last executing test programs: 11.772016835s ago: executing program 4 (id=199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x1}, 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, 0x0, 0x8040) sendto$inet(r1, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0) 11.512890601s ago: executing program 0 (id=206): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 11.34920316s ago: executing program 0 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x75, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 11.291179194s ago: executing program 2 (id=209): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) 11.265902225s ago: executing program 2 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, 0x0, 0x4000004) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0xc7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r1, 0x7d3de76dd748dac5, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x40) 11.17705802s ago: executing program 3 (id=211): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)={0x2c0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_TID_CONFIG={0x298, 0x11d, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffb, 0x0, 0x5, 0x3, 0x6, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x5, 0x48, 0x4, 0x24, 0x18, 0xc, 0x18, 0x0, 0x30, 0x6c, 0x4, 0x4, 0x2, 0x12, 0x6, 0x1b, 0x16, 0x30, 0x36, 0x1, 0x1, 0x4, 0x1, 0x1b]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x3}, {0x2}, {0x2, 0xa}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {}, {0x7, 0x1}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x1}, {0x7, 0x3}, {0x3, 0x9}, {0x7, 0xa}, {0x1, 0x3}, {0x2, 0x5}, {0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x2, 0x9}, {0x2, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xa0, 0x6, 0x0, 0x1, 0x1, 0x1, 0xfffc]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xa, 0x9, 0x7, 0x5, 0x5, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xbf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x0, 0x4, 0x20e, 0x8, 0x9, 0x1685, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb, 0x0, 0x6, 0x5, 0x1000, 0x401, 0x101]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x7, 0x4, 0x7d1f, 0x1, 0xdfad]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6f3f, 0x5, 0x9, 0xf, 0x4, 0x81, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x1}, {0x3, 0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x2}, {0x5, 0x7}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x1, 0xa}, {0x4, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5c, 0x6c, 0x1b, 0x16, 0x9, 0x1, 0x1, 0x16, 0xc]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0xa}, {0x3, 0x6}, {0x2}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x1, 0x2, 0x32, 0x30, 0x1, 0x6c, 0x4, 0xb, 0xc, 0xed86245579e8f654, 0x12, 0x6c, 0x2, 0x18, 0x48, 0x6c]}]}]}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x41}, 0x24004814) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x940, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000b40)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1) 10.912282376s ago: executing program 4 (id=212): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}}, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.82991532s ago: executing program 1 (id=213): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'wrr\x00', 0x1, 0x6, 0x48}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10.761219544s ago: executing program 1 (id=214): accept$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 10.760834325s ago: executing program 1 (id=215): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 421.176876ms ago: executing program 2 (id=216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) 368.589999ms ago: executing program 0 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "fa094fc6"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0d98c690e4e2b536aa91c0223c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) 320.916272ms ago: executing program 1 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94) 320.230502ms ago: executing program 3 (id=219): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x891e, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r0]) 319.641332ms ago: executing program 4 (id=220): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22"], 0x0) 253.281375ms ago: executing program 4 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 252.463976ms ago: executing program 1 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x4000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633"], 0x6f4}}, 0x0) 252.170066ms ago: executing program 0 (id=223): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) 251.994126ms ago: executing program 3 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="638c7f360000ffdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="2c007a800c000300"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) 231.854306ms ago: executing program 2 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 226.244747ms ago: executing program 0 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xc6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 173.05946ms ago: executing program 1 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x75, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 172.81433ms ago: executing program 3 (id=228): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 172.49799ms ago: executing program 4 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x8004000) 157.394571ms ago: executing program 3 (id=230): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 132.992522ms ago: executing program 0 (id=231): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)={0x2c0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_TID_CONFIG={0x298, 0x11d, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffb, 0x0, 0x5, 0x3, 0x6, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x5, 0x48, 0x4, 0x24, 0x18, 0xc, 0x18, 0x0, 0x30, 0x6c, 0x4, 0x4, 0x2, 0x12, 0x6, 0x1b, 0x16, 0x30, 0x36, 0x1, 0x1, 0x4, 0x1, 0x1b]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x3}, {0x2}, {0x2, 0xa}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {}, {0x7, 0x1}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x1}, {0x7, 0x3}, {0x3, 0x9}, {0x7, 0xa}, {0x1, 0x3}, {0x2, 0x5}, {0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x2, 0x9}, {0x2, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xa0, 0x6, 0x0, 0x1, 0x1, 0x1, 0xfffc]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xa, 0x9, 0x7, 0x5, 0x5, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xbf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x0, 0x4, 0x20e, 0x8, 0x9, 0x1685, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb, 0x0, 0x6, 0x5, 0x1000, 0x401, 0x101]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x7, 0x4, 0x7d1f, 0x1, 0xdfad]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6f3f, 0x5, 0x9, 0xf, 0x4, 0x81, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x1}, {0x3, 0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x2}, {0x5, 0x7}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x1, 0xa}, {0x4, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5c, 0x6c, 0x1b, 0x16, 0x9, 0x1, 0x1, 0x16, 0xc]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0xa}, {0x3, 0x6}, {0x2}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x1, 0x2, 0x32, 0x30, 0x1, 0x6c, 0x4, 0xb, 0xc, 0xed86245579e8f654, 0x12, 0x6c, 0x2, 0x18, 0x48, 0x6c]}]}]}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x41}, 0x24004814) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x940, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000b40)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1) 73.193486ms ago: executing program 4 (id=232): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}}, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 72.331616ms ago: executing program 3 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000540)="f6e3cc9b9bdaa4c2b473804988ca", 0xe}], 0x1) 23.251039ms ago: executing program 2 (id=234): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000000700)=""/4089, 