last executing test programs: 1m9.049134056s ago: executing program 0 (id=1): r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='270', 0x3) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0xf8024100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.105278642s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='100', 0x3) openat(r0, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x20082, 0x0) unshare(0x62040200) 53.057919131s ago: executing program 32 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='100', 0x3) openat(r0, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x20082, 0x0) unshare(0x62040200) 5.857558845s ago: executing program 4 (id=414): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0xfffffffffffffda1, 0x0}, 0xfff5}], 0x40001b6, 0x0) close(r1) 5.463259026s ago: executing program 4 (id=415): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x344fa}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 5.463028836s ago: executing program 4 (id=416): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8824) 5.462972376s ago: executing program 4 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 5.462844566s ago: executing program 4 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 5.462732796s ago: executing program 4 (id=419): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000040000"], 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r6 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r6, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/96, 0x60}], 0x1, &(0x7f0000000d00)=""/190, 0xbe}, 0x30120) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 2.803461656s ago: executing program 3 (id=427): socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1e, 0x0, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000640)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$tipc(0x1e, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = epoll_create1(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x20) 2.576616639s ago: executing program 5 (id=434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x44080}, 0x4044044) 2.36870746s ago: executing program 5 (id=437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x8a1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000480), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000580)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.096118868s ago: executing program 2 (id=443): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 1.922811765s ago: executing program 2 (id=444): syz_mount_image$exfat(&(0x7f0000002e40), &(0x7f0000002ec0)='./file1\x00', 0x80, &(0x7f0000002f00)=ANY=[], 0x7d, 0x1508, &(0x7f0000002f40)="$eJzs3Au0TlXXOPA511qb4+TyJLnvuebmSS6LJAklySVJkpDcE5IkSZLEIbckJCHXk+Qeck8nHff7Jfekk1eSJCEhyfqP0+Xv6633873v1/f3/r8zf2OscdY8e8211zpzPOfZe4/xPF93HVa9UY0q9ZkZ/hX6tw7+8iMJABIAYCAA5ACAAADK5iybM/14Fo1J/9JJxP+QBjOu9ArElST1z9ik/hmb1D9jk/pnbFL/jE3qn7FJ/TM2qb8QGdqsfFdLy7hNnv//f079d5Ll/T9DwH90QOr/v43+p0ZL/TM2qX/GJvXP2KT+GVlwpRcgrjB5/WdsUn8hMrS//JnyhnNX+pm2tH+iCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPit/4eBCVdkeUIIIYQQQgghhPgL+Hev9AqEEEIIIYQQQgjxPw9BgQYDAWSCzJAAWSARroKskA2yQw6IwdWQE66BXHAt5IY8kBfyQX4oAAUhBAILDBEUgsIQh+ugCFwPRaEYFIcS4KAklIIboDTcCGXgJigLN0M5uAXKQ4Wfz5nudqgMd0AVuBOqQjWoDjXgLqgJd0MtuAdqw71QB+6DunA/1IMHoD40gIbwIDSCh6AxNIGm0AyaQwtoeZn85Bx/lv889IAXoCf0giToDX3gRegL/aA/DICB8BIMgpdhMLwCQ2AoDINXYTi8BiPgdRgJo2A0vAFjYCyMg/EwASZCMrwJk+AtmAxvP5QNpsI0mA4zYCbMgndgNsyBufAuzIP5sACSsyyCxbAE3oOl8D6kwAewDD6EVFgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI2+Ai2ww7YCbtgN+yBvfAx7INPYD98Cmn42T+Zf/b3+dANAQEVKjRoMBNmwgRMwERMxKyYFbNjdoxhDHNiTsyFuTA35sa8mBeTMD8WxIJISMjIWAgLYRzjWASLYFEsisWxODp0WApLYWm8EctgGSyLZbEclsPyWAEr4K14K1bCSlgZK2MVrIJVsSpWx+p4F96Fd2MtrIW1sTbWwTpYF+tiPayH9bE+NsSG2AgbYWNsjE2xKTbH5tgSW2IrbIWtsTW2xbbYDtthe2yPHbADdsSO2Ak7YWfsjF2wC3bFrtgNn8Pn8Hl8Hl/AF7AXVlW9sQ/2wb7YF/vjAByAL+EgfBlfxldwCA7FYfgqvoqv4Qg8gyNxFI7G0VhJjcVxOB5ZTcRkTMbMMAkn42ScglNxKk7HGTgTZ+EsnI1zcA6+i/NwPs7HhbgQF+MSXIJL8X1MwRRchmcxFZfjClyJq3A1rsK1uA7X4gbciBtwM27GrbgVP8KPcAfuwF24C/fgHvwYP8ZP8BMcgmmYhgfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyOJ/AknsKTeBpP4xk8i+cA4Dyexwt4AS/ixfQXv0pnlFGZVCaVoBJUokpUWVVWlV1lVzEVUzlVTpVL5VK5VW6VV+VV+VV+VVAVVKRIsYpUIVVIxVVcFVFFVFFVVBVXxZVTTpVSpVRpVVqVUWVUWXWzKqduUeVVBdXG3apuVZVUW1dZ3aGqqCqqqqqmqqsaqoaqqWqqWqqWqq1qqzqqjqqr7lf1VG/sjw1UemUaqaHYWA3DpqqZaq5aqNfwYdVKjcDWqo1qqx5Vo3AktletXAf1hOqoxmEn9ZQaj0+rLmoidlXPqm7qOdVdPa96qNaup+qlpmBv1UdNx76qn+qvBqjZWE2lV6y6ekU9n3moGqZeVYvxNTVCva5GqlFqtHpDjVFj1Tg1Xk1QE1WyelNNUm+pyeptNUVNVdPUdDVDzVSz1Dtqtpqj5qp31Tw1Xy1QC9UitVgtUe+ppUqrFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+pg6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/8L+W/9Sf7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvfwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/y38y+3vpampWllWpnWprVpa9qadqadaW/amw6mg+loOppOppPpbDqbLqaL6Wq6mm6mm+luupsepofpaXqaJJNk+pgXTV/Tz/Q3A8xA85IZZAaZwWawGWKGmGFmmBluhpsRZoQZaUaa0Wa0GWPGmHFmnJlgJphkn8NMMpPMZDPZTDFTzLSBOcwMM8PMMrPMbDPbzDVzzTwzzywwC8wis8gsMUvMUrPUpJgUs8wsM6lmuVluVpqVZrVZbdaatWa9WW82mo1ms9lsUs02s81sN9vNTrPT7Da7zV6z1+wz+8x+s9+kmTRzwBwwB81Bc8gcMofNYXPEHDFHzVFzzBwzx81xc8KcMKfMKXPanDZnzBlzzpwz5815c8FcMBfNxfTLvkAFKjCBCTIFmYKEICFIDBKDrEHWIHuQPYgFsSBnkDPIFVwb5A7yBHmDfEH+oEBQMAgDCmzAQRQUCgoH8eC6oEhwfVA0KBYUD0oELigZlApuCEoHNwZlgpuCssHNQbnglqB8UCGoGNwa3BZUCm4PKgd3BFWCO4OqQbWgelAjuCuoGdwd1AruCWoH9wZ1gvuCusH9Qb3ggaB+0CBoGDwYNAoeChoHTYKmQbOgedAiaPmXzu/9mTyPuJ5hrzAp7B32CV8M+4b9wv7hgHBg+FI4KHw5HBy+Eg4Jh4bDwlfD4eFr4Yjw9XBkOCocHb4RjgnHhuPC8eGEcGKYHL4ZTgrfCieHb4dTwqnhtGB6OCOcGc4K3wlnh3PCueG74bxwfrggXBguCheH+MslMaSEH4TLwg/D1HB5uCJcGa4KV4drwrXhunB9uCHcGG4KN5cd9MvQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Fh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrFffrbOxkylIkyUQIlUCIlUlbKStkpO8UoRjkpJ+WiXJSbclNeykv5KT8VpIKUjompEBWiOMWpCBWholSUilNxcuSoFJWi0lSaylAZKktlqRyVo/JUnipSRbqNbqPb6Xa6g+6gO+lOqkbVqAbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpITWkRtSIGlNjakpNqTk1p5bUklpRK2pNrakttaV21I7aU3vqQB2oI3WkTtSJOlNn6kJdqCt1pW7UjbpTd+pBPagn9aQkSqI+1If6Ul/qT/1pIA2kQTSIBtNgGkJDaBgNo+E0nEbQCBpJo2g0vUFjaCyNo/E0gSZSMiXTJJpEk2kyTaEpNI2m0QyaQbNoFs2m2TSX5tI8mkcLaAEtokW0hJbQUlpKKZRCy2gZpVIqraAVtIpW0RpaQ+toHW2gDbSJNtEW2kLbaBttp+20k3bSbtpNe2kv7aN9tJ/2Uxql0QE6QAfpIB2iQ3SYDtMROkJH6Sgdo2N0nI7TCTpBp+gUnabTdIbO0Dk6R+fpR7pAP9FF8pRgs9hEe5XNarPZ7DaH/fs4r81n89sCtqANbW6b53cxWWuL2mK2uC1hnS1pS9kb/hCXtxVsRXurvc1Wsrfbyra8zQL/Ma5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/xAvte/bdXa93WA32n32E3vO/mCP2q/tefuj7Wl72YH2JTvIvmwH21fsEDv09zGAHW3fsGPsWDvOjrcT7MQ/xNPsdDvDzrSz7Dt2tp3zh3iJfc/Osyl2gV1oF9nFP8fpa0qxH9hl9kObapfbFXalXWVX2zV27f9d60q72W6xW+1e+7HdbnfYnXaX3W33/Byn72O//dSm2c/sEfuVPWg/t4fsMXvYfvlznL6/Y/Ybe9x+a0/Yk/aU/c6ett/bM/bsz/tP3/t39id70XoLjKxYs+GAM3FmTuAsnMhXcVbOxtk5B8f4as7J13AuvpZzcx7Oy/k4PxfgghwysWXmiAtxYY7zdVyEr+eiXIyLcwl2XJJL8Q1cmm/kMnwTl+WbuRzfwuW5AlfkW/k2rsS3c2W+g6vwnVyVq3F1rsF3cU2+m2vxPVyb7+U6fB/X5fu5Hj/A9bkBN+QHuRE/xI25CTflZtycW3BLfphb8SPcmttwW36U2/Fj3J4f5w78BHfkJ7kTP8Wd+Wnuws9wV36Wu/Fz3J2f5x78AvfkXpzEvbkPv8h9uR/35wE8kF/iQfwyD+ZXeAgP5WH8Kg/n13gEv84jeRSP5jd4DI/lcTyeJ/BETuY3eRK/xZP5bZ7CU3kaT+cZPJNn8Ts8m+fwXH6X5/F8XsALeREv5iX8Hi/l9zmFP+Bl/CGn8nJewSt5Fa/mNbyW1/F63sAbeRNv5i28lbfxR7ydd/BO3sW7eQ/v5Y95H3/C+/lTTuPP+AD/jQ/y53yIv+DD/CUf4a/4KH/Nx/gbPs7f8gk+yaf4Oz7N3/MZPsvn+Ac+zz/yBf6JL7JniDBSkY5MFESZosxRQpQlSoyuirJG2aLsUY4oFl0d5YyuiXJF10a5ozxR3ihflD8qEBWMwogiG3EURYWiwlE8ui4qEl0fFY2KRcWjEpGLSkalohui0tGNUZnopqhsdHNULrolKh9ViCpGt0a3RZWi26PK0R1RlejOqGpULaoe1YjuimpGd0e1onui2tG9UZnovqhudH9UL3ogqh81iBpGD0aNooeixlGTqGnULGoetYhaRg9HraJHotZRm6ht9GjULnosah89HnWInog6Rk9eOl4s+OXd9O+OJ0W9I/3rE7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtNvhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7x3z6r4zq5p1xn97Tr4p5xz7hnXTf3nOvunnc93Auup+vlklyS6+P6uL6ur+vv+ruBbqAb5Aa5wW6wG+KGuGFumBvuhrsRboQb6Ua60W60G+PGuHFunJvgJrhkl+wmuUluspvsprgpbpqb5ma4GW6Wm+Vmu9lurpvr5rl5boFb4Ba5RW6JW+KWuqUuxaW4ZW6ZS3WpboVb4Va5VW6NW+PWuXVug9vgNrlNbovb4ra5bW672+52up1ut9vt9rq9bp/b5/a7/S7NpbkD7oA76A66Q+4Ld9h96Y64r9xR97U75r5xx9237oQ76U45r0+7790Zd9adcz+48+5Hd8H95C4675Jjb8Ymxd6KTY69HZsSmxqbFpsemxGbGZsVeyc2OzYnNjf2bmxebH5sQWxhbFFscWxJ7L3Y0tj7sZTYB7FlsQ9jqbHlsRWxlbFVsdUx7wtsj3whX9jH/XW+iL/eF/XFfHFfwjtf0pfyN/jS/kZfxt/ky/qbfTl/iy/vK/iKvolv6pv55r6Fb+kf9q38I761b+Pb+kd9O/+Yb+8f9x38E76jf9J38k/5zv5p38U/47v6Z+f/WmXfw7/ge/pePsn39n38i76v7+f7+wF+oH/JD/Iv+8H+FT/ED/XD/Kt+uH/Nj/Cv+5F+lB/t3/Bj/Fg/zo/3E/xEn+zf9JP8W36yf9tP8VP9ND/dz/Az/Sz/jp/t5/i5/l0/z8/3C/xCv8gv9kv8e36pf9+n+A/8Mv+hT/XL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/zH/ntfoff6Xf53X6P3+s/9vv8J36//9Sn+c/8Af83f9B/7g/5L/xh/6U/4r/yR/3X/pj/xh/33/oT/qQ/5b/zp/33/ow/68/5H/x5/6O/4H/yF//sM2tCCCGEEOIP9GWO9/6T36lfW7o+AJBtR77Dfz/npty/9PupfR1jAPBEr64NfmsNGiQlJf06NlVDUHghAMQu5f/8/QO/xsuhLTwGHaANlP7T9fVTFX++7vvP5o/fDJAIkOW3nPTbo0T4+/lv/AfzN3mPLzf/QoCihS/lpJ/ot/jS/GX+wfx72l1m/iyfJwO0/g85WeFSfGn+UvAIPAkdfjdSCCGEEEIIIYT4RT91vtvl7m/T78/zm0s5meFSfLn788uo/FfsQQghhBBCCCGEEP+5p5/r/vjDHTq06fy/uZP532MZ/wYdBIB/g2VI59+/c6X/MwkhhBBCCCH+apcu+q/0SoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiIzrX/+GMPVfHnyl9yiEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEJcaf8nAAD//8jaVSM=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000a40)='cgroup2\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x19, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000bc0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f40)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001000)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001080), 0x651, 0x0) recvmmsg(r4, &(0x7f00000010c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) r6 = syz_open_procfs(0x0, &(0x7f0000001140)='net/ipv6_route\x00') pread64(r6, &(0x7f0000004480)=""/102400, 0x19000, 0xb9b) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000001d480)=@bpf_lsm={0x4, 0x4, &(0x7f000001d540)=ANY=[@ANYRESOCT=r4], &(0x7f000001d580)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xb, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000dc0)={r7, &(0x7f0000000e00), &(0x7f0000000e40)=""/10, 0x2}, 0x20) r8 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c00)={r1, r8, 0x16, 0x0, @void}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000e00)='net/softnet_stat\x00') preadv2(r9, &(0x7f0000000e80)=[{&(0x7f0000000ec0)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) 1.771770571s ago: executing program 3 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x210, r1, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1cc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '}##.+[//\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '0.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x11, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '}##.+[//\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x210}}, 0x0) 1.570938291s ago: executing program 3 (id=446): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000480), 0xffffffffffffff94, 0x4102000000000000, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000580)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 996.530119ms ago: executing program 1 (id=447): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) listen(r0, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000540)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x800) 991.88869ms ago: executing program 5 (id=448): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0xa, 0x4, 0x3, &(0x7f00000001c0)) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="14000300070000000000000000", 0xd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x100, [0xce9e, 0x80], 0x8}, 0x10) 758.539374ms ago: executing program 1 (id=449): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000600)) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3418000040000901feffffff00000000017c0000040042800c00018006000600800a000010180280091814800518", @ANYRES64=r0], 0x1834}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 758.445764ms ago: executing program 1 (id=450): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) 758.277914ms ago: executing program 3 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x18, 0x40, 0x109, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 758.212104ms ago: executing program 1 (id=452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) close(r0) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000840), 0x56) sendmsg$kcm(r3, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r2, 0x10042}, 0x80, 0x0}, 0x24004015) 672.568772ms ago: executing program 5 (id=453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0xffffff81, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0xa, 0x8, 0x2, 0x0, 0x1, 0x8, 0xc, 0x6, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x2, 0x5, 0xc, 0x40, 0xfffc, 0x4, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 671.881223ms ago: executing program 2 (id=454): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x24, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x19, 0x4, 0x4, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ec0)={r1}, 0xc) 534.544936ms ago: executing program 3 (id=455): close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x201, 0xca25, 0x5}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='p\x00', @ANYRES16, @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x8004090}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x44, r2, 0x1, 0x73bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x5801, 0x0, 0x90ef, 0x3, 0x5, 0x1, 0x7ff]}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 508.056409ms ago: executing program 3 (id=456): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x64042, 0x49) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 298.99059ms ago: executing program 2 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x5, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 285.463452ms