvtap entered promiscuous mode [ 73.406925][ T4182] device veth1_macvtap entered promiscuous mode [ 73.418390][ T4195] device veth1_vlan entered promiscuous mode [ 73.431304][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.440532][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.449335][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.457670][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.466850][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.475748][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.488957][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.498794][ T4184] device veth1_macvtap entered promiscuous mode [ 73.523272][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.543577][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.552552][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.562695][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.573754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.581724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.592919][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.614153][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.625248][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.639603][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.650045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.659868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.670230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.679130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.687746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.696786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.708606][ T4195] device veth0_macvtap entered promiscuous mode [ 73.719936][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.729148][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.737873][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.747143][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.764058][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.774154][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.790666][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.818918][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.837785][ T4195] device veth1_macvtap entered promiscuous mode [ 73.855410][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.866098][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.881183][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.893199][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.902623][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.912014][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.925734][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.934719][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.944463][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.953499][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.031071][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.048749][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.086698][ T4183] device veth0_vlan entered promiscuous mode [ 74.099084][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.109927][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.120802][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.132785][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.144338][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.154250][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.162354][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.171515][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.180821][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.213654][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.231728][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.242057][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.252933][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.264518][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.290726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.300645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.312276][ T4183] device veth1_vlan entered promiscuous mode [ 74.344717][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.354227][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.359169][ T4173] Bluetooth: hci2: command 0x040f tx timeout [ 74.366314][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.376837][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 74.379260][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.384465][ T4173] Bluetooth: hci1: command 0x040f tx timeout [ 74.410666][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.420438][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.429979][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.438410][ T4244] Bluetooth: hci4: command 0x040f tx timeout [ 74.444596][ T4244] Bluetooth: hci3: command 0x040f tx timeout [ 74.447519][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.486022][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.486297][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.495759][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.510329][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.519399][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.527366][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.535714][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.551739][ T4189] device veth0_vlan entered promiscuous mode [ 74.574916][ T457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.583657][ T457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.599671][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.611746][ T4189] device veth1_vlan entered promiscuous mode [ 74.644537][ T4183] device veth0_macvtap entered promiscuous mode [ 74.663781][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.672551][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.681638][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.690641][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.720787][ T4183] device veth1_macvtap entered promiscuous mode [ 74.741294][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.749666][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.757710][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.766842][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.793318][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.795828][ T4189] device veth0_macvtap entered promiscuous mode [ 74.813158][ T457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.826231][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.831170][ T457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.850105][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.861848][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.872081][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.882835][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.893161][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.909431][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.922292][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.936830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.947153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.955856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.964619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.974145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.988788][ T4189] device veth1_macvtap entered promiscuous mode [ 74.996800][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.018103][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.028528][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.039521][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.051836][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.062616][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.075875][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.085689][ T457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.123064][ T457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.141249][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.150949][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.164780][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.179123][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.187915][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.198274][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.208614][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.221493][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.233105][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.244158][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.255181][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.265445][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.276594][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.287441][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.298311][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.310548][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.345874][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.355308][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.367037][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.383250][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.393760][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.412173][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.425127][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.441775][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.462540][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.475248][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.498314][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.511881][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.520644][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.531834][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.537477][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.557426][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.572921][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.575098][ T4297] loop0: detected capacity change from 0 to 1024 [ 75.584616][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.598569][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.636520][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.692967][ T4297] EXT4-fs (loop0): Ignoring removed bh option [ 75.708976][ T4297] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 75.752580][ T4297] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.1: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.777350][ T4297] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 75.830834][ T457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.834359][ T4297] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.1: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.854435][ T457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.863527][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.875400][ T4297] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 75.933956][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.936501][ T4297] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.1: Failed to acquire dquot type 0 [ 75.983058][ T4297] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 75.996638][ T4297] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.1: mark_inode_dirty error [ 76.013166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.035769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.044311][ T4297] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 76.075160][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.104553][ T4297] EXT4-fs (loop0): 1 orphan inode deleted [ 76.115736][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.124702][ T4269] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.152387][ T4297] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,bsddf,,errors=continue. Quota mode: writeback. [ 76.184062][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.191559][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.211482][ T4269] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 76.220763][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.229133][ T4269] EXT4-fs error (device loop0): ext4_release_dquot:6243: comm kworker/u4:5: Failed to release dquot type 0 [ 76.230271][ T4311] bridge: RTM_NEWNEIGH with invalid ether address [ 76.267113][ T4297] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz.0.1: Invalid inode table block 1 in block_group 0 [ 76.288744][ T4314] bridge: RTM_NEWNEIGH with invalid ether address [ 