last executing test programs: 50.086649366s ago: executing program 2 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 49.199714094s ago: executing program 2 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000821}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2210448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$eJzsljurE0EUx/8zk7vJFUWwtLHwggq6d3ejIsgF01hZCD6ChWAwa4iuBpIUJiAxn8DezsKPIWjrh5Boo02stF6Zx2YnIZt3iHDPrzj578zZ2fNYzgYEQRxbfnz/O4j/HP0sADiJA+TN+i+R+nDL/1vh95svd26X3z3++DU/cPennRnHiz8/B+BzSaA9unf87gPzex98pB+A45LRZTC4Rj8Bx0OjQzA8Mvq5pRvS33Wf1aPQfdqIqlJ40vjSBNIUJ+Mb9hmqVnzM2m91ui8qURQ2tyjm1W9Y4jhK4hPj+y50tJ5VPx8cvtFFMNwz+gbySW10Saz8z+bS/MXM/B0sleTNy8CSFZGhLPGIM6cyW+UAWK0xe5vrPd6aV3ab71CGEFAi6eiGThYZWwKbzUIOpjk+yO2gqmu9UdN7IWZ259MtfU+yEvf0tfI5ndHcuLdghA5WySudT/EHhgvW/NSj5L361MgWHrY63Sv1l5VaWAtfBUHxunfV864Fh2oQaTtj/u2r+XQiPX/qN0niMAevK+1209d2dB1oOzlxmYlv2Oe4eD5dcybOLSRiL13jypeNbRMEQfxPnANTM1nN5USYrwms/7p3dxgjQRAEQRAEQRAEQRDr8S8AAP//p+Y+dA==") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x7c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@bridge_delneigh={0x38, 0x1e, 0x1, 0xf0bd2d, 0x25dfdbff, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}]}, 0x38}}, 0x20000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x60840, 0x8) read$FUSE(r5, &(0x7f0000002680)={0x2020}, 0x2020) 48.67707319s ago: executing program 2 (id=396): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x28000600) inotify_init1(0x0) 48.525554125s ago: executing program 2 (id=398): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611266000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEWQI9O6QHLxocipJ6KFjaDogW0D+BQwmNm34pKiIloUJUr+fGzquzv73ux7M6s3FME3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiD945dzxE2m7pT9Y293WAAAPwoWxrxw/ue3rPwDwOLj0of79DwAAAAAAAAAAAAAAPAQpingyUsxeWE0T1fOu+vnOwI2b4yOjW1c7kKqa+6ry5Vf9xMlTp7/4wvCZXp7vTK/XH9ztbnw6Xhu7dK7x8sz12bn2/Hx7sjE+3bkyM9ne9h52Wn+zo9UBaFx//cbk1avzjZPPn9rw8s2h9wefODx0dvjZY8/0yo6PjI6OrRep95ev3XNDuu40w2N/FHEsUjz33Z+mVkQUsfNjUd9w7h+4A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGW5+LqA080D7cWTNisWx+2eCjZffGZltzrctT7cbF1txCZ6EzM30xdVtb9qcRRZxJEUsRsbLFX8OBKKIWKb59aDVdjoh9vePwhWpi8J3bUexiH7ehbGdjIGKpeATO2R42GEW8Gil+9s6RuJLHmWqs+XzEq2V+P+KtMl+KSOUH43TEe7s+nPOg1KKIvyzP/9nVNFmNB71x5fxXG1+evjrTV7Y3rnzI68NtI8VDuj4c2JQPxh4fm+pRRKsa8VfTvX+zAwAAAAAAAAAAAAAAAMD9diCK+FSkeOXf/6SaVxzVvPRDZ4f/cOhX++eMP32X/ZRln4+IxWJ7c3L354mBF9PFlB7yXOKPsnoU8ad5/t83H3ZjAAAAAAAAAAAAAAAAAAAAPtKK+EmkePHdI2kp+tcU70xfa1xqXZ7qrgrbW/u3t2b62traWiN1s5lzIudizqWcyzlXckaR6+ds5pzIuZhzKedyzpWcsS/Xz9nMOZFzMedSzuWcKzmjluvnbOacyLmYcykvur+cn6/kjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Him+9fXVFCkimhET0c3lwYfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNJiK+F6kaPxR89a2WkSk6v+uI+Ufp6O5v8yPR3O4zJeieS5nq8pa85sPof3szEAq4seRYrD+9q0Tns//QPfZrY9BvPWN9WefrnVzX+/FofcHnzh86Ozw6G88fafHaasGHD3fmb5xszE+Mjo61re5lt/9433bhvL7Fven60TE/Btvvt6ammrP3fuD8iOwg+qP0INU+6j09NF+8Jv3a4dR2wvdeTgP7j52/P+DGKDYVeX1/71I8bvv/kfvgt+9/tfjV7rPbl3h44M/W7/+v7h5R9u8/tc218vX//KavtX1/8m+bS/m70YGahH1heuzA4cj6vNvvHmsc711rX2tPX36+PEvDQ9/6dTxgf0R9audqXb3UYqp9vH7crgAAAAAAAAAAAAAAAAAHpxUxO9HitaPV1MjIm5W87WGzg4/e+yZfbGvmm+1Yd72a2OXzjVenrk+O9een29PNsanO1dmJtvbfbt6Nd1rfGR0VzpzVwd2uf0H6i/PzL4x17n2xwtbvn6wfu7y/MJc68rWL8eBKCKa/VuOVg0eHxmtGj3VaU1XVS9uOZn+wxtIRfxnpLhyupE+m7fl+f+bZ/hvmP+/uHlHuzT//2N928r3TKmIDyLF7/zV0/HZqp0H47Zjlsv9XaQ4euYzuVzsL8v12tC9r0B3jmBZ9n8jxT/9fGPZ3nzIJ9fLntj2gX1ElOf/UKT43l98J34rb9t4/4etz//BzTvapfP/VN+2gxvuV7DjrpPP/7FI8dKTb8fn8rZfdv+P3r03juTCt+7PsUvn/xN924by+/72/ek6AAAAAAAAAADAI20gFfH3keKHo7X0Qt62nd//m9y8o136/a9P9m2bvD/rFd31wY4PKgAAAADsEQOpiJ9EimsLb9+aQ71x/nff/M/fW5//OZI2vVr9nO/XqvsG3M+f//Ubyu87sfNuAwAAAAAAAAAAAAAAAAAAwJ6SUhEv5PXUJ6r5/JN3XE99OVK88t/P5XLpcFmutw78UPVn/cLM9LFzU1MzV1oLrctT7cbYbOtKu6z7VKRY/dvP5LpFtb56b7357hrv62uxz0WK0X/ole2uxd5bm/yp9bInyrIfixT/9Y8by34ul/vEetmTZdm/iRRf+8HtZUuH18ueKst+J1L86GuNXtmDZdne/VE/uV72+R/cuiMCAAAAAAAAAAAAAAAAAAAA3LuBVMSfR4r/ub50ay5/Xv9/oO9p5a1v9K33v8nNap3/oWr9/zs9vpf1/6v7Cize6V0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxlKKINyPF7IXVtDxYPu+qn+9M37g5PjK6dbUDqaq5rypfftVPnDx1+osvDJ/p5S+vf799Kl4bu3Su8fLM9dm59vx8e7IxPt25MjPZ3vYedlp/s6PVAWhcf/3G5NWr842Tz5/a8PLNofcHnzg8dHb42WPP9MqOj4yOjvWVqQ3c87vfJt1h+/4o4q8jxXPf/Wn64WBEETs/Fnf57Oy2A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGD+Bc7EgzYrFsftngo2X3xmZbc63LU+3GxdbcQmehMzN9MXVbW/anEUWcSRFLEbEyePvuBqKI1yPFtw+tpn8ZjNjXOw5fuDD2leMn79yOYhf7uA1lOxsDEUvFI3DO9rDBKOKfI8XP3jkS/zoYUYvuV3w+4tUyvx/xVnTPdyo/GKcj3tvic8SjqRZF/F95/s+upncGy/GgN66c/2rjy9NXZ/rK9saVR/768CDt8bGpHkX8qBrxV9O/+XsNAAAAAAAAAAAAAAAAsIcU8euR4sV3j6RqfvCtOcWd6WuNS63LU91pfb25f70502tra2uN1M1mzomcizmXci7nXMkZRa6fs1lmfW1tIj9fzLmUcznnSs7Yl+vnbOacyLmYcynncs6VnFHL9XM2c07kXMy5lHM550rO2CNz9wAAAAAAAAAAAAAAAAAAgMdLUf2X4ltfX01rg931pSeim8vWA33s/SIAAP//YnX2fg==") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 45.675561555s ago: executing program 2 (id=408): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 44.529266702s ago: executing program 2 (id=412): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x0, 0x1, 0x7ff, 0x9}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x481}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 44.153999243s ago: executing program 32 (id=412): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x0, 0x1, 0x7ff, 0x9}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x481}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 13.190713623s ago: executing program 4 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ustat(0x1, &(0x7f0000000480)) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x8007, &(0x7f0000000000), 0x1, 0x5521, &(0x7f0000000180)="$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") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000390425b97000b8e872fcdbdf2506", @ANYRES32=0x0, @ANYBLOB="1000000000100000400012800b000100697036746e6c000030000280140003002001000000000000000000000000000214000200fc010000000000000000000000000000040013"], 0x60}}, 0x0) 11.430688879s ago: executing program 3 (id=509): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7fc0bc6a33cc87d4cc23eb205848aa1febd8dd07bc25978ee5c6f83db659433b6187af151b76870a994fe4440c46b27fc4fae2e4ed9d711e652e6c397ccd89fc7181d168405d21d9f218508d0af65af34d43b95a83cdeb6a2bed82a8b75dcd514403aa7201818b9a0b5fe9c6ef1ce91bb73a66ee7c1a9a66b736f5556eb0d06ddef99bd96b0e9385db94623bbb509536211963e99cf3cacab5e6149108610470", 0x265}, {&(0x7f0000000240)="acf7aad9756b30b5270e3f3cdf07e0a9dcad2900fbdd", 0x16}], 0x3}, 0x0) 10.518492198s ago: executing program 4 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) 9.716347643s ago: executing program 5 (id=515): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 9.531074529s ago: executing program 3 (id=516): r0 = socket(0xa, 0x3, 0xff) r1 = epoll_create1(0x80000) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4001, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x90, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00'}) sendfile(r4, r3, &(0x7f0000000080)=0xb, 0x8) 9.272558177s ago: executing program 1 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5a", 0x8a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 7.646993409s ago: executing program 3 (id=519): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) 7.481868664s ago: executing program 5 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'R'}]}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.481549254s ago: executing program 1 (id=521): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, 0x0, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0/file0\x00', &(0x7f00000002c0)={0x800, 0x0, 0x5}, 0x18) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) 7.479405714s ago: executing program 4 (id=529): socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 6.230642794s ago: executing program 4 (id=523): socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0}, 0x80}], 0x2, 0x40000002, 0x0) 6.167495785s ago: executing program 0 (id=524): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x40100) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x48040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.600919703s ago: executing program 5 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x200, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x3, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x4, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x8, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2ea, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xffffffff, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x0, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 5.584384464s ago: executing program 1 (id=526): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) close_range(0xffffffffffffffff, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRESOCT], 0xff, 0x2b7, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8088, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x3, 0x232, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 5.539177345s ago: executing program 3 (id=527): mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, 0xffffffffffffffff, 0x80000000) fcntl$notify(0xffffffffffffffff, 0x402, 0x3b) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 4.771258329s ago: executing program 0 (id=528): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x5, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@vmx={0x9, 0x0, 0x2080, {0x4000, 0x3000, {}, 0x1, 0x6}, {"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", "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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.770783829s ago: executing program 4 (id=530): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 4.693483742s ago: executing program 5 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) 4.517335697s ago: executing program 3 (id=532): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) fsopen(&(0x7f0000000080)='configfs\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@remote, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 4.516977697s ago: executing program 0 (id=533): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000001840)={0xa, 0x4e23, 0x3, @private0, 0x2}, 0x1c) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x81, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x8000000012, 0x80000006, 0x2}, 0x0, 0x0) 4.482769998s ago: executing program 3 (id=534): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="880d0000231201003c0012800b00010062726964676500002c00028005002600010000000500290000000000060009000000000005002d"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', r3, 0x20, 0x80, 0x8, 0x4, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010102, {[@noop, @rr={0x7, 0xf, 0x64, [@rand_addr=0x64010102, @private=0xa010101, @local]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000002b80)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/4077, 0xfed}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x9}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3.700914193s ago: executing program 5 (id=535): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x200) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) 3.521416339s ago: executing program 1 (id=536): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.647649516s ago: executing program 4 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'R'}]}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.517200821s ago: executing program 0 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 1.006980719s ago: executing program 0 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_nanosleep(0x2, 0x1, &(0x7f0000000140), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x3000)=nil) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x8000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x4000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r3, 0x1, 0x14, &(0x7f0000000100)="0100ddff", 0x6f5e4287163594c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 973.00276ms ago: executing program 1 (id=540): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 964.31315ms ago: executing program 5 (id=541): shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfd, r4}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 84.674108ms ago: executing program 0 (id=542): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) epoll_create1(0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 47.648298][ T4175] cgroup: Unknown subsys name 'net' [ 47.804462][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.008987][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.292945][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 50.351588][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 50.390987][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 50.425219][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.456208][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.494953][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.502175][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.510432][ T4199] device bridge_slave_0 entered promiscuous mode [ 50.538828][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.545998][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.553718][ T4199] device bridge_slave_1 entered promiscuous mode [ 50.605382][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.612517][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.620823][ T4193] device bridge_slave_0 entered promiscuous mode [ 50.643155][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.650313][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.657827][ T4195] device bridge_slave_0 entered promiscuous mode [ 50.665300][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.672429][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.680562][ T4193] device bridge_slave_1 entered promiscuous mode [ 50.691536][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.700702][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.707741][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.716651][ T4191] device bridge_slave_0 entered promiscuous mode [ 50.724343][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.731589][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.739136][ T4195] device bridge_slave_1 entered promiscuous mode [ 50.765255][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.774603][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.781710][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.789256][ T4191] device bridge_slave_1 entered promiscuous mode [ 50.813664][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.822850][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.830071][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.837975][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.867466][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.876638][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.883797][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.892563][ T4188] device bridge_slave_1 entered promiscuous mode [ 50.901048][ T4199] team0: Port device team_slave_0 added [ 50.908470][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.919084][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.947899][ T4199] team0: Port device team_slave_1 added [ 50.955297][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.965567][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.981150][ T4193] team0: Port device team_slave_0 added [ 50.988593][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.015865][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.026525][ T4193] team0: Port device team_slave_1 added [ 51.051477][ T4191] team0: Port device team_slave_0 added [ 51.068645][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.075895][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.102034][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.116015][ T4195] team0: Port device team_slave_0 added [ 51.123265][ T4191] team0: Port device team_slave_1 added [ 51.130333][ T4195] team0: Port device team_slave_1 added [ 51.145875][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.152971][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.178871][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.202739][ T4188] team0: Port device team_slave_0 added [ 51.215714][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.222771][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.249184][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.269553][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.276604][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.302908][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.314953][ T4188] team0: Port device team_slave_1 added [ 51.321466][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.328401][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.354323][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.370104][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.377043][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.403114][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.422888][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.430002][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.455971][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.481564][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.488509][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.514478][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.562558][ T4199] device hsr_slave_0 entered promiscuous mode [ 51.569122][ T4199] device hsr_slave_1 entered promiscuous mode [ 51.591249][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.598193][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.627055][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.659061][ T4195] device hsr_slave_0 entered promiscuous mode [ 51.665735][ T4195] device hsr_slave_1 entered promiscuous mode [ 51.672171][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.680367][ T4195] Cannot create hsr debugfs directory [ 51.686201][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.693206][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.719925][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.733075][ T4191] device hsr_slave_0 entered promiscuous mode [ 51.740377][ T4191] device hsr_slave_1 entered promiscuous mode [ 51.746847][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.754409][ T4191] Cannot create hsr debugfs directory [ 51.763306][ T4193] device hsr_slave_0 entered promiscuous mode [ 51.770374][ T4193] device hsr_slave_1 entered promiscuous mode [ 51.776723][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.784303][ T4193] Cannot create hsr debugfs directory [ 51.881362][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.887924][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.895450][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.903331][ T4188] Cannot create hsr debugfs directory [ 52.070547][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 52.077087][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 52.083768][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 52.087938][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 52.095905][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 52.145839][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.157751][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.166848][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.177255][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.231079][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.246743][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.256346][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.269458][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.319463][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.344414][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.361576][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.384723][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.394816][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.402825][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.412509][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.423508][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.450287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.458991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.468010][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.475206][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.495973][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.507271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.516110][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.527818][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.539438][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.554261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.563462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.572092][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.579151][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.592468][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.602216][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.617324][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.631082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.641681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.657200][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.677314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.685341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.693234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.723329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.734393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.743251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.752101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.761171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.770057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.778285][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.785340][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.793129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.802243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.810716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.823150][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.832561][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.842945][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.852547][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.861852][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.872230][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.879274][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.894938][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.913229][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.924359][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.950293][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.976445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.993322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.005447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.016849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.028514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.040185][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.050387][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.058677][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.085395][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.095345][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.117858][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.143117][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.151801][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.159607][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.173050][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.195499][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.207372][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.225389][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.254845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.264609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.283758][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.290862][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.298769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.308885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.317450][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.324533][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.332483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.341411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.350464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.358855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.367336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.375940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.409534][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.419180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.428094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.439150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.447553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.466581][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.476647][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.485490][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.493117][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.503669][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.522065][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.531375][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.549547][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.558089][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.566089][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.574620][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.583357][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.592505][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.604142][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.613091][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.620905][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.638919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.647970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.658811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.667850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.696300][ T4199] device veth0_vlan entered promiscuous mode [ 