ago: executing program 1 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 276.608773ms ago: executing program 5 (id=459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 249.907325ms ago: executing program 2 (id=460): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x9}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x16d}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x526d50c4}, @TCA_FQ_FLOW_REFILL_DELAY={0x0, 0x9, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 64.781224ms ago: executing program 5 (id=461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000480), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000580)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 64.475794ms ago: executing program 1 (id=462): syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48844) write$nci(r0, &(0x7f0000000300)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r4) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f0000000480)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2a, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000080)='espintcp', 0x8) 0s ago: executing program 2 (id=463): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000840)=0x7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x9, 0x9, 0x6}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) readv(r3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000d80), 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x7, 0x2, 0xfff1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f00000005c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000680)='GPL\x00', 0x2, 0xde, &(0x7f00000006c0)=""/222}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 47.270682][ T4175] cgroup: Unknown subsys name 'net' [ 47.409050][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.631262][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.676937][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.685256][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.704954][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.741980][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 49.765508][ T4198] rdma_rxe: rxe_register_device failed with error -23 [ 49.773171][ T4198] rdma_rxe: failed to add rxe_eth0 [ 49.783625][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 49.790768][ T4189] rdma_rxe: failed to add rxe_eth0 [ 49.803993][ T4195] rdma_rxe: failed to add rxe_eth0 [ 49.875618][ T4206] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.879026][ T4203] rdma_rxe: ignoring netdev event = 9 for rxe_eth0 [ 49.875093][ T4188] infiniband rxe0: set active [ 49.889654][ T4203] rdma_rxe: ignoring netdev event = 8 for rxe_eth0 [ 49.894234][ T4188] infiniband rxe0: added rxe_eth0 [ 49.914534][ T4203] rdma_rxe: already configured on rxe_eth0 [ 49.938121][ T4195] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.951401][ T4188] RDS/IB: rxe0: added [ 49.956397][ T4188] smc: adding ib device rxe0 with port count 1 [ 49.964624][ T4188] smc: ib device rxe0 port 1 has pnetid [ 49.985451][ T4206] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.079428][ T4203] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.174147][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 50.205206][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 50.278263][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.330329][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 50.412834][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.440323][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.450680][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.461561][ T4198] device bridge_slave_0 entered promiscuous mode [ 50.504961][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.512041][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.527742][ T4198] device bridge_slave_1 entered promiscuous mode [ 50.539203][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.550118][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.560459][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.569804][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.577163][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.585327][ T4195] device bridge_slave_0 entered promiscuous mode [ 50.599029][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.606360][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.614135][ T4195] device bridge_slave_1 entered promiscuous mode [ 50.627558][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.634803][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.642439][ T4189] device bridge_slave_1 entered promiscuous mode [ 50.678026][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.709035][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.726906][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.742767][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.759236][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.796560][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.815357][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.862150][ T4198] team0: Port device team_slave_0 added [ 50.887742][ T4189] team0: Port device team_slave_0 added [ 50.900437][ T4198] team0: Port device team_slave_1 added [ 50.912486][ T4195] team0: Port device team_slave_0 added [ 50.927844][ T4195] team0: Port device team_slave_1 added [ 50.936073][ T4189] team0: Port device team_slave_1 added [ 50.964959][ T4203] chnl_net:caif_netlink_parms(): no params data found [ 51.015435][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.022407][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.048903][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.061862][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.069641][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.095819][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.107456][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.114519][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.140978][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.153425][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.160412][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.186536][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.205585][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.212532][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.238633][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.254188][ T4206] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.261818][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.268817][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.294892][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.346364][ T4198] device hsr_slave_0 entered promiscuous mode [ 51.352980][ T4198] device hsr_slave_1 entered promiscuous mode [ 51.372262][ T4195] device hsr_slave_0 entered promiscuous mode [ 51.379588][ T4195] device hsr_slave_1 entered promiscuous mode [ 51.386401][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.394552][ T4195] Cannot create hsr debugfs directory [ 51.429834][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.436676][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.443224][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.451044][ T4189] Cannot create hsr debugfs directory [ 51.489496][ T3853] infiniband rxe0: set active [ 51.498500][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.505994][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.514429][ T4203] device bridge_slave_0 entered promiscuous mode [ 51.536928][ T4206] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.555384][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.562460][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.570875][ T4203] device bridge_slave_1 entered promiscuous mode [ 51.621966][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.647053][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.658251][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.684788][ T4206] Bluetooth: hci1: command 0x0409 tx timeout [ 51.704025][ T1109] Bluetooth: hci0: command 0x0409 tx timeout [ 51.712828][ T4203] team0: Port device team_slave_0 added [ 51.723161][ T4203] team0: Port device team_slave_1 added [ 51.763874][ T4206] Bluetooth: hci3: command 0x0409 tx timeout [ 51.783965][ T1109] Bluetooth: hci2: command 0x0409 tx timeout [ 51.805665][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.812629][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.838687][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.859467][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 51.891706][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.900076][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.926200][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.949780][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.956961][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.965417][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.973233][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.980370][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.988259][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.026693][ T4203] device hsr_slave_0 entered promiscuous mode [ 52.033268][ T4203] device hsr_slave_1 entered promiscuous mode [ 52.039950][ T4203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.047647][ T4203] Cannot create hsr debugfs directory [ 52.076081][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.100615][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.150799][ T4188] team0: Port device team_slave_0 added [ 52.166957][ T4188] team0: Port device team_slave_1 added [ 52.176686][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.188190][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.203277][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.224312][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.239680][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.246757][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.272950][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.285813][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.292762][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.319204][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.390964][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.402661][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.410017][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.416816][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.424502][ T4188] Cannot create hsr debugfs directory [ 52.446566][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.456107][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.467556][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.482707][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.498489][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.524781][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.535909][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.642025][ T4203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.650791][ T4203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.686127][ T4203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.720016][ T4203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.735939][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.753085][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.769182][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.791794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.801437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.820222][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.837313][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.845532][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.854858][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.862484][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.870347][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.880804][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.891503][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.906994][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.920634][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.930873][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.939569][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.949189][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.958705][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.965966][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.975926][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.986654][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.995451][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.002520][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.010339][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.019858][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.028726][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.035803][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.043556][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.052759][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.063326][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.072407][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.082443][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.089548][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.131590][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.140417][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.149235][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.159611][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.168310][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.175384][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.183254][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