Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '[localhost]:41650' (ECDSA) to the list of known hosts. 2020/10/13 01:57:31 fuzzer started 2020/10/13 01:57:32 dialing manager at 10.0.2.10:46773 2020/10/13 01:57:33 syscalls: 3440 2020/10/13 01:57:33 code coverage: enabled 2020/10/13 01:57:33 comparison tracing: enabled 2020/10/13 01:57:33 extra coverage: enabled 2020/10/13 01:57:33 setuid sandbox: enabled 2020/10/13 01:57:33 namespace sandbox: enabled 2020/10/13 01:57:33 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/13 01:57:33 fault injection: enabled 2020/10/13 01:57:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/13 01:57:33 net packet injection: enabled 2020/10/13 01:57:33 net device setup: enabled 2020/10/13 01:57:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/13 01:57:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/13 01:57:33 USB emulation: enabled 2020/10/13 01:57:33 hci packet injection: enabled 2020/10/13 01:57:33 wifi device emulation: enabled syzkaller login: [ 233.490291][ C0] hrtimer: interrupt took 38903003 ns 01:59:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x0) 01:59:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) 01:59:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) 01:59:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x70, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELRULE={0x28c, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x7c, 0x7, 0x1, 0x0, "f872452ba4c19eac3f723d2c0ea4366a3e5314df9fba8dbcfb610ced600cd630b9b00b99c74161abbe7a79d515fa05598eef3aec796dc8778a51db0353b0b037777e59a54139863acf390f00f83890e27a1583d1fac89d339f24cd6a76416226eabb845399c5decfa55cb710edfe33bf4d101d9c8b9b2749"}, @NFTA_RULE_EXPRESSIONS={0x1b8, 0x4, 0x0, 0x1, [{0xac, 0x1, 0x0, 0x1, [@numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @nat={{0x7, 0x1, 'nat\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_EXPR={0x28, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, @NFTA_DYNSET_SREG_DATA={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}]}, {0x68, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_DREG={0x8}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8}]}}]}, {0xa0, 0x1, 0x0, 0x1, [@dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}]}]}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc}]}], {0x14}}, 0x3a0}}, 0x0) [ 276.389354][ T9610] IPVS: ftp: loaded support on port[0] = 21 [ 276.392761][ T9608] IPVS: ftp: loaded support on port[0] = 21 [ 277.329941][ T9619] IPVS: ftp: loaded support on port[0] = 21 [ 277.509989][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 277.589365][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 278.794078][ T9624] IPVS: ftp: loaded support on port[0] = 21 [ 278.794477][ T9610] chnl_net:caif_netlink_parms(): no params data found [ 278.951565][ T9608] chnl_net:caif_netlink_parms(): no params data found [ 279.068722][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 279.626507][ T2554] Bluetooth: hci0: command 0x041b tx timeout [ 279.644061][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.753978][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.851634][ T9608] device bridge_slave_0 entered promiscuous mode [ 279.957434][ T2554] Bluetooth: hci1: command 0x041b tx timeout [ 280.156870][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.234306][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.331178][ T9608] device bridge_slave_1 entered promiscuous mode [ 280.414462][ T9619] chnl_net:caif_netlink_parms(): no params data found [ 280.516965][ T2554] Bluetooth: hci3: command 0x0409 tx timeout [ 280.622805][ T9610] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.707677][ T9610] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.779030][ T9610] device bridge_slave_0 entered promiscuous mode [ 280.870727][ T9608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.004223][ T9608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.141673][ T9610] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.227222][ T61] Bluetooth: hci2: command 0x041b tx timeout [ 281.232755][ T9610] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.378229][ T9610] device bridge_slave_1 entered promiscuous mode [ 281.646428][ T9610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.742979][ T2793] Bluetooth: hci0: command 0x040f tx timeout [ 281.873590][ T9608] team0: Port device team_slave_0 added [ 281.921877][ T9610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.011544][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.079832][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.105866][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 282.144875][ T9619] device bridge_slave_0 entered promiscuous mode [ 282.221537][ T9608] team0: Port device team_slave_1 added [ 282.299450][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.367405][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.458877][ T9619] device bridge_slave_1 entered promiscuous mode [ 282.559695][ T9610] team0: Port device team_slave_0 added [ 282.611722][ T9624] chnl_net:caif_netlink_parms(): no params data found [ 282.665848][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 282.729383][ T9608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.804968][ T9608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.043038][ T9608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.119496][ T9610] team0: Port device team_slave_1 added [ 283.193188][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.247210][ T9608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.288665][ T9608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.373783][ T9608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.385658][ T2554] Bluetooth: hci2: command 0x040f tx timeout [ 283.440570][ T9610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.516830][ T9610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.694025][ T9610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.818438][ T9610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.866692][ T2554] Bluetooth: hci0: command 0x0419 tx timeout [ 283.891249][ T9610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.189707][ T2554] Bluetooth: hci1: command 0x0419 tx timeout [ 284.234217][ T9610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.400896][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.621446][ T9619] team0: Port device team_slave_0 added [ 284.687641][ T9619] team0: Port device team_slave_1 added [ 284.746028][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 284.818330][ T9608] device hsr_slave_0 entered promiscuous mode [ 284.868747][ T9608] device hsr_slave_1 entered promiscuous mode [ 284.931307][ T9610] device hsr_slave_0 entered promiscuous mode [ 284.962370][ T9610] device hsr_slave_1 entered promiscuous mode [ 285.020905][ T9610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.084241][ T9610] Cannot create hsr debugfs directory [ 285.147758][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.217497][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.293641][ T9624] device bridge_slave_0 entered promiscuous mode [ 285.363063][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.447868][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.518004][ T9624] device bridge_slave_1 entered promiscuous mode [ 285.555634][ T28] Bluetooth: hci2: command 0x0419 tx timeout [ 285.609714][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.810935][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.018812][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.171870][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.225919][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.401705][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.561989][ T9624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.671822][ T9624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.826359][ T5] Bluetooth: hci3: command 0x0419 tx timeout [ 286.840425][ T9624] team0: Port device team_slave_0 added [ 286.960168][ T9619] device hsr_slave_0 entered promiscuous mode [ 287.004263][ T9619] device hsr_slave_1 entered promiscuous mode [ 287.061446][ T9619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.115042][ T9619] Cannot create hsr debugfs directory [ 287.149533][ T9624] team0: Port device team_slave_1 added [ 287.428965][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.465524][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.574817][ T9624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.656663][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.677427][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.738110][ T9624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.851221][ T9624] device hsr_slave_0 entered promiscuous mode [ 287.864785][ T9624] device hsr_slave_1 entered promiscuous mode [ 287.880724][ T9624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.892327][ T9624] Cannot create hsr debugfs directory [ 287.905939][ T9610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.956812][ T9610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.033004][ T9610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.075983][ T9610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.095669][ T9608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.146897][ T9608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.172556][ T9608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.233279][ T9608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 288.257312][ T9619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.291310][ T9619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 288.327166][ T9619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.353043][ T9619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 288.435614][ T9624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.530286][ T9624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.596841][ T9624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.658074][ T9624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.016939][ T9608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.076110][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.119653][ T9610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.175040][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.208136][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.225720][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.240121][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.279468][ T9619] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.301144][ T9608] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.323145][ T9624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.351215][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.380869][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.410535][ T9610] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.449171][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.479108][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.524163][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.576042][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.617563][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.646223][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.679325][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.725859][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.771840][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.832374][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.906642][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.964027][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.024767][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.073233][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.112808][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.152562][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.190333][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.242933][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.294460][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.348211][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.388771][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.417416][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.448821][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.489487][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.558413][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.607808][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.708957][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.789218][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.898361][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.054596][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.142170][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.237191][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.326822][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.393622][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.462482][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.530035][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.594778][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.664349][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.782395][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.834644][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.889902][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.937698][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.995705][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.057536][ T9624] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.161484][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.231588][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.322749][ T9610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.410372][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.457958][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.520352][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.590952][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.648280][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.727468][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.783802][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.840141][ T3275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.901491][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.981996][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.074163][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.130842][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.202745][ T9619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.314263][ T9619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.412220][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.472366][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.531202][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.582648][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.654497][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.716005][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.764853][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.827215][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.912839][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.063879][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.169535][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.285731][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.376886][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.447436][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.506461][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.571037][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.622354][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.681138][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.746173][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.803633][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.874465][ T9608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.973398][ T9608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.162773][ T9610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.254572][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.357979][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.429365][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.483284][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.539471][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.597570][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.638955][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.707241][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.768190][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.857498][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.932359][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.013664][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.086965][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.172752][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.257693][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.332073][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.397261][ T9608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.463785][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.522012][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.626621][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.698701][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.780213][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.842549][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.916993][ T9624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.018898][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.089252][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.170501][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.238490][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.313607][ T9619] device veth0_vlan entered promiscuous mode [ 297.377306][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.434515][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.501600][ T9610] device veth0_vlan entered promiscuous mode [ 297.574474][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.647169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.733684][ T9619] device veth1_vlan entered promiscuous mode [ 297.803293][ T9610] device veth1_vlan entered promiscuous mode [ 297.898977][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.988290][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.062393][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.141612][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.213953][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.310706][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.367835][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.430103][ T9608] device veth0_vlan entered promiscuous mode [ 298.490617][ T9608] device veth1_vlan entered promiscuous mode [ 298.562735][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.633992][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.734897][ T9608] device veth0_macvtap entered promiscuous mode [ 298.780125][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.830352][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.890373][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.939578][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.989791][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.041238][ T9624] device veth0_vlan entered promiscuous mode [ 299.107836][ T9608] device veth1_macvtap entered promiscuous mode [ 299.182000][ T9610] device veth0_macvtap entered promiscuous mode [ 299.272188][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.369211][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.441096][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.523912][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.593886][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.670173][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.733239][ T9619] device veth0_macvtap entered promiscuous mode [ 299.794594][ T9619] device veth1_macvtap entered promiscuous mode [ 299.848950][ T9624] device veth1_vlan entered promiscuous mode [ 299.909115][ T9610] device veth1_macvtap entered promiscuous mode [ 300.011952][ T9608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.098119][ T9610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.224375][ T9610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.358003][ T9610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.416371][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.498713][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.602730][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.697303][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.784921][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.881593][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.983643][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 301.078670][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.191791][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.280206][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.351532][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.403121][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.455841][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.497938][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.590820][ T9608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.666958][ T9608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.764776][ T9608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.839762][ T9610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 301.906727][ T9610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.987276][ T9610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 302.074989][ T9610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.208232][ T9610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.277943][ T9619] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.341917][ T9619] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.414483][ T9619] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.512654][ T9619] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.676767][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.770014][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.853009][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.936993][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.078846][ T9608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.178360][ T9608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.270079][ T9608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.362195][ T9608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.471549][ T9624] device veth0_macvtap entered promiscuous mode [ 303.561264][ T9624] device veth1_macvtap entered promiscuous mode [ 303.644862][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.739846][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.818580][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.888942][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.074575][ T9610] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.148794][ T9610] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.230995][ T9610] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.299491][ T9610] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.511589][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.629912][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.700376][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.759723][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.810634][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 304.854383][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.911076][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.022156][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.077484][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.188779][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 305.229883][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.266166][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 305.317038][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.363306][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 305.410051][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.449440][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.526576][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.586894][ T3275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.653601][ T9624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.729754][ T9624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.774992][ T9624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.812051][ T9624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.859793][ T9639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.894765][ T9639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.949362][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.991488][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.028947][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.070297][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.138518][ T9635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.191322][ T2450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.192039][ T9635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.250535][ T9642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.256122][ T2450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.260603][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.278550][ T2450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.278570][ T2450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.279331][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.341998][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.396333][ T9642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.468748][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.468936][ T9635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.469091][ T9635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.769627][ T9649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.778429][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.801145][ T9649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.833176][ T9649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.838179][ T9619] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 307.234282][ T9657] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.431197][ T9657] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 02:00:07 executing program 2: r0 = socket(0x2a, 0x2, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x20000001) 02:00:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) dup3(r3, r2, 0x0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 02:00:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x0) 02:00:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0xb03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) 02:00:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x70, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELRULE={0x28c, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x7c, 0x7, 0x1, 0x0, "f872452ba4c19eac3f723d2c0ea4366a3e5314df9fba8dbcfb610ced600cd630b9b00b99c74161abbe7a79d515fa05598eef3aec796dc8778a51db0353b0b037777e59a54139863acf390f00f83890e27a1583d1fac89d339f24cd6a76416226eabb845399c5decfa55cb710edfe33bf4d101d9c8b9b2749"}, @NFTA_RULE_EXPRESSIONS={0x1b8, 0x4, 0x0, 0x1, [{0xac, 0x1, 0x0, 0x1, [@numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @nat={{0x7, 0x1, 'nat\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_EXPR={0x28, 0x7, 0x0, 0x1, {{0xb, 0x1, 'lookup\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, @NFTA_DYNSET_SREG_DATA={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}]}, {0x68, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_DREG={0x8}]}}, @fib={{0x8, 0x1, 'fib\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8}]}}]}, {0xa0, 0x1, 0x0, 0x1, [@dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}]}]}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc}]}], {0x14}}, 0x3a0}}, 0x0) [ 307.918535][ T9676] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 02:00:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x7, 0xa, 0xb91ca607950be0b7}], {0x14}}, 0x3c}}, 0x0) 02:00:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xf, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 02:00:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) 02:00:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201}], {0x14}}, 0x3c}}, 0x0) 02:00:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}}, 0x0) 02:00:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x601}, 0x14}}, 0x0) 02:00:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:08 executing program 1: r0 = socket(0x22, 0x2, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 02:00:08 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 