0xff9}, {&(0x7f0000001700)=""/89, 0x59}], 0x3}, 0x10020) 0s ago: executing program 2 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 31.590779][ T4309] cgroup: Unknown subsys name 'net' [ 31.816349][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.080089][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.367007][ T4326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.368807][ T4326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.374074][ T4327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.375573][ T4327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.376783][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.378116][ T4327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.379391][ T4327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.380710][ T4327] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 33.381994][ T4327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.383141][ T4327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.384588][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.392495][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 33.393942][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.395112][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.396708][ T4331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.404036][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.405592][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 33.411601][ T4331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.412854][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.415055][ T4326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.419154][ T4326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.421726][ T4326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.423047][ T4326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 33.425005][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.444474][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.448593][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.449983][ T4331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.452482][ T4331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.459456][ T4331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 33.460882][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.555652][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 33.565174][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 33.568575][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 33.582691][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 33.623171][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.624598][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.626082][ T4325] device bridge_slave_0 entered promiscuous mode [ 33.628419][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.629580][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.631165][ T4322] device bridge_slave_0 entered promiscuous mode [ 33.638508][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.639730][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.641208][ T4325] device bridge_slave_1 entered promiscuous mode [ 33.645489][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.646609][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.648091][ T4322] device bridge_slave_1 entered promiscuous mode [ 33.649406][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.650558][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.651952][ T4332] device bridge_slave_0 entered promiscuous mode [ 33.653493][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.654946][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.656353][ T4321] device bridge_slave_0 entered promiscuous mode [ 33.658896][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.659975][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.661420][ T4321] device bridge_slave_1 entered promiscuous mode [ 33.669716][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.671100][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.672162][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.673499][ T4332] device bridge_slave_1 entered promiscuous mode [ 33.675114][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 33.683110][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.691532][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.693955][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.703072][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.706097][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.708516][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.710895][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.719049][ T4325] team0: Port device team_slave_0 added [ 33.725768][ T4322] team0: Port device team_slave_0 added [ 33.730303][ T4322] team0: Port device team_slave_1 added [ 33.731759][ T4325] team0: Port device team_slave_1 added [ 33.735870][ T4332] team0: Port device team_slave_0 added [ 33.741666][ T4321] team0: Port device team_slave_0 added [ 33.749696][ T4332] team0: Port device team_slave_1 added [ 33.751209][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.752198][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.757967][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.761735][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.762849][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.767384][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.773493][ T4321] team0: Port device team_slave_1 added [ 33.778646][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.779740][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.784274][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.793304][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.794793][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.796299][ T4334] device bridge_slave_0 entered promiscuous mode [ 33.798069][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.799097][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.800496][ T4334] device bridge_slave_1 entered promiscuous mode [ 33.801889][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.802968][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.807412][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.809515][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.810528][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.814506][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.822823][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.824034][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.827857][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.833636][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.836900][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.840818][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.845464][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.847641][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.884964][ T4322] device hsr_slave_0 entered promiscuous mode [ 33.924139][ T4322] device hsr_slave_1 entered promiscuous mode [ 33.976734][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.977917][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.981730][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.034882][ T4332] device hsr_slave_0 entered promiscuous mode [ 34.074002][ T4332] device hsr_slave_1 entered promiscuous mode [ 34.113883][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.115160][ T4332] Cannot create hsr debugfs directory [ 34.117034][ T4334] team0: Port device team_slave_0 added [ 34.119917][ T4334] team0: Port device team_slave_1 added [ 34.155203][ T4325] device hsr_slave_0 entered promiscuous mode [ 34.194026][ T4325] device hsr_slave_1 entered promiscuous mode [ 34.233957][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.235057][ T4325] Cannot create hsr debugfs directory [ 34.304971][ T4321] device hsr_slave_0 entered promiscuous mode [ 34.343934][ T4321] device hsr_slave_1 entered promiscuous mode [ 34.394216][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.395418][ T4321] Cannot create hsr debugfs