.192371][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.201342][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.210126][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.217247][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.225704][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.234415][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.242941][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.252143][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.260765][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.269721][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.278370][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.287088][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.295529][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.308330][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.327579][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.336844][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.351322][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.361518][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.372842][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.382186][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.390942][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.399412][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.427897][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.438960][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.447588][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.458119][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.471414][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.480397][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.489409][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.498017][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.506729][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.515557][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.529498][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.556408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.566544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.588146][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.606597][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.620234][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.628794][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.638253][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.674718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.704349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.718595][ T4203] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.749842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.769481][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 53.771258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.783650][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 53.784767][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.796704][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.819154][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.844143][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 53.854796][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 53.868666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.877596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.886920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.896321][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.903386][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.911917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.921056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.929545][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 53.932764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.946444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.955701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.983266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.990773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.998562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.006938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.015798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.023242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.031351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.040178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.048972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.057924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.066448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.076132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.086483][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.098794][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.112029][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.122215][ T4203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.135985][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.150932][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.168158][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.175284][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.188933][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.215420][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.229815][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.239927][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.255450][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.270048][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.278985][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.293045][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.302506][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.309604][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.338189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.361302][ T4195] device veth0_vlan entered promiscuous mode [ 54.390638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.402817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.434975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.444779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.453474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.462289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.479088][ T4195] device veth1_vlan entered promiscuous mode [ 54.492767][ T4198] device veth0_vlan entered promiscuous mode [ 54.503950][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.512575][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.522543][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.531088][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.539363][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.548007][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.556275][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.564410][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.601335][ T4198] device veth1_vlan entered promiscuous mode [ 54.608922][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.617575][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.628567][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.637098][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.645121][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.652548][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.661241][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.679297][ T4195] device veth0_macvtap entered promiscuous mode [ 54.688835][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.709476][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.717750][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.726822][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.736087][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.746247][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.755181][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.767333][ T4195] device veth1_macvtap entered promiscuous mode [ 54.780372][ T4189] device veth0_vlan entered promiscuous mode [ 54.789971][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.798438][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.808556][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.817323][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.826404][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.835181][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.842955][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.853481][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.873290][ T4198] device veth0_macvtap entered promiscuous mode [ 54.889717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.899056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.909835][ T4189] device veth1_vlan entered promiscuous mode [ 54.925315][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.935070][ T4198] device veth1_macvtap entered promiscuous mode [ 54.954653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.962793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.971849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.982017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.990964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.999978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.008871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.021158][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.030272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.038609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.047474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.079712][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.091671][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.111291][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.121134][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.130770][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.139764][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.149407][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.164774][ T4203] device veth0_vlan entered promiscuous mode [ 55.173903][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.182413][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.192059][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.200468][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.209570][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.218728][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.227556][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.235435][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.245886][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.256550][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.267976][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.277659][ T4189] device veth0_macvtap entered promiscuous mode [ 55.305139][ T4203] device veth1_vlan entered promiscuous mode [ 55.321250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.329447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.337610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.346732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.355928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.363352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.372718][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.381600][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.390570][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.399461][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.422476][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.431665][ T4189] device veth1_macvtap entered promiscuous mode [ 55.483738][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.495955][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.506112][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.516985][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.529016][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.547547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.557025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.566718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.575491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.599170][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.610097][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.620887][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.631660][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.642969][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.661032][ T4203] device veth0_macvtap entered promiscuous mode [ 55.693262][ T4203] device veth1_macvtap entered promiscuous mode [ 55.701664][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.710277][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.719371][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.728161][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.737898][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.746394][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.755735][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.764060][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.772097][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.780394][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.793114][ T4188] device veth0_vlan entered promiscuous mode [ 55.817715][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.828362][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.828608][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.837866][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.845739][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 55.854772][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.865752][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 