02:00:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0xb91ca607950be0b7, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x98}}, 0x0) 02:00:08 executing program 1: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, 0x0, 0x0) 02:00:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0x0, 0xb91ca607950be0b7}], {0x14}}, 0x3c}}, 0x0) 02:00:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x34}}, 0x0) 02:00:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 02:00:08 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8, 0x2, 0x2}}]}, 0x40}}, 0x0) 02:00:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000810001"], 0x1c}}, 0x0) 02:00:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x1f4, {[@mss={0x2, 0x4, 0x131}]}}}}}}}, 0x0) 02:00:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000240)={{0x14, 0x2}, [], {0x14}}, 0x28}}, 0x0) 02:00:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0xb03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 02:00:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:09 executing program 1: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:00:09 executing program 1: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 309.251515][ T9773] batman_adv: batadv0: Adding interface: gretap1 02:00:09 executing program 1: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) 02:00:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:09 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:09 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:09 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 309.310999][ T9773] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 309.564332][ T9793] batman_adv: batadv0: Adding interface: gretap2 [ 309.564783][ T9793] batman_adv: batadv0: The MTU of interface gretap2 is too small (68) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.564789][ T9793] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active 02:00:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:00:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) [ 309.991116][ T9809] batman_adv: batadv0: Adding interface: gretap3 [ 309.991129][ T9809] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.991135][ T9809] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active 02:00:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) 02:00:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 02:00:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 310.266667][ T9818] batman_adv: batadv0: Adding interface: gretap4 02:00:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 02:00:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) [ 310.291412][ T9818] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 02:00:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 02:00:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) [ 310.383391][ T9818] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active 02:00:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) 02:00:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:00:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) 02:00:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) 02:00:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) 02:00:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) dup(r0) 02:00:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x7, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:00:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, 0x7, 0x6, 0x401}, 0x14}}, 0x0) 02:00:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, 0x7, 0x6, 0x401}, 0x14}}, 0x0) 02:00:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, 0x7, 0x6, 0x401}, 0x14}}, 0x0) 02:00:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:13 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @multicast}, 0x10) 02:00:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) 02:00:13 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:13 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0xb03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x68}}, 0x0) 02:00:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:13 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:14 executing program 1: 02:00:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:14 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:14 executing program 1: 02:00:14 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:14 executing program 1: 02:00:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 02:00:14 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:17 executing program 1: 02:00:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 02:00:17 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 02:00:17 executing program 1: 02:00:17 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 02:00:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 02:00:17 executing program 1: 02:00:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 02:00:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 02:00:20 executing program 1: 02:00:20 executing program 1: 02:00:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:20 executing program 1: 02:00:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 02:00:24 executing program 1: 02:00:24 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 02:00:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfeffffff, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0) 02:00:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) 02:00:24 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) 02:00:25 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x18, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) setreuid(0x0, 0x0) 02:00:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x438, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 02:00:25 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x3}) [ 325.165456][T10040] ================================================================== [ 325.165456][T10040] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x117f/0x1290 [ 325.165456][T10040] Write of size 4 at addr ffffc90009bd1000 by task syz-executor.2/10040 [ 325.165456][T10040] [ 325.165456][T10040] CPU: 0 PID: 10040 Comm: syz-executor.2 Not tainted 5.9.0-syzkaller #0 [ 325.165456][T10040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 325.165456][T10040] Call Trace: [ 325.165456][T10040] dump_stack+0x198/0x1fd [ 325.165456][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.165456][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.165456][T10040] print_address_description.constprop.0.cold+0x5/0x497 [ 325.165456][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.165456][T10040] ? lockdep_hardirqs_off+0x96/0xd0 [ 325.165456][T10040] ? vprintk_func+0x95/0x1d4 [ 325.165456][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.165456][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.165456][T10040] kasan_report.cold+0x1f/0x37 [ 325.165456][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.165456][T10040] sys_imageblit+0x117f/0x1290 [ 325.165456][T10040] drm_fb_helper_sys_imageblit+0x1c/0x180 [ 325.165456][T10040] bit_putcs+0x6e1/0xd20 [ 325.165456][T10040] ? bit_cursor+0x1720/0x1720 [ 325.165456][T10040] ? mark_held_locks+0x9f/0xe0 [ 325.165456][T10040] ? check_preemption_disabled+0x50/0x130 [ 325.165456][T10040] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 325.165456][T10040] ? fb_get_color_depth+0x11a/0x240 [ 325.165456][T10040] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 325.165456][T10040] ? bit_cursor+0x1720/0x1720 [ 325.165456][T10040] fbcon_putcs+0x35a/0x450 [ 325.165456][T10040] do_update_region+0x399/0x630 [ 325.165456][T10040] ? con_get_trans_old+0x2a0/0x2a0 [ 325.165456][T10040] ? fb_get_color_depth+0x11a/0x240 [ 325.165456][T10040] ? fbcon_set_palette+0x422/0x620 [ 325.165456][T10040] ? var_to_display+0x7f0/0x7f0 [ 325.165456][T10040] redraw_screen+0x658/0x790 [ 325.165456][T10040] ? vc_init+0x5a0/0x5a0 [ 325.165456][T10040] ? fbcon_set_palette+0x422/0x620 [ 325.165456][T10040] fbcon_modechanged+0x593/0x6d0 [ 325.165456][T10040] fbcon_update_vcs+0x3a/0x50 [ 325.165456][T10040] do_fb_ioctl+0x62e/0x690 [ 325.165456][T10040] ? fb_set_suspend+0x1a0/0x1a0 [ 325.165456][T10040] ? lock_downgrade+0x830/0x830 [ 325.165456][T10040] ? kfree+0x221/0x2b0 [ 325.165456][T10040] ? check_preemption_disabled+0x50/0x130 [ 325.165456][T10040] ? kfree+0x221/0x2b0 [ 325.165456][T10040] ? tomoyo_path_number_perm+0x441/0x590 [ 325.165456][T10040] ? lockdep_hardirqs_on+0x53/0x100 [ 325.165456][T10040] ? tomoyo_path_number_perm+0x24e/0x590 [ 325.165456][T10040] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 325.165456][T10040] ? lock_is_held_type+0xbb/0xf0 [ 325.165456][T10040] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 325.165456][T10040] ? do_vfs_ioctl+0x27d/0x1090 [ 325.165456][T10040] ? generic_block_fiemap+0x60/0x60 [ 325.165456][T10040] fb_compat_ioctl+0x17c/0xc30 [ 325.165456][T10040] ? fb_open+0x430/0x430 [ 325.165456][T10040] ? __fget_files+0x294/0x400 [ 325.165456][T10040] ? bpf_lsm_file_ioctl+0x5/0x10 [ 325.165456][T10040] ? fb_open+0x430/0x430 [ 325.165456][T10040] __do_compat_sys_ioctl+0x1d3/0x230 [ 325.165456][T10040] __do_fast_syscall_32+0x60/0x90 [ 325.165456][T10040] do_fast_syscall_32+0x2f/0x70 [ 325.165456][T10040] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 325.165456][T10040] RIP: 0023:0xf7fc1549 [ 325.165456][T10040] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 325.165456][T10040] RSP: 002b:00000000f55bb0bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 325.165456][T10040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 325.165456][T10040] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.165456][T10040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.165456][T10040] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 325.165456][T10040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.165456][T10040] [ 325.165456][T10040] [ 325.165456][T10040] Memory state around the buggy address: [ 325.165456][T10040] ffffc90009bd0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.165456][T10040] ffffc90009bd0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 325.165456][T10040] >ffffc90009bd1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 325.165456][T10040] ^ [ 325.165456][T10040] ffffc90009bd1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 325.165456][T10040] ffffc90009bd1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 325.165456][T10040] ================================================================== [ 325.165456][T10040] Disabling lock debugging due to kernel taint [ 325.239893][T10040] Kernel panic - not syncing: panic_on_warn set ... [ 325.240219][T10040] CPU: 0 PID: 10040 Comm: syz-executor.2 Tainted: G B 5.9.0-syzkaller #0 [ 325.240224][T10040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 325.240299][T10040] Call Trace: [ 325.240913][T10040] dump_stack+0x198/0x1fd [ 325.240924][T10040] ? sys_imageblit+0x1170/0x1290 [ 325.241559][T10040] panic+0x382/0x7fb [ 325.241569][T10040] ? __warn_printk+0xf3/0xf3 [ 325.241580][T10040] ? preempt_schedule_common+0x59/0xc0 [ 325.241586][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.241896][T10040] ? preempt_schedule_thunk+0x16/0x18 [ 325.242092][T10040] ? trace_hardirqs_on+0x55/0x220 [ 325.242100][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.242106][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.242114][T10040] end_report+0x4d/0x53 [ 325.242121][T10040] kasan_report.cold+0xd/0x37 [ 325.242129][T10040] ? sys_imageblit+0x117f/0x1290 [ 325.242136][T10040] sys_imageblit+0x117f/0x1290 [ 325.242149][T10040] drm_fb_helper_sys_imageblit+0x1c/0x180 [ 325.242158][T10040] bit_putcs+0x6e1/0xd20 [ 325.242170][T10040] ? bit_cursor+0x1720/0x1720 [ 325.242179][T10040] ? mark_held_locks+0x9f/0xe0 [ 325.242189][T10040] ? check_preemption_disabled+0x50/0x130 [ 325.242199][T10040] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 325.242206][T10040] ? fb_get_color_depth+0x11a/0x240 [ 325.242366][T10040] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 325.242375][T10040] ? bit_cursor+0x1720/0x1720 [ 325.242382][T10040] fbcon_putcs+0x35a/0x450 [ 325.242392][T10040] do_update_region+0x399/0x630 [ 325.242400][T10040] ? con_get_trans_old+0x2a0/0x2a0 [ 325.242406][T10040] ? fb_get_color_depth+0x11a/0x240 [ 325.242414][T10040] ? fbcon_set_palette+0x422/0x620 [ 325.242422][T10040] ? var_to_display+0x7f0/0x7f0 [ 325.242430][T10040] redraw_screen+0x658/0x790 [ 325.242437][T10040] ? vc_init+0x5a0/0x5a0 [ 325.242445][T10040] ? fbcon_set_palette+0x422/0x620 [ 325.242453][T10040] fbcon_modechanged+0x593/0x6d0 [ 325.242466][T10040] fbcon_update_vcs+0x3a/0x50 [ 325.242473][T10040] do_fb_ioctl+0x62e/0x690 [ 325.242484][T10040] ? fb_set_suspend+0x1a0/0x1a0 [ 325.242491][T10040] ? lock_downgrade+0x830/0x830 [ 325.242498][T10040] ? kfree+0x221/0x2b0 [ 325.242506][T10040] ? check_preemption_disabled+0x50/0x130 [ 325.242511][T10040] ? kfree+0x221/0x2b0 [ 325.242522][T10040] ? tomoyo_path_number_perm+0x441/0x590 [ 325.242530][T10040] ? lockdep_hardirqs_on+0x53/0x100 [ 325.242539][T10040] ? tomoyo_path_number_perm+0x24e/0x590 [ 325.242548][T10040] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 325.242556][T10040] ? lock_is_held_type+0xbb/0xf0 [ 325.242567][T10040] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 325.242576][T10040] ? do_vfs_ioctl+0x27d/0x1090 [ 325.242584][T10040] ? generic_block_fiemap+0x60/0x60 [ 325.242591][T10040] fb_compat_ioctl+0x17c/0xc30 [ 325.242597][T10040] ? fb_open+0x430/0x430 [ 325.242607][T10040] ? __fget_files+0x294/0x400 [ 325.242616][T10040] ? bpf_lsm_file_ioctl+0x5/0x10 [ 325.242622][T10040] ? fb_open+0x430/0x430 [ 325.242630][T10040] __do_compat_sys_ioctl+0x1d3/0x230 [ 325.242639][T10040] __do_fast_syscall_32+0x60/0x90 [ 325.242647][T10040] do_fast_syscall_32+0x2f/0x70 [ 325.242656][T10040] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 325.242742][T10040] RIP: 0023:0xf7fc1549 [ 325.242842][T10040] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 325.242847][T10040] RSP: 002b:00000000f55bb0bc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 325.242855][T10040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 325.242860][T10040] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.242864][T10040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.242868][T10040] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 325.242872][T10040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.245526][T10040] Kernel Offset: disabled