53.715495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.725162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.734799][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.741926][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.751254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.759993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.768235][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.775294][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.784129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.792968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.802073][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.809115][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.816782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.825713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.834127][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.841185][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.848702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.857454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.866867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.875768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.883747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.892693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.901233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.911124][ T4191] device veth0_vlan entered promiscuous mode [ 53.934380][ T4199] device veth1_vlan entered promiscuous mode [ 53.941722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.951535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.960817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.969511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.978894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.988287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.009128][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.021224][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.057522][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.068936][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.082779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.091643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.099228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.108501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.117012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.125420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.134041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.143420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.151495][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 54.151957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.157560][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 54.165747][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 54.171731][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 54.183460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.183792][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 54.198257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.206958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.215561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.224099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.233326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.242752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.252438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.260424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.267916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.275826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.283762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.292375][ T4191] device veth1_vlan entered promiscuous mode [ 54.318029][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.332047][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.342763][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.368089][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.381296][ T4199] device veth0_macvtap entered promiscuous mode [ 54.427785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.436712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.445152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.454609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.468614][ T4199] device veth1_macvtap entered promiscuous mode [ 54.481806][ T4191] device veth0_macvtap entered promiscuous mode [ 54.515432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.525584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.534689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.544007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.560678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.580107][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.589566][ T4195] device veth0_vlan entered promiscuous mode [ 54.603493][ T4195] device veth1_vlan entered promiscuous mode [ 54.621613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.629574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.638898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.647907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.656609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.665502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.673182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.680798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.688286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.697090][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.705124][ T4191] device veth1_macvtap entered promiscuous mode [ 54.720503][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.731626][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.739290][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.749106][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.766700][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.775769][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.784687][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.793783][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.827289][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.839605][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.849303][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.862451][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.874620][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.898613][ T4195] device veth0_macvtap entered promiscuous mode [ 54.905890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.915368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.924279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.932827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.942516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.976670][ T4188] device veth0_vlan entered promiscuous mode [ 54.990769][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.007613][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.018401][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.029356][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.038765][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.047897][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.058272][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.070792][ T4195] device veth1_macvtap entered promiscuous mode [ 55.085160][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.093502][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.102024][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.111144][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.119531][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.136062][ T4188] device veth1_vlan entered promiscuous mode [ 55.155828][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.164691][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.173613][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.182379][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.204912][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.215884][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.228109][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.239527][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.251332][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.279367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.288160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.296876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.306334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.317838][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.328325][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.338584][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.349321][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.361548][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.391030][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.397809][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.398971][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.409875][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.428307][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.440092][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.448802][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.458276][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.467047][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.499069][ T4188] device veth0_macvtap entered promiscuous mode [ 55.536267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.544934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.554666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.568174][ T4188] device veth1_macvtap entered promiscuous mode [ 55.601680][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.610614][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.618746][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.626949][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.643480][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.649282][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.661918][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.665437][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.682342][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.692991][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.703018][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.713479][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.724593][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.734054][ T4193] device veth0_vlan entered promiscuous mode [ 55.740269][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.748080][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.765682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.774340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.782386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.791462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.803261][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.814616][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.824710][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.836418][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.846460][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.857119][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.868347][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.902733][ T4193] device veth1_vlan entered promiscuous mode [ 55.913978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.925975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.938065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.955822][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.964853][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.974334][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.983267][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.059326][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.069313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.080798][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.089121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.099082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.111035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.127549][ T4193] device veth0_macvtap entered promiscuous mode [ 56.231019][ T4238] Bluetooth: hci4: command 0x040f tx timeout [ 56.266047][ T4238] Bluetooth: hci0: command 0x040f tx timeout [ 56.305140][ T4271] loop2: detected capacity change from 0 to 2048 [ 56.313493][ T4193] device veth1_macvtap entered promiscuous mode [ 56.370617][ T4238] Bluetooth: hci3: command 0x040f tx timeout [ 56.388591][ T4271] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 56.401521][ T4271] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 56.427387][ T4271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.548682][ T4238] Bluetooth: hci1: command 0x040f tx timeout [ 56.564619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.640824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.650936][ T4238] Bluetooth: hci2: command 0x040f tx timeout [ 