55.875046][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.883299][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.894642][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.904889][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.917569][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.927795][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 55.928093][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.934026][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 55.949062][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.961818][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.973179][ T4188] device veth1_vlan entered promiscuous mode [ 55.987995][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.997373][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.004256][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 56.012571][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.021291][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.051419][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.065646][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.075821][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.087980][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.098104][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.108582][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.119539][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.134902][ T4203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.143607][ T4203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.152965][ T4203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.161965][ T4203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.180859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.189394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.198501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.212034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.220912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.238851][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.251056][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.255402][ T4188] device veth0_macvtap entered promiscuous mode [ 56.285821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.294829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.315405][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.323346][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.334358][ T4188] device veth1_macvtap entered promiscuous mode [ 56.359370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.368199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.379225][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.406350][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.417151][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.425751][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.435944][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.446490][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.457237][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.467841][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.478121][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.490418][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.502603][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.517351][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.531076][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.544554][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.562730][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.576489][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.581560][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.592656][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.600847][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.612156][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.622060][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.634161][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.645473][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.656081][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.669102][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.680347][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.689879][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.699227][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.708668][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.730604][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.743405][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.752729][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.774967][ T4299] FAULT_INJECTION: forcing a failure. [ 56.774967][ T4299] name failslab, interval 1, probability 0, space 0, times 1 [ 56.787999][ T4299] CPU: 0 PID: 4299 Comm: syz.0.1 Not tainted syzkaller #0 [ 56.795137][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 56.805216][ T4299] Call Trace: [ 56.808493][ T4299] [ 56.811403][ T4299] dump_stack_lvl+0x188/0x250 [ 56.816082][ T4299] ? show_regs_print_info+0x20/0x20 [ 56.821282][ T4299] ? load_image+0x410/0x410 [ 56.825866][ T4299] ? __lock_acquire+0x13b3/0x7d40 [ 56.830903][ T4299] should_fail+0x383/0x4b0 [ 56.835316][ T4299] should_failslab+0x5/0x20 [ 56.839918][ T4299] slab_pre_alloc_hook+0x51/0xc0 [ 56.844933][ T4299] ? radix_tree_node_alloc+0x197/0x3a0 [ 56.850394][ T4299] kmem_cache_alloc+0x3d/0x280 [ 56.855155][ T4299] radix_tree_node_alloc+0x197/0x3a0 [ 56.860443][ T4299] ? __x64_sys_clone+0x19a/0x210 [ 56.865379][ T4299] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.871451][ T4299] idr_get_free+0x28b/0xa10 [ 56.875962][ T4299] idr_alloc_cyclic+0x286/0x610 [ 56.880821][ T4299] ? idr_alloc+0x2e0/0x2e0 [ 56.885237][ T4299] ? do_raw_spin_lock+0x128/0x2f0 [ 56.890273][ T4299] __kernfs_new_node+0x12d/0x6b0 [ 56.895208][ T4299] ? kernfs_new_node+0x250/0x250 [ 56.900157][ T4299] ? kernfs_activate+0x1eb/0x210 [ 56.905088][ T4299] kernfs_new_node+0x148/0x250 [ 56.909859][ T4299] __kernfs_create_file+0x47/0x2e0 [ 56.914965][ T4299] sysfs_add_file_mode_ns+0x2d2/0x390 [ 56.920361][ T4299] internal_create_group+0x492/0xd00 [ 56.925650][ T4299] ? kobject_add+0x230/0x230 [ 56.930250][ T4299] ? sysfs_create_group+0x20/0x20 [ 56.935295][ T4299] sysfs_slab_add+0x16e/0x2a0 [ 56.939978][ T4299] __kmem_cache_create+0x51f/0x6c0 [ 56.945083][ T4299] kmem_cache_create_usercopy+0x186/0x310 [ 56.950841][ T4299] kmem_cache_create+0xf/0x20 [ 56.955507][ T4299] copy_pid_ns+0x436/0x8a0 [ 56.959929][ T4299] ? rcu_lock_release+0x20/0x20 [ 56.964772][ T4299] ? ipc_init_ids+0xce/0x1e0 [ 56.969370][ T4299] ? copy_ipcs+0x382/0x4b0 [ 56.973777][ T4299] create_new_namespaces+0x2a6/0x700 [ 56.979070][ T4299] copy_namespaces+0x378/0x3d0 [ 56.983824][ T4299] copy_process+0x17f0/0x3e70 [ 56.988520][ T4299] ? __pidfd_prepare+0x140/0x140 [ 56.993445][ T4299] ? verify_lock_unused+0x140/0x140 [ 56.998627][ T4299] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 57.004613][ T4299] kernel_clone+0x23f/0x990 [ 57.009131][ T4299] ? create_io_thread+0x180/0x180 [ 57.014165][ T4299] __x64_sys_clone+0x19a/0x210 [ 57.018943][ T4299] ? __ia32_sys_vfork+0x130/0x130 [ 57.023982][ T4299] ? lockdep_hardirqs_on+0x94/0x140 [ 57.029182][ T4299] do_syscall_64+0x4c/0xa0 [ 57.033583][ T4299] ? clear_bhb_loop+0x30/0x80 [ 57.038245][ T4299] ? clear_bhb_loop+0x30/0x80 [ 57.042929][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.048832][ T4299] RIP: 0033:0x7f31ee1f1559 [ 57.053347][ T4299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.073494][ T4299] RSP: 002b:00007f31ec447fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 57.081896][ T4299] RAX: ffffffffffffffda RBX: 00007f31ee477fa0 RCX: 00007f31ee1f1559 [ 57.089862][ T4299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f8024000 [ 57.097825][ T4299] RBP: 00007f31ee288b20 R08: 0000000000000000 R09: 0000000000000000 [ 57.105787][ T4299] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 57.113767][ T4299] R13: 00007f31ee478038 R14: 00007f31ee477fa0 R15: 00007ffc48d7a548 [ 57.121753][ T4299] [ 57.214616][ T4299] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.229713][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.252054][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.253371][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.277171][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.297809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.306474][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.323324][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.371423][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.411334][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.430992][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.452969][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.479836][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.495467][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.502067][ T4310] sctp: [Deprecated]: syz.4.5 (pid 4310) Use of int in max_burst socket option deprecated. [ 57.502067][ T4310] Use struct sctp_assoc_value instead [ 57.523724][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.548186][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.726415][ T4320] FAULT_INJECTION: forcing a failure. [ 57.726415][ T4320] name failslab, interval 1, probability 0, space 0, times 0 [ 57.739356][ T4320] CPU: 1 PID: 4320 Comm: syz.3.4 Not tainted syzkaller #0 [ 57.746486][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 57.756554][ T4320] Call Trace: [ 57.759842][ T4320] [ 57.762787][ T4320] dump_stack_lvl+0x188/0x250 [ 57.767486][ T4320] ? show_regs_print_info+0x20/0x20 [ 57.772708][ T4320] ? load_image+0x410/0x410 [ 57.777235][ T4320] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 57.783242][ T4320] ? lock_chain_count+0x20/0x20 [ 57.788107][ T4320] ? memset+0x1e/0x40 [ 57.792107][ T4320] should_fail+0x383/0x4b0 [ 57.796545][ T4320] should_failslab+0x5/0x20 [ 57.801060][ T4320] slab_pre_alloc_hook+0x51/0xc0 [ 57.806019][ T4320] kmem_cache_alloc_trace+0x47/0x290 [ 57.811318][ T4320] ? once_disable_jump+0x52/0x1a0 [ 57.816361][ T4320] once_disable_jump+0x52/0x1a0 [ 57.821227][ T4320] inet6_ehashfn+0x4c4/0x500 [ 57.825840][ T4320] ? __tcp_v6_send_check+0x340/0x340 [ 57.831143][ T4320] ? rcu_lock_acquire+0x30/0x30 [ 57.836011][ T4320] ? __lock_acquire+0x7d40/0x7d40 [ 57.841054][ T4320] inet_ehash_insert+0x1ab/0x10b0 [ 57.846098][ T4320] ? slab_post_alloc_hook+0x2aa/0x380 [ 57.851489][ T4320] ? prandom_u32+0x217/0x250 [ 57.856097][ T4320] inet_ehash_nolisten+0x2f/0x160 [ 57.861141][ T4320] __inet_hash_connect+0xb2d/0xde0 [ 57.866282][ T4320] ? inet_unhash+0x540/0x540 [ 57.870889][ T4320] ? rcu_is_watching+0x11/0xa0 [ 57.875673][ T4320] ? inet6_hash_connect+0x77/0xd0 [ 57.880716][ T4320] tcp_v6_connect+0xf4b/0x1a10 [ 57.885508][ T4320] ? tcp_v6_pre_connect+0xf0/0xf0 [ 57.890559][ T4320] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 57.895949][ T4320] ? tcp_sendmsg_locked+0x2efb/0x3330 [ 57.901341][ T4320] ? tcp_sendmsg+0x2b/0x40 [ 57.905773][ T4320] ? __sys_sendto+0x46d/0x620 [ 57.910456][ T4320] ? __x64_sys_sendto+0xda/0xf0 [ 57.915315][ T4320] ? do_syscall_64+0x4c/0xa0 [ 57.919912][ T4320] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.925999][ T4320] __inet_stream_connect+0x244/0xd80 [ 57.931311][ T4320] ? inet_dgram_connect+0x340/0x340 [ 57.936539][ T4320] tcp_sendmsg_fastopen+0x38f/0x600 [ 57.941764][ T4320] tcp_sendmsg_locked+0x2efb/0x3330 [ 57.946979][ T4320] ? aa_sk_perm+0x910/0x910 [ 57.951516][ T4320] ? mark_lock+0x94/0x320 [ 57.955860][ T4320] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 57.961857][ T4320] ? lock_chain_count+0x20/0x20 [ 57.966723][ T4320] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 57.972730][ T4320] ? tcp_free_fastopen_req+0x70/0x70 [ 57.978049][ T4320] tcp_sendmsg+0x2b/0x40 [ 57.982310][ T4320] __sys_sendto+0x46d/0x620 [ 57.986827][ T4320] ? __ia32_sys_getpeername+0x80/0x80 [ 57.992235][ T4320] ? lock_chain_count+0x20/0x20 [ 57.997111][ T4320] __x64_sys_sendto+0xda/0xf0 [ 58.001807][ T4320] do_syscall_64+0x4c/0xa0 [ 58.006239][ T4320] ? clear_bhb_loop+0x30/0x80 [ 58.010931][ T4320] ? clear_bhb_loop+0x30/0x80 [ 58.015633][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.021538][ T4320] RIP: 0033:0x7fd7d89e3559 [ 58.025964][ T4320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.045581][ T4320] RSP: 002b:00007fd7d6c3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 58.054016][ T4320] RAX: ffffffffffffffda RBX: 00007fd7d8c69fa0 RCX: 00007fd7d89e3559 [ 58.061998][ T4320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.069981][ T4320] RBP: 00007fd7d8a7ab20 R08: 0000200000b63fe4 R09: 000000000000001c [ 58.077969][ T4320] R10: 0000000020004002 R11: 0000000000000246 R12: 0000000000000000 [ 58.085953][ T4320] R13: 00007fd7d8c6a038 R14: 00007fd7d8c69fa0 R15: 00007ffd01805b78 [ 58.093950][ T4320] [ 58.103960][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 58.110446][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 58.130433][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 58.136954][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 58.143214][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 58.276479][ T4327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11'. [ 58.368159][ T4330] sd 0:0:1:0: PR command failed: 2 [ 58.368266][ T4327] device veth0_to_bond entered promiscuous mode [ 58.373346][ T4330] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 58.488754][ T4330] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 58.700695][ T4337] FAULT_INJECTION: forcing a failure. [ 58.700695][ T4337] name failslab, interval 1, probability 0, space 0, times 0 [ 58.719487][ T4336] loop3: detected capacity change from 0 to 1024 [ 58.724705][ T4337] CPU: 1 PID: 4337 Comm: syz.1.14 Not tainted syzkaller #0 [ 58.733325][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 58.743420][ T4337] Call