last executing test programs: 18.613653804s ago: executing program 3 (id=71): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000500)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x1}}, 0x10) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044894}, 0x0) 18.428733031s ago: executing program 3 (id=75): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x122) fcntl$notify(r0, 0x402, 0xdbae9f022d68cca9) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x20000000000006) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) tee(r3, r4, 0x1, 0x0) 18.198843111s ago: executing program 3 (id=77): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) madvise(&(0x7f0000922000/0x4000)=nil, 0x4000, 0xf) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0xd0809000) 16.401834063s ago: executing program 3 (id=90): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16.272495848s ago: executing program 3 (id=91): ioprio_set$pid(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'}) 15.384436814s ago: executing program 3 (id=99): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 5.347752836s ago: executing program 1 (id=173): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x30011}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 5.140866714s ago: executing program 1 (id=178): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000880)=""/94, &(0x7f0000000780)=""/102, 0x200000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001d40)={0x4, 0x0, [{0x70000, 0x24, &(0x7f0000000000)=""/36}, {0x4, 0xff2, &(0x7f00000009c0)=""/4082}, {0x8080000, 0x48, &(0x7f0000000800)=""/72}, {0x2, 0xfe9b, &(0x7f0000001e00)=""/220}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 4.982116751s ago: executing program 1 (id=182): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) 4.443229252s ago: executing program 1 (id=186): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r2 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004440)=@acquire={0x1000, 0x17, 0x1, 0x10000000, 0xfffffffd, {{@in6=@remote, 0x200}, @in=@multicast1, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x73}, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x120000}, [@tfcpad={0x8, 0x16, 0x7}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @extra_flags={0x8, 0x18, 0x1}, @coaddr={0x14, 0xe, @in=@remote}, @extra_flags={0x8, 0x18, 0x7}, @algo_auth_trunc={0xe65, 0x14, {{'blake2s-256\x00'}, 0x70c8, 0xa0, "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"}}]}, 0x1000}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xffffff1f, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8dc3, 0x2a002}, [@IFLA_LINK={0x8, 0x5, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x22004011}, 0x20000012) 4.418667563s ago: executing program 0 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./proc/thread-self/fail-nth\x00', 0x8a402, 0xc) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) wait4(r1, 0x0, 0x40000000, 0x0) write(r0, &(0x7f0000000200)='2', 0x1) 3.801548048s ago: executing program 4 (id=190): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) r2 = dup(r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x222200, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)) 3.652085734s ago: executing program 4 (id=191): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.621602395s ago: executing program 0 (id=192): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.386631555s ago: executing program 2 (id=193): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1234, @loopback}}, 0x1e) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x5678, @loopback}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000140)) 3.379819685s ago: executing program 0 (id=194): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 3.24361708s ago: executing program 1 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000003c0)=ANY=[], 0x5, 0x301, &(0x7f0000000080)="$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") write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 3.232311151s ago: executing program 2 (id=196): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) 2.913469504s ago: executing program 4 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000440)=""/235, &(0x7f0000000540)=0xeb) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x50, r2, 0x2b8ee6cf79dab3f, 0x1, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x24001844) gettid() timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040), 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f00000000c0)) 2.730557401s ago: executing program 4 (id=198): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x4b2) syz_clone3(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e508001240000200090500050002020000050001"], 0x58}}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 2.689193722s ago: executing program 1 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x1}}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1800, @private1, 0x6}}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}]}, 0x70}}, 0x4004040) 2.235087041s ago: executing program 2 (id=200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0xf, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff2000/0xd000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x38, 0x1002, 0x3fffc, 0x79, 0x2, 0x4, 0x6, 0x0, 0x7fffffffffffe, 0x5, 0x3fff, 0x5, 0x0, 0x45, 0x4, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0x1d}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {0x0, 0x8}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x46}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2000}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 2.139890254s ago: executing program 0 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c047c070080000900", 0x33a) 2.01589336s ago: executing program 2 (id=202): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f0000002200)='.\x00', 0x0, 0x3209864, 0x0) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.121971865s ago: executing program 0 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) 968.173162ms ago: executing program 2 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x1) r3 = eventfd2(0x7e, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x4, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7fffffffffffffff, 0xd, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 967.557571ms ago: executing program 4 (id=205): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r4], &(0x7f00000003c0), 0x0, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000180)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000300), 0x1, r7}) 761.63275ms ago: executing program 4 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./rpc_pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\n\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000340)='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='port=2049,proto=tcp,clientaddr=127.0.0.1\x00']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/testfile\x00', 0x0, 0x0) close(r1) 190.479963ms ago: executing program 0 