56.824603][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.913039][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.073942][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.085919][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.097305][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.108644][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.118959][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.129894][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.139737][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.150221][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.163608][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.182306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.206333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.220999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.235879][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.241772][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.277428][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.279754][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.289901][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.315625][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.325610][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.336130][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.346107][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.356607][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.368702][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.392190][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.404733][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.413281][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.446482][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.455803][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.471259][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.480772][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.510832][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.512180][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.526380][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.527244][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.553354][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.562508][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.631515][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.640995][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.648889][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.697993][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.719395][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.745010][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.747635][ T4291] loop3: detected capacity change from 0 to 164 [ 57.988282][ T4293] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5'. [ 58.175178][ T4298] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.207187][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.259066][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.295955][ T4293] bond0 (unregistering): Released all slaves [ 58.314212][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 58.374949][ T4295] device syzkaller0 entered promiscuous mode [ 58.391569][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 58.416177][ T4306] device syzkaller0 entered promiscuous mode [ 58.593086][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 58.655156][ T4316] syz.4.13[4316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.655350][ T4316] syz.4.13[4316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.715961][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 58.964304][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 59.493950][ T4326] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 59.527932][ T4325] device syzkaller0 entered promiscuous mode [ 59.649659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.659669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.669653][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.679656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.759657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 60.409682][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.419666][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.897372][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 61.600399][ T4348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21'. [ 61.670699][ T4340] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 62.556238][ T4366] netlink: 'syz.0.31': attribute type 4 has an invalid length. [ 62.984785][ T4375] loop2: detected capacity change from 0 to 256 [ 63.040427][ T4375] ======================================================= [ 63.040427][ T4375] WARNING: The mand mount option has been deprecated and [ 63.040427][ T4375] and is ignored by this kernel. Remove the mand [ 63.040427][ T4375] option from the mount to silence this warning. [ 63.040427][ T4375] ======================================================= [ 63.089836][ T4375] exfat: Deprecated parameter 'utf8' [ 63.095191][ T4375] exfat: Bad value for 'errors' [ 63.130265][ T4378] Illegal XDP return value 4294967274, expect packet loss! [ 63.249489][ T4382] loop1: detected capacity change from 0 to 8 [ 63.389330][ T4382] SQUASHFS error: lzo decompression failed, data probably corrupt [ 63.409450][ T4382] SQUASHFS error: Failed to read block 0x62b: -5 [ 63.445491][ T4382] SQUASHFS error: Unable to read metadata cache entry [629] [ 63.501741][ T4382] SQUASHFS error: Unable to read inode 0x11f [ 63.550437][ T4390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.40'. [ 64.089707][ T4390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.40'. [ 64.281656][ T4390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.40'. [ 64.290498][ T4390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.40'. [ 64.299475][ T4390] Zero length message leads to an empty skb [ 64.841057][ T4402] bridge0: port 3(hsr0) entered blocking state [ 64.847270][ T4402] bridge0: port 3(hsr0) entered disabled state [ 64.854968][ T4402] device hsr0 entered promiscuous mode [ 64.861184][ T4402] bridge0: port 3(hsr0) entered blocking state [ 64.867544][ T4402] bridge0: port 3(hsr0) entered forwarding state [ 68.515767][ T4436] loop1: detected capacity change from 0 to 512 [ 68.716989][ T4436] EXT4-fs (loop1): Test dummy encryption mode enabled [ 68.738231][ T4436] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.54: inode has both inline data and extents flags [ 68.758867][ T4436] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.54: couldn't read orphan inode 15 (err -117) [ 68.776726][ T4436] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 68.801946][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.118154][ T4457] cgroup: No subsys list or none specified [ 69.422856][ T4436] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 69.450055][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 69.592057][ T1107] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 69.774418][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.801768][ T1107] usb 3-1: config 0 descriptor?? [ 70.026792][ T1107] gspca_main: sq930x-2.14.0 probing 041e:403c [ 70.691011][ T1107] gspca_sq930x: reg_r 001f failed -71 [ 70.696488][ T1107] sq930x: probe of 3-1:0.0 failed with error -71 [ 70.707375][ T1107] usb 3-1: USB disconnect, device number 2 [ 70.838555][ T4473] loop1: detected capacity change from 0 to 1024 [ 70.901767][ T4478] sctp: [Deprecated]: syz.4.63 (pid 4478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.901767][ T4478] Use struct sctp_sack_info instead [ 70.925594][ T4473] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.959202][ T4481] sctp: [Deprecated]: syz.4.63 (pid 4481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.959202][ T4481] Use struct sctp_sack_info instead [ 70.977491][ T4473] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 71.072840][ T4484] ipt_REJECT: TCP_RESET invalid for non-tcp [ 71.125441][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.132256][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.779898][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.769728][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 72.830093][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 72.859257][ T4505] device syzkaller0 entered promiscuous mode [ 72.889822][ T4233] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.925607][ T4233] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.092919][ T4233] usb 1-1: config 0 interface 0 has no altsetting 0 [ 73.099599][ T4233] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 73.108696][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.137200][ T4233] usb 1-1: config 0 descriptor?? [ 73.829933][ T4514] device syzkaller0 entered promiscuous mode [ 73.954491][ T4233] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 73.975731][ T4520] binder_alloc: 4519: pid 4519 spamming oneway? 2 buffers allocated for a total size of 5120 [ 73.983012][ T4233] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 73.988216][ T4520] binder_alloc: 4519: pid 4519 spamming oneway? 3 buffers allocated for a total size of 5128 [ 74.003351][ T4233] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 74.011466][ T4233] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 74.025758][ T4233] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 74.267398][ T4267] usb 1-1: USB disconnect, device number 2 [ 74.445077][ T4534] ODEBUG: Out of memory. ODEBUG disabled [ 74.633408][ T4534] Set syz1 is full, maxelem 6117 reached [ 75.580990][ T4566] loop4: detected capacity change from 0 to 256 [ 75.742821][ T4566] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.809832][ T4566] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 75.833248][ T4566] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 76.549171][ T7] cfg80211: failed to load regulatory.db [ 76.653104][ T4574] loop1: detected capacity change from 0 to 1024 [ 76.722453][ T4574] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 76.722453][ T4574] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 76.722453][ T4574] [ 76.774745][ T4574] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 76.797843][ T4575] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.825130][ T4574] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 76.881908][ T4574] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: comm syz.1.90: inode #63: comm syz.1.90: iget: illegal inode # [ 76.926537][ T4574] EXT4-fs (loop1): no journal found [ 76.953266][ T4574] EXT4-fs (loop1): can't get journal size [ 76.993241][ T4574] EXT4-fs (loop1): failed to initialize system zone (-22) [ 77.000722][ T4574] EXT4-fs (loop1): mount failed [ 78.096164][ T4602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.99'. [ 78.140732][ T4597] loop4: detected capacity change from 0 to 4096 [ 78.183491][ T4605] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.253352][ T4597] EXT4-fs (loop4): inline encryption not supported [ 78.296072][ T4597] EXT4-fs (loop4): Test dummy encryption mode enabled [ 78.465453][ T4597] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 78.479754][ T4597] System zones: 0-5 [ 78.487154][ T4597] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 78.558280][ T4613] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4199] was attempted by ""[4613] [ 79.402974][ T4618] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 79.486678][ T4618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.516969][ T4574] loop1: detected capacity change from 0 to 40427 [ 79.556324][ T4574] F2FS-fs (loop1): invalid crc value [ 79.582819][ T4574] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.652040][ T4620] bond1 (unregistering): Released all slaves [ 79.749670][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 79.900974][ T4629] SET target dimension over the limit! [ 80.546905][ T4635] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.310873][ T4656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 81.316161][ T4653] __sock_release: fasync list not empty! [ 82.239698][ T4664] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 82.429631][ C1] sched: RT throttling activated [ 83.582236][ T4681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 83.632498][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 84.874207][ T4716] device syzkaller0 entered promiscuous mode [ 85.845221][ T4728] device syzkaller0 entered promiscuous mode [ 87.078194][ T4736] device syzkaller0 entered promiscuous mode [ 87.325940][ T4749] loop1: detected capacity change from 0 to 256 [ 87.338531][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 88.008874][ T4744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.046768][ T4749] FAT-fs (loop1): Directory bread(block 64) failed [ 88.123988][ T4749] FAT-fs (loop1): Directory bread(block 65) failed [ 88.141636][ T4749] FAT-fs (loop1): Directory bread(block 66) failed [ 88.148266][ T4749] FAT-fs (loop1): Directory bread(block 67) failed [ 88.237566][ T4749] FAT-fs (loop1): Directory bread(block 68) failed [ 88.249700][ T4749] FAT-fs (loop1): Directory bread(block 69) failed [ 88.401540][ T4749] FAT-fs (loop1): Directory bread(block 70) failed [ 88.458992][ T4749] FAT-fs (loop1): Directory bread(block 71) failed [ 88.585949][ T4749] FAT-fs (loop1): Directory bread(block 72) failed [ 88.799025][ T4749] FAT-fs (loop1): Directory bread(block 73) failed [ 88.915253][ T4764] netlink: 40 bytes leftover after parsing attributes in process `syz.0.138'. [ 89.076694][ T4769] loop0: detected capacity change from 0 to 1024 [ 89.907718][ T4771] Set syz0 is full, maxelem 0 reached [ 90.136565][ T4769] EXT4-fs (loop0): Test dummy encryption mode enabled [ 90.196660][ T4769] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 90.338707][ T4784] ipt_REJECT: TCP_RESET invalid