directory [ 34.396554][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.397576][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.401444][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.409450][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.410558][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.414469][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.464901][ T4334] device hsr_slave_0 entered promiscuous mode [ 34.506201][ T4334] device hsr_slave_1 entered promiscuous mode [ 34.543793][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.545013][ T4334] Cannot create hsr debugfs directory [ 34.620487][ T4322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.655599][ T4322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.696441][ T4322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.734830][ T4322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.786982][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.850147][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.888973][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.926676][ T4332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.978108][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.014984][ T4332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.060434][ T4332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.094884][ T4332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.142636][ T4321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.175536][ T4321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.226709][ T4321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.285321][ T4321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.326421][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.361375][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.387112][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.434198][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 35.435551][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.443847][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 35.444050][ T4331] Bluetooth: hci1: command 0x0409 tx timeout [ 35.491504][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.507018][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.509052][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.513999][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 35.515014][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 35.518551][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.538417][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.539959][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.541512][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.542595][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.546556][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.551102][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.553581][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.560933][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.562609][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.564555][ T1612] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.565610][ T1612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.576085][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.577976][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.583637][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.588643][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.590019][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.591373][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.592760][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.597939][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.606886][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.608633][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.610086][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.611613][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.612996][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.615273][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.616644][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.617793][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.619108][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.620583][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.622106][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.623522][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.632454][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.634437][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.635865][ T1612] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.636959][ T1612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.639321][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.641948][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.647017][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.649293][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.650905][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.652285][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.654097][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.658586][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.660785][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.662259][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.664081][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.665210][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.666563][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.668101][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.669650][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.671086][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.672215][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.675011][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.682544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.684716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.686052][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.687147][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.688457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.689894][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.691245][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.692304][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.693563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.709249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.710753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.712269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.714864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.716963][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.718481][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.720059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.721578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.722974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.726955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.728634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.730014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.731659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.733522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.738771][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.742914][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.754876][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.756260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.759180][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.760668][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.762053][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.763260][ T1575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.768990][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.777651][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.779237][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.780740][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.782273][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.794934][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.797265][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.798791][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.800426][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.806139][ T4332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.807793][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.811623][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.813260][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.815787][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.817277][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.819223][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.820709][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.822067][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.823599][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.828273][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.829817][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.831198][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.832289][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.835913][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.837805][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.855060][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.856529][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.857868][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.859225][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.860403][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.861567][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.863159][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.867606][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.869215][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.870668][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.872128][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.874957][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.876382][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.879878][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.886993][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.890409][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.892402][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.896636][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.898201][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.902337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.904052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.912151][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.916911][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.918146][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.946268][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.947991][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.949782][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.951791][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.954603][ T4322] device veth0_vlan entered promiscuous mode [ 35.960519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.961793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.985994][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.988260][ T4322] device veth1_vlan entered promiscuous mode [ 36.006619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.008206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.009528][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.010611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.017680][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.033060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.036246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.043409][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.048642][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.050303][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.051850][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.053032][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.058783][ T4322] device veth0_macvtap entered promiscuous mode [ 36.066275][ T4322] device veth1_macvtap entered promiscuous mode [ 36.069343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.070814][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.072184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.073658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.086943][ T4325] device veth0_vlan entered promiscuous mode [ 36.091988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.093432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.097996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.099530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.101291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.102837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.109449][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.110709][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.112304][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.125345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.126790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.128289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.129835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.131334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.132650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.136771][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.137903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.139538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.141583][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.143072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.146005][ T4325] device veth1_vlan entered promiscuous mode [ 36.149361][ T4332] device veth0_vlan entered promiscuous mode [ 36.150728][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.152140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.153480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.157817][ T4322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.159170][ T4322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.160434][ T4322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.161717][ T4322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.164272][ T4321] device veth0_vlan entered promiscuous mode [ 36.174538][ T4332] device veth1_vlan entered promiscuous mode [ 36.179556][ T4321] device veth1_vlan entered promiscuous mode [ 36.191783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.193285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.195376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.196719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.198188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.199640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.201269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.205857][ T4321] device veth0_macvtap entered promiscuous mode [ 36.209682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.211092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.212533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.215550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.216934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.218898][ T4334] device veth0_vlan entered promiscuous mode [ 36.221586][ T4321] device veth1_macvtap entered promiscuous mode [ 36.242454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.244230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.245830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.247247][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.248686][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.250614][ T4334] device veth1_vlan entered promiscuous mode [ 36.255733][ T4325] device veth0_macvtap entered promiscuous mode [ 36.258001][ T4325] device veth1_macvtap entered promiscuous mode [ 36.268345][ T4332] device veth0_macvtap entered promiscuous mode [ 