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x3, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xb3538085985bbb56}, 0x0) 139.264415ms ago: executing program 32 (id=99): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 0s ago: executing program 2 (id=209): r0 = socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2002, @remote}}}, 0x108) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 45.612653][ T4172] cgroup: Unknown subsys name 'net' [ 45.753732][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.926449][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.193160][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 48.286064][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 48.315425][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 48.383477][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 48.410593][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.417666][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.426572][ T4187] device bridge_slave_0 entered promiscuous mode [ 48.451071][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.458122][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.466459][ T4187] device bridge_slave_1 entered promiscuous mode [ 48.473795][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 48.530063][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.542082][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.549642][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.557639][ T4186] device bridge_slave_0 entered promiscuous mode [ 48.569686][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.576735][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.584530][ T4194] device bridge_slave_0 entered promiscuous mode [ 48.593179][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.609927][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.616983][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.625310][ T4186] device bridge_slave_1 entered promiscuous mode [ 48.637062][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.644433][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.652171][ T4194] device bridge_slave_1 entered promiscuous mode [ 48.679653][ T4187] team0: Port device team_slave_0 added [ 48.705299][ T4187] team0: Port device team_slave_1 added [ 48.724668][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.731932][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.739775][ T4185] device bridge_slave_0 entered promiscuous mode [ 48.755506][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.769100][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.778321][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.785508][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.793179][ T4185] device bridge_slave_1 entered promiscuous mode [ 48.801426][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.828412][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.854159][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.861326][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.887455][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.899026][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.906079][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.914408][ T4191] device bridge_slave_0 entered promiscuous mode [ 48.929244][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.945670][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.955108][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.962369][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.988951][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.004819][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.012140][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.020235][ T4191] device bridge_slave_1 entered promiscuous mode [ 49.038753][ T4186] team0: Port device team_slave_0 added [ 49.046724][ T4186] team0: Port device team_slave_1 added [ 49.059333][ T4194] team0: Port device team_slave_0 added [ 49.078221][ T4185] team0: Port device team_slave_0 added [ 49.098939][ T4194] team0: Port device team_slave_1 added [ 49.106107][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.124347][ T4185] team0: Port device team_slave_1 added [ 49.147321][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.154453][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.180444][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.193905][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.206567][ T4187] device hsr_slave_0 entered promiscuous mode [ 49.213158][ T4187] device hsr_slave_1 entered promiscuous mode [ 49.225157][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.232373][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.258633][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.291374][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.298326][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.324423][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.336577][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.343660][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.370632][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.396619][ T4191] team0: Port device team_slave_0 added [ 49.402845][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.410171][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.436333][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.447781][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.455027][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.480989][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.501633][ T4191] team0: Port device team_slave_1 added [ 49.525372][ T4186] device hsr_slave_0 entered promiscuous mode [ 49.532331][ T4186] device hsr_slave_1 entered promiscuous mode [ 49.539278][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.546964][ T4186] Cannot create hsr debugfs directory [ 49.590260][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.597218][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.623803][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.651977][ T4185] device hsr_slave_0 entered promiscuous mode [ 49.659543][ T4185] device hsr_slave_1 entered promiscuous mode [ 49.666079][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.673742][ T4185] Cannot create hsr debugfs directory [ 49.689389][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.696332][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.722307][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.736557][ T4194] device hsr_slave_0 entered promiscuous mode [ 49.743328][ T4194] device hsr_slave_1 entered promiscuous mode [ 49.750247][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.757793][ T4194] Cannot create hsr debugfs directory [ 49.888324][ T4191] device hsr_slave_0 entered promiscuous mode [ 49.895212][ T4191] device hsr_slave_1 entered promiscuous mode [ 49.901842][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.910057][ T4191] Cannot create hsr debugfs directory [ 49.999444][ T26] Bluetooth: hci4: command 0x0409 tx timeout [ 50.006018][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 50.017796][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 