Trace: [ 58.746709][ T4337] [ 58.749646][ T4337] dump_stack_lvl+0x188/0x250 [ 58.754341][ T4337] ? show_regs_print_info+0x20/0x20 [ 58.759554][ T4337] ? load_image+0x410/0x410 [ 58.764080][ T4337] ? __might_sleep+0xf0/0xf0 [ 58.768690][ T4337] ? __lock_acquire+0x7d40/0x7d40 [ 58.773733][ T4337] should_fail+0x383/0x4b0 [ 58.778170][ T4337] should_failslab+0x5/0x20 [ 58.782690][ T4337] slab_pre_alloc_hook+0x51/0xc0 [ 58.787641][ T4337] kmem_cache_alloc_trace+0x47/0x290 [ 58.792937][ T4337] ? ipv6_flowlabel_opt+0x15d1/0x2400 [ 58.798332][ T4337] ipv6_flowlabel_opt+0x15d1/0x2400 [ 58.803563][ T4337] ? ipv6_flowlabel_opt_get+0x8a0/0x8a0 [ 58.809155][ T4337] ? mark_lock+0x94/0x320 [ 58.813515][ T4337] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 58.819518][ T4337] ? lock_chain_count+0x20/0x20 [ 58.824385][ T4337] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 58.830392][ T4337] ? __local_bh_enable_ip+0x136/0x1c0 [ 58.835786][ T4337] ? lockdep_hardirqs_on+0x94/0x140 [ 58.841002][ T4337] ? _local_bh_enable+0xa0/0xa0 [ 58.845875][ T4337] ipv6_setsockopt+0xb1a/0x3cc0 [ 58.850759][ T4337] ? ipv6_update_options+0x400/0x400 [ 58.856071][ T4337] ? futex_wait_queue_me+0x16e/0x440 [ 58.861374][ T4337] ? __might_sleep+0xf0/0xf0 [ 58.866010][ T4337] ? __lock_acquire+0x7d40/0x7d40 [ 58.871057][ T4337] ? mark_lock+0x94/0x320 [ 58.875408][ T4337] ? __lock_acquire+0x12df/0x7d40 [ 58.880471][ T4337] ? __lock_acquire+0x13b3/0x7d40 [ 58.885526][ T4337] ? verify_lock_unused+0x140/0x140 [ 58.890749][ T4337] ? aa_label_sk_perm+0x3e6/0x540 [ 58.895801][ T4337] ? aa_sk_perm+0x910/0x910 [ 58.900335][ T4337] ? __might_sleep+0xf0/0xf0 [ 58.904946][ T4337] ? rcu_lock_release+0x9/0x20 [ 58.909729][ T4337] ? __lock_acquire+0x7d40/0x7d40 [ 58.914779][ T4337] ? aa_sk_perm+0x7dc/0x910 [ 58.919308][ T4337] rawv6_setsockopt+0x29e/0x660 [ 58.924173][ T4337] ? __fget_files+0x402/0x470 [ 58.928866][ T4337] ? raw6_destroy+0x30/0x30 [ 58.933386][ T4337] ? aa_sock_opt_perm+0x74/0x100 [ 58.938341][ T4337] ? sock_common_setsockopt+0x32/0xb0 [ 58.943732][ T4337] ? sock_common_recvmsg+0x1c0/0x1c0 [ 58.949039][ T4337] __sys_setsockopt+0x2bf/0x3d0 [ 58.953917][ T4337] __x64_sys_setsockopt+0xb1/0xc0 [ 58.958962][ T4337] do_syscall_64+0x4c/0xa0 [ 58.963395][ T4337] ? clear_bhb_loop+0x30/0x80 [ 58.968097][ T4337] ? clear_bhb_loop+0x30/0x80 [ 58.972789][ T4337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.978697][ T4337] RIP: 0033:0x7f105b001559 [ 58.983128][ T4337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.002745][ T4337] RSP: 002b:00007f1059258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.011177][ T4337] RAX: ffffffffffffffda RBX: 00007f105b287fa0 RCX: 00007f105b001559 [ 59.019160][ T4337] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 59.027266][ T4337] RBP: 00007f105b098b20 R08: 0000000000000020 R09: 0000000000000000 [ 59.035255][ T4337] R10: 0000200000002880 R11: 0000000000000246 R12: 0000000000000000 [ 59.043326][ T4337] R13: 00007f105b288038 R14: 00007f105b287fa0 R15: 00007ffefa630df8 [ 59.051326][ T4337] [ 59.064575][ T4327] syz.4.11 (4327) used greatest stack depth: 20880 bytes left [ 59.068722][ T4336] ======================================================= [ 59.068722][ T4336] WARNING: The mand mount option has been deprecated and [ 59.068722][ T4336] and is ignored by this kernel. Remove the mand [ 59.068722][ T4336] option from the mount to silence this warning. [ 59.068722][ T4336] ======================================================= [ 59.208450][ T4336] EXT4-fs (loop3): Ignoring removed nobh option [ 59.267713][ T4336] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nobh,noquota,jqfmt=vfsv1,auto_da_alloc,nodioread_nolock,noblock_validity,,errors=continue. Quota mode: none. [ 59.380674][ T4349] netlink: 'syz.4.16': attribute type 1 has an invalid length. [ 59.400793][ T4336] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.432617][ T4349] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.16'. [ 60.229947][ T4382] loop3: detected capacity change from 0 to 512 [ 60.356362][ T4382] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 60.431447][ T4382] EXT4-fs (loop3): 1 truncate cleaned up [ 60.493913][ T4382] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 60.579076][ T4391] FAULT_INJECTION: forcing a failure. [ 60.579076][ T4391] name failslab, interval 1, probability 0, space 0, times 0 [ 60.623840][ T4391] CPU: 1 PID: 4391 Comm: syz.4.27 Not tainted syzkaller #0 [ 60.631080][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.641156][ T4391] Call Trace: [ 60.644452][ T4391] [ 60.646657][ T4394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26'. [ 60.647394][ T4391] dump_stack_lvl+0x188/0x250 [ 60.660831][ T4391] ? show_regs_print_info+0x20/0x20 [ 60.666050][ T4391] ? load_image+0x410/0x410 [ 60.670575][ T4391] ? __might_sleep+0xf0/0xf0 [ 60.675179][ T4391] ? __lock_acquire+0x7d40/0x7d40 [ 60.680249][ T4391] should_fail+0x383/0x4b0 [ 60.680282][ T4391] should_failslab+0x5/0x20 [ 60.680300][ T4391] slab_pre_alloc_hook+0x51/0xc0 [ 60.680322][ T4391] __kmalloc+0x6b/0x340 [ 60.680337][ T4391] ? __register_sysctl_table+0xe0/0x1240 [ 60.680355][ T4391] ? devinet_sysctl_register+0x1f0/0x1f0 [ 60.680375][ T4391] __register_sysctl_table+0xe0/0x1240 [ 60.680399][ T4391] devinet_init_net+0x353/0x590 [ 60.680425][ T4391] ops_init+0x360/0x5f0 [ 60.680450][ T4391] setup_net+0x39e/0xa10 [ 60.680471][ T4391] ? copy_net_ns+0x5b0/0x5b0 [ 60.680493][ T4391] ? copy_net_ns+0x324/0x5b0 [ 60.680512][ T4391] ? down_read_killable+0x1ce/0x340 [ 60.680538][ T4391] copy_net_ns+0x33e/0x5b0 [ 60.680560][ T4391] create_new_namespaces+0x3ce/0x700 [ 60.680593][ T4391] unshare_nsproxy_namespaces+0x116/0x160 [ 60.680615][ T4391] ksys_unshare+0x4f6/0x8e0 [ 60.680633][ T4391] ? __lock_acquire+0x7d40/0x7d40 [ 60.680659][ T4391] ? sighand_ctor+0x40/0x40 [ 60.680678][ T4391] ? lock_chain_count+0x20/0x20 [ 60.680702][ T4391] ? syscall_enter_from_user_mode+0x21/0x70 [ 60.680726][ T4391] __x64_sys_unshare+0x34/0x40 [ 60.680744][ T4391] do_syscall_64+0x4c/0xa0 [ 60.680759][ T4391] ? clear_bhb_loop+0x30/0x80 [ 60.680775][ T4391] ? clear_bhb_loop+0x30/0x80 [ 60.680793][ T4391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.680811][ T4391] RIP: 0033:0x7fb1d1fef559 [ 60.680828][ T4391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.680842][ T4391] RSP: 002b:00007fb1d0246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 60.680863][ T4391] RAX: ffffffffffffffda RBX: 00007fb1d2275fa0 RCX: 00007fb1d1fef559 [ 60.680877][ T4391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 60.680888][ T4391] RBP: 00007fb1d2086b20 R08: 0000000000000000 R09: 0000000000000000 [ 60.680900][ T4391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.680911][ T4391] R13: 00007fb1d2276038 R14: 00007fb1d2275fa0 R15: 00007ffc9c2f7028 [ 60.680937][ T4391] [ 61.080910][ T26] audit: type=1800 audit(1793048493.540:2): pid=4407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.24" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 61.323317][ T4408] loop1: detected capacity change from 0 to 256 [ 61.371703][ T4408] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 62.679584][ T4415] sched: RT throttling activated [ 63.291123][ T4419] sctp: failed to load transform for md5: -2 [ 64.271292][ T4442] loop4: detected capacity change from 0 to 2048 [ 65.660889][ T4442] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.460638][ T4472] loop1: detected capacity change from 0 to 2048 [ 66.467889][ T4477] raw_sendmsg: syz.2.45 forgot to set AF_INET. Fix it! [ 66.517143][ T4472] UDF-fs: bad mount option "" or missing value [ 66.805650][ T4484] loop1: detected capacity change from 0 to 128 [ 66.990707][ T4484] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 67.265248][ T4476] loop3: detected capacity change from 0 to 4096 [ 67.323279][ T145] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 67.409829][ T4476] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 67.409829][ T4476] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 67.409829][ T4476] [ 67.543901][ T4476] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 67.590479][ T4476] EXT4-fs (loop3): Ignoring removed orlov option [ 67.627689][ T4476] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 67.627689][ T4476] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 67.627689][ T4476] [ 67.863507][ T4476] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 68.909857][ T4534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.46'. [ 69.324776][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 70.061170][ T4573] Illegal XDP return value 4294967277, expect packet loss! [ 70.339441][ T4593] loop1: detected capacity change from 0 to 2048 [ 70.461926][ T4593] Alternate GPT is invalid, using primary GPT. [ 70.475281][ T4593] loop1: p1 p2 p3 [ 70.490033][ T4593] loop1: partition table partially beyond EOD, truncated [ 70.877493][ T4598] syz.4.87 uses obsolete (PF_INET,SOCK_PACKET) [ 71.014172][ T4605] syz.3.88 (4605): /proc/4605/oom_adj is deprecated, please use /proc/4605/oom_score_adj instead. [ 71.156509][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 71.157747][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 71.174070][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 71.209426][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.216029][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.243042][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 71.243159][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 71.254253][ T4610] device macvlan1 entered promiscuous mode [ 71.264722][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 71.333587][ T4610] device macvlan1 left promiscuous mode [ 71.413742][ T4264] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.609642][ T4633] FAULT_INJECTION: forcing a failure. [ 71.609642][ T4633] name failslab, interval 1, probability 0, space 0, times 0 [ 71.654890][ T4633] CPU: 1 PID: 4633 Comm: syz.1.93 Not tainted syzkaller #0 [ 71.662121][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.672191][ T4633] Call Trace: [ 71.675481][ T4633] [ 71.678425][ T4633] dump_stack_lvl+0x188/0x250 [ 71.683120][ T4633] ? show_regs_print_info+0x20/0x20 [ 71.688340][ T4633] ? load_image+0x410/0x410 [ 71.692861][ T4633] ? __might_sleep+0xf0/0xf0 [ 71.697462][ T4633] ? __lock_acquire+0x7d40/0x7d40 [ 71.702539][ T4633] should_fail+0x383/0x4b0 [ 71.706983][ T4633] should_failslab+0x5/0x20 [ 71.711499][ T4633] slab_pre_alloc_hook+0x51/0xc0 [ 71.716466][ T4633] ? __proc_create+0x36f/0x8b0 [ 71.721250][ T4633] kmem_cache_alloc+0x3d/0x280 [ 71.726033][ T4633] __proc_create+0x36f/0x8b0 [ 71.730645][ T4633] ? proc_symlink+0x210/0x210 [ 71.735400][ T4633] proc_mkdir+0x3b/0x110 [ 71.739642][ T4633] rpc_proc_init+0x68/0xc0 [ 71.744044][ T4633] sunrpc_init_net+0x27/0x170 [ 71.748727][ T4633] ops_init+0x360/0x5f0 [ 71.752876][ T4633] setup_net+0x39e/0xa10 [ 71.757106][ T4633] ? copy_net_ns+0x5b0/0x5b0 [ 71.761706][ T4633] ? copy_net_ns+0x324/0x5b0 [ 71.766311][ T4633] ? down_read_killable+0x1ce/0x340 [ 71.771537][ T4633] copy_net_ns+0x33e/0x5b0 [ 71.775951][ T4633] create_new_namespaces+0x3ce/0x700 [ 71.781232][ T4633] unshare_nsproxy_namespaces+0x116/0x160 [ 71.786945][ T4633] ksys_unshare+0x4f6/0x8e0 [ 71.791437][ T4633] ? __lock_acquire+0x7d40/0x7d40 [ 71.796458][ T4633] ? sighand_ctor+0x40/0x40 [ 71.800945][ T4633] ? lock_chain_count+0x20/0x20 [ 71.805782][ T4633] ? syscall_enter_from_user_mode+0x21/0x70 [ 71.811664][ T4633] __x64_sys_unshare+0x34/0x40 [ 71.816411][ T4633] do_syscall_64+0x4c/0xa0 [ 71.820810][ T4633] ? clear_bhb_loop+0x30/0x80 [ 71.825476][ T4633] ? clear_bhb_loop+0x30/0x80 [ 71.830158][ T4633] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.836044][ T4633] RIP: 0033:0x7f105b001559 [ 71.840454][ T4633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.860057][ T4633] RSP: 002b:00007f1059237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 71.868468][ T4633] RAX: ffffffffffffffda RBX: 00007f105b288090 RCX: 00007f105b001559 [ 71.876427][ T4633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 71.884389][ T4633] RBP: 00007f105b098b20 R08: 0000000000000000 R09: 0000000000000000 [ 71.892347][ T4633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.900305][ T4633] R13: 00007f105b288128 R14: 00007f105b288090 R15: 00007ffefa630df8 [ 71.908283][ T4633] [ 72.048577][ T4646] loop2: detected capacity change from 0 to 512 [ 72.123908][ T4646] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.164721][ T4646] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 72.183973][ T4646] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.100: bg 0: block 248: padding at end of block bitmap is not set [ 72.210700][ T4646] Quota error (device loop2): write_blk: dquota write failed [ 72.230314][ T4646] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 72.249421][ T4646] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.100: Failed to acquire dquot type 1 [ 72.270429][ T4646] EXT4-fs (loop2): 1 truncate cleaned up [ 72.281345][ T4646] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.321556][ T26] audit: type=1326 audit(72.294:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105b001559 code=0x7fc00000 [ 72.385625][ T4646] syz.2.100 (4646) used greatest stack depth: 20864 bytes left [ 72.394610][ T26] audit: type=1326 audit(72.324:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f105b001559 code=0x7fc00000 [ 72.418232][ T26] audit: type=1326 audit(72.324:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105b001559 code=0x7fc00000 [ 72.508285][ T26] audit: type=1326 audit(72.324:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105b001559 code=0x7fc00000 [ 72.575133][ T4661] netlink: 104 bytes leftover after parsing attributes in process `syz.3.103'. [ 72.611187][ T26] audit: type=1326 audit(72.324:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105b001559 code=0x7fc00000 [ 72.703022][ T26] audit: type=1326 audit(72.334:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105b001559 code=0x7fc00000 [ 72.768832][ T4671] loop2: detected capacity change from 0 to 512 [ 72.768980][ T26] audit: type=1326 audit(72.334:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105b001559 code=0x7fc00000 [ 72.849563][ T26] audit: type=1326 audit(72.334:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.1.