36.276455][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.278002][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.280091][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.287117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.288638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.289996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.291464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.292802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.295026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.296597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.299066][ T4332] device veth1_macvtap entered promiscuous mode [ 36.304976][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.306225][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.309345][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.311666][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.313139][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.315873][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.318130][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.320956][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.322353][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.324754][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.326232][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.333741][ T4334] device veth0_macvtap entered promiscuous mode [ 36.337983][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.339535][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.343438][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.345915][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.347969][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.349896][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.351497][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.352978][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.354624][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.356786][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.358232][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.359941][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.361423][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.362986][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.365835][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.368928][ T4332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.370164][ T4332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.371452][ T4332] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.372703][ T4332] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.376483][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.378063][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.379482][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.380945][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.382389][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.386674][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.388870][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.391704][ T4334] device veth1_macvtap entered promiscuous mode [ 36.393410][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.396164][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.397348][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.398756][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.400062][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.401411][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.406461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.408260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.409688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.411102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.429406][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.430953][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.432415][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.434989][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.436535][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.438135][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.440500][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.445177][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.446775][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.448284][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.449799][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.451264][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.452788][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.454793][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.456393][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.459579][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.462427][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.464162][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.465698][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.467114][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.487575][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.488988][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.490372][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.491635][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.499230][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.500991][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.502534][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.514064][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.515597][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.517181][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.518644][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.520175][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.522455][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.526454][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.527780][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.529204][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.530673][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.559385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.577028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.586813][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.588044][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.590228][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.593309][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.597030][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.603156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.612611][ T1575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.614222][ T1575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.615733][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.931519][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.934140][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.937908][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.968265][ T1575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.969579][ T1575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.976549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.026092][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.027406][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.028835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.043561][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.052457][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.058519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.075671][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.077149][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.078534][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.174048][ T4441] loop4: detected capacity change from 0 to 256 [ 37.205799][ T4441] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 37.534308][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 37.594215][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 37.595778][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 38.244455][ T4323] Bluetooth: hci2: command 0x041b tx timeout [ 38.245418][ T4323] Bluetooth: hci0: command 0x041b tx timeout [ 38.670568][ T4456] loop3: detected capacity change from 0 to 136 [ 38.675952][ T4462] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.003530][ T4445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 39.128707][ T4475] loop1: detected capacity change from 0 to 764 [ 39.593900][ T4323] Bluetooth: hci1: command 0x040f tx timeout [ 39.674666][ T4323] Bluetooth: hci3: command 0x040f tx timeout [ 39.675674][ T4323] Bluetooth: hci4: command 0x040f tx timeout [ 39.741733][ T4477] loop3: detected capacity change from 0 to 32768 [ 39.783409][ T4485] loop0: detected capacity change from 0 to 4096 [ 39.794384][ T4485] ======================================================= [ 39.794384][ T4485] WARNING: The mand mount option has been deprecated and [ 39.794384][ T4485] and is ignored by this kernel. Remove the mand [ 39.794384][ T4485] option from the mount to silence this warning. [ 39.794384][ T4485] ======================================================= [ 39.974694][ T4491] add_index: next_index = 0. Resetting! [ 39.975603][ T4491] find_entry called with index >= next_index [ 39.976472][ T4491] find_entry called with index >= next_index [ 39.977351][ T4491] find_entry called with index >= next_index [ 39.978179][ T4491] find_entry called with index >= next_index [ 40.709093][ T4326] Bluetooth: hci0: command 0x040f tx timeout [ 40.731136][ T4326] Bluetooth: hci2: command 0x040f tx timeout [ 40.819882][ T4491] find_entry called with index >= next_index [ 40.820808][ T4491] find_entry called with index >= next_index [ 40.821733][ T4491] find_entry called with index >= next_index [ 40.822677][ T4491] find_entry called with index >= next_index [ 40.823580][ T4491] find_entry called with index >= next_index [ 40.824442][ T4491] find_entry called with index >= next_index [ 40.825262][ T4491] find_entry called with index >= next_index [ 40.861837][ T4488] find_entry called with index >= next_index [ 40.941409][ T4498] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 41.547412][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.548850][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.678487][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 41.689322][ T4511] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 41.692069][ T4511] Remounting filesystem read-only [ 41.891298][ T4517] loop3: detected capacity change from 0 to 4096 [ 41.896310][ T4517] ntfs3: Unknown parameter 'windows_names' [ 42.059408][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 42.060390][ T4323] Bluetooth: hci3: command 0x0419 tx timeout [ 42.135113][ T27] audit: type=1326 audit(42.130:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd77368 code=0x7ffc0000 [ 42.147216][ T27] audit: type=1326 audit(42.140:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd77368 code=0x7ffc0000 [ 42.156263][ T27] audit: type=1326 audit(42.150:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd77368 code=0x7ffc0000 [ 42.161546][ T4315] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.188014][ T27] audit: type=1326 audit(42.150:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=189 compat=0 ip=0xffff9bd77368 code=0x7ffc0000 [ 42.203366][ T27] audit: type=1326 audit(42.150:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd77368 code=0x7ffc0000 [ 42.227277][ T27] audit: type=1326 audit(42.150:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd77368 code=0x7ffc0000 [ 42.241282][ T27] audit: type=1326 audit(42.150:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9bd77368 code=0x7ffc0000 [ 42.257446][ T27] audit: type=1326 audit(42.150:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9bd77368 code=0x7ffc0000 [ 42.492069][ T4526] loop0: detected capacity change from 0 to 32768 [ 42.714140][ T4326] Bluetooth: hci0: command 0x0419 tx timeout [ 42.789781][ T4533] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 42.789781][ T4533] [ 42.793978][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 42.799576][ T4533] ERROR: (device loop0): remounting filesystem as read-only [ 42.812968][ T4533] syz.0.24: attempt to access beyond end of device [ 42.812968][ T4533] loop0: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 42.882235][ T4533] overlayfs: filesystem on './file1' not supported [ 43.080457][ T4536] loop1: detected capacity change from 0 to 2048 [ 43.152461][ T4536] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 43.159911][ T4536] UDF-fs: Scanning with blocksize 512 failed [ 43.199441][ T4536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 43.619794][ T93] blkno = 1580, nblocks = 1 [ 43.620660][ T93] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 43.620660][ T93] [ 43.802242][ T4549] input: syz0 as /devices/virtual/input/input2 [ 44.012543][ T4552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.025992][ T4552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.214491][ T4562] device syzkaller0 entered promiscuous mode [ 45.556684][ T4591] netlink: 'syz.3.46': attribute type 21 has an invalid length. [ 45.557921][ T4591] netlink: 132 bytes leftover after parsing attributes in process `syz.3.46'. [ 45.743406][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 45.781228][ T4603] loop3: detected capacity change from 0 to 32768 [ 45.790520][ T4603] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 45.791828][ T4603] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 45.801812][ T4603] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 45.812320][ T3898] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 45.813895][ T3898] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 45.825479][ T3898] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 11ms [ 45.844400][ T3898] gfs2: fsid=syz:syz.0: jid=0: Done [ 45.847300][ T4604] block device autoloading is deprecated and will be removed. [ 45.852203][ T4603] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 45.907113][ T4603] gfs2: fsid=syz:syz.0: found 1 quota changes [ 45.980589][ T4610] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 45.980589][ T4610] inode = 11 2339 [ 45.980589][ T4610] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 45.993981][ T4610] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 45.995417][ T4610] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4610 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x500 [ 45.996626][ T4603] syz.3.51: attempt to access beyond end of device [ 45.996626][ T4603] loop3: rw=12288, sector=6755399441055880, nr_sectors = 8 limit=32768 [ 46.006393][ T4610] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 46.011558][ T4610] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 47.107544][ T4632] netlink: 232 bytes leftover after parsing attributes in process `syz.1.61'. [ 47.489950][ T4641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.736507][ T4394] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.767615][ T4668] process 'syz.4.74' launched '.' with NULL argv: empty string added [ 48.853508][ T4671] netlink: 'syz.4.75': attribute type 21 has an invalid length. [ 48.854916][ T4671] netlink: 128 bytes leftover after parsing attributes in process `syz.4.75'. [ 48.856382][ T4671] netlink: 'syz.4.75': attribute type 4 has an invalid length. [ 48.857558][ T4671] netlink: 3 bytes leftover after parsing attributes in process `syz.4.75'. [ 48.913817][ T4394] usb 1-1: Using ep0 maxpacket: 16 [ 48.917604][ T4394] usb 1-1: config 1 has an invalid descriptor of length 195, skipping remainder of the config [ 48.919240][ T4394] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.922069][ T4394] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.923458][ T4394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.924838][ T4394] usb 1-1: Product: syz [ 48.925579][ T4394] usb 1-1: Manufacturer: syz [ 48.926269][ T4394] usb 1-1: SerialNumber: syz [ 49.491057][ T4678] loop1: detected capacity change from 0 to 131072 [ 49.508296][ T4678] XFS (loop1): Mounting V5 Filesystem [ 49.528733][ T4678] XFS (loop1): Starting recovery (logdev: internal) [ 49.537634][ T4678] XFS (loop1): Ending recovery (logdev: internal) [ 49.561102][ T4322] XFS (loop1): Unmounting Filesystem [ 50.177421][ T4697] sock: sock_timestamping_bind_phc: sock not bind to device [ 51.064233][ T4610] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 51.065967][ T4610] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 51.079274][ T4610] gfs2: fsid=syz:syz.0: File system withdrawn [ 51.092458][ T4610] CPU: 1 PID: 4610 Comm: gfs2_quotad Not tainted syzkaller #0 [ 51.093559][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 51.095031][ T4610] Call trace: [ 51.095528][ T4610] dump_backtrace+0x1c0/0x1ec [ 51.096220][ T4610] show_stack+0x2c/0x3c [ 51.096928][ T4610] __dump_stack+0x30/0x40 [ 51.097556][ T4610] dump_stack_lvl+0xf4/0x15c [ 51.098229][ T4610] dump_stack+0x1c/0x5c [ 51.098857][ T4610] gfs2_withdraw+0xfa4/0x1390 [ 51.099530][ T4610] gfs2_consist_inode_i+0xf0/0x10c [ 51.100246][ T4610] gfs2_inode_refresh+0x918/0xd64 [ 51.100965][ T4610] inode_go_instantiate+0x4c/0x68 [ 51.101727][ T4610] gfs2_instantiate+0x178/0x2b4 [ 51.102455][ T4610] gfs2_glock_wait+0x1b4/0x298 [ 51.103203][ T4610] gfs2_glock_nq+0x8bc/0x11c4 [ 51.103899][ T4610] do_sync+0x41c/0xaec [ 51.104517][ T4610] gfs2_quota_sync+0x2cc/0x500 [ 51.105288][ T4610] gfs2_quotad+0x2d8/0x500 [ 51.105942][ T4610] kthread+0x250/0x2d8 [ 51.106586][ T4610] ret_from_fork+0x10/0x20 [ 51.251340][ T4394] usb 1-1: 0:2 : does not exist [ 51.296441][ T4394] usb 1-1: USB disconnect, device number 2 [ 51.298774][ T4321] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 51.301316][ T4321] CPU: 1 PID: 4321 Comm: syz-executor Not tainted syzkaller #0 [ 51.302451][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 51.303946][ T4321] Call trace: [ 51.304420][ T4321] dump_backtrace+0x1c0/0x1ec [ 51.305089][ T4321] show_stack+0x2c/0x3c [ 51.305743][ T4321] __dump_stack+0x30/0x40 [ 51.306383][ T4321] dump_stack_lvl+0xf4/0x15c [ 51.307080][ T4321] dump_stack+0x1c/0x5c [ 51.307705][ T4321] gfs2_assert_warn_i+0x16c/0x26c [ 51.308452][ T4321] gfs2_quota_cleanup+0x464/0x668 [ 51.309189][ T4321] gfs2_put_super+0x1f0/0x760 [ 51.309862][ T4321] generic_shutdown_super+0x130/0x324 [ 51.310678][ T4321] kill_block_super+0x70/0xdc [ 51.311342][ T4321] gfs2_kill_sb+0xc0/0xd4 [ 51.311982][ T4321] deactivate_locked_super+0xac/0x120 [ 51.312802][ T4321] deactivate_super+0xe4/0x104 [ 51.313520][ T4321] cleanup_mnt+0x390/0x418 [ 51.314195][ T4321] __cleanup_mnt+0x20/0x30 [ 51.314878][ T4321] task_work_run+0x1ec/0x278 [ 51.315568][ T4321] do_notify_resume+0x1fa0/0x2aa4 [ 51.316324][ T4321] el0_svc+0x98/0x128 [ 51.316938][ T4321] el0t_64_sync_handler+0x84/0xf0 [ 51.317713][ T4321] el0t_64_sync+0x18c/0x190 [ 51.385279][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 51.452051][ T4723] loop3: detected capacity change from 0 to 512 [ 51.491792][ T4723] EXT4-fs (loop3): Test dummy encryption mode enabled [ 51.492854][ T4723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.495876][ T4723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.507562][ T4723] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.90: bad orphan inode 131083 [ 51.509571][ T4723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.532877][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 51.625776][ T4734] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 52.341107][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 52.495415][ T4762] loop0: detected capacity change from 0 to 8192 [ 53.549728][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 53.621148][ T4800] loop3: detected capacity change from 0 to 32768 [ 53.629730][ T4800] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.117 (4800) [ 53.639658][ T4800] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.641448][ T4800] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 53.642988][ T4800] BTRFS info (device loop3): turning on sync discard [ 53.644678][ T4800] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 53.648822][ T4800] BTRFS info (device loop3): use zstd compression, level 3 [ 53.650263][ T4800] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 53.652005][ T4800] BTRFS info (device loop3): trying to use backup root at mount time [ 53.653586][ T4800] BTRFS info (device loop3): enabling auto defrag [ 53.655284][ T4800] BTRFS info (device loop3): using free space tree [ 53.699627][ T9] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 53.702144][ T4800] BTRFS error (device loop3): failed to load root extent [ 53.703437][ T4800] BTRFS warning (device loop3): try to load backup roots slot 1 [ 53.706481][ T4482] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 53.709857][ T4800] BTRFS warning (device loop3): couldn't read tree root [ 53.711436][ T4800] BTRFS warning (device loop3): try to load backup roots slot 2 [ 53.713081][ T4800] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 53.716475][ T4800] BTRFS warning (device loop3): couldn't read tree root [ 53.717751][ T4800] BTRFS warning (device loop3): try to load backup roots slot 3 [ 53.727439][ T4800] BTRFS info (device loop3): enabling ssd optimizations [ 53.729500][ T4800] BTRFS info (device loop3): rebuilding free space tree [ 53.759126][ T4800] BTRFS info (device loop3): checking UUID tree [ 53.857116][ T4321] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.869753][ T4829] netlink: 'syz.1.121': attribute type 11 has an invalid length. [ 53.910240][ T4831] loop2: detected capacity change from 0 to 512 [ 53.970915][ T4831] EXT4-fs: Ignoring removed bh option [ 53.996992][ T4831] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 54.013095][ T4842] NILFS (nullb0): couldn't find nilfs on the device [ 54.090144][ T4831] EXT4-fs (loop2): 1 truncate cleaned up [ 54.091205][ T4831] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.119041][ T4332] EXT4-fs (loop2): unmounting filesystem. [ 54.459381][ T4853] device syzkaller0 entered promiscuous mode [ 54.518537][ T4845] loop3: detected capacity change from 0 to 32768 [ 54.531213][ T4845] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.122 (4845) [ 54.539129][ T4845] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 54.542012][ T4845] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 54.544724][ T4845] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 54.546319][ T4845] BTRFS info (device loop3): use lzo compression, level 0 [ 54.555656][ T4845] BTRFS info (device loop3): using free space tree [ 54.649303][ T4845] BTRFS info (device loop3): enabling ssd optimizations [ 54.688677][ T4321] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 55.143242][ T4906] syz.4.142 uses obsolete (PF_INET,SOCK_PACKET) [ 55.364623][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.366103][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.372968][ T4913] netlink: 44 bytes leftover after parsing attributes in process `syz.0.141'. [ 55.516119][ T4923] device syzkaller0 entered promiscuous mode [ 55.519812][ T4923] tipc: Started in network mode [ 55.520586][ T4923] tipc: Node identity 26c0b4c4a134, cluster identity 4711 [ 55.521788][ T4923] tipc: Enabled bearer , priority 0 [ 55.525410][ T4922] tipc: Resetting bearer [ 55.635470][ T4922] tipc: Disabling bearer [ 56.288188][ T4953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.157'. [ 56.456948][ T4928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.169507][ T4977] device syzkaller0 entered promiscuous mode [ 58.620210][ T4929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.780442][ T4996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.172'. [ 58.802722][ T4995] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.174'. [ 58.849925][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 59.010324][ T5014] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 59.011742][ T5014] netlink: 'syz.0.181': attribute type 2 has an invalid length. [ 59.012994][ T5014] netlink: 184 bytes leftover after parsing attributes in process `syz.0.181'. [ 59.186830][ T5032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 59.229506][ T5034] netlink: 44 bytes leftover after parsing attributes in process `syz.4.190'. [ 59.405154][ T5057] tipc: Started in network mode [ 59.405996][ T5057] tipc: Node identity , cluster identity 4711 [ 59.406951][ T5057] tipc: Failed to obtain node identity [ 59.408028][ T5057] tipc: Enabling of bearer rejected, failed to enable media [ 59.459903][ T5062] Zero length message leads to an empty skb [ 59.832386][ T5082] netlink: 44 bytes leftover after parsing attributes in process `syz.0.207'. [ 59.848995][ T5082] device syzkaller0 entered promiscuous mode [ 64.475367][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.476523][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.480218][ T22] cfg80211: failed to load regulatory.db [ 70.965133][ T5131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.224'. [ 71.017720][ T5133] device syzkaller0 entered promiscuous mode [ 71.021842][ T5137] netlink: 44 bytes leftover after parsing attributes in process `syz.1.227'. [ 71.030311][ T5137] device syzkaller0 entered promiscuous mode [ 81.753813][ T4610] ================================================================== [ 81.755126][ T4610] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x6800 [ 81.756220][ T4610] Read of size 8 at addr ffff0000d4f6cbb0 by task gfs2_quotad/4610 [ 81.757342][ T4610] [ 81.757686][ T4610] CPU: 0 PID: 4610 Comm: gfs2_quotad Not tainted syzkaller #0 [ 81.758681][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 81.760079][ T4610] Call trace: [ 81.760524][ T4610] dump_backtrace+0x1c0/0x1ec [ 81.761207][ T4610] show_stack+0x2c/0x3c [ 81.761799][ T4610] __dump_stack+0x30/0x40 [ 81.762414][ T4610] dump_stack_lvl+0xf4/0x15c [ 81.763076][ T4610] print_address_description+0x88/0x218 [ 81.763853][ T4610] print_report+0x50/0x68 [ 81.764490][ T4610] kasan_report+0xa8/0xfc [ 81.765115][ T4610] __asan_report_load8_noabort+0x2c/0x38 [ 81.765937][ T4610] __lock_acquire+0x104/0x6800 [ 81.766697][ T4610] lock_acquire+0x20c/0x63c [ 81.767360][ T4610] _raw_spin_lock_irqsave+0x6c/0xb0 [ 81.768121][ T4610] finish_wait+0xc8/0x1ac [ 81.768750][ T4610] gfs2_quotad+0x390/0x500 [ 81.769364][ T4610] kthread+0x250/0x2d8 [ 81.769941][ T4610] ret_from_fork+0x10/0x20 [ 81.770569][ T4610] [ 81.770901][ T4610] Allocated by task 4708: [ 81.771503][ T4610] kasan_set_track+0x4c/0x80 [ 81.772146][ T4610] kasan_save_alloc_info+0x24/0x30 [ 81.772862][ T4610] __kasan_kmalloc+0xa0/0xb8 [ 81.773525][ T4610] __kmalloc_node_track_caller+0xe0/0x16c [ 81.774301][ T4610] __alloc_skb+0x264/0x714 [ 81.774886][ T4610] nsim_dev_trap_report_work+0x214/0x984 [ 81.775733][ T4610] process_one_work+0x7f8/0x13a4 [ 81.776421][ T4610] worker_thread+0x8c4/0xfec [ 81.777055][ T4610] kthread+0x250/0x2d8 [ 81.777614][ T4610] ret_from_fork+0x10/0x20 [ 81.778207][ T4610] [ 81.778519][ T4610] Freed by task 4708: [ 81.779048][ T4610] kasan_set_track+0x4c/0x80 [ 81.779673][ T4610] kasan_save_free_info+0x38/0x5c [ 81.780347][ T4610] ____kasan_slab_free+0x148/0x1b0 [ 81.781097][ T4610] __kasan_slab_free+0x18/0x28 [ 81.781774][ T4610] slab_free_freelist_hook+0x16c/0x1e8 [ 81.782493][ T4610] __kmem_cache_free+0xbc/0x218 [ 81.783133][ T4610] kfree+0xd0/0x1a8 [ 81.783644][ T4610] skb_release_data+0x434/0x63c [ 81.784291][ T4610] consume_skb+0xa0/0x104 [ 81.784902][ T4610] nsim_dev_trap_report_work+0x630/0x984 [ 81.785660][ T4610] process_one_work+0x7f8/0x13a4 [ 81.786328][ T4610] worker_thread+0x8c4/0xfec [ 81.786953][ T4610] kthread+0x250/0x2d8 [ 81.787510][ T4610] ret_from_fork+0x10/0x20 [ 81.788106][ T4610] [ 81.788430][ T4610] The buggy address belongs to the object at ffff0000d4f6c000 [ 81.788430][ T4610] which belongs to the cache kmalloc-4k of size 4096 [ 81.790287][ T4610] The buggy address is located 2992 bytes inside of [ 81.790287][ T4610] 4096-byte region [ffff0000d4f6c000, ffff0000d4f6d000) [ 81.792092][ T4610] [ 81.792405][ T4610] The buggy address belongs to the physical page: [ 81.793265][ T4610] page:0000000013833120 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114f68 [ 81.794631][ T4610] head:0000000013833120 order:3 compound_mapcount:0 compound_pincount:0 [ 81.795783][ T4610] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 81.796866][ T4610] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002a80 [ 81.798001][ T4610] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 81.799133][ T4610] page dumped because: kasan: bad access detected [ 81.799970][ T4610] [ 81.800296][ T4610] Memory state around the buggy address: [ 81.801080][ T4610] ffff0000d4f6ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.802159][ T4610] ffff0000d4f6cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.803254][ T4610] >ffff0000d4f6cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.804361][ T4610] ^ [ 81.805136][ T4610] ffff0000d4f6cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.806223][ T4610] ffff0000d4f6cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.807309][ T4610] ================================================================== [ 81.808369][ T4610] Disabling lock debugging due to kernel taint [ 81.809221][ T4610] INFO: trying to register non-static key. [ 81.809975][ T4610] The code is fine but needs lockdep annotation, or maybe [ 81.810916][ T4610] you didn't initialize this object before use? [ 81.811757][ T4610] turning off the locking correctness validator. [ 81.812613][ T4610] CPU: 0 PID: 4610 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 81.813844][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 81.815188][ T4610] Call trace: [ 81.815652][ T4610] dump_backtrace+0x1c0/0x1ec [ 81.816313][ T4610] show_stack+0x2c/0x3c [ 81.816898][ T4610] __dump_stack+0x30/0x40 [ 81.817504][ T4610] dump_stack_lvl+0xf4/0x15c [ 81.818147][ T4610] dump_stack+0x1c/0x5c [ 81.818707][ T4610] assign_lock_key+0x230/0x264 [ 81.819366][ T4610] register_lock_class+0x1ac/0x694 [ 81.820081][ T4610] __lock_acquire+0x164/0x6800 [ 81.820735][ T4610] lock_acquire+0x20c/0x63c [ 81.821358][ T4610] _raw_spin_lock_irqsave+0x6c/0xb0 [ 81.822072][ T4610] finish_wait+0xc8/0x1ac [ 81.822669][ T4610] gfs2_quotad+0x390/0x500 [ 81.823278][ T4610] kthread+0x250/0x2d8 [ 81.823852][ T4610] ret_from_fork+0x10/0x20 [ 81.824463][ T4610] list_del corruption. prev->next should be ffff800021257d98, but was 0000000000000000. (prev=ffff0000d4f6cbd8) [ 81.826166][ T4610] ------------[ cut here ]------------ [ 81.826892][ T4610] kernel BUG at lib/list_debug.c:61! [ 81.827612][ T4610] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 81.828637][ T4610] Modules linked in: [ 81.829184][ T4610] CPU: 0 PID: 4610 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 81.830395][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 81.831722][ T4610] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 81.832788][ T4610] pc : __list_del_entry_valid+0x13c/0x158 [ 81.833560][ T4610] lr : __list_del_entry_valid+0x13c/0x158 [ 81.834328][ T4610] sp : ffff800021257c70 [ 81.834886][ T4610] x29: ffff800021257c70 x28: 0000000000000000 x27: 0000000000000bb8 [ 81.835971][ T4610] x26: 0000000000001770 x25: dfff800000000000 x24: dfff800000000000 [ 81.837077][ T4610] x23: ffff0000d4f6c7c0 x22: dfff800000000000 x21: ffff0000d4f6cbd8 [ 81.838167][ T4610] x20: ffff0000d4f6cbd8 x19: ffff800021257d98 x18: ffff800011b8bf60 [ 81.839281][ T4610] x17: 20747562202c3839 x16: ffff8000082ef028 x15: 0000000000000000 [ 81.840412][ T4610] x14: 0000000000000001 x13: 1fffe00033ea87a3 x12: 0000000000ff0100 [ 81.841548][ T4610] x11: ff00800008311710 x10: 0000000000000000 x9 : a44d448d48933700 [ 81.842682][ T4610] x8 : a44d448d48933700 x7 : 0000000000000001 x6 : 0000000000000001 [ 81.843808][ T4610] x5 : ffff800021257738 x4 : ffff8000152f4cc0 x3 : ffff80000853857c [ 81.844956][ T4610] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 000000000000006d [ 81.846108][ T4610] Call trace: [ 81.846588][ T4610] __list_del_entry_valid+0x13c/0x158 [ 81.847370][ T4610] finish_wait+0xd4/0x1ac [ 81.847999][ T4610] gfs2_quotad+0x390/0x500 [ 81.848599][ T4610] kthread+0x250/0x2d8 [ 81.849162][ T4610] ret_from_fork+0x10/0x20 [ 81.849797][ T4610] Code: 912c0000 aa1303e1 aa1503e3 95c1b6e8 (d4210000) [ 81.850751][ T4610] ---[ end trace 0000000000000000 ]--- [ 82.028659][ T4610] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 82.029701][ T4610] SMP: stopping secondary CPUs [ 82.030444][ T4610] Kernel Offset: disabled [ 82.031062][ T4610] CPU features: 0x080000,000f0097,a65bfea7 [ 82.031907][ T4610] Memory Limit: none [ 82.200282][ T4610] Rebooting in 86400 seconds..