for non-tcp [ 91.980038][ T4796] device syzkaller0 entered promiscuous mode [ 92.248576][ T4801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.487075][ T4802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.033672][ T4809] device syzkaller0 entered promiscuous mode [ 93.053706][ T4801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.368328][ T4820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.153'. [ 93.389076][ T4820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.237932][ T4820] device macvlan2 entered promiscuous mode [ 94.251921][ T4820] device bond0 entered promiscuous mode [ 94.271872][ T4820] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.280211][ T4820] device bond0 left promiscuous mode [ 97.331408][ T4858] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 97.502566][ T4858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.578558][ T4862] device gretap1 entered promiscuous mode [ 97.589393][ T4862] bond2: (slave gretap1): making interface the new active one [ 97.599149][ T4862] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 97.608161][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 98.303817][ T4875] device syzkaller0 entered promiscuous mode [ 98.321303][ T4858] device macvlan2 entered promiscuous mode [ 98.328024][ T4858] device bond2 entered promiscuous mode [ 98.354915][ T4858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.368110][ T4858] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 98.389555][ T4858] device bond2 left promiscuous mode [ 98.484793][ T4883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.494803][ T4878] device syzkaller0 entered promiscuous mode [ 98.559603][ T4231] wlan1: authenticate with 08:02:11:00:00:00 [ 98.568214][ T4231] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 98.598977][ T4462] wlan1: authenticated [ 98.606748][ T4891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.623405][ T4231] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 98.638872][ T4776] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 98.655645][ T4891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.683870][ T4776] wlan1: associated [ 99.000467][ T4277] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.270006][ T4277] usb 1-1: Using ep0 maxpacket: 32 [ 99.579726][ T4277] usb 1-1: config 0 has no interfaces? [ 99.594386][ T4906] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 99.794869][ T4906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.238396][ T4906] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.259033][ T4906] bond1: (slave batadv1): making interface the new active one [ 100.267977][ T4277] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 100.288079][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 100.319052][ T4906] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 100.333679][ T4277] usb 1-1: Product: syz [ 100.345035][ T4277] usb 1-1: Manufacturer: syz [ 100.359383][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 100.371003][ T4277] usb 1-1: SerialNumber: syz [ 100.433000][ T4911] loop2: detected capacity change from 0 to 131072 [ 100.486890][ T4277] usb 1-1: config 0 descriptor?? [ 100.774930][ T4911] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.852822][ T4930] SET target dimension over the limit! [ 100.912452][ T4911] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.507106][ T4914] bond1 (unregistering): (slave batadv1): Releasing active interface [ 101.526405][ T4914] bond1 (unregistering): Released all slaves [ 101.572360][ T4231] usb 1-1: USB disconnect, device number 3 [ 101.760009][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 102.342120][ T4942] bridge1: port 1(veth3) entered blocking state [ 102.398802][ T4942] bridge1: port 1(veth3) entered disabled state [ 102.658889][ T4942] device veth3 entered promiscuous mode [ 102.687705][ T4944] bridge1: port 2(veth5) entered blocking state [ 102.699820][ T4944] bridge1: port 2(veth5) entered disabled state [ 102.770962][ T4944] device veth5 entered promiscuous mode [ 102.817105][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 102.837416][ T4944] syz.1.184 (4944) used greatest stack depth: 21040 bytes left [ 103.005325][ T4961] __sock_release: fasync list not empty! [ 103.179355][ T4966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.488196][ T4956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.825014][ T4963] device macvlan2 entered promiscuous mode [ 103.840391][ T4963] device bond1 entered promiscuous mode [ 103.850303][ T4963] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.866221][ T4963] device bond1 left promiscuous mode [ 104.183142][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 104.326125][ T4991] device syzkaller0 entered promiscuous mode [ 104.417580][ T5001] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 106.130380][ T5019] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 106.560592][ T5023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 107.322388][ T5019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.356479][ T5025] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.369362][ T5025] bond2: (slave batadv1): making interface the new active one [ 107.380771][ T5025] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 107.438645][ T5034] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 108.134897][ T5041] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 108.162697][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 108.248054][ T5019] bond2 (unregistering): (slave batadv1): Releasing active interface [ 108.286026][ T5019] bond2 (unregistering): Released all slaves [ 108.292389][ T5049] __sock_release: fasync list not empty! [ 108.715052][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 109.143515][ T5059] device syzkaller0 entered promiscuous mode [ 109.304879][ T5060] device syzkaller0 entered promiscuous mode [ 110.137566][ T5085] syz.3.214 uses obsolete (PF_INET,SOCK_PACKET) [ 110.321829][ T5077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 110.353100][ T5089] loop2: detected capacity change from 0 to 2048 [ 110.365452][ T5077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.399008][ T5086] device macvlan2 entered promiscuous mode [ 111.008286][ T5086] device bond1 entered promiscuous mode [ 111.141542][ T5086] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.191238][ T5089] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,user_xattr,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 111.278351][ T5086] device bond1 left promiscuous mode [ 111.349497][ T5104] netlink: 56 bytes leftover after parsing attributes in process `syz.4.217'. [ 111.369985][ T5089] mmap: syz.2.215 (5089) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 111.424958][ T5104] netlink: 56 bytes leftover after parsing attributes in process `syz.4.217'. [ 112.272211][ T5114] loop3: detected capacity change from 0 to 131072 [ 112.317714][ T5128] netlink: 164 bytes leftover after parsing attributes in process `syz.1.226'. [ 112.817300][ T5114] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.903932][ T5114] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.420252][ T5142] device syzkaller0 entered promiscuous mode [ 113.690702][ T5140] loop2: detected capacity change from 0 to 1024 [ 114.364129][ T5183] binder_alloc: 5182: pid 5182 spamming oneway? 2 buffers allocated for a total size of 5120 [ 114.483576][ T5186] binder_alloc: 5182: pid 5182 spamming oneway? 3 buffers allocated for a total size of 5128 [ 114.525977][ T5185] loop0: detected capacity change from 0 to 1024 [ 114.530957][ T4273] hfsplus: bad catalog file entry [ 114.561965][ T4273] hfsplus: b-tree write err: -5, ino 3 [ 114.862154][ T5185] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 114.862154][ T5185] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 114.862154][ T5185] [ 115.230614][ T5185] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 115.317905][ T5185] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 115.351997][ T5185] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: comm syz.0.240: inode #63: comm syz.0.240: iget: illegal inode # [ 115.367209][ T5190] device syzkaller0 entered promiscuous mode [ 115.393731][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 115.415908][ T5185] EXT4-fs (loop0): no journal found [ 115.434219][ T5185] EXT4-fs (loop0): can't get journal size [ 115.458322][ T5196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.471978][ T5185] EXT4-fs (loop0): failed to initialize system zone (-22) [ 115.479335][ T5185] EXT4-fs (loop0): mount failed [ 115.500738][ T5198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 115.709562][ T5196] device macvlan2 entered promiscuous mode [ 115.724647][ T5196] device bond1 entered promiscuous mode [ 115.737035][ T5196] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.846765][ T5196] device bond1 left promiscuous mode [ 116.678273][ T5210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 116.822155][ T5212] lo speed is unknown, defaulting to 1000 [ 116.852869][ T5212] lo speed is unknown, defaulting to 1000 [ 116.882923][ T5212] lo speed is unknown, defaulting to 1000 [ 116.914282][ T5212] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.281829][ T5212] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 117.567266][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 117.630952][ T5212] lo speed is unknown, defaulting to 1000 [ 117.643812][ T5212] lo speed is unknown, defaulting to 1000 [ 117.699599][ T5212] lo speed is unknown, defaulting to 1000 [ 117.716936][ T5212] lo speed is unknown, defaulting to 1000 [ 117.733925][ T5212] lo speed is unknown, defaulting to 1000 [ 118.399868][ T5231] tipc: Started in network mode [ 118.446227][ T5231] tipc: Node identity 6e80a52a094a, cluster identity 4711 [ 118.784570][ T5231] tipc: Enabled bearer , priority 0 [ 119.177688][ T5247] loop0: detected capacity change from 0 to 1024 [ 119.374440][ T5234] tipc: Disabling bearer [ 119.827381][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 119.835841][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 119.911571][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 119.918890][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 119.982823][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 119.994919][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.008860][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.612382][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.734441][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.768033][ T5257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.791630][ T5264] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.820543][ T5264] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.845821][ T5265] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.856760][ T5265] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.879099][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.888141][ T5263] device macvlan2 entered promiscuous mode [ 120.898461][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.910812][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.911188][ T5263] device bond1 entered promiscuous mode [ 120.928294][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.953961][ T5263] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.956070][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 120.981139][ T5263] device bond1 left promiscuous mode [ 120.982428][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.047370][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.065116][ T5247] hfsplus: request for non-existent node 33423360 in B*Tree [ 121.552988][ T5277] loop3: detected capacity change from 0 to 2048 [ 122.430536][ T5277] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,user_xattr,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 123.516489][ T5299] bridge0: port 3(vlan2) entered blocking state [ 123.524394][ T5299] bridge0: port 3(vlan2) entered disabled state [ 123.532343][ T5299] device vlan2 entered promiscuous mode [ 123.547263][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.556458][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.565307][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.577635][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.608852][ T5299] device bridge_slave_1 left promiscuous mode [ 123.616295][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.632112][ T5299] bond0: (slave bond_slave_0): Releasing backup interface [ 123.670450][ T5299] bond0: (slave bond_slave_1): Releasing backup interface [ 123.799325][ T5299] team0: Port device team_slave_0 removed [ 123.944276][ T5299] team0: Port device team_slave_1 removed [ 124.088079][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.192639][ T5299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.456630][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.474684][ T5299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.547934][ T5299] device vlan2 left promiscuous mode [ 124.602544][ T5299] device bridge_slave_0 left promiscuous mode [ 124.608863][ T5299] bridge0: port 3(vlan2) entered disabled state [ 124.617411][ T5297] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 124.637156][ T5297] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.645579][ T5297] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.759813][ T5297] syz.4.261 (5297) used greatest stack depth: 20848 bytes left [ 124.788869][ T5309] device syzkaller0 entered promiscuous mode [ 124.811788][ T5311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 125.618358][ T5311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.857412][ T5318] device macvlan2 entered promiscuous mode [ 125.864785][ T5318] device bond2 entered promiscuous mode [ 125.870981][ T5318] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.878478][ T5318] device bond2 left promiscuous mode [ 126.835919][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 127.018131][ T5329] device team1 entered promiscuous mode [ 127.055719][ T5329] 8021q: adding VLAN 0 to HW filter on device team1 [ 127.284289][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 127.517468][ T5332] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 127.561120][ T5332] device team2 entered promiscuous mode [ 127.616675][ T5332] 8021q: adding VLAN 0 to HW filter on device team2 [ 128.861683][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 129.929691][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.944690][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.952842][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.015752][ T5366] device gretap1 left promiscuous mode [ 130.024811][ T5366] device team1 left promiscuous mode [ 130.032719][ T5366] device team2 left promiscuous mode [ 130.276594][ T5360] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 130.387220][ T5371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 130.422482][ T5360] netlink: 'syz.4.276': attribute type 2 has an invalid length. [ 130.568355][ T5371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.598244][ T5371] device macvlan2 entered promiscuous mode [ 130.605711][ T5371] device bond2 entered promiscuous mode [ 130.611690][ T5371] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.619478][ T5371] device bond2 left promiscuous mode [ 130.952849][ T1110] Bluetooth: hci2: command 0x0401 tx timeout [ 131.169531][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.201483][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.220920][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.229038][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.749511][ T5396] loop3: detected capacity change from 0 to 512 [ 131.918056][ T5404] loop4: detected capacity change from 0 to 64 [ 132.563125][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.633124][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.779937][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.785834][ T5409] loop0: detected capacity change from 0 to 512 [ 132.799721][ T7] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 132.818953][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.834631][ T5411] loop2: detected capacity change from 0 to 128 [ 132.847102][ T7] usb 2-1: config 0 descriptor?? [ 132.896977][ T5411] EXT4-fs (loop2): Test dummy encryption mode enabled [ 132.916025][ T5409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 132.926700][ T5411] EXT4-fs (loop2): Test dummy encryption mode enabled [ 132.935251][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 132.939164][ T5411] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 133.038735][ T5409] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.292: inode has both inline data and extents flags [ 133.053317][ T5411] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 133.072030][ T5409] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.292: couldn't read orphan inode 15 (err -117) [ 133.084467][ T5411] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.136526][ T5409] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 133.329842][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 133.355752][ T5409] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 133.399901][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 133.490355][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 133.600221][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 133.719832][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 133.999854][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 134.090667][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 134.129963][ T7] pwc: recv_control_msg error -32 req 04 val 1500 [ 134.206617][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.221554][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.229604][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.451881][ T7] pwc: recv_control_msg error -32 req 02 val 2500 [ 134.630472][ T7] pwc: recv_control_msg error -32 req 02 val 2400 [ 135.130034][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 135.153513][ T5456] netlink: 52 bytes leftover after parsing attributes in process `syz.4.303'. [ 135.182907][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 135.342872][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 135.477323][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 135.738535][ T7] pwc: Registered as video103. [ 135.764167][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 135.764303][ T5462] device syzkaller0 entered promiscuous mode [ 135.917883][ T5443] usb usb8: usbfs: process 5443 (syz.0.299) did not claim interface 0 before use [ 135.963773][ T7] usb 2-1: USB disconnect, device number 2 [ 136.735123][ T5478] loop2: detected capacity change from 0 to 512 [ 136.914306][ T5478] EXT4-fs (loop2): Test dummy encryption mode enabled [ 137.425112][ T5478] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.309: inode has both inline data and extents flags [ 137.858953][ T5478] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.309: couldn't read orphan inode 15 (err -117) [ 137.982182][ T5497] netlink: 14 bytes leftover after parsing attributes in process `syz.3.315'. [ 138.055397][ T5478] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 138.085091][ T5507] overlayfs: overlapping lowerdir path [ 140.832603][ T5541] loop0: detected capacity change from 0 to 164 [ 140.967660][ T5544] loop2: detected capacity change from 0 to 16 [ 142.589658][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 143.784731][ T5544] erofs: (device loop2): mounted with root inode @ nid 36. [ 143.828981][ T5543] attempt to access beyond end of device [ 143.828981][ T5543] loop2: rw=524288, want=1072, limit=16 [ 143.861141][ T4189] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 143.888729][ T5543] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 143.897859][ T5543] attempt to access beyond end of device [ 143.897859][ T5543] loop2: rw=524288, want=56, limit=16 [ 143.905082][ T5546] loop3: detected capacity change from 0 to 1024 [ 143.911735][ T5543] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 143.938267][ T25] audit: type=1800 audit(1781790560.170:2): pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.324" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 144.128629][ T5550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 148.702225][ T5597] loop3: detected capacity change from 0 to 40427 [ 149.129655][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 150.524132][ T5597] F2FS-fs (loop3): invalid crc value [ 150.697437][ T5597] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 150.915821][ T5597] F2FS-fs (loop3): recover fsync data on readonly fs [ 150.925341][ T5597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.684045][ T5609] loop1: detected capacity change from 0 to 2048 [ 152.889799][ T5609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.931639][ T5627] netlink: 'syz.3.349': attribute type 11 has an invalid length. [ 153.016197][ T5632] futex_wake_op: syz.4.350 tries to shift op by 144; fix this program [ 154.018155][ T5642] netlink: 79 bytes leftover after parsing attributes in process `syz.3.354'. [ 154.095174][ T5647] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 154.362818][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 154.633240][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 154.659942][ T5642] netlink: 'syz.3.354': attribute type 11 has an invalid length. [ 154.874613][ T5655] lo speed is unknown, defaulting to 1000 [ 155.000527][ T5658] process 'syz.3.358' launched './file0' with NULL argv: empty string added [ 155.959764][ T4277] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.219744][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 157.345141][ T5679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.364460][ T5655] IPVS: You probably need to specify IP address on multicast interface. [ 157.380834][ T5655] IPVS: Error connecting to the multicast addr [ 157.412949][ T5685] device bond_slave_0 entered promiscuous mode [ 157.419406][ T5685] device bond_slave_1 entered promiscuous mode [ 157.432813][ T5685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.447190][ T5685] bond3: (slave macvlan2): making interface the new active one [ 157.457159][ T5685] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 157.470568][ T5679] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 157.480851][ T4277] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.481040][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 157.539868][ T4277] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 157.561293][ T4277] usb 3-1: can't read configurations, error -71 [ 157.874297][ T5685] syz.3.363 (5685) used greatest stack depth: 20016 bytes left [ 158.318085][ T5691] netlink: 79 bytes leftover after parsing attributes in process `syz.0.369'. [ 158.343647][ T5699] loop4: detected capacity change from 0 to 512 [ 158.420955][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 158.437460][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 158.446742][ T5691] netlink: 'syz.0.369': attribute type 11 has an invalid length. [ 158.865113][ T5699] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 159.502183][ T5699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 159.520900][ T5699] EXT4-fs (loop4): orphan cleanup on readonly fs [ 159.527254][ T5699] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.366: bad orphan inode 267 [ 159.551715][ T5699] EXT4-fs (loop4): Remounting filesystem read-only [ 159.558383][ T5699] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 159.614146][ T5716] loop3: detected capacity change from 0 to 128 [ 159.638789][ T5716] EXT4-fs (loop3): Test dummy encryption mode enabled [ 159.645437][ T5693] ip6t_srh: unknown srh invflags 4000 [ 160.277683][ T5699] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.366: dx entry: limit 0 != root limit 125 [ 160.337085][ T5716] EXT4-fs (loop3): Test dummy encryption mode enabled [ 160.423095][ T5716] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 160.430754][ T5699] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.366: Corrupt directory, running e2fsck is recommended [ 160.543367][ T5716] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 160.562895][ T5716] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.569162][ T5725] loop2: detected capacity change from 0 to 1024 [ 161.127514][ T5737] loop4: detected capacity change from 0 to 512 [ 161.376347][ T4462] hfsplus: b-tree write err: -5, ino 25 [ 161.392709][ T4462] hfsplus: b-tree write err: -5, ino 4 [ 161.398732][ T4462] hfsplus: b-tree write err: -5, ino 2 [ 161.402594][ T5737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.405962][ T4462] hfsplus: b-tree write err: -5, ino 26 [ 161.444067][ T5737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.160209][ T5737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 162.185143][ T5737] System zones: 1-12 [ 162.222367][ T5737] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 162.330821][ T5737] EXT4-fs (loop4): 1 truncate cleaned up [ 162.336767][ T5737] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 164.138289][ T5783] netlink: 56 bytes leftover after parsing attributes in process `syz.2.388'. [ 164.224221][ T5789] loop2: detected capacity change from 0 to 16 [ 164.314637][ T5789] erofs: (device loop2): mounted with root inode @ nid 36. [ 164.402639][ T1110] kernel write not supported for file /263/net/ip6_tables_matches (pid: 1110 comm: kworker/1:2) [ 164.449932][ T25] audit: type=1800 audit(1781790580.680:3): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.388" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 164.558628][ T5799] loop1: detected capacity change from 0 to 512 [ 164.662655][ T5799] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.807867][ T5807] loop2: detected capacity change from 0 to 2048 [ 164.838285][ T5807] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 164.945116][ T5807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.132860][ T5814] device syzkaller0 entered promiscuous mode [ 165.209846][ T1110] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 165.469856][ T1110] usb 4-1: Using ep0 maxpacket: 32 [ 165.750589][ T1110] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 166.801864][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.896787][ T1110] usb 4-1: Product: syz [ 166.946021][ T1110] usb 4-1: Manufacturer: syz [ 166.998727][ T1110] usb 4-1: SerialNumber: syz [ 167.294710][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 167.518218][ T5832] loop1: detected capacity change from 0 to 128 [ 167.556267][ T1110] usb 4-1: invalid MIDI