76.308313][ T4297] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 76.314412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.353901][ T4297] EXT4-fs error (device loop0): ext4_quota_off:6513: inode #3: comm syz.0.1: mark_inode_dirty error [ 76.439610][ T4173] Bluetooth: hci1: command 0x0419 tx timeout [ 76.462029][ T4173] Bluetooth: hci0: command 0x0419 tx timeout [ 76.485499][ T4173] Bluetooth: hci2: command 0x0419 tx timeout [ 76.518601][ T4173] Bluetooth: hci3: command 0x0419 tx timeout [ 76.528740][ T4173] Bluetooth: hci4: command 0x0419 tx timeout [ 76.675590][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.053073][ T4334] device syzkaller0 entered promiscuous mode [ 77.088671][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 77.586316][ T4353] tipc: Started in network mode [ 77.618795][ T4353] tipc: Node identity eaaa801ba9e6, cluster identity 4711 [ 77.632917][ T4353] tipc: Enabled bearer , priority 0 [ 77.647692][ T4360] device syzkaller0 entered promiscuous mode [ 77.691907][ T4353] tipc: Resetting bearer [ 77.724866][ T4352] tipc: Resetting bearer [ 77.740806][ T4352] tipc: Disabling bearer [ 77.926500][ T4369] tipc: Started in network mode [ 77.932364][ T4369] tipc: Node identity 42438c5ed553, cluster identity 4711 [ 77.940443][ T4369] tipc: Enabled bearer , priority 0 [ 77.949218][ T4369] device syzkaller0 entered promiscuous mode [ 77.987204][ T4369] tipc: Resetting bearer [ 78.017564][ T4368] tipc: Resetting bearer [ 78.027755][ T4368] tipc: Disabling bearer [ 78.104514][ T4371] loop1: detected capacity change from 0 to 1024 [ 78.148462][ T1110] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.158452][ T4371] ======================================================= [ 78.158452][ T4371] WARNING: The mand mount option has been deprecated and [ 78.158452][ T4371] and is ignored by this kernel. Remove the mand [ 78.158452][ T4371] option from the mount to silence this warning. [ 78.158452][ T4371] ======================================================= [ 78.196245][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.231024][ T4373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.272858][ T4371] EXT4-fs (loop1): Ignoring removed nobh option [ 78.310634][ T4371] EXT4-fs (loop1): inline encryption not supported [ 78.319295][ T4377] Zero length message leads to an empty skb [ 78.520423][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,jqfmt=vfsold,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,init_itable,,errors=continue. Quota mode: writeback. [ 78.688072][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 78.728365][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.838438][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.918465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.928811][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.938043][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.947287][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.956512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 78.965606][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 78.974709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 78.983823][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.304454][ T1110] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 79.314324][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.323078][ T13] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.343058][ T1110] usb 4-1: config 0 descriptor?? [ 79.478253][ T4387] tipc: Enabling of bearer rejected, failed to enable media [ 79.478843][ T4173] Bluetooth: hci4: command 0x0405 tx timeout [ 79.522165][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.588027][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.607462][ T13] usb 1-1: Product: syz [ 79.622699][ T1110] kaweth 4-1:0.0: Firmware present in device. [ 79.638007][ T13] usb 1-1: Manufacturer: syz [ 79.642671][ T13] usb 1-1: SerialNumber: syz [ 79.660420][ T4371] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.27: Allocating blocks 497-513 which overlap fs metadata [ 79.683773][ T4371] EXT4-fs (loop1): pa ffff8880762669a0: logic 256, phys. 385, len 8 [ 79.692755][ T4371] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 79.824398][ T1110] kaweth 4-1:0.0: Statistics collection: 0 [ 79.838172][ T1110] kaweth 4-1:0.0: Multicast filter limit: 0 [ 79.844124][ T1110] kaweth 4-1:0.0: MTU: 0 [ 79.883417][ T1110] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 79.899033][ T4393] loop4: detected capacity change from 0 to 2048 [ 80.023021][ T26] audit: type=1326 audit(1755278129.044:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db10abe9 code=0x7ffc0000 [ 80.081271][ T4393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.122933][ T26] audit: type=1326 audit(1755278129.084:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db10abe9 code=0x7ffc0000 [ 80.201232][ T26] audit: type=1326 audit(1755278129.124:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb7db10abe9 code=0x7ffc0000 [ 80.264325][ T26] audit: type=1326 audit(1755278129.124:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db10abe9 code=0x7ffc0000 [ 80.385118][ T26] audit: type=1326 audit(1755278129.124:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db10abe9 code=0x7ffc0000 [ 80.417291][ T4405] loop1: detected capacity change from 0 to 1024 [ 80.449087][ T26] audit: type=1326 audit(1755278129.124:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7db10abe9 code=0x7ffc0000 [ 80.472327][ T26] audit: type=1326 audit(1755278129.124:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4398 comm="syz.2.