50.024234][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 50.036333][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 50.087587][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.106892][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.120616][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.133761][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.192074][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.207507][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.217790][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.231974][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.286892][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.295042][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.316900][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.348343][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.358990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.368273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.380906][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.391361][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.405454][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.418070][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.431240][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.442488][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.452105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.461358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.470831][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.478031][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.487208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.503127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.511763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.520537][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.527578][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.573501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.585028][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.599557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.610923][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.619570][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.638408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.647711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.656523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.665646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.674768][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.684465][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.700545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.710003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.718407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.727606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.737428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.746010][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.753097][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.762217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.770417][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.797489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.806379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.815354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.825928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.834566][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.841633][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.850801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.859125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.883136][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.922180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.933688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.942675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.952260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.961584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.970489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.978863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.987091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.995743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.022347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.033963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.053186][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.073020][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.113615][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.125751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.135816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.146119][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.166934][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.184691][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.194034][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.202686][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.232293][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.242133][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.257715][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.264847][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.274781][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.284231][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.293797][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.300877][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.308562][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.317042][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.326220][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.334937][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.342030][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.349984][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.358458][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.367015][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.374079][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.382459][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.390449][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.398403][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.407586][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.419527][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.431186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.449351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.457794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.466715][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.473799][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.481480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.491985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.516733][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.532435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.540045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.547433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.556369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.568685][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