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105b001559 code=0x7fc00000 [ 72.988954][ T4677] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.646240][ T4671] EXT4-fs (loop2): Ignoring removed nobh option [ 73.686331][ T4681] FAULT_INJECTION: forcing a failure. [ 73.686331][ T4681] name failslab, interval 1, probability 0, space 0, times 0 [ 73.706707][ T4671] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.105: invalid indirect mapped block 256 (level 2) [ 73.779520][ T4681] CPU: 0 PID: 4681 Comm: syz.1.110 Not tainted syzkaller #0 [ 73.786848][ T4681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.796916][ T4681] Call Trace: [ 73.800202][ T4681] [ 73.803140][ T4681] dump_stack_lvl+0x188/0x250 [ 73.807840][ T4681] ? show_regs_print_info+0x20/0x20 [ 73.813056][ T4681] ? load_image+0x410/0x410 [ 73.817578][ T4681] ? __might_sleep+0xf0/0xf0 [ 73.822179][ T4681] ? __lock_acquire+0x7d40/0x7d40 [ 73.827228][ T4681] ? kill_litter_super+0xa0/0xa0 [ 73.832176][ T4681] should_fail+0x383/0x4b0 [ 73.836610][ T4681] should_failslab+0x5/0x20 [ 73.841118][ T4681] slab_pre_alloc_hook+0x51/0xc0 [ 73.846066][ T4681] kmem_cache_alloc_trace+0x47/0x290 [ 73.851360][ T4681] ? alloc_super+0x59/0x970 [ 73.855879][ T4681] alloc_super+0x59/0x970 [ 73.860230][ T4681] ? kill_litter_super+0xa0/0xa0 [ 73.861756][ T4671] EXT4-fs (loop2): 2 truncates cleaned up [ 73.865181][ T4681] sget_fc+0x2d4/0x6f0 [ 73.865232][ T4681] ? kill_litter_super+0xa0/0xa0 [ 73.865251][ T4681] ? mqueue_get_tree+0xe0/0xe0 [ 73.865269][ T4681] get_tree_nodev+0x26/0x160 [ 73.871116][ T4671] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 73.875031][ T4681] vfs_get_tree+0x88/0x270 [ 73.875059][ T4681] fc_mount+0x18/0xa0 [ 73.875077][ T4681] mq_init_ns+0x39d/0x510 [ 73.875098][ T4681] copy_ipcs+0x2ea/0x4b0 [ 73.875116][ T4681] create_new_namespaces+0x212/0x700 [ 73.875144][ T4681] unshare_nsproxy_namespaces+0x116/0x160 [ 73.875164][ T4681] ksys_unshare+0x4f6/0x8e0 [ 73.935135][ T4681] ? rcu_is_watching+0x11/0xa0 [ 73.939928][ T4681] ? sighand_ctor+0x40/0x40 [ 73.944460][ T4681] __x64_sys_unshare+0x34/0x40 [ 73.949232][ T4681] do_syscall_64+0x4c/0xa0 [ 73.953656][ T4681] ? clear_bhb_loop+0x30/0x80 [ 73.956435][ T4685] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.958336][ T4681] ? clear_bhb_loop+0x30/0x80 [ 73.958360][ T4681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.958378][ T4681] RIP: 0033:0x7f105b001559 [ 73.958395][ T4681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.999142][ T4681] RSP: 002b:00007f1059258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 74.007572][ T4681] RAX: ffffffffffffffda RBX: 00007f105b287fa0 RCX: 00007f105b001559 [ 74.015554][ T4681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 74.023537][ T4681] RBP: 00007f105b098b20 R08: 0000000000000000 R09: 0000000000000000 [ 74.031521][ T4681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.039497][ T4681] R13: 00007f105b288038 R14: 00007f105b287fa0 R15: 00007ffefa630df8 [ 74.047489][ T4681] [ 74.591388][ T4716] pimreg1: tun_chr_ioctl cmd 1074025677 [ 74.610545][ T4716] pimreg1: linktype set to 773 [ 74.669467][ T4685] chnl_net:caif_netlink_parms(): no params data found [ 74.721848][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.733871][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.746464][ T4685] device bridge_slave_0 entered promiscuous mode [ 74.756471][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.763587][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.771727][ T4685] device bridge_slave_1 entered promiscuous mode [ 74.777273][ T4731] loop2: detected capacity change from 0 to 512 [ 74.811908][ T4685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.881911][ T4731] EXT4-fs (loop2): Ignoring removed bh option [ 74.956637][ T4685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.213605][ T4731] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,norecovery,bh,noload,bsdgroups,noquota,,errors=continue. Quota mode: writeback. [ 75.547732][ T4685] team0: Port device team_slave_0 added [ 75.562225][ T4746] loop1: detected capacity change from 0 to 512 [ 75.644429][ T4685] team0: Port device team_slave_1 added [ 75.762880][ T4746] EXT4-fs (loop1): 1 truncate cleaned up [ 75.805790][ T4746] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 75.835021][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.841992][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.923857][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 75.936213][ T4685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.965762][ T4742] tmpfs: Unknown parameter '' [ 75.973283][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.075176][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.152340][ T4685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.317305][ T4685] device hsr_slave_0 entered promiscuous mode [ 76.328832][ T3160] cfg80211: failed to load regulatory.db [ 77.214293][ T4685] device hsr_slave_1 entered promiscuous mode [ 77.250606][ T4685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.273856][ T4685] Cannot create hsr debugfs directory [ 77.463269][ T4791] loop2: detected capacity change from 0 to 2048 [ 77.641829][ T4791] UDF-fs: bad mount option "" or missing value [ 77.651590][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 77.651603][ T26] audit: type=1326 audit(77.624:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.4.137" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1d1fef559 code=0x0 [ 77.788946][ T4685] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.438524][ T3160] Bluetooth: hci5: command 0x041b tx timeout [ 78.769070][ T4685] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.819952][ T4685] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.926191][ T4685] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.466995][ T4685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.593980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.601992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.659107][ T4685] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.708024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.734509][ T4835] capability: warning: `syz.3.147' uses deprecated v2 capabilities in a way that may be insecure [ 79.737279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.835754][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.842847][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.875327][ T4837] loop2: detected capacity change from 0 to 2048 [ 79.905199][ T4837] UDF-fs: bad mount option "" or missing value [ 80.098644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.122782][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.182391][ T4847] loop2: detected capacity change from 0 to 128 [ 80.310707][ T4847] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 80.501727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.564023][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 80.644416][ T4848] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 80.672894][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.680046][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.719131][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.725846][ T4853] FAULT_INJECTION: forcing a failure. [ 80.725846][ T4853] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 80.728311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.740843][ T4853] CPU: 1 PID: 4853 Comm: syz.3.154 Not tainted syzkaller #0 [ 80.749599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.755958][ T4853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.755970][ T4853] Call Trace: [ 80.755976][ T4853] [ 80.755984][ T4853] dump_stack_lvl+0x188/0x250 [ 80.765015][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.773927][ T4853] ? show_regs_print_info+0x20/0x20 [ 80.773956][ T4853] ? load_image+0x410/0x410 [ 80.781309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.784813][ T4853] should_fail+0x383/0x4b0 [ 80.784843][ T4853] prepare_alloc_pages+0x1e3/0x5b0 [ 80.812301][ T4685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.813865][ T4853] __alloc_pages+0x11b/0x480 [ 80.813893][ T4853] ? zone_statistics+0x170/0x170 [ 80.829172][ T4685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.829281][ T4853] ? rcu_lock_acquire+0x30/0x30 [ 80.853906][ T4853] ? alloc_pages+0x452/0x560 [ 80.858519][ T4853] __get_free_pages+0x8/0x30 [ 80.863122][ T4853] __tlb_remove_page_size+0x1f2/0x3f0 [ 80.868512][ T4853] unmap_page_range+0xfcf/0x2410 [ 80.873489][ T4853] unmap_vmas+0x131/0x250 [ 80.877828][ T4853] ? unmap_page_range+0x2410/0x2410 [ 80.883025][ T4853] ? __mutex_lock_common+0x435/0x2400 [ 80.888403][ T4853] ? exit_mm_release+0x16/0x30 [ 80.893178][ T4853] exit_mmap+0x3b9/0x640 [ 80.897434][ T4853] ? vm_brk+0x20/0x20 [ 80.901442][ T4853] ? uprobe_clear_state+0x2f6/0x460 [ 80.906655][ T4853] __mmput+0x115/0x390 [ 80.910731][ T4853] exit_mm+0x632/0x7b0 [ 80.914794][ T4853] ? perf_pmu_migrate_context+0xb70/0xb70 [ 80.920517][ T4853] ? do_exit+0x2110/0x2110 [ 80.924931][ T4853] ? __ia32_sys_timer_delete+0x40/0x40 [ 80.930396][ T4853] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 80.935870][ T4853] ? tty_audit_exit+0x149/0x1f0 [ 80.940731][ T4853] do_exit+0x5b8/0x2110 [ 80.944900][ T4853] ? put_task_struct+0x80/0x80 [ 80.949667][ T4853] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.955656][ T4853] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.960691][ T4853] do_group_exit+0x12c/0x2f0 [ 80.965285][ T4853] ? lockdep_hardirqs_on+0x94/0x140 [ 80.970491][ T4853] get_signal+0x7eb/0x12e0 [ 80.974931][ T4853] arch_do_signal_or_restart+0xe6/0x12a0 [ 80.980567][ T4853] ? rcu_lock_release+0x9/0x20 [ 80.985341][ T4853] ? futex_exit_release+0x1c0/0x1c0 [ 80.990549][ T4853] ? get_sigframe_size+0x10/0x10 [ 80.995498][ T4853] ? __context_tracking_exit+0x4c/0x80 [ 81.000972][ T4853] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.006961][ T4853] ? exit_to_user_mode_loop+0x3b/0x130 [ 81.012430][ T4853] exit_to_user_mode_loop+0x9e/0x130 [ 81.017720][ T4853] exit_to_user_mode_prepare+0xee/0x180 [ 81.023267][ T4853] syscall_exit_to_user_mode+0x16/0x40 [ 81.028728][ T4853] do_syscall_64+0x58/0xa0 [ 81.033148][ T4853] ? clear_bhb_loop+0x30/0x80 [ 81.037926][ T4853] ? clear_bhb_loop+0x30/0x80 [ 81.042616][ T4853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.048514][ T4853] RIP: 0033:0x7fd7d89e3559 [ 81.052939][ T4853] Code: Unable to access opcode bytes at RIP 0x7fd7d89e352f. [ 81.060303][ T4853] RSP: 002b:00007fd7d6c3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.068724][ T4853] RAX: fffffffffffffe00 RBX: 00007fd7d8c69fa8 RCX: 00007fd7d89e3559 [ 81.076711][ T4853] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd7d8c69fa8 [ 81.084691][ T4853] RBP: 00007fd7d8c69fa0 R08: 0000000000000000 R09: 0000000000000000 [ 81.092671][ T4853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.100648][ T4853] R13: 00007fd7d8c6a038 R14: 00007ffd01805a90 R15: 00007ffd01805b78 [ 81.108645][ T4853] [ 81.139693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.187187][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.219346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.238537][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.270515][ T4867] ODEBUG: Out of memory. ODEBUG disabled [ 81.443224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.462608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.551935][ T4873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.144'. [ 81.960215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.030397][ T4685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.054762][ T4870] tun0: tun_chr_ioctl cmd 1074025692 [ 82.080531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.100978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.331131][ T4893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'. [ 82.456104][ T4894] tipc: Started in network mode [ 82.461460][ T4894] tipc: Node identity 7f000001, cluster identity 4711 [ 82.471434][ T4894] tipc: New replicast peer: 127.0.0.1 [ 82.478376][ T4894] tipc: Enabled bearer , priority 10 [ 82.498236][ T4894] Cannot find add_set index 0 as target [ 82.543047][ T4893] loop3: detected capacity change from 0 to 512 [ 82.644070][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 82.903818][ T4893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 82.911890][ T4893] System zones: 1-12 [ 83.003685][ T4893] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.164: missing EA_INODE flag [ 83.018763][ T4893] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.164: error while reading EA inode 12 err=-117 [ 83.032338][ T4893] EXT4-fs (loop3): 1 orphan inode deleted [ 83.038155][ T4893] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 83.173438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.190087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.240746][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.256402][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.260365][ T4911] loop2: detected capacity change from 0 to 2048 [ 83.317363][ T4685] device veth0_vlan entered promiscuous mode [ 