last executing test programs: 2m9.375265311s ago: executing program 4 (id=33): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m8.227767627s ago: executing program 4 (id=38): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r0 = syz_open_procfs(0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x20, 0xfffffffffffffffd) keyctl$invalidate(0x15, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x4) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0x2000}]) 2m1.530257393s ago: executing program 4 (id=44): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x412a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10002, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x4, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0xa, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x2, 0x2, 0x100, 0xd8ce, 0xf, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m57.235552249s ago: executing program 4 (id=54): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r1, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r1, r0, 0x0, 0x40001) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r2, 0x0, 0x0) 1m52.002569897s ago: executing program 4 (id=62): bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1m50.416184727s ago: executing program 4 (id=68): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x115) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m50.183085601s ago: executing program 32 (id=68): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x115) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 13.422927046s ago: executing program 5 (id=351): setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x20}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, 0x0, 0x103700, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) 10.904651529s ago: executing program 0 (id=363): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) 8.730545067s ago: executing program 3 (id=368): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0xffffff1f, 0xfffffffe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10006, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x0, 0x42}}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.041286846s ago: executing program 0 (id=369): syz_emit_ethernet(0x19e, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000013c0)={0x0, 0x0, 0x8, 0x19, 0x200, 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000040)=0x4, 0x4) 7.763231359s ago: executing program 3 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) wait4(r7, 0x0, 0x2, 0x0) ptrace$cont(0x1f, r7, 0x2, 0x120) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 7.506609233s ago: executing program 5 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) 7.077267078s ago: executing program 5 (id=372): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) 6.719653273s ago: executing program 3 (id=373): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic=',']}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$NFT_BATCH(r1, 0x0, 0x20000084) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14}}, 0x3c}}, 0x0) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, 0x0, 0xc800) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$netlink(r3, 0x0, 0x0) 6.214111539s ago: executing program 3 (id=374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 5.927475623s ago: executing program 5 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000500)=""/124, &(0x7f0000000580)=0x7c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket(0xb, 0xa, 0x800) connect$rds(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000200)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4000000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 5.765623785s ago: executing program 1 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) wait4(0x0, 0x0, 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 5.689152786s ago: executing program 2 (id=377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r1, 0x1, 0xf0bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "816ffc3b1649717cf8902f9548"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) 4.738306358s ago: executing program 0 (id=378): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0xfff3, 0xfff3}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3.805290471s ago: executing program 1 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac3(0x6, 0x80, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550a, 0x0) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010040000000000002", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x34, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"0000008000"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000040)={0x3, 0x3, 0x2, 0x0, 0xe}) sendfile(r9, r8, 0x0, 0x3a) 2.3227354s ago: executing program 2 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 2.31057884s ago: executing program 5 (id=381): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000005900)={0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000640)="43c92b94c482ec89707dc3fb6383ab8ec109ff1b93ce23a7387fc08d7704cb898d05ccbf7adef926") setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) epoll_create1(0x80000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0xf, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x8000007, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) 2.29035667s ago: executing program 0 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) 2.28903692s ago: executing program 3 (id=383): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001400), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x300, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x8, 0x1, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 2.061363443s ago: executing program 0 (id=384): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x800000003, 0x0) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x8, r2, 0x1, 0x6}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r4, &(0x7f0000000780)={@val={0x0, 0x30f6}, @val={0x5, 0x80, 0xff, 0x7, 0x2, 0x4}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x67, 0x0, 0x80, 0x1, 0x0, @private=0xa010101, @private=0xa010102}, @info_reply={0x10, 0x0, 0x0, 0x8, 0x61}}}, 0x2a) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x4000) 2.017056214s ago: executing program 2 (id=385): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000010000130200000001000020"], 0x0, 0x32, 0x0, 0x9}, 0x28) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000340), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000818130000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000002b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3ff}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x6, 0x2, 0x800, 0xffff73e7, 0x8, 0x9, 0x3, 0x8]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x40000}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000803c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) 1.193832144s ago: executing program 2 (id=386): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6a3618f8e8bf5f71, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)) sendmsg$NFC_CMD_START_POLL(r3, 0x0, 0x2e000084) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x5, 0x40, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x40, 0xf376, 0x1c}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.145378015s ago: executing program 3 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'nicvf0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x310) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0x2020) 910.119598ms ago: executing program 0 (id=388): syz_emit_ethernet(0x19e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000001683afffe8000000000000000000000000000aaff020000000000000000000000000001860090780000040000000000000000000309bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af03020001000000050000000026000400032077f9290b6e87290b6e640000000000000043c95f9b49204a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02a2a380eb"], 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000013c0)={0x0, 0x0, 0x8, 0x19, 0x200, 0x0}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000040)=0x4, 0x4) 517.319733ms ago: executing program 1 (id=389): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/162, 0xa2}, {&(0x7f00000019c0)=""/4082, 0xff2}], 0x3}}], 0x1, 0x12, 0x0) 461.350104ms ago: executing program 2 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r1, 0x1, 0xf0bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "816ffc3b1649717cf8902f9548"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) 429.015345ms ago: executing program 1 (id=391): unshare(0x22020600) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) 262.337716ms ago: executing program 1 (id=392): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000400)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff0000000000", @ANYRES32=r5, @ANYBLOB="0a0001000180c20000"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000c, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8}, 0x94) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000080)) connect$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0xffffffff, 0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="411de2c490cc6f8e5237d9f1000000005e500000000000009500"/44], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000300)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) 57.199279ms ago: executing program 2 (id=393): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2.21371ms ago: executing program 1 (id=394): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x105040, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="07000000010000", 0x7) 0s ago: executing program 5 (id=395): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000006c0)={0x2, 0x4c1c, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}], 0x18}}], 0x1, 0x8040084) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.086767][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.105040][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. syzkaller login: [ 64.364245][ T4176] cgroup: Unknown subsys name 'net' [ 64.466258][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.936111][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.763845][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.791925][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.872810][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 67.944744][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 67.961757][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 67.971273][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.979546][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.988250][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.996473][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.004169][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.012117][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.023316][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.030583][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.038901][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.059483][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.066748][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.075682][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.146381][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.165355][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.180939][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.193618][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.201640][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.209884][ T4200] device bridge_slave_0 entered promiscuous mode [ 68.230823][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.251704][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.259181][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.266883][ T4200] device bridge_slave_1 entered promiscuous mode [ 68.287878][ T4188] team0: Port device team_slave_0 added [ 68.318438][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.325796][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.333791][ T4198] device bridge_slave_0 entered promiscuous mode [ 68.343867][ T4188] team0: Port device team_slave_1 added [ 68.358039][ T4189] team0: Port device team_slave_0 added [ 68.370185][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.377273][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.385360][ T4198] device bridge_slave_1 entered promiscuous mode [ 68.400042][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.407254][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.415128][ T4193] device bridge_slave_0 entered promiscuous mode [ 68.424345][ T4189] team0: Port device team_slave_1 added [ 68.432099][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.454860][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.462276][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.470817][ T4193] device bridge_slave_1 entered promiscuous mode [ 68.486734][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.509580][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.516571][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.543092][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.574462][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.592286][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.599527][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.626203][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.640033][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.651756][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.661544][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.668558][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.694556][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.707250][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.718739][ T4200] team0: Port device team_slave_0 added [ 68.741589][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.749211][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.776299][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.790173][ T4200] team0: Port device team_slave_1 added [ 68.808864][ T4198] team0: Port device team_slave_0 added [ 68.837965][ T4198] team0: Port device team_slave_1 added [ 68.865659][ T4193] team0: Port device team_slave_0 added [ 68.880405][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.887576][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.914791][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.937016][ T4193] team0: Port device team_slave_1 added [ 68.950153][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.957133][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.983317][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.000715][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.008625][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.031806][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.039266][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.046119][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.054024][ T4189] Cannot create hsr debugfs directory [ 69.060115][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.067246][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.093847][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.135249][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.142454][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.168734][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.180321][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.188515][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.215128][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.243443][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.250902][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.277901][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.351601][ T4200] device hsr_slave_0 entered promiscuous mode [ 69.359157][ T4200] device hsr_slave_1 entered promiscuous mode [ 69.365902][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.373787][ T4200] Cannot create hsr debugfs directory [ 69.394052][ T4198] device hsr_slave_0 entered promiscuous mode [ 69.402849][ T4198] device hsr_slave_1 entered promiscuous mode [ 69.409913][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.417688][ T4198] Cannot create hsr debugfs directory [ 69.435542][ T4193] device hsr_slave_0 entered promiscuous mode [ 69.442921][ T4193] device hsr_slave_1 entered promiscuous mode [ 69.449813][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.457930][ T4193] Cannot create hsr debugfs directory [ 69.488280][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 69.488358][ T2239] Bluetooth: hci1: command 0x0409 tx timeout [ 69.494922][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 69.507700][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 69.587520][ T2239] Bluetooth: hci4: command 0x0409 tx timeout [ 69.736084][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.764949][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.775118][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.791484][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.835250][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.848210][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.863116][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.876412][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.960107][ T4200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.972743][ T4200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.984487][ T4200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.008737][ T4200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.056154][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.085020][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.094959][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.105191][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.117142][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.133459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.144812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.153494][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.180169][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.208684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.219836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.229245][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.236527][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.245439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.254846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.266969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.279662][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.291247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.302066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.310614][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.317882][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.331581][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.354565][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.373492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.382837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.393616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.403172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.412515][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.419747][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.429345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.444628][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.460664][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.471174][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.481089][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.490427][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.500688][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.507829][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.525695][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.546100][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.554733][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.566057][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.574846][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.589285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.598177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.637597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.646415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.656194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.666650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.679991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.689235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.704545][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.720920][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.743887][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.753072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.762967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.790150][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.801875][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.815729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.824814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.835026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.843574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.854623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.900825][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.914146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.938625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.946574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.970784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.983830][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.028451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.049257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.068049][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.075259][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.086155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.095328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