.575743][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.583876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.593030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.602491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.611059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.647898][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.657202][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.666140][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.675432][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.687940][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.696612][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.705075][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.714043][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.722554][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.730915][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.739432][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.747873][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.756896][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.766048][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.774647][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.783258][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.791939][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.800552][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.808861][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.817116][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.825752][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.833952][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.849743][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.865969][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.877152][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.896777][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.904265][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.912881][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.922277][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.930936][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.939912][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.948267][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.956624][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.964821][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.977366][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.987858][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.004105][ T4185] device veth0_vlan entered promiscuous mode [ 52.026676][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.036998][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.046034][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.054981][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.064740][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.074245][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.095927][ T4185] device veth1_vlan entered promiscuous mode [ 52.102388][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 52.109269][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 52.126705][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 52.132879][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 52.135969][ T4187] device veth0_vlan entered promiscuous mode [ 52.149372][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 52.173999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.183607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.209631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.219823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.253855][ T4187] device veth1_vlan entered promiscuous mode [ 52.273785][ T4185] device veth0_macvtap entered promiscuous mode [ 52.287350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.296012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.310642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.323805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.333139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.343096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.368375][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.382867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.391135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.401296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.415994][ T4187] device veth0_macvtap entered promiscuous mode [ 52.424606][ T4185] device veth1_macvtap entered promiscuous mode [ 52.442524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.450940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.459958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.468319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.479337][ T4187] device veth1_macvtap entered promiscuous mode [ 52.505142][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.514259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.525901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.534980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.542984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.550489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.559097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.567603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.575817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.586655][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.598023][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.609324][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.620127][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.631362][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.644030][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.652416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.662507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.674900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.686030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.725035][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.736026][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.746023][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.758305][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.782849][ T4186] device veth0_vlan entered promiscuous mode [ 52.801584][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.817489][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.830109][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.838536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.847100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.857166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.866096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.874867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.884534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.893202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.901262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.911412][ T4186] device veth1_vlan entered promiscuous mode [ 