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7db10abe9 code=0x7ffc0000 [ 80.507811][ T1110] kaweth 4-1:0.0: kaweth interface created at eth1 [ 80.559577][ T4405] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.626065][ T4405] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.726168][ T4405] JBD2: no valid journal superblock found [ 80.774309][ T4405] EXT4-fs (loop1): error loading journal [ 80.812893][ T1110] usb 4-1: USB disconnect, device number 2 [ 80.861587][ T13] cdc_ncm 1-1:1.0: bind() failure [ 80.884275][ T13] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 80.899768][ T13] cdc_ncm 1-1:1.1: bind() failure [ 80.950356][ T13] usb 1-1: USB disconnect, device number 2 [ 81.722035][ T4418] [U] ù [ 81.903730][ T4405] loop1: detected capacity change from 0 to 1024 [ 82.012149][ T4405] EXT4-fs (loop1): Ignoring removed bh option [ 82.037685][ T4405] EXT4-fs (loop1): inline encryption not supported [ 82.060662][ T4428] tipc: Cannot configure node identity twice [ 82.155242][ T4405] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 82.223170][ T4405] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.37: lblock 2 mapped to illegal pblock 2 (length 1) [ 82.248885][ T4405] __quota_error: 46 callbacks suppressed [ 82.248901][ T4405] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 82.358117][ T4405] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.37: lblock 0 mapped to illegal pblock 48 (length 1) [ 82.393787][ T4449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.48'. [ 82.418134][ T4405] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 82.441386][ T4405] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.37: Failed to acquire dquot type 0 [ 82.478193][ T4405] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 82.530702][ T4405] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.37: mark_inode_dirty error [ 82.609591][ T4405] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 82.609702][ T4405] EXT4-fs (loop1): 1 orphan inode deleted [ 82.650772][ T4405] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 82.734782][ T4383] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.186027][ T4465] sp0: Synchronizing with TNC [ 83.520393][ T4383] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 83.677909][ T4460] [U] è` [ 83.924022][ T4383] EXT4-fs error (device loop1): ext4_release_dquot:6243: comm kworker/u4:8: Failed to release dquot type 0 [ 83.968685][ T4405] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.37: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.008531][ T4405] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 84.699737][ T4476] loop2: detected capacity change from 0 to 1024 [ 84.857572][ T4476] EXT4-fs (loop2): Ignoring removed bh option [ 84.898485][ T4476] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 85.002260][ T4476] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.53: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.061226][ T26] audit: type=1326 audit(1755278134.084:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa308051be9 code=0x7ffc0000 [ 85.109235][ T4476] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 85.164857][ T26] audit: type=1326 audit(1755278134.174:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa308051be9 code=0x7ffc0000 [ 85.190295][ T4493] loop0: detected capacity change from 0 to 2048 [ 85.224773][ T4476] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.53: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.265092][ T26] audit: type=1326 audit(1755278134.174:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa308051be9 code=0x7ffc0000 [ 85.301241][ T4493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.365982][ T26] audit: type=1326 audit(1755278134.174:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4486 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa308051be9 code=0x7ffc0000 [ 85.391390][ T4476] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 85.496002][ T4476] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.53: Failed to acquire dquot type 0 [ 85.584021][ T4476] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 85.654924][ T4504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.60'. [ 85.819716][ T4476] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.53: mark_inode_dirty error [ 85.933545][ T4476] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 85.967069][ T4517] tipc: Enabling of bearer rejected, failed to enable media [ 86.559303][ T4476] EXT4-fs (loop2): 1 orphan inode deleted [ 86.570300][ T4466] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.755714][ T4476] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,bsddf,,errors=continue. Quota mode: writeback. [ 86.762723][ T4466] EXT4-fs error (device loop2): ext4_release_dquot:6243: comm kworker/u4:13: Failed to release dquot type 0 [ 86.780580][ T1108] cfg80211: failed to load regulatory.db [ 86.884784][ T4508] vxcan1 speed is unknown, defaulting to 1000 [ 86.909477][ T4476] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.53: Invalid inode table block 1 in block_group 0 [ 86.937488][ T4508] vxcan1 speed is unknown, defaulting to 1000 [ 86.952613][ T4476] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 86.964500][ T4508] vxcan1 speed is unknown, defaulting to 1000 [ 87.103587][ T4476] EXT4-fs error (device loop2): ext4_quota_off:6513: inode #3: comm syz.2.53: mark_inode_dirty error [ 87.408304][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.588471][ T4532] loop3: detected capacity change from 0 to 1024 [ 87.680747][ T1108] vxcan1 speed is unknown, defaulting to 1000 [ 87.687345][ T4508] infiniband syz2: set active [ 87.699175][ T4532] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.738249][ T4508] infiniband syz2: added vxcan1 [ 87.748402][ T4532] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.773979][ T4532] JBD2: no valid journal superblock found [ 87.782416][ T4532] EXT4-fs (loop3): error loading journal [ 87.809865][ T4508] infiniband syz2: Couldn't open port 1 [ 87.915968][ T4537] sp0: Synchronizing with TNC [ 87.988509][ T1110] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.204151][ T1110] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.491616][ T4530] [U] è` [ 88.579091][ T4508] RDS/IB: syz2: added [ 88.583792][ T4508] smc: adding ib device syz2 with port count 1 [ 88.622765][ T4508] smc: ib device syz2 port 1 has pnetid [ 88.659200][ T4252] vxcan1 speed is unknown, defaulting to 1000 [ 88.686909][ T4508] vxcan1 speed is unknown, defaulting to 1000 [ 88.709513][ T1110] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.727737][ T4532] loop3: detected capacity change from 0 to 1024 [ 88.773759][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.783481][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 88.783496][ T26] audit: type=1326 audit(1755278137.804:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac008be9 code=0x7ffc0000 [ 88.794110][ T1110] usb 5-1: Product: syz [ 