.104794][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.112029][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.120019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.129834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.142623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.158931][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.192545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.202866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.212396][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.219737][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.228552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.236456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.244352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.253532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.262391][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.269729][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.278548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.287537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.296115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.305529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.316010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.325396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.340081][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.363684][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.375132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.394779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.405444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.421134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.430781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.440891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.450112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.464372][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.481713][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.491988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.503064][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.504610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.510553][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.523957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.555343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.569367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.578269][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 71.594681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.605335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.607582][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 71.614523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.625645][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 71.630073][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.634943][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 71.642069][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.648563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.669869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.684535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.696857][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 71.703499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.718847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.756005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.774657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.786203][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.793375][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.806962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.816655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.825291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.834785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.843514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.854200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.869236][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.890489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.905539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.918469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.934852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.944468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.958072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.966058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.993568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.002849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.015323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.024736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.034443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.043156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.059711][ T4189] device veth0_vlan entered promiscuous mode [ 72.085349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.093619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.113752][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.133194][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.153369][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.164386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.176878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.196413][ T4189] device veth1_vlan entered promiscuous mode [ 72.232324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.254865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.264585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.273549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.290359][ T4188] device veth0_vlan entered promiscuous mode [ 72.347723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.356774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.383099][ T4188] device veth1_vlan entered promiscuous mode [ 72.405432][ T4200] device veth0_vlan entered promiscuous mode [ 72.424674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.433576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.443321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.453337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.462212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.469994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.481523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.490413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.498068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.505720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.513680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.526160][ T4189] device veth0_macvtap entered promiscuous mode [ 72.553762][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.566010][ T4189] device veth1_macvtap entered promiscuous mode [ 72.580323][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.590370][ T4200] device veth1_vlan entered promiscuous mode [ 72.616171][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.638201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.646706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.656999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.666266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.675361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.684336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.693349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.703043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.712404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.724616][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.744555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.753359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.772054][ T4200] device veth0_macvtap entered promiscuous mode [ 72.783662][ T4200] device veth1_macvtap entered promiscuous mode [ 72.799094][ T4188] device veth0_macvtap entered promiscuous mode [ 72.806655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.817492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.826217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.835780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.845549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.854381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.863743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.875523][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.885018][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.900797][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.909962][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.952997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.962612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.971535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.982310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.991151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.999457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.031072][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.042118][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.054112][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.064626][ T4188] device veth1_macvtap entered promiscuous mode [ 73.074293][ T4193] device veth0_vlan entered promiscuous mode [ 73.081313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.090956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.100742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.110084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.119803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.128058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.140732][ T4198] device veth0_vlan entered promiscuous mode [ 73.155435][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.166375][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.182094][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.201084][ T4193] device veth1_vlan entered promiscuous mode [ 73.211614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.223721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.233666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.246248][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.257041][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.266201][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.275401][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.296793][ T4198] device veth1_vlan entered promiscuous mode [ 73.306941][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.319131][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.329522][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.342070][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.353759][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.365488][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.377012][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.387341][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.398089][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.411216][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.432680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.441745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.451036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.460548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.469509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.512482][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.522346][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.531867][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.540991][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.563828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.574486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.603610][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.613093][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.631068][ T4198] device veth0_macvtap entered promiscuous mode [ 73.648335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.656100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.664776][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 73.671008][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 73.671179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.677201][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 73.714552][ T4193] device veth0_macvtap entered promiscuous mode [ 73.732312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.740771][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 73.743383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.766735][ T4198] device veth1_macvtap entered promiscuous mode [ 73.773615][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.775224][ T4193] device veth1_macvtap entered promiscuous mode [ 73.783227][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.816902][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.834435][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 73.836194][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.852561][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.863434][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.873566][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.884609][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.897925][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.909688][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.919044][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.927092][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.935256][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.944567][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.974501][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.979193][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.993594][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.998161][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.008133][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.021323][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.031586][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.042219][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.054997][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.072798][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.086170][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.095880][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.112858][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.124071][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.135655][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.146193][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.156031][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.166762][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.177041][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.188289][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.200706][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.212462][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.229354][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.243145][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.252938][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.286068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.295793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.309046][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.319940][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.330080][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.341147][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.351548][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.362448][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.373263][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.383932][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.395175][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.406580][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.417026][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.433278][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.443333][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.472213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.481455][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.492006][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.501957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.513304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.526615][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.536402][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.593762][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.617985][ T4274] fuse: root generation should be zero [ 74.692878][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.705643][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.727537][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.740855][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.749237][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.758099][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.114303][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.215761][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.281813][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.362216][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.419351][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.431862][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.462464][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.494088][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.503762][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.661609][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.730149][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 75.751403][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 76.586277][ T4290] loop0: detected capacity change from 0 to 1024 [ 76.596332][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 76.608638][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 76.678607][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 78.687450][ C0] sched: RT throttling activated [ 78.715491][ T4299] loop2: detected capacity change from 0 to 512 [ 78.828184][ T4311] loop4: detected capacity change from 0 to 512 [ 79.056975][ T4313] netlink: 'syz.1.10': attribute type 12 has an invalid length. [ 79.192494][ T4299] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.229416][ T4311] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.839042][ T4299] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3: bg 0: block 255: padding at end of block bitmap is not set [ 79.855233][ T4311] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.11: iget: bad i_size value: 38620345925642 [ 79.873502][ T4299] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 79.977470][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 79.997466][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.007464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.017463][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.027478][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.037463][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.047466][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.057476][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.067465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.077469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.707087][ T4299] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3: invalid indirect mapped block 1 (level 1) [ 81.127638][ T4311] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.11: couldn't read orphan inode 15 (err -117) [ 81.337470][ T4299] EXT4-fs (loop2): 1 truncate cleaned up [ 81.345940][ T4299] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.409024][ T4311] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,delalloc,acl,dioread_nolock,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 82.457814][ T4319] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 82.524323][ T4333] loop3: detected capacity change from 0 to 128 [ 82.673804][ T4333] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.687892][ T4333] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.961951][ T4346] netlink: 168 bytes leftover after parsing attributes in process `syz.0.19'. [ 85.531386][ T4333] fscrypt: Error allocating hmac(sha512): -2 [ 85.884598][ T4339] loop4: detected capacity change from 0 to 1024 [ 86.115758][ T4355] loop2: detected capacity change from 0 to 1024 [ 86.276149][ T4355] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 86.299609][ T4355] EXT4-fs (loop2): write access will be enabled during recovery [ 86.323400][ T4355] EXT4-fs (loop2): barriers disabled [ 86.419165][ T4355] JBD2: no valid journal superblock found [ 86.425241][ T4355] EXT4-fs (loop2): error loading journal [ 86.882160][ T23] cfg80211: failed to load regulatory.db [ 88.389770][ T4372] netlink: 'syz.1.15': attribute type 6 has an invalid length. [ 88.792524][ T4361] netlink: 'syz.1.15': attribute type 6 has an invalid length. [ 88.985782][ T4355] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 88.998053][ T4355] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 89.941081][ T4389] loop1: detected capacity change from 0 to 512 [ 90.244369][ T26] audit: type=1326 audit(1777949960.783:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4390 comm="syz.4.30" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15d0859dd9 code=0x0 [ 90.285736][ T4389] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.29: missing EA_INODE flag [ 90.304516][ T4405] loop2: detected capacity change from 0 to 256 [ 90.333671][ T4389] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.29: error while reading EA inode 12 err=-117 [ 90.388343][ T4389] EXT4-fs (loop1): 1 orphan inode deleted [ 90.394418][ T4389] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 90.423317][ T4405] ======================================================= [ 90.423317][ T4405] WARNING: The mand mount option has been deprecated and [ 90.423317][ T4405] and is ignored by this kernel. Remove the mand [ 90.423317][ T4405] option from the mount to silence this warning. [ 90.423317][ T4405] ======================================================= [ 91.814630][ T4411] loop3: detected capacity change from 0 to 512 [ 91.874232][ T4405] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.927788][ T4405] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 91.993076][ T4405] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x0419abd0, checksum : 0x1119abd0) [ 92.046972][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.087548][ T4405] exFAT-fs (loop2): invalid boot region [ 92.093166][ T4405] exFAT-fs (loop2): failed to recognize exfat type [ 92.133362][ T4411] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.285284][ T4411] EXT4-fs error (device loop3): ext4_get_first_dir_block:3597: inode #12: comm syz.3.32: Attempting to read directory block (0) that is past i_size (3) [ 92.913127][ T4421] loop2: detected capacity change from 0 to 1024 [ 92.955176][ T4422] loop4: detected capacity change from 0 to 2048 [ 93.255183][ T4421] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 93.255183][ T4421] [ 95.892607][ T4422] EXT4-fs: error -4 creating inode table initialization thread [ 95.918398][ T4422] EXT4-fs (loop4): mount failed [ 98.343521][ T4446] loop0: detected capacity change from 0 to 16 [ 101.033904][ T4456] process 'syz.2.46' launched './file0' with NULL argv: empty string added [ 102.111988][ T4460] loop2: detected capacity change from 0 to 512 [ 102.145324][ T4461] loop3: detected capacity change from 0 to 512 [ 102.245612][ T4460] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.47: bg 0: block 393: padding at end of block bitmap is not set [ 102.284327][ T4461] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.314708][ T4461] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.338581][ T4460] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 102.399087][ T4477] loop0: detected capacity change from 0 to 2048 [ 102.402425][ T4460] EXT4-fs (loop2): 2 truncates cleaned up [ 102.472633][ T4460] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.535355][ T4477] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.959409][ T4489] loop1: detected capacity change from 0 to 512 [ 104.119555][ T4494] loop4: detected capacity change from 0 to 512 [ 104.171512][ T4489] EXT4-fs (loop1): Unrecognized mount option "dont_measure" or missing value [ 105.115244][ T4494] EXT4-fs (loop4): 1 truncate cleaned up [ 105.135836][ T4494] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 105.253865][ T4504] loop2: detected capacity change from 0 to 1024 [ 105.398213][ T4508] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 13: comm syz.4.54: lblock 0 mapped to illegal pblock 13 (length 1) [ 105.412792][ T4504] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,i_version,noblock_validity,grpid,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 105.728153][ T4508] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Out of memory [ 107.922561][ T4508] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #2: comm syz.4.54: mark_inode_dirty error [ 109.002350][ T4525] loop1: detected capacity change from 0 to 128 [ 109.078702][ T4188] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 109.147719][ T4525] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 109.185299][ T4525] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.242121][ T4525] ext2 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.863589][ T4539] netlink: 'syz.1.66': attribute type 12 has an invalid length. [ 110.636950][ T4188] syz-executor (4188) used greatest stack depth: 20752 bytes left [ 110.916645][ T4550] loop2: detected capacity change from 0 to 512 [ 111.144034][ T4550] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.227627][ T4550] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.356511][ T4550] EXT4-fs error (device loop2): ext4_xattr_block_list:713: inode #15: comm syz.2.71: corrupted xattr block 33 [ 111.428182][ T4558] netlink: 'syz.3.72': attribute type 12 has an invalid length. [ 111.606712][ T4551] loop1: detected capacity change from 0 to 512 [ 111.981279][ T4551] EXT4-fs (loop1): Ignoring removed orlov option [ 112.251591][ T4561] loop3: detected capacity change from 0 to 512 [ 112.308184][ T4551] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 112.402768][ T4551] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.430971][ T4575] loop2: detected capacity change from 0 to 16 [ 112.449403][ T4561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.539924][ T4575] erofs: (device loop2): mounted with root inode @ nid 36. [ 112.561084][ T4561] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.659182][ T4575] attempt to access beyond end of device [ 112.659182][ T4575] loop2: rw=524288, want=1342177304, limit=16 [ 112.723180][ T4575] attempt to access beyond end of device [ 112.723180][ T4575] loop2: rw=0, want=1342177280, limit=16 [ 112.761522][ T26] audit: type=1800 audit(1777949983.493:3): pid=4551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.70" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 112.867867][ T26] audit: type=1800 audit(1777949983.523:4): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name=0AF301 dev="loop3" ino=18 res=0 errno=0 [ 112.959340][ T26] audit: type=1800 audit(1777949983.563:5): pid=4575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.74" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 112.997919][ T4564] chnl_net:caif_netlink_parms(): no params data found [ 113.572414][ T4592] netlink: 'syz.3.80': attribute type 12 has an invalid length. [ 113.650392][ T4599] loop2: detected capacity change from 0 to 128 [ 113.762825][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.891384][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.901418][ T4599] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.959697][ T4599] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.049263][ T4564] device bridge_slave_0 entered promiscuous mode [ 114.590597][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 114.781463][ T4599] syz.2.82 (pid 4599) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 114.874473][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.023518][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.109306][ T4564] device bridge_slave_1 entered promiscuous mode [ 115.161673][ T4610] netlink: 'syz.1.83': attribute type 12 has an invalid length. [ 116.167919][ T4564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.194229][ T4564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.277746][ T4564] team0: Port device team_slave_0 added [ 116.342676][ T4564] team0: Port device team_slave_1 added [ 117.373155][ T4639] loop1: detected capacity change from 0 to 256 [ 117.513204][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.530261][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.557352][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.580455][ T4639] FAT-fs (loop1): Directory bread(block 64) failed [ 117.598676][ T4271] Bluetooth: hci0: command 0x041b tx timeout [ 117.606576][ T4564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.620187][ T4564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.627287][ T4564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.651627][ T4639] FAT-fs (loop1): Directory bread(block 65) failed [ 117.657546][ T4564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.683512][ T4639] FAT-fs (loop1): Directory bread(block 66) failed [ 117.690554][ T4639] FAT-fs (loop1): Directory bread(block 67) failed [ 117.698086][ T4639] FAT-fs (loop1): Directory bread(block 68) failed [ 117.704766][ T4639] FAT-fs (loop1): Directory bread(block 69) failed [ 117.714736][ T4639] FAT-fs (loop1): Directory bread(block 70) failed [ 117.722452][ T4639] FAT-fs (loop1): Directory bread(block 71) failed [ 117.737017][ T4639] FAT-fs (loop1): Directory bread(block 72) failed [ 117.747471][ T4639] FAT-fs (loop1): Directory bread(block 73) failed [ 117.880902][ T4564] device hsr_slave_0 entered promiscuous mode [ 117.924675][ T4564] device hsr_slave_1 entered promiscuous mode [ 118.027572][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 118.100837][ T4564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.132942][ T4564] Cannot create hsr debugfs directory [ 118.148591][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.799451][ T4324] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.947813][ T7] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 118.974469][ T7] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 118.997525][ T7] usb 1-1: Product: syz [ 119.004446][ T7] usb 1-1: Manufacturer: syz [ 119.005424][ T4324] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.013857][ T7] usb 1-1: SerialNumber: syz [ 119.304939][ T4658] netlink: 'syz.1.97': attribute type 12 has an invalid length. [ 119.380852][ T4324] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.487338][ T4324] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.959964][ T7] usb 1-1: config 0 descriptor?? [ 119.977798][ T7] usb 1-1: can't set config #0, error -71 [ 119.998220][ T7] usb 1-1: USB disconnect, device number 2 [ 121.694368][ T4687] loop3: detected capacity change from 0 to 1024 [ 121.905041][ T4687] hfsplus: invalid file type 0174377 for inode 21 [ 121.933403][ T4687] hfsplus: invalid file type 0174377 for inode 21 [ 122.007222][ T4564] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.050038][ T4564] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.185749][ T4695] loop3: detected capacity change from 0 to 512 [ 122.279798][ T4564] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.309117][ T4564] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.379498][ T23] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 122.408652][ T23] Bluetooth: hci4: Injecting HCI hardware error event [ 122.417576][ T4190] Bluetooth: hci4: hardware error 0x00 [ 122.465849][ T4695] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.108: inode has both inline data and extents flags [ 122.487935][ T4695] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.108: couldn't read orphan inode 15 (err -117) [ 122.541995][ T4695] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.832176][ T4564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.910215][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.921513][ T4710] loop1: detected capacity change from 0 to 2048 [ 122.949065][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.513702][ T4713] netlink: 'syz.0.111': attribute type 12 has an invalid length. [ 123.752155][ T4564] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.081299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.101708][ T4710] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 124.110919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.144769][ T4724] loop0: detected capacity change from 0 to 128 [ 124.167157][ T4710] UDF-fs: Scanning with blocksize 512 failed [ 124.182744][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.190016][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.226872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.256808][ T4710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.276393][ T4724] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 124.290438][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.309635][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.349269][ T4710] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.369051][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.376348][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.510022][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.591106][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.680392][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.710995][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.738627][ T4744] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.815152][ T4737] loop1: detected capacity change from 0 to 1024 [ 124.951306][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.971054][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.988556][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.929247][ T26] audit: type=1800 audit(1777949996.643:6): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.116" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 126.120982][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.191205][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.915749][ T4564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.966879][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.986727][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.481837][ T4773] loop2: detected capacity change from 0 to 512 [ 128.824282][ T4773] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 129.139958][ T4769] binder_alloc: 4768: binder_alloc_buf, no vma [ 129.283207][ T4324] device hsr_slave_0 left promiscuous mode [ 129.320355][ T4324] device hsr_slave_1 left promiscuous mode [ 129.344302][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.373019][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.473700][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.492820][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.536728][ T4796] loop2: detected capacity change from 0 to 1024 [ 129.563729][ T4324] device bridge_slave_1 left promiscuous mode [ 129.728656][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.448230][ T26] audit: type=1800 audit(1777950001.173:7): pid=4807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.131" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 130.499214][ T4324] device bridge_slave_0 left promiscuous mode [ 131.182123][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.509459][ T4324] device veth1_macvtap left promiscuous mode [ 131.516088][ T4324] device veth0_macvtap left promiscuous mode [ 131.781021][ T4324] device veth1_vlan left promiscuous mode [ 131.832916][ T4324] device veth0_vlan left promiscuous mode [ 132.335523][ T4820] loop3: detected capacity change from 0 to 1024 [ 132.354272][ T4820] EXT4-fs (loop3): Ignoring removed nobh option [ 132.405238][ T4820] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,,errors=continue. Quota mode: none. [ 132.437209][ T4820] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.449982][ T4324] team0 (unregistering): Port device team_slave_1 removed [ 132.469692][ T4324] team0 (unregistering): Port device team_slave_0 removed [ 132.502092][ T4324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.522794][ T4324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.655047][ T4324] bond0 (unregistering): Released all slaves [ 132.909309][ T4818] netlink: 13 bytes leftover after parsing attributes in process `syz.2.133'. [ 133.038987][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.046205][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.628164][ T4564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.652159][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.687879][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.217610][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.107480][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 136.072709][ T4855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 136.676735][ T4859] loop3: detected capacity change from 0 to 2048 [ 136.745804][ T7] usb 3-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 136.895304][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.909588][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.934186][ T4859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.152936][ T7] usb 3-1: Product: syz [ 137.372196][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.820016][ T7] usb 3-1: Manufacturer: syz [ 137.824703][ T7] usb 3-1: SerialNumber: syz [ 137.889236][ T7] usb 3-1: can't set config #1, error -71 [ 137.911649][ T7] usb 3-1: USB disconnect, device number 2 [ 137.933285][ T4564] device veth0_vlan entered promiscuous mode [ 137.961397][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.983445][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.014671][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.063243][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.203770][ T4564] device veth1_vlan entered promiscuous mode [ 138.423481][ T4271] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.441365][ T4564] device veth0_macvtap entered promiscuous mode [ 138.467775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.525878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.581381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.647953][ T4564] device veth1_macvtap entered promiscuous mode [ 138.711896][ T4271] usb 4-1: Using ep0 maxpacket: 8 [ 138.768853][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.840423][ T4271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.854997][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.882916][ T4271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.932552][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.032057][ T4271] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 139.046111][ T4271] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 139.055276][ T4271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.068630][ T4271] usb 4-1: config 0 descriptor?? [ 139.114957][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.154937][ T4906] loop2: detected capacity change from 0 to 128 [ 139.182055][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.208951][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.219138][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.247589][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.259969][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.277161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.288095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.343097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.374076][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.418087][ T4906] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x00000000000090ed,init_itable=0x00000000000000f8,,errors=continue. Quota mode: none. [ 139.452005][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.520069][ T4906] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.531135][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.579872][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.595243][ T4906] EXT4-fs (loop2): shut down requested (2) [ 139.635283][ T4271] logitech 0003:046D:C293.0001: unknown main item tag 0x0 [ 139.659070][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.679925][ T4271] logitech 0003:046D:C293.0001: unknown main item tag 0x0 [ 139.690776][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.701701][ T4564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.712393][ T4564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.713755][ T4271] logitech 0003:046D:C293.0001: unknown main item tag 0x0 [ 139.740118][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.751112][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.772142][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.777214][ T4271] logitech 0003:046D:C293.0001: unknown main item tag 0x0 [ 139.803978][ T4564] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.831761][ T4564] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.860525][ T4271] logitech 0003:046D:C293.0001: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 139.872699][ T4271] logitech 0003:046D:C293.0001: no inputs found [ 139.879597][ T4564] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.892561][ T4564] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.962370][ T4271] usb 4-1: USB disconnect, device number 2 [ 141.038605][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.073185][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.115118][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.129849][ T4921] fido_id[4921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 141.270519][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.354322][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.437131][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.700893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.917988][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.099237][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.206873][ T4232] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 142.238860][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.335945][ T4232] usb 2-1: config 0 descriptor?? [ 144.186081][ T4232] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 144.216861][ T4232] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 144.942071][ T4232] cp2112 0003:10C4:EA90.0002: error requesting version [ 145.147436][ T4232] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 145.237545][ T4232] usb 2-1: USB disconnect, device number 2 [ 149.717115][ T4999] fido_id[4999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 149.889238][ T5010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.175'. [ 150.022380][ T5010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.175'. [ 150.551701][ T5032] hub 8-0:1.0: USB hub found [ 150.560009][ T5032] hub 8-0:1.0: 1 port detected [ 151.942711][ T5051] loop0: detected capacity change from 0 to 512 [ 153.374755][ T5051] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.405224][ T5051] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.419067][ T5062] loop3: detected capacity change from 0 to 1024 [ 153.468967][ T5065] binder: Binderfs stats mode cannot be changed during a remount [ 153.533406][ T5051] EXT4-fs (loop0): shut down requested (0) [ 154.541328][ T4239] hfsplus: b-tree write err: -5, ino 25 [ 154.547498][ T4239] hfsplus: b-tree write err: -5, ino 4 [ 154.605228][ T4239] hfsplus: b-tree write err: -5, ino 2 [ 154.610851][ T4239] hfsplus: b-tree write err: -5, ino 26 [ 155.395527][ T5090] loop3: detected capacity change from 0 to 512 [ 155.727687][ T5090] EXT4-fs (loop3): 1 truncate cleaned up [ 155.733680][ T5090] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.827051][ T5127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 157.973738][ T5129] netlink: 'syz.3.198': attribute type 12 has an invalid length. [ 162.173430][ T5158] loop2: detected capacity change from 0 to 2048 [ 162.457075][ T5158] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.074379][ T5184] netlink: 'syz.0.210': attribute type 12 has an invalid length. [ 