out EP 0 [ 167.578780][ T4199] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 167.608592][ T5832] EXT4-fs (loop1): Test dummy encryption mode enabled [ 167.630632][ T4199] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 167.648121][ T5832] EXT4-fs (loop1): Test dummy encryption mode enabled [ 167.687704][ T5832] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 167.716496][ T5836] device syzkaller0 entered promiscuous mode [ 167.823963][ T5832] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 167.884772][ T1110] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 167.973120][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.979941][ T5832] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.991488][ T1110] usb 4-1: USB disconnect, device number 2 [ 169.010841][ T5854] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 169.042687][ T5854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.413'. [ 169.188746][ T5854] team0: Port device geneve0 added [ 169.418040][ T5864] netlink: 88 bytes leftover after parsing attributes in process `syz.0.417'. [ 172.669450][ T5871] loop4: detected capacity change from 0 to 1024 [ 172.908507][ T5880] lo speed is unknown, defaulting to 1000 [ 172.969703][ T5447] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 173.466495][ T5890] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.423'. [ 174.362216][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 174.448259][ T5447] usb 2-1: config 127 has an invalid interface number: 138 but max is 0 [ 174.469463][ T5447] usb 2-1: config 127 has no interface number 0 [ 174.482521][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.493462][ T5447] usb 2-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 174.496039][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.512838][ T5880] device bridge_slave_0 entered promiscuous mode [ 174.517969][ T5447] usb 2-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 174.521203][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.538973][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.547026][ T5880] device bridge_slave_1 entered promiscuous mode [ 174.663742][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.695861][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.774100][ T5880] team0: Port device team_slave_0 added [ 174.780473][ T5447] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 174.782295][ T5880] team0: Port device team_slave_1 added [ 174.810055][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.897985][ T5447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.906431][ T5447] usb 2-1: Product: syz [ 174.910677][ T5447] usb 2-1: Manufacturer: syz [ 174.915350][ T5447] usb 2-1: SerialNumber: syz [ 174.931570][ T4231] Bluetooth: hci4: command 0x0409 tx timeout [ 174.938988][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.966429][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.976114][ T5873] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.985387][ T5873] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.994634][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.998508][ T5903] loop0: detected capacity change from 0 to 4096 [ 175.002504][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.034570][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.641866][ T4231] Bluetooth: hci0: command 0x0406 tx timeout [ 175.675682][ T1110] Bluetooth: hci3: command 0x0406 tx timeout [ 175.686305][ T1110] Bluetooth: hci1: command 0x0406 tx timeout [ 175.711090][ T5903] EXT4-fs (loop0): Test dummy encryption mode enabled [ 175.749551][ T5903] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,noauto_da_alloc,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 175.884105][ T5880] device hsr_slave_0 entered promiscuous mode [ 175.896448][ T5880] device hsr_slave_1 entered promiscuous mode [ 175.904180][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.920923][ T5880] Cannot create hsr debugfs directory [ 176.570694][ T5447] usb 2-1: probing VID:PID(0424:012C) [ 176.578792][ T5447] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0F [ 176.585304][ T5447] usb 2-1: vub300 testing BULK OUT EndPoint(1) 09 [ 176.591778][ T5447] usb 2-1: vub300 testing BULK OUT EndPoint(2) 0C [ 176.672175][ T5447] usb 2-1: ignoring unexpected bulk_out endpoint [ 176.678883][ T5447] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 176.710993][ T5447] vub300: probe of 2-1:127.138 failed with error -22 [ 176.752344][ T5447] usb 2-1: USB disconnect, device number 3 [ 176.966820][ T5903] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 177.029749][ T5447] Bluetooth: hci4: command 0x041b tx timeout [ 177.377604][ T5903] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 177.656614][ T5880] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.713480][ T5880] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.727092][ T5880] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.748450][ T5880] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.271725][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 179.303617][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.318848][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.350471][ T5880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.390764][ T5880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.414990][ T5964] netlink: 'syz.0.437': attribute type 4 has an invalid length. [ 179.428127][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.437063][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.448523][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.574263][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.736258][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.743401][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.000198][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.075638][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.084421][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.091517][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.099986][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.108678][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.127940][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.143623][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.195296][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.251847][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.277499][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.287540][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.297353][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.308204][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.317952][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.335022][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.362517][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.388761][ T5978] tipc: Started in network mode [ 180.400276][ T5978] tipc: Node identity de886fc130b4, cluster identity 4711 [ 180.417712][ T5978] tipc: Enabled bearer , priority 0 [ 180.500335][ T5978] tipc: Disabling bearer [ 180.603102][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 180.715021][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.741738][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.766501][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 180.818154][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.351425][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 182.439676][ C0] hrtimer: interrupt took 43167 ns [ 185.076332][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.085441][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.158183][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.184953][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.202373][ T6045] device syzkaller0 entered promiscuous mode [ 185.220531][ T6045] tipc: Started in network mode [ 185.225489][ T6045] tipc: Node identity 3a8a0c70374, cluster identity 4711 [ 185.233090][ T6045] tipc: Enabled bearer , priority 0 [ 185.240942][ T5880] device veth0_vlan entered promiscuous mode [ 185.247884][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.256720][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.265855][ T6044] tipc: Resetting bearer [ 185.295386][ T6044] tipc: Disabling bearer [ 185.317773][ T5880] device veth1_vlan entered promiscuous mode [ 185.402979][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.410994][ T4266] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.423818][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.436249][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.464727][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.597107][ T5880] device veth0_macvtap entered promiscuous mode [ 185.619986][ T5880] device veth1_macvtap entered promiscuous mode [ 185.659845][ T4266] usb 5-1: Using ep0 maxpacket: 32 [ 185.780001][ T4266] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.313419][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.399764][ T4266] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 186.412763][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.423251][ T4266] usb 5-1: config 0 descriptor?? [ 186.423701][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.462134][ T4266] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 186.556143][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.583807][ T6067] loop1: detected capacity change from 0 to 1024 [ 186.670241][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.680468][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.690993][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.727148][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.737796][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.749887][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.760772][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.777154][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.804203][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.199838][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.223438][ T6067] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.465: lblock 2 mapped to illegal pblock 2 (length 1) [ 187.298624][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.338355][ T6067] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 187.347645][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.378175][ T6067] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.465: lblock 0 mapped to illegal pblock 48 (length 1) [ 187.464108][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.484396][ T6067] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 187.495209][ T6067] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.465: Failed to acquire dquot type 0 [ 187.502065][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.527473][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.530010][ T6067] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 187.563021][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.600214][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.606248][ T6067] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.465: mark_inode_dirty error [ 187.620981][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.640582][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.658684][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.678084][ T6067] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 187.709549][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.728905][ T6067] EXT4-fs (loop1): 1 orphan inode deleted [ 187.740338][ T4406] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 187.760509][ T5880] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.769216][ T5880] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.778326][ T6067] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 187.800484][ T5880] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.806804][ T4406] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 187.829613][ T4406] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:13: Failed to release dquot type 0 [ 187.845309][ T5880] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.148622][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.167874][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.557137][ T4234] usb 5-1: USB disconnect, device number 2 [ 188.582288][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.622304][ T6099] tipc: Cannot configure node identity twice [ 188.664164][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.692033][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.770415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.930358][ T4188] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 189.981197][ T4188] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 189.993931][ T4188] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 190.341630][ T6129] netlink: 348 bytes leftover after parsing attributes in process `syz.4.473'. [ 191.266518][ T6143] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 191.303667][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'. [ 191.333303][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 191.391506][ T6144] device team1 entered promiscuous mode [ 191.452212][ T6144] 8021q: adding VLAN 0 to HW filter on device team1 [ 191.463191][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 