88.838100][ T4532] EXT4-fs (loop3): Ignoring removed bh option [ 88.844289][ T4532] EXT4-fs (loop3): inline encryption not supported [ 88.873933][ T26] audit: type=1326 audit(1755278137.814:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa2ac008be9 code=0x7ffc0000 [ 88.896392][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.896537][ T1110] usb 5-1: Manufacturer: syz [ 88.937691][ T26] audit: type=1326 audit(1755278137.814:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac008be9 code=0x7ffc0000 [ 88.960239][ T1110] usb 5-1: SerialNumber: syz [ 88.968200][ T4532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 89.040941][ T4532] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.68: lblock 2 mapped to illegal pblock 2 (length 1) [ 89.057419][ T4543] loop1: detected capacity change from 0 to 2048 [ 89.081469][ T4532] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 89.098416][ T4532] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.68: lblock 0 mapped to illegal pblock 48 (length 1) [ 89.113687][ T26] audit: type=1326 audit(1755278137.814:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ac008be9 code=0x7ffc0000 [ 89.136223][ T4532] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 89.166667][ T26] audit: type=1326 audit(1755278137.814:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac008be9 code=0x7ffc0000 [ 89.179820][ T4543] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.202071][ T4532] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.68: Failed to acquire dquot type 0 [ 89.247640][ T4532] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 89.260497][ T4508] vxcan1 speed is unknown, defaulting to 1000 [ 89.288390][ T4532] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.68: mark_inode_dirty error [ 89.288886][ T26] audit: type=1326 audit(1755278137.814:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ac008be9 code=0x7ffc0000 [ 89.351770][ T4532] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 89.379500][ T4532] EXT4-fs (loop3): 1 orphan inode deleted [ 89.395962][ T4532] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 89.408018][ T26] audit: type=1326 audit(1755278137.814:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ac008be9 code=0x7ffc0000 [ 89.455044][ T21] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 89.470257][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.513408][ T21] usb 3-1: config 0 descriptor?? [ 89.523424][ T4467] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.583549][ T26] audit: type=1326 audit(1755278137.814:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ac008be9 code=0x7ffc0000 [ 89.614322][ T4467] EXT4-fs error (device loop3): ext4_release_dquot:6243: comm kworker/u4:14: Failed to release dquot type 0 [ 89.628354][ T4532] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.68: lblock 0 mapped to illegal pblock 48 (length 1) [ 89.670259][ T4508] vxcan1 speed is unknown, defaulting to 1000 [ 89.823691][ T21] kaweth 3-1:0.0: Firmware present in device. [ 89.923774][ T4550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 90.024109][ T4508] vxcan1 speed is unknown, defaulting to 1000 [ 90.068213][ T21] kaweth 3-1:0.0: Statistics collection: 0 [ 90.079847][ T21] kaweth 3-1:0.0: Multicast filter limit: 0 [ 90.105912][ T21] kaweth 3-1:0.0: MTU: 0 [ 90.108230][ T1110] cdc_ncm 5-1:1.0: bind() failure [ 90.116810][ T21] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 90.146380][ T1110] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 90.174648][ T1110] cdc_ncm 5-1:1.1: bind() failure [ 90.406233][ T1110] usb 5-1: USB disconnect, device number 2 [ 91.195254][ T4508] vxcan1 speed is unknown, defaulting to 1000 [ 91.251591][ T4560] loop3: detected capacity change from 0 to 1024 [ 91.292987][ T4560] EXT4-fs (loop3): Ignoring removed nobh option [ 91.299588][ T21] kaweth 3-1:0.0: Error setting receive filter [ 91.305870][ T21] kaweth: probe of 3-1:0.0 failed with error -5 [ 91.358703][ T4560] EXT4-fs (loop3): inline encryption not supported [ 91.376783][ T21] usb 3-1: USB disconnect, device number 2 [ 91.577624][ T4560] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,jqfmt=vfsold,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,init_itable,,errors=continue. Quota mode: writeback. [ 91.915242][ T4560] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.76: Allocating blocks 497-513 which overlap fs metadata [ 92.002728][ T4560] EXT4-fs (loop3): pa ffff888074606c40: logic 256, phys. 385, len 8 [ 92.011113][ T4560] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 92.309771][ T4574] tipc: Started in network mode [ 92.314705][ T4574] tipc: Node identity 32e83f6d5591, cluster identity 4711 [ 92.466164][ T4574] tipc: Enabled bearer , priority 0 [ 92.570553][ T4578] device syzkaller0 entered promiscuous mode [ 92.626506][ T4580] sp0: Synchronizing with TNC [ 92.797081][ T4579] tipc: Resetting bearer [ 92.883171][ T4579] tipc: Disabling bearer [ 93.080474][ T4575] [U] è` [ 93.112385][ T4589] loop2: detected capacity change from 0 to 1024 [ 93.192616][ T4589] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.268056][ T4589] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 93.359339][ T4589] JBD2: no valid journal superblock found [ 93.387366][ T4589] EXT4-fs (loop2): error loading journal [ 93.734692][ T4589] loop2: detected capacity change from 0 to 1024 [ 93.849549][ T4589] EXT4-fs (loop2): Ignoring removed bh option [ 93.875175][ T4589] EXT4-fs (loop2): inline encryption not supported [ 93.946199][ T4589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 93.985744][ T4589] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.83: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.154327][ T4589] __quota_error: 10 callbacks suppressed [ 94.154346][ T4589] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 94.209274][ T4589] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.83: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.334103][ T4589] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 94.569622][ T4589] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.83: Failed to acquire dquot type 0 [ 94.857159][ T4589] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 95.115587][ T4589] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.83: mark_inode_dirty error [ 95.208258][ T4589] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 95.251011][ T4589] EXT4-fs (loop2): 1 orphan inode deleted [ 95.256798][ T4589] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 95.276226][ T4382] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.307108][ T4382] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 95.323798][ T4382] EXT4-fs error (device loop2): ext4_release_dquot:6243: comm kworker/u4:7: Failed to release dquot type 0 [ 95.716709][ T4589] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.83: lblock 0 mapped to illegal pblock 48 (length 1) [ 95.903969][ T4589] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 96.544737][ T4620] tipc: Enabling of bearer rejected, failed to enable media [ 96.623897][ T4617] rdma_rxe: rxe_register_device failed with error -23 [ 96.636206][ T4624] tipc: Enabled bearer , priority 0 [ 96.664793][ T4624] device syzkaller0 entered promiscuous mode [ 96.673192][ T4617] rdma_rxe: failed to add vxcan1 [ 96.939418][ T4626] tipc: Resetting bearer [ 97.039278][ T4633] sp0: Synchronizing with TNC [ 97.089777][ T4623] tipc: Resetting bearer [ 97.500264][ T4623] tipc: Disabling bearer [ 97.648589][ T4628] [U] è` [ 98.890909][ T4661] ptrace attach of "./syz-executor exec"[4662] was attempted by "./syz-executor exec"[4661] [ 100.036392][ T4685] sp0: Synchronizing with TNC [ 100.612455][ T4671] [U] è` [ 102.924854][ T4719] sp0: Synchronizing with TNC [ 103.447561][ T4718] [U] è` [ 105.670650][ T4791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.166'. [ 105.700967][ T4791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.166'. [ 105.788410][ T4799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.166'. [ 106.031520][ T4808] sp0: Synchronizing with TNC [ 106.628625][ T4796] [U] è` [ 108.059998][ T4816] device syzkaller0 entered promiscuous mode [ 108.113966][ T4842] syz.2.182[4842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.114072][ T4842] syz.2.182[4842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.482889][ T4867] sp0: Synchronizing with TNC [ 110.171534][ T4850] [U] è` [ 110.408535][ T4860] sched: RT throttling activated [ 115.953066][ T4952] sp0: Synchronizing with TNC [ 116.532985][ T4938] [U] è` [ 117.575779][ T26] audit: type=1326 audit(1755278166.594:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4963 comm="syz.3.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48fc456be9 code=0xffff0000 [ 117.895122][ T4971] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.697411][ T4975] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 118.763774][ T4975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.850668][ T4977] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 119.001239][ T4975] bond1: (slave vlan2): making interface the new active one [ 119.081614][ T4975] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 119.124567][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 119.144772][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 119.268610][ T4988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.235'. [ 119.330847][ T4988] device bond0 entered promiscuous mode [ 119.348100][ T4988] device bond_slave_0 entered promiscuous mode [ 119.378215][ T4988] device bond_slave_1 entered promiscuous mode [ 119.408054][ T4988] device bond0 left promiscuous mode [ 119.416403][ T4990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.236'. [ 119.418117][ T4988] device bond_slave_0 left promiscuous mode [ 119.478268][ T4988] device bond_slave_1 left promiscuous mode [ 120.028532][ T4998] sp0: Synchronizing with TNC [ 120.604018][ T4991] [U] è` [ 120.814340][ T5006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.419818][ T5030] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.463528][ T5036] netlink: 168 bytes leftover after parsing attributes in process `syz.3.247'. [ 122.512888][ T5036] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.648210][ T5039] netlink: 'syz.2.253': attribute type 3 has an invalid length. [ 123.267079][ T5050] sp0: Synchronizing with TNC [ 123.863014][ T5043] [U] è` [ 126.097335][ T5084] sp0: Synchronizing with TNC [ 126.343608][ T5074] [U] è` [ 128.270584][ T5115] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.412816][ T5115] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 128.537001][ T5115] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 128.877517][ T5130] sp0: Synchronizing with TNC [ 129.476812][ T5127] [U] è` [ 129.794533][ T5139] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.922449][ T5147] netlink: 64 bytes leftover after parsing attributes in process `syz.0.294'. [ 131.342435][ T5163] netlink: 'syz.0.301': attribute type 3 has an invalid length. [ 132.551735][ T5177] sp0: Synchronizing with TNC [ 132.666951][ T5168] [U] è` [ 132.842973][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.849577][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.867494][ T5185] netlink: 192 bytes leftover after parsing attributes in process `syz.2.307'. [ 132.907577][ T5185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 133.185550][ T5188] netlink: 'syz.2.307': attribute type 2 has an invalid length. [ 133.274379][ T5184] vxcan1 speed is unknown, defaulting to 1000 [ 133.902702][ T5196] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.311'. [ 134.157566][ T5191] vxcan1 speed is unknown, defaulting to 1000 [ 134.214640][ T5207] tipc: Enabled bearer , priority 0 [ 134.252035][ T5207] device syzkaller0 entered promiscuous mode [ 134.300569][ T5207] tipc: Resetting bearer [ 134.313245][ T5206] tipc: Resetting bearer [ 134.338489][ T5206] tipc: Disabling bearer [ 134.500147][ T5209] vxcan1 speed is unknown, defaulting to 1000 [ 136.595339][ T5246] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.359111][ T5261] sp0: Synchronizing with TNC [ 137.961547][ T5256] [U] è` [ 139.654055][ T5285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 140.706986][ T5295] sp0: Synchronizing with TNC [ 141.294748][ T5292] [U] è` [ 141.718080][ T5299] netlink: 'syz.3.347': attribute type 13 has an invalid length. [ 143.615857][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.624867][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.232825][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.279205][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.463639][ T5299] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.473415][ T5299] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.483610][ T5299] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.493105][ T5299] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.778148][ T5299] syz.3.347 (5299) used greatest stack depth: 19712 bytes left [ 144.867300][ T5334] netlink: 64 bytes leftover after parsing attributes in process `syz.3.357'. [ 145.182472][ T5345] sp0: Synchronizing with TNC [ 145.754058][ T5335] [U] è` [ 146.364876][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 146.402985][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 146.733773][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 147.055978][ T5370] x_tables: duplicate underflow at hook 1 [ 147.611180][ T5381] sp0: Synchronizing with TNC [ 148.212690][ T5376] [U] è` [ 150.118750][ T5427] sp0: Synchronizing with TNC [ 150.737705][ T5418] [U] è` [ 151.005197][ T5438] netlink: 'syz.1.387': attribute type 16 has an invalid length. [ 151.069237][ T5438] netlink: 'syz.1.387': attribute type 17 has an invalid length. [ 151.818925][ T5438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.979591][ T5452] device veth3 entered promiscuous mode [ 152.431057][ T5469] sp0: Synchronizing with TNC [ 153.126744][ T5457] [U] è` [ 154.747834][ T5508] sp0: Synchronizing with TNC [ 155.353328][ T5498] [U] è` [ 155.844950][ T5519] device syz_tun entered promiscuous mode [ 155.887313][ T5519] device syz_tun left promiscuous mode [ 157.083722][ T5550] sp0: Synchronizing with TNC [ 157.681643][ T5544] [U] è` [ 158.305439][ T5557] vxcan1 speed is unknown, defaulting to 1000 [ 158.535164][ T5569] netlink: 27 bytes leftover after parsing attributes in process `syz.1.443'. [ 160.479539][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 160.488766][ T5603] rdma_rxe: ignoring netdev event = 10 for vxcan1 [ 160.510462][ T5603] infiniband syz2: set down [ 160.532027][ T4281] infiniband syz2: ib_query_port failed (-19) [ 160.567575][ T4307] smc: removing ib device syz2 [ 160.676021][ T5610] tipc: Enabled bearer , priority 0 [ 160.734427][ T5604] device pim6reg1 entered promiscuous mode [ 160.749522][ T5615] device syzkaller0 entered promiscuous mode [ 160.856476][ T5610] tipc: Resetting bearer [ 161.370117][ T5605] tipc: Resetting bearer [ 161.414006][ T5605] tipc: Disabling bearer [ 161.593676][ T5627] sp0: Synchronizing with TNC [ 162.178922][ T5622] [U] è` [ 163.560994][ T5651] netlink: 'syz.1.468': attribute type 2 has an invalid length. [ 163.598027][ T5651] netlink: 'syz.1.468': attribute type 2 has an invalid length. [ 164.246095][ T5672] sp0: Synchronizing with TNC [ 164.827872][ T5665] [U] è` [ 165.714515][ T5684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 167.168859][ T5732] sp0: Synchronizing with TNC [ 167.761046][ T5727] [U] è` [ 167.985808][ T5742] netlink: 'syz.1.492': attribute type 12 has an invalid length. [ 168.104430][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 168.226331][ T5744] ================================================================== [ 168.235071][ T5744] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 168.242381][ T5744] Read of size 8 at addr ffff888024cfd808 by task syz.1.494/5744 [ 168.250131][ T5744] [ 168.252491][ T5744] CPU: 0 PID: 5744 Comm: syz.1.494 Not tainted 5.15.189-syzkaller #0 [ 168.260761][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.271065][ T5744] Call Trace: [ 168.274391][ T5744] [ 168.277344][ T5744] dump_stack_lvl+0x168/0x230 [ 168.282074][ T5744] ? show_regs_print_info+0x20/0x20 [ 168.287305][ T5744] ? _printk+0xcc/0x110 [ 168.291489][ T5744] ? ax25_release+0x5ca/0x870 [ 168.296213][ T5744] ? load_image+0x3b0/0x3b0 [ 168.300762][ T5744] print_address_description+0x60/0x2d0 [ 168.306761][ T5744] ? ax25_release+0x5ca/0x870 [ 168.311475][ T5744] kasan_report+0xdf/0x130 [ 168.315920][ T5744] ? ax25_release+0x5ca/0x870 [ 168.320637][ T5744] ax25_release+0x5ca/0x870 [ 168.325345][ T5744] sock_close+0xd5/0x240 [ 168.329828][ T5744] ? sock_mmap+0x90/0x90 [ 168.334097][ T5744] __fput+0x234/0x930 [ 168.338118][ T5744] task_work_run+0x125/0x1a0 [ 168.342759][ T5744] exit_to_user_mode_loop+0x10f/0x130 [ 168.348199][ T5744] exit_to_user_mode_prepare+0xb1/0x140 [ 168.353790][ T5744] syscall_exit_to_user_mode+0x16/0x40 [ 168.359413][ T5744] do_syscall_64+0x58/0xa0 [ 168.364050][ T5744] ? clear_bhb_loop+0x30/0x80 [ 168.368929][ T5744] ? clear_bhb_loop+0x30/0x80 [ 168.373714][ T5744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.379747][ T5744] RIP: 0033:0x7fa2ac008be9 [ 168.384369][ T5744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.404349][ T5744] RSP: 002b:00007ffcc58df148 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 168.412906][ T5744] RAX: 0000000000000000 RBX: 0000000000029069 RCX: 00007fa2ac008be9 [ 168.420991][ T5744] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 168.428988][ T5744] RBP: 00007fa2ac231da0 R08: 0000000000000001 R09: 0000000fc58df43f [ 168.437093][ T5744] R10: 0000001b31220000 R11: 0000000000000246 R12: 00007fa2ac22ffac [ 168.445198][ T5744] R13: 00007fa2ac22ffa0 R14: ffffffffffffffff R15: 00007ffcc58df260 [ 168.453303][ T5744] [ 168.456344][ T5744] [ 168.458871][ T5744] Allocated by task 5745: [ 168.463213][ T5744] __kasan_kmalloc+0xb5/0xf0 [ 168.468180][ T5744] ax25_dev_device_up+0x50/0x580 [ 168.473283][ T5744] ax25_device_event+0x483/0x4f0 [ 168.478345][ T5744] raw_notifier_call_chain+0xcb/0x160 [ 168.483841][ T5744] __dev_notify_flags+0x178/0x2d0 [ 168.488896][ T5744] dev_change_flags+0xe3/0x1a0 [ 168.493969][ T5744] dev_ifsioc+0x147/0xe70 [ 168.498334][ T5744] dev_ioctl+0x55f/0xe50 [ 168.502609][ T5744] sock_do_ioctl+0x222/0x2f0 [ 168.507313][ T5744] sock_ioctl+0x4ed/0x6e0 [ 168.511846][ T5744] __se_sys_ioctl+0xfa/0x170 [ 168.516471][ T5744] do_syscall_64+0x4c/0xa0 [ 168.521002][ T5744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.527257][ T5744] [ 168.529625][ T5744] Freed by task 5745: [ 168.533706][ T5744] kasan_set_track+0x4b/0x70 [ 168.538433][ T5744] kasan_set_free_info+0x1f/0x40 [ 168.543405][ T5744] ____kasan_slab_free+0xd5/0x110 [ 168.548459][ T5744] slab_free_freelist_hook+0xea/0x170 [ 168.553857][ T5744] kfree+0xef/0x2a0 [ 168.557810][ T5744] ax25_device_event+0x4b4/0x4f0 [ 168.562864][ T5744] raw_notifier_call_chain+0xcb/0x160 [ 168.568503][ T5744] __dev_notify_flags+0x178/0x2d0 [ 168.573563][ T5744] dev_change_flags+0xe3/0x1a0 [ 168.578349][ T5744] dev_ifsioc+0x147/0xe70 [ 168.582699][ T5744] dev_ioctl+0x55f/0xe50 [ 168.587279][ T5744] sock_do_ioctl+0x222/0x2f0 [ 168.591902][ T5744] sock_ioctl+0x4ed/0x6e0 [ 168.596256][ T5744] __se_sys_ioctl+0xfa/0x170 [ 168.600910][ T5744] do_syscall_64+0x4c/0xa0 [ 168.605453][ T5744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.611390][ T5744] [ 168.613729][ T5744] Last potentially related work creation: [ 168.619587][ T5744] kasan_save_stack+0x35/0x60 [ 168.624472][ T5744] kasan_record_aux_stack+0xb8/0x100 [ 168.629993][ T5744] insert_work+0x54/0x3d0 [ 168.634353][ T5744] __queue_work+0x9c5/0xd50 [ 168.639074][ T5744] queue_work_on+0x11d/0x1d0 [ 168.643775][ T5744] netdevice_event+0x803/0x900 [ 168.648569][ T5744] raw_notifier_call_chain+0xcb/0x160 [ 168.654051][ T5744] __dev_notify_flags+0x178/0x2d0 [ 168.659245][ T5744] dev_change_flags+0xe3/0x1a0 [ 168.664045][ T5744] do_setlink+0xc01/0x3980 [ 168.668657][ T5744] rtnl_newlink+0x1419/0x17d0 [ 168.673358][ T5744] rtnetlink_rcv_msg+0x9b9/0xe60 [ 168.678416][ T5744] netlink_rcv_skb+0x1e0/0x430 [ 168.683411][ T5744] netlink_unicast+0x774/0x920 [ 168.688240][ T5744] netlink_sendmsg+0x8ab/0xbc0 [ 168.693044][ T5744] __sys_sendto+0x423/0x580 [ 168.697573][ T5744] __x64_sys_sendto+0xda/0xf0 [ 168.702368][ T5744] do_syscall_64+0x4c/0xa0 [ 168.706903][ T5744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.712948][ T5744] [ 168.715309][ T5744] The buggy address belongs to the object at ffff888024cfd800 [ 168.715309][ T5744] which belongs to the cache kmalloc-192 of size 192 [ 168.729589][ T5744] The buggy address is located 8 bytes inside of [ 168.729589][ T5744] 192-byte region [ffff888024cfd800, ffff888024cfd8c0) [ 168.743022][ T5744] The buggy address belongs to the page: [ 168.748763][ T5744] page:ffffea0000933f40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24cfd [ 168.758988][ T5744] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 168.766675][ T5744] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016841a00 [ 168.775507][ T5744] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 168.784108][ T5744] page dumped because: kasan: bad access detected [ 168.790645][ T5744] page_owner tracks the page as allocated [ 168.796610][ T5744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 7, ts 13802175827, free_ts 0 [ 168.811964][ T5744] get_page_from_freelist+0x1b77/0x1c60 [ 168.817552][ T5744] __alloc_pages+0x1e1/0x470 [ 168.822177][ T5744] new_slab+0xc0/0x4b0 [ 168.826726][ T5744] ___slab_alloc+0x81e/0xdf0 [ 168.831568][ T5744] __kmalloc+0x1cd/0x330 [ 168.835996][ T5744] usb_alloc_urb+0x3f/0x140 [ 168.840540][ T5744] usb_control_msg+0x115/0x3e0 [ 168.845329][ T5744] hub_ext_port_status+0x103/0x6d0 [ 168.850472][ T5744] hub_activate+0x6f3/0x1910 [ 168.855090][ T5744] process_one_work+0x863/0x1000 [ 168.860266][ T5744] worker_thread+0xaa8/0x12a0 [ 168.865088][ T5744] kthread+0x436/0x520 [ 168.869539][ T5744] ret_from_fork+0x1f/0x30 [ 168.874179][ T5744] page_owner free stack trace missing [ 168.879868][ T5744] [ 168.882244][ T5744] Memory state around the buggy address: [ 168.887902][ T5744] ffff888024cfd700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 168.896014][ T5744] ffff888024cfd780: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 168.904105][ T5744] >ffff888024cfd800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.912274][ T5744] ^ [ 168.916627][ T5744] ffff888024cfd880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 168.924805][ T5744] ffff888024cfd900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 168.933080][ T5744] ================================================================== [ 168.941273][ T5744] Disabling lock debugging due to kernel taint [ 169.005202][ T5744] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.012712][ T5744] CPU: 1 PID: 5744 Comm: syz.1.494 Tainted: G B 5.15.189-syzkaller #0 [ 169.022655][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.032877][ T5744] Call Trace: [ 169.036178][ T5744] [ 169.039364][ T5744] dump_stack_lvl+0x168/0x230 [ 169.044166][ T5744] ? show_regs_print_info+0x20/0x20 [ 169.049447][ T5744] ? load_image+0x3b0/0x3b0 [ 169.054010][ T5744] panic+0x2c9/0x7f0 [ 169.058114][ T5744] ? bpf_jit_dump+0xd0/0xd0 [ 169.062674][ T5744] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 169.068643][ T5744] ? _raw_spin_unlock+0x40/0x40 [ 169.073526][ T5744] ? print_memory_metadata+0x314/0x400 [ 169.079028][ T5744] ? ax25_release+0x5ca/0x870 [ 169.083907][ T5744] check_panic_on_warn+0x80/0xa0 [ 169.088883][ T5744] ? ax25_release+0x5ca/0x870 [ 169.093616][ T5744] end_report+0x6d/0xf0 [ 169.097820][ T5744] kasan_report+0x102/0x130 [ 169.102643][ T5744] ? ax25_release+0x5ca/0x870 [ 169.107791][ T5744] ax25_release+0x5ca/0x870 [ 169.112431][ T5744] sock_close+0xd5/0x240 [ 169.116798][ T5744] ? sock_mmap+0x90/0x90 [ 169.121161][ T5744] __fput+0x234/0x930 [ 169.125290][ T5744] task_work_run+0x125/0x1a0 [ 169.129914][ T5744] exit_to_user_mode_loop+0x10f/0x130 [ 169.135321][ T5744] exit_to_user_mode_prepare+0xb1/0x140 [ 169.140992][ T5744] syscall_exit_to_user_mode+0x16/0x40 [ 169.146491][ T5744] do_syscall_64+0x58/0xa0 [ 169.150960][ T5744] ? clear_bhb_loop+0x30/0x80 [ 169.155789][ T5744] ? clear_bhb_loop+0x30/0x80 [ 169.160520][ T5744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.166459][ T5744] RIP: 0033:0x7fa2ac008be9 [ 169.170913][ T5744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.190675][ T5744] RSP: 002b:00007ffcc58df148 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 169.199228][ T5744] RAX: 0000000000000000 RBX: 0000000000029069 RCX: 00007fa2ac008be9 [ 169.207232][ T5744] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 169.215318][ T5744] RBP: 00007fa2ac231da0 R08: 0000000000000001 R09: 0000000fc58df43f [ 169.223321][ T5744] R10: 0000001b31220000 R11: 0000000000000246 R12: 00007fa2ac22ffac [ 169.231340][ T5744] R13: 00007fa2ac22ffa0 R14: ffffffffffffffff R15: 00007ffcc58df260 [ 169.239481][ T5744] [ 169.242810][ T5744] Kernel Offset: disabled [ 169.247175][ T5744] Rebooting in 86400 seconds..