52.924928][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.933836][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.943400][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.952655][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.998791][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.006885][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.015160][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.024364][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.032998][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.041769][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.050363][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.058093][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.071448][ T4191] device veth0_vlan entered promiscuous mode [ 53.097078][ T4186] device veth0_macvtap entered promiscuous mode [ 53.140711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.150546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.160579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.179559][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.180383][ T4191] device veth1_vlan entered promiscuous mode [ 53.187478][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.221994][ T4186] device veth1_macvtap entered promiscuous mode [ 53.239461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.247803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.256025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.266032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.275387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.290308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.298367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.307184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.329681][ T4194] device veth0_vlan entered promiscuous mode [ 53.352678][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.364580][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.371968][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.379780][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.392422][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.403081][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.415518][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.428697][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.443471][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.453377][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.463806][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.474774][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.483602][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.492433][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.501952][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.510676][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.519919][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.528853][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.537463][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.550548][ T4194] device veth1_vlan entered promiscuous mode [ 53.561158][ T4191] device veth0_macvtap entered promiscuous mode [ 53.591006][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.602044][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.614275][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.621974][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.631717][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.641175][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.669094][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.677163][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.745276][ T4191] device veth1_macvtap entered promiscuous mode [ 53.754259][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.764411][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.778124][ T4194] device veth0_macvtap entered promiscuous mode [ 53.793475][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.802048][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.805968][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.823694][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.833840][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.845461][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.855734][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.866276][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.877728][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.888128][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.899011][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.908993][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.920507][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.930369][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.942217][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.953963][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.961701][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.974981][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.984000][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.994224][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.003975][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.013969][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.030540][ T4194] device veth1_macvtap entered promiscuous mode [ 54.043982][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.053875][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.062818][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.071869][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.073411][ T4272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 54.142622][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.169160][ T26] Bluetooth: hci4: command 0x040f tx timeout [ 54.175944][ T26] Bluetooth: hci0: command 0x040f tx timeout [ 54.188781][ T26] Bluetooth: hci3: command 0x040f tx timeout [ 54.205188][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.223681][ T26] Bluetooth: hci1: command 0x040f tx timeout [ 54.234642][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.247627][ T26] Bluetooth: hci2: command 0x040f tx timeout [ 54.258381][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.274374][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.287902][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.297906][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.308954][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.320210][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.341744][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.352536][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.368829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.392580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.423810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.445944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.454156][ T4281] loop0: detected capacity change from 0 to 8 [ 54.475595][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.480237][ T4281] SQUASHFS error: zlib decompression failed, data probably corrupt [ 54.505779][ T4281] SQUASHFS error: Failed to read block 0x9b: -5 [ 54.519264][ T4281] SQUASHFS error: Unable to read metadata cache