83.357021][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.374362][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.388750][ T4911] Alternate GPT is invalid, using primary GPT. [ 83.399432][ T4685] device veth1_vlan entered promiscuous mode [ 83.405523][ T4911] loop2: p1 p2 p3 [ 83.518716][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.542793][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.579967][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.599430][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.625682][ T4685] device veth0_macvtap entered promiscuous mode [ 83.658665][ T23] tipc: Node number set to 2130706433 [ 83.678149][ T4685] device veth1_macvtap entered promiscuous mode [ 83.740341][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.768504][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 83.774038][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 83.799234][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 83.804608][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.840707][ T4930] loop3: detected capacity change from 0 to 4096 [ 83.856964][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.886762][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.916545][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.954399][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.990044][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.009725][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 84.034095][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.055103][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.081336][ T4948] loop2: detected capacity change from 0 to 512 [ 84.093147][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.131772][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.156592][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.176939][ T4948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 84.185254][ T4948] System zones: 1-12 [ 84.194740][ T4948] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.181: missing EA_INODE flag [ 84.210264][ T4948] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.181: error while reading EA inode 12 err=-117 [ 84.229881][ T4948] EXT4-fs (loop2): 1 orphan inode deleted [ 84.235699][ T4948] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 84.253606][ T4930] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 84.253606][ T4930] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 84.253606][ T4930] [ 84.281251][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.312941][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.360724][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.364033][ T4930] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 84.385130][ T4930] EXT4-fs (loop3): Ignoring removed orlov option [ 84.391566][ T4930] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 84.391566][ T4930] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 84.391566][ T4930] [ 84.406250][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.433837][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.447669][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.458881][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.466687][ T4930] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 84.472582][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.507720][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.517592][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.528669][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.538601][ T4685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.549163][ T4685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.565098][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.580267][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.599785][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.615679][ T4685] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.646659][ T4685] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.678755][ T4685] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.701257][ T4685] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.821845][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.851879][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.876719][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.907973][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.916880][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.926935][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.220806][ T4990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'. [ 85.244096][ T4992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.196'. [ 85.309835][ T4995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.175'. [ 85.367760][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.380143][ T4994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.197'. [ 85.404907][ T4998] loop2: detected capacity change from 0 to 512 [ 85.480174][ T4998] EXT4-fs (loop2): Ignoring removed nobh option [ 85.530709][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.549521][ T4998] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,usrquota,nobh,,errors=continue. Quota mode: writeback. [ 85.808831][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.903611][ T5017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'. [ 85.952180][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.042310][ T5024] FAULT_INJECTION: forcing a failure. [ 86.042310][ T5024] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.111124][ T5024] CPU: 0 PID: 5024 Comm: syz.5.209 Not tainted syzkaller #0 [ 86.118449][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.128513][ T5024] Call Trace: [ 86.131797][ T5024] [ 86.134735][ T5024] dump_stack_lvl+0x188/0x250 [ 86.139428][ T5024] ? show_regs_print_info+0x20/0x20 [ 86.144647][ T5024] ? load_image+0x410/0x410 [ 86.149167][ T5024] ? __lock_acquire+0x7d40/0x7d40 [ 86.154206][ T5024] ? mark_lock+0x94/0x320 [ 86.158543][ T5024] should_fail+0x383/0x4b0 [ 86.162969][ T5024] _copy_from_user+0x2e/0x170 [ 86.167657][ T5024] __copy_msghdr_from_user+0xc9/0x630 [ 86.173034][ T5024] ? lockdep_hardirqs_on+0x94/0x140 [ 86.178248][ T5024] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 86.183547][ T5024] ? verify_lock_unused+0x140/0x140 [ 86.188802][ T5024] ? kfree+0xef/0x2a0 [ 86.192795][ T5024] ___sys_sendmsg+0x19a/0x2e0 [ 86.197483][ T5024] ? __sys_sendmsg+0x290/0x290 [ 86.202283][ T5024] ? __might_fault+0xb3/0x110 [ 86.206967][ T5024] __sys_sendmmsg+0x2ba/0x500 [ 86.211653][ T5024] ? __ia32_sys_sendmsg+0x80/0x80 [ 86.216707][ T5024] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.222696][ T5024] ? lock_chain_count+0x20/0x20 [ 86.227469][ T5027] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.227560][ T5024] __x64_sys_sendmmsg+0x9c/0xb0 [ 86.251162][ T5024] do_syscall_64+0x4c/0xa0 [ 86.255599][ T5024] ? clear_bhb_loop+0x30/0x80 [ 86.260293][ T5024] ? clear_bhb_loop+0x30/0x80 [ 86.264979][ T5024] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.270875][ T5024] RIP: 0033:0x7f9e0d1fa559 [ 86.275299][ T5024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.294910][ T5024] RSP: 002b:00007f9e0b451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 86.303342][ T5024] RAX: ffffffffffffffda RBX: 00007f9e0d480fa0 RCX: 00007f9e0d1fa559 [ 86.311329][ T5024] RDX: 0400000000000172 RSI: 0000200000000440 RDI: 0000000000000004 [ 86.319328][ T5024] RBP: 00007f9e0d291b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.327308][ T5024] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000000 [ 86.335287][ T5024] R13: 00007f9e0d481038 R14: 00007f9e0d480fa0 R15: 00007ffc9e580608 [ 86.343277][ T5024] [ 86.471568][ T5029] loop2: detected capacity change from 0 to 2048 [ 86.514184][ T5029] UDF-fs: bad mount option "" or missing value [ 86.840750][ T5038] loop2: detected capacity change from 0 to 128 [ 86.869288][ T5038] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 87.594684][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 88.253486][ T5063] loop5: detected capacity change from 0 to 4096 [ 88.276523][ T5063] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 88.276523][ T5063] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 88.276523][ T5063] [ 88.304027][ T5063] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 88.347362][ T5063] EXT4-fs (loop5): Ignoring removed orlov option [ 88.364842][ T5063] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 88.364842][ T5063] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 88.364842][ T5063] [ 88.428418][ T5063] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 88.497145][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 88.565322][ T5080] loop1: detected capacity change from 0 to 2048 [ 88.635093][ T5080] UDF-fs: bad mount option "" or missing value [ 89.001272][ T26] audit: type=1326 audit(88.904:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5091 comm="syz.3.230" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89e3559 code=0x0 [ 89.098292][ T5096] loop1: detected capacity change from 0 to 128 [ 89.677262][ T5096] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 89.838375][ T5109] loop2: detected capacity change from 0 to 256 [ 89.878690][ T5084] netlink: 20 bytes leftover after parsing attributes in process `syz.5.222'. [ 89.946601][ T5109] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 90.017857][ T5113] bridge0: port 3(syz_tun) entered blocking state [ 90.030142][ T5113] bridge0: port 3(syz_tun) entered disabled state [ 90.060602][ T5113] device syz_tun entered promiscuous mode [ 90.096704][ T5113] bridge0: port 3(syz_tun) entered blocking state [ 90.103649][ T5113] bridge0: port 3(syz_tun) entered forwarding state [ 90.928611][ T5134] loop3: detected capacity change from 0 to 128 [ 91.024514][ T5134] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.092851][ T145] device hsr_slave_0 left promiscuous mode [ 91.120864][ T26] audit: type=1326 audit(91.094:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.4.242" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1d1fef559 code=0x0 [ 91.162567][ T145] device hsr_slave_1 left promiscuous mode [ 91.201649][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.235535][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.277217][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.293252][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.349966][ T145] device bridge_slave_1 left promiscuous mode [ 91.371414][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.403504][ T145] device bridge_slave_0 left promiscuous mode [ 91.413418][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.443482][ T145] device veth1_macvtap left promiscuous mode [ 91.460927][ T145] device veth0_macvtap left promiscuous mode [ 91.493149][ T145] device veth1_vlan left promiscuous mode [ 91.532880][ T145] device veth0_vlan left promiscuous mode [ 92.226742][ T5162] loop1: detected capacity change from 0 to 2048 [ 92.274535][ T5162] UDF-fs: bad mount option "" or missing value [ 92.566220][ T5172] loop1: detected capacity change from 0 to 128 [ 92.633741][ T5172] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 92.674770][ T5171] process 'syz.2.253' launched './file0' with NULL argv: empty string added [ 93.171082][ T5175] Invalid argument reading file caps for ./file0 [ 93.277665][ T145] team0 (unregistering): Port device team_slave_1 removed [ 93.302789][ T145] team0 (unregistering): Port device team_slave_0 removed [ 93.411643][ T5182] loop5: detected capacity change from 0 to 256 [ 93.506143][ T5183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'. [ 93.726883][ T5182] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 93.861465][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.878078][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.045393][ T145] bond0 (unregistering): Released all slaves [ 94.811542][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.819534][ T5209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.854814][ T26] audit: type=1326 audit(94.824:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5192 comm="syz.3.260" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89e3559 code=0x0 [ 94.896229][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.923971][ T5209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.172179][ T5214] loop5: detected capacity change from 0 to 4096 [ 95.207258][ T5214] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 95.207258][ T5214] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 95.207258][ T5214] [ 95.360757][ T5214] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 95.380678][ T5214] EXT4-fs (loop5): Ignoring removed orlov option [ 95.639852][ T5229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.269'. [ 95.660358][ T5229] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.405412][ T5214] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 96.405412][ T5214] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 96.405412][ T5214] [ 96.684275][ T5214] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 96.752844][ T5244] ubi0: attaching mtd0 [ 96.768195][ T5244] ubi0: scanning is finished [ 96.772885][ T5244] ubi0: empty MTD device detected [ 97.009565][ T5248] Zero length message leads to an empty skb [ 97.016942][ T5248] Cannot find add_set index 0 as target [ 97.165196][ T5244] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 98.361018][ T5268] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 99.200336][ C0] hrtimer: interrupt took 1309816 ns [ 99.580147][ T5300] loop2: detected capacity change from 0 to 256 [ 99.695355][ T5300] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 100.099743][ T5316] netlink: 52 bytes leftover after parsing attributes in process `syz.4.296'. [ 100.282621][ T5322] loop5: detected capacity change from 0 to 2048 [ 102.237875][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 108.314196][ T5471] loop1: detected capacity change from 0 to 512 [ 108.491450][ T5475] loop3: detected capacity change from 0 to 512 [ 108.627233][ T5471] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 108.689283][ T5471] EXT4-fs (loop1): 1 truncate cleaned up [ 108.712204][ T5471] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 110.905214][ T5475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 110.913943][ T5475] System zones: 1-12 [ 110.935968][ T5475] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.352: missing EA_INODE flag [ 110.948167][ T5475] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.352: error while reading EA inode 12 err=-117 [ 110.961065][ T5475] EXT4-fs (loop3): 1 orphan inode deleted [ 110.966900][ T5475] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 111.069535][ T5507] netlink: 560 bytes leftover after parsing attributes in process `syz.4.358'. [ 112.868755][ T5555] netlink: 'syz.5.371': attribute type 1 has an invalid length. [ 112.996231][ T5555] batman_adv: batadv0: Adding interface: dummy0 [ 113.066689][ T5555] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.250898][ T5555] batman_adv: batadv0: Interface activated: dummy0 [ 113.485897][ T5582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'. [ 113.729203][ T5591] loop1: detected capacity change from 0 to 4096 [ 113.816733][ T5591] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 113.816733][ T5591] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 113.816733][ T5591] [ 114.460470][ T5591] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 114.463098][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.386'. [ 114.469621][ T5591] EXT4-fs (loop1): Ignoring removed orlov option [ 114.469640][ T5591] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 114.469640][ T5591] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 114.469640][ T5591] [ 114.574238][ T5591] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 115.905593][ T5637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 115.937942][ T5637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 116.572034][ T5655] ip_tables: iptables: counters copy to user failed while replacing table [ 116.825288][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 117.878477][ T5688] device syzkaller0 entered promiscuous mode [ 118.610396][ T5719] device syzkaller0 entered promiscuous mode [ 123.445244][ T5804] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.472095][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 123.490928][ T5807] bridge0: port 3(batadv0) entered blocking state [ 123.500227][ T5807] bridge0: port 3(batadv0) entered disabled state [ 123.511879][ T5807] device batadv0 entered promiscuous mode [ 123.875193][ T5822] loop2: detected capacity change from 0 to 256 [ 124.012620][ T4747] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 124.022830][ T4747] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 124.099622][ T5826] netlink: 'syz.3.445': attribute type 2 has an invalid length. [ 124.365152][ T5822] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 124.945506][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.448'. [ 125.226006][ T5864] tipc: Enabling of bearer rejected, failed to enable media [ 125.296620][ T5866] loop3: detected capacity change from 0 to 512 [ 125.987837][ T5892] [ 125.990189][ T5892] ====================================================== [ 125.997184][ T5892] WARNING: possible circular locking dependency detected [ 126.004191][ T5892] syzkaller #0 Not tainted [ 126.008578][ T5892] ------------------------------------------------------ [ 126.015573][ T5892] syz.1.462/5892 is trying to acquire lock: [ 126.021452][ T5892] ffff88802359d350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x8de/0xd10 [ 126.030567][ T5892] [ 126.030567][ T5892] but task is already holding lock: [ 126.037909][ T5892] ffff88802359c5d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 126.048511][ T5892] [ 126.048511][ T5892] which lock already depends on the new lock. [ 126.048511][ T5892] [ 126.058895][ T5892] [ 126.058895][ T5892] the existing dependency chain (in reverse order) is: [ 126.067900][ T5892] [ 126.067900][ T5892] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 126.076597][ T5892] __mutex_lock_common+0x1e5/0x2400 [ 126.082317][ T5892] mutex_lock_nested+0x17/0x20 [ 126.087596][ T5892] nfc_urelease_event_work+0x120/0x310 [ 126.093571][ T5892] process_one_work+0x867/0xff0 [ 126.098943][ T5892] worker_thread+0xad7/0x12a0 [ 126.104145][ T5892] kthread+0x42e/0x520 [ 126.108727][ T5892] ret_from_fork+0x1f/0x30 [ 126.113649][ T5892] [ 126.113649][ T5892] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 126.121449][ T5892] __mutex_lock_common+0x1e5/0x2400 [ 126.127155][ T5892] mutex_lock_nested+0x17/0x20 [ 126.132422][ T5892] nfc_register_device+0x38/0x300 [ 126.137965][ T5892] nci_register_device+0x89f/0x9f0 [ 126.143577][ T5892] virtual_ncidev_open+0x55/0xc0 [ 126.149115][ T5892] misc_open+0x31f/0x390 [ 126.153875][ T5892] chrdev_open+0x585/0x5f0 [ 126.158806][ T5892] do_dentry_open+0x7f7/0xf90 [ 126.163995][ T5892] path_openat+0x2718/0x2fb0 [ 126.169088][ T5892] do_filp_open+0x1df/0x400 [ 126.174092][ T5892] do_sys_openat2+0x14b/0x500 [ 126.179295][ T5892] __x64_sys_openat+0x135/0x160 [ 126.184650][ T5892] do_syscall_64+0x4c/0xa0 [ 126.189580][ T5892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.195995][ T5892] [ 126.195995][ T5892] -> #1 (nci_mutex){+.+.}-{3:3}: [ 126.203101][ T5892] __mutex_lock_common+0x1e5/0x2400 [ 126.208815][ T5892] mutex_lock_nested+0x17/0x20 [ 126.214095][ T5892] virtual_nci_close+0x13/0x40 [ 126.219380][ T5892] nci_dev_up+0x976/0xd90 [ 126.224244][ T5892] nfc_dev_up+0x15d/0x310 [ 126.229104][ T5892] nfc_genl_dev_up+0x85/0xd0 [ 126.234226][ T5892] genl_rcv_msg+0xd0b/0xfa0 [ 126.239260][ T5892] netlink_rcv_skb+0x1e9/0x430 [ 126.244548][ T5892] genl_rcv+0x24/0x40 [ 126.249057][ T5892] netlink_unicast+0x78f/0x940 [ 126.254336][ T5892] netlink_sendmsg+0x8ba/0xbe0 [ 126.259621][ T5892] ____sys_sendmsg+0x5be/0x8f0 [ 126.264901][ T5892] ___sys_sendmsg+0x236/0x2e0 [ 126.270091][ T5892] __se_sys_sendmsg+0x1b7/0x2a0 [ 126.275452][ T5892] do_syscall_64+0x4c/0xa0 [ 126.280382][ T5892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.286791][ T5892] [ 126.286791][ T5892] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 126.294430][ T5892] __lock_acquire+0x38f7/0x7d40 [ 126.299824][ T5892] lock_acquire+0x19f/0x400 [ 126.304844][ T5892] __mutex_lock_common+0x1e5/0x2400 [ 126.310559][ T5892] mutex_lock_nested+0x17/0x20 [ 126.315840][ T5892] nci_start_poll+0x8de/0xd10 [ 126.321029][ T5892] nfc_start_poll+0x141/0x2c0 [ 126.326220][ T5892] nfc_genl_start_poll+0x1d7/0x340 [ 126.331853][ T5892] genl_rcv_msg+0xd0b/0xfa0 [ 126.336999][ T5892] netlink_rcv_skb+0x1e9/0x430 [ 126.342296][ T5892] genl_rcv+0x24/0x40 [ 126.346797][ T5892] netlink_unicast+0x78f/0x940 [ 126.352076][ T5892] netlink_sendmsg+0x8ba/0xbe0 [ 126.357354][ T5892] ____sys_sendmsg+0x5be/0x8f0 [ 126.362634][ T5892] ___sys_sendmsg+0x236/0x2e0 [ 126.367822][ T5892] __se_sys_sendmsg+0x1b7/0x2a0 [ 126.373187][ T5892] do_syscall_64+0x4c/0xa0 [ 126.378208][ T5892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.384615][ T5892] [ 126.384615][ T5892] other info that might help us debug this: [ 126.384615][ T5892] [ 126.394930][ T5892] Chain exists of: [ 126.394930][ T5892] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 126.394930][ T5892] [ 126.409183][ T5892] Possible unsafe locking scenario: [ 126.409183][ T5892] [ 126.416619][ T5892] CPU0 CPU1 [ 126.421969][ T5892] ---- ---- [ 126.427325][ T5892] lock(&genl_data->genl_data_mutex); [ 126.432773][ T5892] lock(nfc_devlist_mutex); [ 126.439874][ T5892] lock(&genl_data->genl_data_mutex); [ 126.447844][ T5892] lock(&ndev->req_lock); [ 126.452250][ T5892] [ 126.452250][ T5892] *** DEADLOCK *** [ 126.452250][ T5892] [ 126.460378][ T5892] 4 locks held by syz.1.462/5892: [ 126.465388][ T5892] #0: ffffffff8e2c8cd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 126.473570][ T5892] #1: ffffffff8e2c8b28 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xfa0 [ 126.482525][ T5892] #2: ffff88802359c5d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 126.493562][ T5892] #3: ffff88802359c190 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 126.502791][ T5892] [ 126.502791][ T5892] stack backtrace: [ 126.508693][ T5892] CPU: 1 PID: 5892 Comm: syz.1.462 Not tainted syzkaller #0 [ 126.515967][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.526010][ T5892] Call Trace: [ 126.529289][ T5892] [ 126.532215][ T5892] dump_stack_lvl+0x188/0x250 [ 126.536900][ T5892] ? load_image+0x410/0x410 [ 126.541400][ T5892] ? show_regs_print_info+0x20/0x20 [ 126.546598][ T5892] ? print_circular_bug+0x12b/0x1a0 [ 126.551792][ T5892] check_noncircular+0x2f8/0x400 [ 126.556722][ T5892] ? 0xffffffffa003a000 [ 126.560866][ T5892] ? print_deadlock_bug+0x5d0/0x5d0 [ 126.566054][ T5892] ? lockdep_lock+0x15c/0x1f0 [ 126.570726][ T5892] ? __lock_acquire+0x12df/0x7d40 [ 126.575744][ T5892] ? mark_lock+0x94/0x320 [ 126.580065][ T5892] ? _find_first_zero_bit+0xd1/0xf0 [ 126.585258][ T5892] __lock_acquire+0x38f7/0x7d40 [ 126.590112][ T5892] ? stack_trace_save+0xf0/0xf0 [ 126.594961][ T5892] ? verify_lock_unused+0x140/0x140 [ 126.600156][ T5892] ? stack_trace_save+0xa6/0xf0 [ 126.605000][ T5892] ? stack_trace_snprint+0xe0/0xe0 [ 126.610108][ T5892] ? check_noncircular+0x186/0x400 [ 126.615216][ T5892] ? print_deadlock_bug+0x5d0/0x5d0 [ 126.620411][ T5892] lock_acquire+0x19f/0x400 [ 126.624907][ T5892] ? nci_start_poll+0x8de/0xd10 [ 126.629755][ T5892] ? __might_sleep+0xf0/0xf0 [ 126.634337][ T5892] ? read_lock_is_recursive+0x10/0x10 [ 126.639710][ T5892] __mutex_lock_common+0x1e5/0x2400 [ 126.644905][ T5892] ? nci_start_poll+0x8de/0xd10 [ 126.649752][ T5892] ? verify_lock_unused+0x140/0x140 [ 126.654946][ T5892] ? is_bpf_text_address+0x254/0x270 [ 126.660226][ T5892] ? nci_start_poll+0x8de/0xd10 [ 126.665073][ T5892] ? mutex_lock_io_nested+0x60/0x60 [ 126.670276][ T5892] mutex_lock_nested+0x17/0x20 [ 126.675041][ T5892] nci_start_poll+0x8de/0xd10 [ 126.679716][ T5892] ? nci_dev_down+0x40/0x40 [ 126.684224][ T5892] ? __mutex_lock_common+0x435/0x2400 [ 126.689593][ T5892] ? klist_iter_exit+0xbc/0xf0 [ 126.694355][ T5892] ? class_find_device+0x232/0x290 [ 126.699462][ T5892] ? nfc_start_poll+0x4f/0x2c0 [ 126.704217][ T5892] ? class_for_each_device+0x290/0x290 [ 126.709665][ T5892] ? nfc_genl_start_poll+0x1c9/0x340 [ 126.714943][ T5892] ? mutex_lock_io_nested+0x60/0x60 [ 126.720139][ T5892] ? nfc_get_device+0x82/0xd0 [ 126.724814][ T5892] ? nfc_release+0x2e0/0x2e0 [ 126.729398][ T5892] nfc_start_poll+0x141/0x2c0 [ 126.734071][ T5892] nfc_genl_start_poll+0x1d7/0x340 [ 126.739177][ T5892] genl_rcv_msg+0xd0b/0xfa0 [ 126.743682][ T5892] ? genl_bind+0x370/0x370 [ 126.748097][ T5892] ? verify_lock_unused+0x140/0x140 [ 126.753292][ T5892] ? verify_lock_unused+0x140/0x140 [ 126.758488][ T5892] ? nfc_genl_dev_down+0xd0/0xd0 [ 126.763425][ T5892] netlink_rcv_skb+0x1e9/0x430 [ 126.768196][ T5892] ? genl_bind+0x370/0x370 [ 126.772607][ T5892] ? netlink_ack+0xb10/0xb10 [ 126.777194][ T5892] ? down_read+0x1aa/0x2e0 [ 126.781607][ T5892] genl_rcv+0x24/0x40 [ 126.785581][ T5892] netlink_unicast+0x78f/0x940 [ 126.790346][ T5892] netlink_sendmsg+0x8ba/0xbe0 [ 126.795107][ T5892] ? netlink_getsockopt+0x570/0x570 [ 126.800297][ T5892] ? aa_sock_msg_perm+0x94/0x150 [ 126.805231][ T5892] ? apparmor_socket_sendmsg+0x88/0x230 [ 126.810769][ T5892] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 126.816047][ T5892] ? security_socket_sendmsg+0x7c/0xa0 [ 126.821499][ T5892] ? netlink_getsockopt+0x570/0x570 [ 126.826690][ T5892] ____sys_sendmsg+0x5be/0x8f0 [ 126.831449][ T5892] ? __sys_sendmsg_sock+0x30/0x30 [ 126.836468][ T5892] ? import_iovec+0x6f/0xa0 [ 126.840968][ T5892] ___sys_sendmsg+0x236/0x2e0 [ 126.845645][ T5892] ? __sys_sendmsg+0x290/0x290 [ 126.850414][ T5892] __se_sys_sendmsg+0x1b7/0x2a0 [ 126.855256][ T5892] ? __x64_sys_sendmsg+0x80/0x80 [ 126.860192][ T5892] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 126.866193][ T5892] ? lockdep_hardirqs_on+0x94/0x140 [ 126.871394][ T5892] do_syscall_64+0x4c/0xa0 [ 126.875813][ T5892] ? clear_bhb_loop+0x30/0x80 [ 126.880488][ T5892] ? clear_bhb_loop+0x30/0x80 [ 126.885163][ T5892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.891052][ T5892] RIP: 0033:0x7f105b001559 [ 126.895464][ T5892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.915059][ T5892] RSP: 002b:00007f1059237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.923471][ T5892] RAX: ffffffffffffffda RBX: 00007f105b288090 RCX: 00007f105b001559 [ 126.931432][ T5892] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006 [ 126.939394][ T5892] RBP: 00007f105b098b20 R08: 0000000000000000 R09: 0000000000000000 [ 126.947354][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.955321][ T5892] R13: 00007f105b288128 R14: 00007f105b288090 R15: 00007ffefa630df8 [ 126.963293][ T5892] [ 127.193713][ T5866] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 127.212898][ T5866] EXT4-fs (loop3): 1 truncate cleaned up [ 127.223688][ T5866] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 127.584854][ T26] audit: type=1800 audit(127.544:53): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.456" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 128.563733][ T5892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.581227][ T5883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.681738][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.688106][ T1423] ieee802154 phy1 wpan1: encryption failed: -22