166.781950][ T5193] loop2: detected capacity change from 0 to 1024 [ 166.862565][ T5193] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 166.862565][ T5193] [ 166.869238][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.940393][ T5197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.087142][ T5206] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.104689][ T5206] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.298592][ T5226] loop3: detected capacity change from 0 to 512 [ 169.440670][ T5233] mmap: syz.1.223 (5233): VmData 49418240 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 170.023827][ T5226] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.410974][ T5226] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.875866][ T5269] loop1: detected capacity change from 0 to 1024 [ 172.079168][ T5269] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 172.079168][ T5269] [ 172.968245][ T5279] netlink: 24 bytes leftover after parsing attributes in process `syz.5.234'. [ 175.174703][ T5298] loop2: detected capacity change from 0 to 764 [ 176.724059][ T5325] netlink: 220 bytes leftover after parsing attributes in process `syz.1.244'. [ 177.317301][ T5330] loop1: detected capacity change from 0 to 2048 [ 177.515151][ T5330] UDF-fs: error (device loop1): udf_read_inode: (ino 1312) failed !bh [ 177.681558][ T5330] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 177.818999][ T5330] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 177.948213][ T5330] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 178.015713][ T5330] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 178.160049][ T5342] loop3: detected capacity change from 0 to 1024 [ 178.535104][ T5342] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 178.535104][ T5342] [ 181.920955][ T26] audit: type=1326 audit(1777950049.645:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.2.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5b4942dd9 code=0x0 [ 182.384289][ T5392] loop1: detected capacity change from 0 to 1024 [ 183.106169][ T5408] loop5: detected capacity change from 0 to 256 [ 184.330699][ T5408] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 184.540030][ T26] audit: type=1800 audit(1777950052.097:9): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.266" name="file1" dev="loop5" ino=1048601 res=0 errno=0 [ 184.599015][ T5408] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 184.622032][ T5408] exFAT-fs (loop5): Filesystem has been set read-only [ 184.669273][ T5408] attempt to access beyond end of device [ 184.669273][ T5408] loop5: rw=524288, want=34359738504, limit=256 [ 184.742433][ T5408] attempt to access beyond end of device [ 184.742433][ T5408] loop5: rw=0, want=34359738504, limit=256 [ 184.808147][ T5408] attempt to access beyond end of device [ 184.808147][ T5408] loop5: rw=0, want=34359738504, limit=256 [ 187.631965][ T5460] loop2: detected capacity change from 0 to 512 [ 187.672876][ T5460] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.281: missing EA_INODE flag [ 187.691693][ T5460] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.281: error while reading EA inode 12 err=-117 [ 187.729412][ T5460] EXT4-fs (loop2): 1 orphan inode deleted [ 187.735493][ T5460] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 187.772835][ T5469] netlink: 'syz.3.282': attribute type 12 has an invalid length. [ 187.983029][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 188.904298][ T23] usb 2-1: device not accepting address 3, error -71 [ 191.799086][ T5517] loop2: detected capacity change from 0 to 512 [ 191.987744][ T5517] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.295: missing EA_INODE flag [ 192.018926][ T5517] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.295: error while reading EA inode 12 err=-117 [ 192.034264][ T5517] EXT4-fs (loop2): 1 orphan inode deleted [ 192.044124][ T5517] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 193.015238][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.300'. [ 193.055450][ T5539] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.065050][ T5539] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.074170][ T5539] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.083136][ T5539] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.237941][ T5545] netlink: 144 bytes leftover after parsing attributes in process `syz.2.301'. [ 193.277525][ T5545] Zero length message leads to an empty skb [ 193.282446][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.300'. [ 193.412360][ T5552] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 193.599182][ T5558] loop1: detected capacity change from 0 to 512 [ 193.656514][ T5565] loop2: detected capacity change from 0 to 512 [ 193.698389][ T5558] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.309: bg 0: block 255: padding at end of block bitmap is not set [ 193.740137][ T5558] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 193.766827][ T5558] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.309: invalid indirect mapped block 1 (level 1) [ 193.782474][ T5558] EXT4-fs (loop1): 1 truncate cleaned up [ 193.788378][ T5558] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.792594][ T5565] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.311: missing EA_INODE flag [ 193.934191][ T5565] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.311: error while reading EA inode 12 err=-117 [ 194.024776][ T5565] EXT4-fs (loop2): 1 orphan inode deleted [ 194.044501][ T5565] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 195.462774][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 195.493439][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 195.536674][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 195.994301][ T5601] netlink: 'syz.3.317': attribute type 12 has an invalid length. [ 196.769387][ T5604] binder: BINDER_SET_CONTEXT_MGR already set [ 196.775783][ T5604] binder: 5603:5604 ioctl 4018620d 2000000002c0 returned -16 [ 196.969037][ T5610] netlink: 'syz.2.318': attribute type 3 has an invalid length. [ 197.204678][ T5619] netlink: 104 bytes leftover after parsing attributes in process `syz.2.322'. [ 197.241318][ T5620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'. [ 197.275050][ T5623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.324'. [ 198.664474][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.670845][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.749385][ T5634] loop3: detected capacity change from 0 to 512 [ 198.833951][ T5634] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.328: missing EA_INODE flag [ 198.967254][ T5634] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.328: error while reading EA inode 12 err=-117 [ 199.200287][ T5634] EXT4-fs (loop3): 1 orphan inode deleted [ 199.212748][ T5634] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 201.690354][ T5652] netlink: 'syz.1.330': attribute type 12 has an invalid length. [ 204.349017][ T5680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.340'. [ 204.566418][ T5688] loop2: detected capacity change from 0 to 512 [ 204.759355][ T5693] loop3: detected capacity change from 0 to 1024 [ 204.879587][ T5693] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 204.879587][ T5693] [ 204.984321][ T5688] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.326: bg 0: block 255: padding at end of block bitmap is not set [ 205.065680][ T5688] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 205.917282][ T4324] wlan1: Trigger new scan to find an IBSS to join [ 205.929464][ T5688] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.326: invalid indirect mapped block 1 (level 1) [ 206.323520][ T5688] EXT4-fs (loop2): 1 truncate cleaned up [ 206.329289][ T5688] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.910804][ T5739] binder: BINDER_SET_CONTEXT_MGR already set [ 208.940703][ T5739] binder: 5738:5739 ioctl 4018620d 2000000002c0 returned -16 [ 209.395599][ T5751] loop1: detected capacity change from 0 to 1024 [ 209.466555][ T5751] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 209.466555][ T5751] [ 209.491994][ T5754] syz.0.360 uses obsolete (PF_INET,SOCK_PACKET) [ 210.842537][ T302] wlan1: Creating new IBSS network, BSSID 4e:ac:7d:5b:4a:63 [ 212.410867][ T5796] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 212.719145][ T5796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.906560][ T5799] bond1: (slave geneve2): making interface the new active one [ 213.014291][ T5799] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 213.069872][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 213.160104][ T5799] syz.3.368 (5799) used greatest stack depth: 18200 bytes left [ 214.066765][ T5826] loop1: detected capacity change from 0 to 512 [ 214.172985][ T5826] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.365: bg 0: block 255: padding at end of block bitmap is not set [ 214.199510][ T5826] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 214.209203][ T5826] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.365: invalid indirect mapped block 1 (level 1) [ 214.241807][ T5826] EXT4-fs (loop1): 1 truncate cleaned up [ 214.247629][ T5826] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.525750][ T5846] netlink: 24 bytes leftover after parsing attributes in process `syz.5.375'. [ 216.429214][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.438744][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.306024][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.341573][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.523355][ T5846] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.532810][ T5846] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.542715][ T5846] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.552274][ T5846] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.649784][ T5846] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.658982][ T5846] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.668014][ T5846] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.677084][ T5846] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.780336][ T5898] netlink: 'syz.0.384': attribute type 4 has an invalid length. [ 219.942714][ T5907] netlink: 'syz.2.386': attribute type 39 has an invalid length. [ 220.919202][ T5933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.392'. [ 221.141657][ T5935] ================================================================== [ 221.150196][ T5935] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 221.159482][ T5935] Read of size 1 at addr ffff888060979608 by task syz.2.393/5935 [ 221.167242][ T5935] [ 221.169603][ T5935] CPU: 0 PID: 5935 Comm: syz.2.393 Not tainted syzkaller #0 [ 221.177000][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.187090][ T5935] Call Trace: [ 221.190445][ T5935] [ 221.193412][ T5935] dump_stack_lvl+0x188/0x250 [ 221.198307][ T5935] ? show_regs_print_info+0x20/0x20 [ 221.203541][ T5935] ? load_image+0x400/0x400 [ 221.208073][ T5935] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 221.213568][ T5935] print_address_description+0x60/0x2d0 [ 221.219246][ T5935] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 221.225917][ T5935] kasan_report+0xdf/0x130 [ 221.230465][ T5935] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 221.237108][ T5935] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 221.243763][ T5935] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 221.250073][ T5935] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 221.256404][ T5935] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 221.262376][ T5935] xfrm_policy_inexact_insert+0xe0/0x1460 [ 221.268139][ T5935] ? do_raw_spin_lock+0x128/0x2f0 [ 221.273212][ T5935] ? __rwlock_init+0x140/0x140 [ 221.278022][ T5935] ? policy_hash_bysel+0x135/0x7b0 [ 221.283349][ T5935] xfrm_policy_insert+0x112/0x930 [ 221.289906][ T5935] xfrm_add_policy+0x4f2/0x880 [ 221.289976][ T5935] ? xfrm_dump_sa_done+0xc0/0xc0 [ 221.289996][ T5935] ? apparmor_capable+0x12c/0x190 [ 221.290024][ T5935] ? __nla_parse+0x3c/0x50 [ 221.290057][ T5935] xfrm_user_rcv_msg+0x5e5/0x910 [ 221.290083][ T5935] ? xfrm_netlink_rcv+0x90/0x90 [ 221.290132][ T5935] ? xfrm_netlink_rcv+0x66/0x90 [ 221.290152][ T5935] ? __mutex_lock_common+0x465/0x2400 [ 221.290184][ T5935] ? __skb_clone+0x480/0x790 [ 221.290216][ T5935] netlink_rcv_skb+0x1f5/0x440 [ 221.290239][ T5935] ? xfrm_netlink_rcv+0x90/0x90 [ 221.290262][ T5935] ? netlink_ack+0xb50/0xb50 [ 221.290286][ T5935] ? __lock_acquire+0x7d10/0x7d10 [ 221.290322][ T5935] xfrm_netlink_rcv+0x75/0x90 [ 221.290344][ T5935] netlink_unicast+0x774/0x920 [ 221.290378][ T5935] netlink_sendmsg+0x8ba/0xbe0 [ 221.290411][ T5935] ? netlink_getsockopt+0x570/0x570 [ 221.290437][ T5935] ? aa_sock_msg_perm+0x94/0x150 [ 221.290462][ T5935] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 221.290484][ T5935] ? security_socket_sendmsg+0x7c/0xa0 [ 221.290508][ T5935] ? netlink_getsockopt+0x570/0x570 [ 221.290528][ T5935] ____sys_sendmsg+0x5b7/0x8f0 [ 221.290562][ T5935] ? __sys_sendmsg_sock+0x30/0x30 [ 221.290598][ T5935] ? import_iovec+0x6f/0xa0 [ 221.290626][ T5935] ___sys_sendmsg+0x236/0x2e0 [ 221.290661][ T5935] ? __sys_sendmsg+0x2a0/0x2a0 [ 221.290699][ T5935] ? percpu_counter_add_batch+0x13b/0x160 [ 221.290766][ T5935] __se_sys_sendmsg+0x1af/0x290 [ 221.290794][ T5935] ? __x64_sys_sendmsg+0x80/0x80 [ 221.290816][ T5935] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 221.290856][ T5935] ? lockdep_hardirqs_on+0x94/0x140 [ 221.290886][ T5935] do_syscall_64+0x4c/0xa0 [ 221.290906][ T5935] ? clear_bhb_loop+0x30/0x80 [ 221.290927][ T5935] ? clear_bhb_loop+0x30/0x80 [ 221.290951][ T5935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.290973][ T5935] RIP: 0033:0x7fc5b4942dd9 [ 221.290997][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.291016][ T5935] RSP: 002b:00007fc5b2b9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.291043][ T5935] RAX: ffffffffffffffda RBX: 00007fc5b4bbbfa0 RCX: 00007fc5b4942dd9 [ 221.291060][ T5935] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 221.291074][ T5935] RBP: 00007fc5b49d8d69 R08: 0000000000000000 R09: 0000000000000000 [ 221.291088][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.291102][ T5935] R13: 00007fc5b4bbc038 R14: 00007fc5b4bbbfa0 R15: 00007ffd053068e8 [ 221.291138][ T5935] [ 221.291146][ T5935] [ 221.291153][ T5935] Allocated by task 5935: [ 221.291163][ T5935] __kasan_kmalloc+0xb5/0xf0 [ 221.291186][ T5935] sk_prot_alloc+0xe7/0x210 [ 221.291204][ T5935] sk_alloc+0x2f/0x310 [ 221.291219][ T5935] pfkey_create+0xd8/0x560 [ 221.291236][ T5935] __sock_create+0x47b/0x900 [ 221.291256][ T5935] __sys_socket+0xe2/0x170 [ 221.291273][ T5935] __x64_sys_socket+0x76/0x80 [ 221.291291][ T5935] do_syscall_64+0x4c/0xa0 [ 221.291309][ T5935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.291328][ T5935] [ 221.291333][ T5935] The buggy address belongs to the object at ffff888060979000 [ 221.291333][ T5935] which belongs to the cache kmalloc-2k of size 2048 [ 221.291350][ T5935] The buggy address is located 1544 bytes inside of [ 221.291350][ T5935] 2048-byte region [ffff888060979000, ffff888060979800) [ 221.291368][ T5935] The buggy address belongs to the page: [ 221.291377][ T5935] page:ffffea0001825e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60978 [ 221.291399][ T5935] head:ffffea0001825e00 order:3 compound_mapcount:0 compound_pincount:0 [ 221.291416][ T5935] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 221.291448][ T5935] raw: 00fff00000010200 ffffea0001ebc600 0000000200000002 ffff888016c42000 [ 221.291467][ T5935] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 221.291478][ T5935] page dumped because: kasan: bad access detected [ 221.291487][ T5935] page_owner tracks the page as allocated [ 221.291495][ T5935] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 69534794925, free_ts 23604362727 [ 221.291526][ T5935] get_page_from_freelist+0x1bbd/0x1ca0 [ 221.291550][ T5935] __alloc_pages+0x1ee/0x480 [ 221.291569][ T5935] new_slab+0xc0/0x4b0 [ 221.291586][ T5935] ___slab_alloc+0x80a/0xdd0 [ 221.291603][ T5935] __kmalloc+0x1cd/0x330 [ 221.291620][ T5935] __register_sysctl_table+0xe0/0x1230 [ 221.291640][ T5935] __addrconf_sysctl_register+0x271/0x3e0 [ 221.291662][ T5935] addrconf_sysctl_register+0x15c/0x1b0 [ 221.291683][ T5935] ipv6_add_dev+0xbf3/0x1190 [ 221.291701][ T5935] addrconf_notify+0x66f/0xf00 [ 221.291721][ T5935] raw_notifier_call_chain+0xcb/0x160 [ 221.291752][ T5935] register_netdevice+0x12a6/0x1710 [ 221.291773][ T5935] macvlan_common_newlink+0x109a/0x1810 [ 221.291795][ T5935] rtnl_newlink+0x1359/0x1a50 [ 221.291815][ T5935] rtnetlink_rcv_msg+0x844/0xf30 [ 221.291836][ T5935] netlink_rcv_skb+0x1f5/0x440 [ 221.291854][ T5935] page last free stack trace: [ 221.291861][ T5935] free_unref_page_prepare+0x637/0x6c0 [ 221.291882][ T5935] free_unref_page+0x8f/0x2a0 [ 221.291902][ T5935] free_contig_range+0x96/0xf0 [ 221.291923][ T5935] destroy_args+0xf0/0xa00 [ 221.291946][ T5935] debug_vm_pgtable+0x321/0x380 [ 221.291967][ T5935] do_one_initcall+0x272/0x730 [ 221.291987][ T5935] do_initcall_level+0x137/0x1f0 [ 221.292007][ T5935] do_initcalls+0x4b/0x90 [ 221.292026][ T5935] kernel_init_freeable+0x3e9/0x570 [ 221.292046][ T5935] kernel_init+0x19/0x1b0 [ 221.292067][ T5935] ret_from_fork+0x1f/0x30 [ 221.292087][ T5935] [ 221.292092][ T5935] Memory state around the buggy address: [ 221.292102][ T5935] ffff888060979500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.292116][ T5935] ffff888060979580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 221.292130][ T5935] >ffff888060979600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.292140][ T5935] ^ [ 221.292151][ T5935] ffff888060979680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.292165][ T5935] ffff888060979700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.292175][ T5935] ================================================================== [ 221.292183][ T5935] Disabling lock debugging due to kernel taint [ 221.292263][ T5935] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.292274][ T5935] CPU: 0 PID: 5935 Comm: syz.2.393 Tainted: G B syzkaller #0 [ 221.292294][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.292305][ T5935] Call Trace: [ 221.292312][ T5935] [ 221.292320][ T5935] dump_stack_lvl+0x188/0x250 [ 221.292341][ T5935] ? show_regs_print_info+0x20/0x20 [ 221.292359][ T5935] ? load_image+0x400/0x400 [ 221.292381][ T5935] panic+0x2e5/0x810 [ 221.292403][ T5935] ? bpf_jit_dump+0xd0/0xd0 [ 221.292425][ T5935] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 221.292446][ T5935] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 221.292463][ T5935] ? _raw_spin_unlock+0x40/0x40 [ 221.292481][ T5935] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 221.292500][ T5935] check_panic_on_warn+0x80/0xa0 [ 221.292520][ T5935] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 221.292541][ T5935] end_report+0x6d/0xf0 [ 221.292561][ T5935] kasan_report+0x102/0x130 [ 221.292582][ T5935] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 221.292605][ T5935] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 221.292630][ T5935] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 221.292658][ T5935] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 221.292679][ T5935] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 221.292700][ T5935] xfrm_policy_inexact_insert+0xe0/0x1460 [ 221.292721][ T5935] ? do_raw_spin_lock+0x128/0x2f0 [ 221.292752][ T5935] ? __rwlock_init+0x140/0x140 [ 221.292771][ T5935] ? policy_hash_bysel+0x135/0x7b0 [ 221.292792][ T5935] xfrm_policy_insert+0x112/0x930 [ 221.292814][ T5935] xfrm_add_policy+0x4f2/0x880 [ 221.292835][ T5935] ? xfrm_dump_sa_done+0xc0/0xc0 [ 221.292853][ T5935] ? apparmor_capable+0x12c/0x190 [ 221.292874][ T5935] ? __nla_parse+0x3c/0x50 [ 221.292897][ T5935] xfrm_user_rcv_msg+0x5e5/0x910 [ 221.292919][ T5935] ? xfrm_netlink_rcv+0x90/0x90 [ 221.292947][ T5935] ? xfrm_netlink_rcv+0x66/0x90 [ 221.292964][ T5935] ? __mutex_lock_common+0x465/0x2400 [ 221.292988][ T5935] ? __skb_clone+0x480/0x790 [ 221.293012][ T5935] netlink_rcv_skb+0x1f5/0x440 [ 221.293030][ T5935] ? xfrm_netlink_rcv+0x90/0x90 [ 221.293048][ T5935] ? netlink_ack+0xb50/0xb50 [ 221.293066][ T5935] ? __lock_acquire+0x7d10/0x7d10 [ 221.293091][ T5935] xfrm_netlink_rcv+0x75/0x90 [ 221.293109][ T5935] netlink_unicast+0x774/0x920 [ 221.293131][ T5935] netlink_sendmsg+0x8ba/0xbe0 [ 221.293152][ T5935] ? netlink_getsockopt+0x570/0x570 [ 221.293171][ T5935] ? aa_sock_msg_perm+0x94/0x150 [ 221.293192][ T5935] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 221.293212][ T5935] ? security_socket_sendmsg+0x7c/0xa0 [ 221.293232][ T5935] ? netlink_getsockopt+0x570/0x570 [ 221.293250][ T5935] ____sys_sendmsg+0x5b7/0x8f0 [ 221.293274][ T5935] ? __sys_sendmsg_sock+0x30/0x30 [ 221.293299][ T5935] ? import_iovec+0x6f/0xa0 [ 221.293322][ T5935] ___sys_sendmsg+0x236/0x2e0 [ 221.293346][ T5935] ? __sys_sendmsg+0x2a0/0x2a0 [ 221.293371][ T5935] ? percpu_counter_add_batch+0x13b/0x160 [ 221.293402][ T5935] __se_sys_sendmsg+0x1af/0x290 [ 221.293430][ T5935] ? __x64_sys_sendmsg+0x80/0x80 [ 221.293449][ T5935] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 221.293477][ T5935] ? lockdep_hardirqs_on+0x94/0x140 [ 221.293497][ T5935] do_syscall_64+0x4c/0xa0 [ 221.293513][ T5935] ? clear_bhb_loop+0x30/0x80 [ 221.293531][ T5935] ? clear_bhb_loop+0x30/0x80 [ 221.293548][ T5935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.293567][ T5935] RIP: 0033:0x7fc5b4942dd9 [ 221.293583][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.293598][ T5935] RSP: 002b:00007fc5b2b9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.293619][ T5935] RAX: ffffffffffffffda RBX: 00007fc5b4bbbfa0 RCX: 00007fc5b4942dd9 [ 221.293632][ T5935] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 221.293644][ T5935] RBP: 00007fc5b49d8d69 R08: 0000000000000000 R09: 0000000000000000 [ 221.293656][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.293666][ T5935] R13: 00007fc5b4bbc038 R14: 00007fc5b4bbbfa0 R15: 00007ffd053068e8 [ 221.293684][ T5935] [ 221.294136][ T5935] Kernel Offset: disabled [ 222.329209][ T5935] Rebooting in 86400 seconds..