191.515767][ T6146] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 191.547416][ T6122] loop0: detected capacity change from 0 to 32768 [ 191.652700][ T6146] device team2 entered promiscuous mode [ 191.674520][ T6146] 8021q: adding VLAN 0 to HW filter on device team2 [ 191.698760][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'. [ 194.836234][ T6162] loop1: detected capacity change from 0 to 40427 [ 195.215361][ T6122] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 195.437316][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.511614][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.991708][ T6172] device syzkaller0 entered promiscuous mode [ 196.067544][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 198.341573][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 199.939289][ T6217] device syzkaller0 entered promiscuous mode [ 201.209100][ T6235] loop4: detected capacity change from 0 to 40427 [ 201.839230][ T6235] F2FS-fs (loop4): invalid crc value [ 201.892367][ T6235] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 202.391019][ T6235] F2FS-fs (loop4): recover fsync data on readonly fs [ 202.398538][ T6235] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 202.509223][ T6252] device syzkaller0 entered promiscuous mode [ 203.729576][ T6270] loop5: detected capacity change from 0 to 512 [ 203.963194][ T6270] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 203.978445][ T6270] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.287745][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 204.308514][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 204.318562][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 204.329364][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 204.339799][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 208.499412][ T6322] loop1: detected capacity change from 0 to 128 [ 208.604077][ T6328] loop4: detected capacity change from 0 to 512 [ 208.785132][ T6328] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 208.932439][ T6328] ext4 filesystem being mounted at /114/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.772195][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 209.782940][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 209.792135][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 209.801229][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 209.810245][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 210.825600][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.315677][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.005952][ T6349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.257153][ T25] audit: type=1326 audit(1781790628.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 212.291652][ T6349] device bridge_slave_0 left promiscuous mode [ 212.334426][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.363030][ T6360] sock: sock_set_timeout: `syz.0.539' (pid 6360) tries to set negative timeout [ 212.376170][ T6349] device bridge_slave_1 left promiscuous mode [ 212.382360][ T25] audit: type=1326 audit(1781790628.540:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 212.434965][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.129904][ T25] audit: type=1326 audit(1781790628.540:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 213.191020][ T25] audit: type=1326 audit(1781790628.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 213.242446][ T6349] bond0: (slave bond_slave_0): Releasing backup interface [ 213.254868][ T6378] ================================================================== [ 213.263382][ T6378] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4f/0xf0 [ 213.270781][ T6378] Write of size 4 at addr ffff8880288c73a0 by task syz.0.542/6378 [ 213.278589][ T6378] [ 213.280931][ T6378] CPU: 0 PID: 6378 Comm: syz.0.542 Not tainted syzkaller #0 [ 213.288217][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.292971][ T25] audit: type=1326 audit(1781790628.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 213.298278][ T6378] Call Trace: [ 213.298317][ T6378] [ 213.327371][ T25] audit: type=1326 audit(1781790628.540:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 213.328262][ T6378] dump_stack_lvl+0x188/0x250 [ 213.356678][ T6378] ? show_regs_print_info+0x20/0x20 [ 213.361287][ T6349] device bond_slave_0 left promiscuous mode [ 213.361884][ T6378] ? _printk+0xda/0x130 [ 213.361913][ T6378] ? load_image+0x400/0x400 [ 213.376643][ T6378] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 213.377572][ T25] audit: type=1326 audit(1781790628.540:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 213.382110][ T6378] print_address_description+0x60/0x2d0 [ 213.382137][ T6378] ? try_module_get+0x4f/0xf0 [ 213.406834][ T25] audit: type=1326 audit(1781790628.560:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 213.411509][ T6378] kasan_report+0xdf/0x130 [ 213.411536][ T6378] ? try_module_get+0x4f/0xf0 [ 213.411559][ T6378] kasan_check_range+0x235/0x290 [ 213.411582][ T6378] try_module_get+0x4f/0xf0 [ 213.411600][ T6378] dvb_device_open+0xf1/0x370 [ 213.411620][ T6378] ? do_raw_spin_unlock+0x11d/0x230 [ 213.411645][ T6378] chrdev_open+0x5c5/0x6a0 [ 213.411671][ T6378] ? cd_forget+0x160/0x160 [ 213.411696][ T6378] ? fsnotify_perm+0x3a7/0x560 [ 213.411720][ T6378] ? cd_forget+0x160/0x160 [ 213.411739][ T6378] do_dentry_open+0x7ff/0xf80 [ 213.411775][ T6378] path_openat+0x26f5/0x2fa0 [ 213.411813][ T6378] ? verify_lock_unused+0x140/0x140 [ 213.426353][ T25] audit: type=1326 audit(1781790628.560:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 213.440300][ T6378] ? slab_post_alloc_hook+0x4c/0x380 [ 213.440330][ T6378] ? do_filp_open+0x410/0x410 [ 213.440368][ T6378] do_filp_open+0x1e2/0x410 [ 213.440392][ T6378] ? vfs_tmpfile+0x300/0x300 [ 213.440428][ T6378] ? _raw_spin_unlock+0x24/0x40 [ 213.440448][ T6378] ? alloc_fd+0x598/0x630 [ 213.440474][ T6378] do_sys_openat2+0x150/0x4b0 [ 213.440493][ T6378] ? __lock_acquire+0x7d10/0x7d10 [ 213.440520][ T6378] ? do_sys_open+0xe0/0xe0 [ 213.440539][ T6378] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 213.440564][ T6378] ? lock_chain_count+0x20/0x20 [ 213.440586][ T6378] ? vtime_user_exit+0x2c8/0x3e0 [ 213.446634][ T25] audit: type=1326 audit(1781790628.560:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.0.539" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f787539de59 code=0x7ffc0000 [ 213.449650][ T6378] __x64_sys_openat+0x135/0x160 [ 213.449677][ T6378] do_syscall_64+0x4c/0xa0 [ 213.615673][ T6378] ? clear_bhb_loop+0x30/0x80 [ 213.620338][ T6378] ? clear_bhb_loop+0x30/0x80 [ 213.625022][ T6378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.630935][ T6378] RIP: 0033:0x7f787535e68e [ 213.635329][ T6378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.654917][ T6378] RSP: 002b:00007f78735f6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.663320][ T6378] RAX: ffffffffffffffda RBX: 00007f78735f76c0 RCX: 00007f787535e68e [ 213.671275][ T6378] RDX: 0000000000000002 RSI: 00007f78735f6c00 RDI: ffffffffffffff9c [ 213.679248][ T6378] RBP: 00007f78735f6c00 R08: 0000000000000000 R09: 0000000000000000 [ 213.687215][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 213.695164][ T6378] R13: 00007f7875617038 R14: 00007f7875616fa0 R15: 00007ffebd439f18 [ 213.703122][ T6378] [ 213.706123][ T6378] [ 213.708423][ T6378] Allocated by task 2902: [ 213.712731][ T6378] __kasan_kmalloc+0xb5/0xf0 [ 213.717300][ T6378] kthread+0x10b/0x520 [ 213.721350][ T6378] ret_from_fork+0x1f/0x30 [ 213.725766][ T6378] [ 213.728081][ T6378] The buggy address belongs to the object at ffff8880288c7200 [ 213.728081][ T6378] which belongs to the cache kmalloc-256 of size 256 [ 213.742108][ T6378] The buggy address is located 160 bytes to the right of [ 213.742108][ T6378] 256-byte region [ffff8880288c7200, ffff8880288c7300) [ 213.755903][ T6378] The buggy address belongs to the page: [ 213.761516][ T6378] page:ffffea0000a23180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x288c6 [ 213.771645][ T6378] head:ffffea0000a23180 order:1 compound_mapcount:0 [ 213.778229][ T6378] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 213.786216][ T6378] raw: 00fff00000010200 ffffea0001de6400 0000000700000007 ffff888016c41b40 [ 213.794774][ T6378] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 213.803328][ T6378] page dumped because: kasan: bad access detected [ 213.809717][ T6378] page_owner tracks the page as allocated [ 213.815406][ T6378] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 9424989163, free_ts 0 [ 213.833261][ T6378] get_page_from_freelist+0x1bbd/0x1ca0 [ 213.838789][ T6378] __alloc_pages+0x1ee/0x480 [ 213.843358][ T6378] alloc_page_interleave+0x24/0x1e0 [ 213.848535][ T6378] new_slab+0xc0/0x4b0 [ 213.852577][ T6378] ___slab_alloc+0x80a/0xdd0 [ 213.857144][ T6378] __kmalloc_node+0x200/0x3b0 [ 213.861791][ T6378] kvmalloc_node+0x84/0x130 [ 213.866269][ T6378] v4l2_ctrl_new+0x70f/0x1310 [ 213.870929][ T6378] v4l2_ctrl_new_std+0x247/0x300 [ 213.875868][ T6378] handler_new_ref+0x14a/0x950 [ 213.880647][ T6378] v4l2_ctrl_add_handler+0x197/0x280 [ 213.885907][ T6378] vivid_create_controls+0x2be8/0x3460 [ 213.891346][ T6378] vivid_probe+0x3c47/0x67a0 [ 213.895913][ T6378] platform_probe+0x137/0x1c0 [ 213.900574][ T6378] really_probe+0x284/0xc80 [ 213.905051][ T6378] __driver_probe_device+0x1ef/0x390 [ 213.910310][ T6378] page_owner free stack trace missing [ 213.915649][ T6378] [ 213.917947][ T6378] Memory state around the buggy address: [ 213.923556][ T6378] ffff8880288c7280: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 213.931609][ T6378] ffff8880288c7300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.939649][ T6378] >ffff8880288c7380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.947695][ T6378] ^ [ 213.952782][ T6378] ffff8880288c7400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 213.960820][ T6378] ffff8880288c7480: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 213.968854][ T6378] ================================================================== [ 213.976891][ T6378] Disabling lock debugging due to kernel taint [ 213.984796][ T6378] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 213.991992][ T6378] CPU: 0 PID: 6378 Comm: syz.0.542 Tainted: G B syzkaller #0 [ 214.000663][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.010699][ T6378] Call Trace: [ 214.013962][ T6378] [ 214.016875][ T6378] dump_stack_lvl+0x188/0x250 [ 214.021538][ T6378] ? show_regs_print_info+0x20/0x20 [ 214.026718][ T6378] ? load_image+0x400/0x400 [ 214.031216][ T6378] panic+0x2e5/0x810 [ 214.035099][ T6378] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 214.041237][ T6378] ? bpf_jit_dump+0xd0/0xd0 [ 214.045727][ T6378] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 214.051601][ T6378] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 214.057475][ T6378] ? _raw_spin_unlock+0x40/0x40 [ 214.062308][ T6378] ? try_module_get+0x4f/0xf0 [ 214.066965][ T6378] check_panic_on_warn+0x80/0xa0 [ 214.071887][ T6378] ? try_module_get+0x4f/0xf0 [ 214.076541][ T6378] end_report+0x6d/0xf0 [ 214.080679][ T6378] kasan_report+0x102/0x130 [ 214.085165][ T6378] ? try_module_get+0x4f/0xf0 [ 214.089822][ T6378] kasan_check_range+0x235/0x290 [ 214.094743][ T6378] try_module_get+0x4f/0xf0 [ 214.099224][ T6378] dvb_device_open+0xf1/0x370 [ 214.103884][ T6378] ? do_raw_spin_unlock+0x11d/0x230 [ 214.109068][ T6378] chrdev_open+0x5c5/0x6a0 [ 214.113469][ T6378] ? cd_forget+0x160/0x160 [ 214.117872][ T6378] ? fsnotify_perm+0x3a7/0x560 [ 214.122617][ T6378] ? cd_forget+0x160/0x160 [ 214.127014][ T6378] do_dentry_open+0x7ff/0xf80 [ 214.131681][ T6378] path_openat+0x26f5/0x2fa0 [ 214.136258][ T6378] ? verify_lock_unused+0x140/0x140 [ 214.141440][ T6378] ? slab_post_alloc_hook+0x4c/0x380 [ 214.146706][ T6378] ? do_filp_open+0x410/0x410 [ 214.151370][ T6378] do_filp_open+0x1e2/0x410 [ 214.155858][ T6378] ? vfs_tmpfile+0x300/0x300 [ 214.160446][ T6378] ? _raw_spin_unlock+0x24/0x40 [ 214.165279][ T6378] ? alloc_fd+0x598/0x630 [ 214.169589][ T6378] do_sys_openat2+0x150/0x4b0 [ 214.174246][ T6378] ? __lock_acquire+0x7d10/0x7d10 [ 214.179258][ T6378] ? do_sys_open+0xe0/0xe0 [ 214.183651][ T6378] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 214.189616][ T6378] ? lock_chain_count+0x20/0x20 [ 214.194452][ T6378] ? vtime_user_exit+0x2c8/0x3e0 [ 214.199384][ T6378] __x64_sys_openat+0x135/0x160 [ 214.204219][ T6378] do_syscall_64+0x4c/0xa0 [ 214.208624][ T6378] ? clear_bhb_loop+0x30/0x80 [ 214.213280][ T6378] ? clear_bhb_loop+0x30/0x80 [ 214.217938][ T6378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.223815][ T6378] RIP: 0033:0x7f787535e68e [ 214.228214][ T6378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.247803][ T6378] RSP: 002b:00007f78735f6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.256199][ T6378] RAX: ffffffffffffffda RBX: 00007f78735f76c0 RCX: 00007f787535e68e [ 214.264157][ T6378] RDX: 0000000000000002 RSI: 00007f78735f6c00 RDI: ffffffffffffff9c [ 214.272108][ T6378] RBP: 00007f78735f6c00 R08: 0000000000000000 R09: 0000000000000000 [ 214.280061][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 214.288015][ T6378] R13: 00007f7875617038 R14: 00007f7875616fa0 R15: 00007ffebd439f18 [ 214.295982][ T6378] [ 214.299206][ T6378] Kernel Offset: disabled [ 214.303517][ T6378] Rebooting in 86400 seconds..