entry [99] [ 54.525107][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.528624][ T4281] SQUASHFS error: Unable to read inode 0x127 [ 54.542624][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.557578][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.569840][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.580484][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.592605][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.604927][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.616441][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.633504][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.644855][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.669958][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.684574][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.691554][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.703973][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.735837][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.754593][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.782483][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.918099][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.945612][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.994669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.043378][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.080108][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.100645][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.157095][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.193861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.208407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.279196][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.287137][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.319122][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.228743][ T4290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.262419][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 56.289595][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 56.313796][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 56.355595][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 56.368968][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 56.440912][ T4307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 56.800702][ T4320] loop4: detected capacity change from 0 to 512 [ 56.854149][ T4320] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 56.879978][ T4320] EXT4-fs (loop4): Ignoring removed bh option [ 56.894250][ T4320] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.034202][ T4320] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 57.059310][ T4320] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.334870][ T4339] process 'syz.1.25' launched './file0' with NULL argv: empty string added [ 57.539207][ T4334] loop3: detected capacity change from 0 to 32768 [ 57.573560][ T4334] ======================================================= [ 57.573560][ T4334] WARNING: The mand mount option has been deprecated and [ 57.573560][ T4334] and is ignored by this kernel. Remove the mand [ 57.573560][ T4334] option from the mount to silence this warning. [ 57.573560][ T4334] ======================================================= [ 57.852985][ T4334] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 58.097379][ T25] audit: type=1800 audit(1789137558.063:2): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.23" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 58.180498][ T25] audit: type=1800 audit(1789137558.113:3): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.23" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 58.416753][ T4356] loop2: detected capacity change from 0 to 512 [ 58.564585][ T4356] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 58.581295][ T4359] sch_fq: defrate 8 ignored. [ 58.611237][ T4356] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.665376][ T4356] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.777939][ T4362] loop0: detected capacity change from 0 to 164 [ 58.827228][ T4356] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.29: invalid indirect mapped block 83886080 (level 1) [ 58.869611][ T4334] syz.3.23 (4334) used greatest stack depth: 18368 bytes left [ 58.888407][ T4362] isofs: isofs_export_get_parent(): child directory not normalized! [ 58.910115][ T4356] EXT4-fs (loop2): Remounting filesystem read-only [ 58.917112][ T4356] EXT4-fs (loop2): 1 orphan inode deleted [ 58.971721][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 59.017775][ T4356] EXT4-fs (loop2): 1 truncate cleaned up [ 59.040285][ T4356] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,nodelalloc,quota,nolazytime,grpjquota=,mblk_io_submit,barrier=0x00000000000000ff,max_batch_time=0x00000. Quota mode: writeback. [ 59.260790][ T4356] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #2: block 13: comm syz.2.29: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 59.366411][ T25] audit: type=1326 audit(1789137559.333:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4367 comm="syz.0.34" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0873547159 code=0x0 [ 59.406291][ T4356] EXT4-fs (loop2): Remounting filesystem read-only [ 59.494130][ T4356] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #2: comm syz.2.29: directory missing '..' [ 60.174067][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 60.600151][ T4391] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 60.666380][ T4389] loop0: detected capacity change from 0 to 1024 [ 60.700100][ T4395] binder: 4394:4395 ioctl c0306201 2000000001c0 returned -14 [ 60.729974][ T4395] binder: 4394:4395 ioctl c0306201 200000000180 returned -14 [ 60.770420][ T4389] EXT4-fs (loop0): Ignoring removed bh option [ 60.795507][ T4400] loop1: detected capacity change from 0 to 512 [ 60.821407][ T4389] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,dioread_lock,stripe=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,barrier=0x0000000000000004,grpquota,bh,init_itable,. Quota mode: writeback. [ 60.902715][ T4389] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.980137][ T4400] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.44: bad orphan inode 11862016 [ 61.030016][ T4400] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.056827][ T4400] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.069627][ T4414] loop4: detected capacity change from 0 to 256 [ 61.120396][ T4414] exfat: Deprecated parameter 'utf8' [ 61.156954][ T4414] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdbc48169, utbl_chksum : 0xe619d30d) [ 61.409864][ T4422] loop4: detected capacity change from 0 to 256 [ 61.436978][ T4424] loop1: detected capacity change from 0 to 128 [ 61.512861][ T4422] FAT-fs (loop4): Directory bread(block 64) failed [ 61.553720][ T4422] FAT-fs (loop4): Directory bread(block 65) failed [ 61.570619][ T4422] FAT-fs (loop4): Directory bread(block 66) failed [ 61.584994][ T4422] FAT-fs (loop4): Directory bread(block 67) failed [ 61.599102][ T4422] FAT-fs (loop4): Directory bread(block 68) failed [ 61.658682][ T4422] FAT-fs (loop4): Directory bread(block 69) failed [ 61.685691][ T4422] FAT-fs (loop4): Directory bread(block 70) failed [ 61.705103][ T4422] FAT-fs (loop4): Directory bread(block 71) failed [ 61.711857][ T4422] FAT-fs (loop4): Directory bread(block 72) failed [ 61.718397][ T4422] FAT-fs (loop4): Directory bread(block 73) failed [ 61.840179][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 62.523596][ T25] audit: type=1804 audit(1789137562.483:5): pid=4434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.55" name="bus" dev="ramfs" ino=33897 res=1 errno=0 [ 62.580268][ T4437] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 62.727153][ T4442] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 62.736077][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 62.797992][ T4443] netlink: 208 bytes leftover after parsing attributes in process `syz.3.58'. [ 63.026089][ T4447] netlink: 'syz.1.59': attribute type 15 has an invalid length. [ 63.047283][ T4447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.59'. [ 63.417986][ T4455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.62'. [ 63.459475][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.467653][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.259116][ T4465] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 64.266706][ T4465] netlink: 'syz.4.65': attribute type 4 has an invalid length. [ 64.330955][ T4465] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.65'. [ 64.387460][ T4464] netlink: 2 bytes leftover after parsing attributes in process `syz.1.64'. [ 64.446542][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 64.480283][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.556666][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.588876][ T4480] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 64.615467][ T4482] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 65.604123][ T4489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73'. [ 65.667581][ T4493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.72'. [ 65.767089][ T4489] capability: warning: `syz.4.73' uses 32-bit capabilities (legacy support in use) [ 66.548518][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 66.568512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 66.578515][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 66.598507][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 66.608504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 66.628516][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 66.638507][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 66.717454][ T4509] device syzkaller0 entered promiscuous mode [ 67.071916][ T4528] overlayfs: statfs failed on './file0' [ 67.082547][ T25] audit: type=1326 audit(1789137567.053:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0873547159 code=0x0 [ 67.135995][ T25] audit: type=1326 audit(1789137567.103:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0873547159 code=0x7ffc0000 [ 67.253412][ T25] audit: type=1326 audit(1789137567.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0873547159 code=0x7ffc0000 [ 67.295772][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.305369][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.313493][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.324276][ T4538] device bridge_slave_0 left promiscuous mode [ 67.332486][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.344004][ T25] audit: type=1326 audit(1789137567.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0873547159 code=0x7ffc0000 [ 67.367028][ T4538] device bridge_slave_1 left promiscuous mode [ 67.395158][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.399497][ T25] audit: type=1326 audit(1789137567.133:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0873547159 code=0x7ffc0000 [ 67.431257][ T4538] bond0: (slave bond_slave_0): Releasing backup interface [ 67.451318][ T25] audit: type=1326 audit(1789137567.133:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0873547159 code=0x7ffc0000 [ 67.492153][ T4538] bond0: (slave bond_slave_1): Releasing backup interface [ 67.510803][ T25] audit: type=1326 audit(1789137567.133:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0873547159 code=0x7ffc0000 [ 67.559914][ T25] audit: type=1326 audit(1789137567.133:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0873547159 code=0x7ffc0000 [ 67.584979][ T25] audit: type=1326 audit(1789137567.133:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0873547159 code=0x7ffc0000 [ 67.619503][ T4538] team0: Port device team_slave_0 removed [ 67.625500][ T25] audit: type=1326 audit(1789137567.133:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.0.85" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0873547159 code=0x7ffc0000 [ 67.665953][ T4546] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.670826][ T4538] team0: Port device team_slave_1 removed [ 67.700326][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.708080][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.719042][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.726701][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.765040][ T4539] team0: Mode changed to "loadbalance" [ 67.883761][ T4554] x_tables: unsorted entry at hook 2 [ 68.085597][ T4566] MPTCP: addr_signal error, rm_addr=1 [ 69.297197][ T4578] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 70.036089][ T4598] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 70.043745][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 70.223361][ T4602] loop4: detected capacity change from 0 to 512 [ 70.360502][ T4602] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 70.360502][ T4602] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 70.360502][ T4602] [ 70.454926][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.470649][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.478676][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.762717][ T4602] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 71.123687][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.130295][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.153753][ T4602] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 71.201774][ T4602] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 71.211919][ T4602] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e042a02c, mo2=0000] [ 71.234355][ T4602] EXT4-fs (loop4): failed to initialize system zone (-117) [ 71.249675][ T4602] EXT4-fs (loop4): mount failed [ 72.185170][ T4641] tipc: Started in network mode [ 72.193672][ T4641] tipc: Node identity 7f000001, cluster identity 4711 [ 72.206468][ T4641] tipc: Enabled bearer , priority 10 [ 72.333123][ T4641] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 72.355141][ T4641] tipc: Enabled bearer , priority 10 [ 72.690283][ T4654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.129'. [ 72.718184][ T4652] loop4: detected capacity change from 0 to 2048 [ 72.733190][ T4656] loop2: detected capacity change from 0 to 1024 [ 72.868805][ T4659] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.103097][ T25] kauditd_printk_skb: 165 callbacks suppressed [ 73.103113][ T25] audit: type=1800 audit(1789137573.063:181): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.128" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 73.361196][ T2238] tipc: Node number set to 2130706433 [ 73.973381][ T4667] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 74.581311][ T4689] loop2: detected capacity change from 0 to 512 [ 74.790583][ T4689] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.851965][ T4689] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 75.615785][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 75.680280][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 75.845907][ T4718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.150'. [ 76.014961][ T4723] netlink: 277 bytes leftover after parsing attributes in process `syz.0.152'. [ 76.241672][ T7] cfg80211: failed to load regulatory.db [ 76.725051][ T4731] 9pnet: Insufficient options for proto=fd [ 78.264621][ T4762] loop2: detected capacity change from 0 to 512 [ 78.290573][ T4764] jffs2: notice: (4764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.424557][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 78.524596][ T4773] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 78.607398][ T4773] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 79.304828][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 79.401620][ T4810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.426811][ T4817] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 79.459530][ T4817] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.184'. [ 79.710625][ T4824] syz.2.185 uses obsolete (PF_INET,SOCK_PACKET) [ 79.749128][ T4828] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.186'. [ 79.941161][ T4826] FAULT_INJECTION: forcing a failure. [ 79.941161][ T4826] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.042232][ T4826] CPU: 1 PID: 4826 Comm: syz.0.187 Not tainted syzkaller #0 [ 80.049540][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.059603][ T4826] Call Trace: [ 80.062875][ T4826] [ 80.065798][ T4826] dump_stack_lvl+0x188/0x250 [ 80.070478][ T4826] ? show_regs_print_info+0x20/0x20 [ 80.075661][ T4826] ? load_image+0x410/0x410 [ 80.080150][ T4826] ? __lock_acquire+0x7b50/0x7b50 [ 80.085160][ T4826] ? _raw_spin_unlock_irq+0x2a/0x40 [ 80.090342][ T4826] ? get_signal+0x121c/0x12e0 [ 80.095002][ T4826] should_fail+0x383/0x4b0 [ 80.099402][ T4826] _copy_to_user+0x2e/0x130 [ 80.103890][ T4826] copy_siginfo_to_user+0x20/0x80 [ 80.108899][ T4826] arch_do_signal_or_restart+0xcf9/0x12a0 [ 80.114613][ T4826] ? get_sigframe_size+0x10/0x10 [ 80.119535][ T4826] ? __context_tracking_exit+0x4c/0x80 [ 80.124982][ T4826] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.130949][ T4826] ? exit_to_user_mode_loop+0x3b/0x130 [ 80.136392][ T4826] exit_to_user_mode_loop+0x9e/0x130 [ 80.141659][ T4826] exit_to_user_mode_prepare+0xee/0x180 [ 80.147185][ T4826] syscall_exit_to_user_mode+0x16/0x40 [ 80.152627][ T4826] do_syscall_64+0x58/0xa0 [ 80.157024][ T4826] ? clear_bhb_loop+0x30/0x80 [ 80.161681][ T4826] ? clear_bhb_loop+0x30/0x80 [ 80.166341][ T4826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.172232][ T4826] RIP: 0033:0x7f0873547157 [ 80.176633][ T4826] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 80.196222][ T4826] RSP: 002b:00007f087179f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.204620][ T4826] RAX: 00000000000000ca RBX: 00007f08737cefa8 RCX: 00007f0873547159 [ 80.212574][ T4826] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f08737cefa8 [ 80.220529][ T4826] RBP: 00007f08737cefa0 R08: 0000000000000000 R09: 0000000000000000 [ 80.228483][ T4826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.236440][ T4826] R13: 00007f08737cf038 R14: 00007ffc4cc70fa0 R15: 00007ffc4cc71088 [ 80.244403][ T4826] [ 80.510984][ T4845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.572952][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 80.627970][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 80.774793][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.837656][ T4847] bond1: (slave bond0): Enslaving as an active interface with a down link [ 81.227214][ T4860] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 82.147155][ T4881] loop2: detected capacity change from 0 to 4096 [ 82.299135][ T4884] netlink: 798 bytes leftover after parsing attributes in process `syz.0.201'. [ 82.365007][ T4885] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.605708][ T4894] svc: failed to register nfsdv3 RPC service (errno 111). [ 83.631997][ T4894] svc: failed to register nfsaclv3 RPC service (errno 111). [ 83.913726][ T4297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.146770][ T4297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.284329][ T4194] ================================================================== [ 84.292649][ T4194] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0 [ 84.300380][ T4194] Write of size 4 at addr ffff88805ff7e450 by task syz-executor/4194 [ 84.308447][ T4194] [ 84.310774][ T4194] CPU: 0 PID: 4194 Comm: syz-executor Not tainted syzkaller #0 [ 84.318322][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.328381][ T4194] Call Trace: [ 84.331664][ T4194] [ 84.334594][ T4194] dump_stack_lvl+0x188/0x250 [ 84.339284][ T4194] ? show_regs_print_info+0x20/0x20 [ 84.344496][ T4194] ? load_image+0x410/0x410 [ 84.349008][ T4194] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 84.354476][ T4194] ? rcu_lock_release+0x5/0x20 [ 84.359246][ T4194] print_address_description+0x60/0x2d0 [ 84.364805][ T4194] ? nfsd_shutdown_threads+0x89/0x1a0 [ 84.370185][ T4194] kasan_report+0xdf/0x130 [ 84.374614][ T4194] ? nfsd_shutdown_threads+0x89/0x1a0 [ 84.379994][ T4194] kasan_check_range+0x235/0x290 [ 84.384941][ T4194] nfsd_shutdown_threads+0x89/0x1a0 [ 84.390147][ T4194] nfsd_umount+0x3e/0xc0 [ 84.394392][ T4194] deactivate_locked_super+0x93/0xf0 [ 84.399681][ T4194] cleanup_mnt+0x426/0x4d0 [ 84.404109][ T4194] task_work_run+0x125/0x1a0 [ 84.408708][ T4194] exit_to_user_mode_loop+0x10f/0x130 [ 84.414080][ T4194] exit_to_user_mode_prepare+0xee/0x180 [ 84.419629][ T4194] syscall_exit_to_user_mode+0x16/0x40 [ 84.425091][ T4194] do_syscall_64+0x58/0xa0 [ 84.429511][ T4194] ? clear_bhb_loop+0x30/0x80 [ 84.434194][ T4194] ? clear_bhb_loop+0x30/0x80 [ 84.438878][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.444776][ T4194] RIP: 0033:0x7f3f56530397 [ 84.449197][ T4194] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 84.468803][ T4194] RSP: 002b:00007ffd6756e1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 84.477224][ T4194] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3f56530397 [ 84.485200][ T4194] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6756e290 [ 84.493181][ T4194] RBP: 00007ffd6756e290 R08: 00007ffd6756f290 R09: 00000000ffffffff [ 84.501164][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6756f320 [ 84.509144][ T4194] R13: 00007f3f565c548b R14: 000000000001489a R15: 00007ffd6756f360 [ 84.517135][ T4194] [ 84.520160][ T4194] [ 84.522478][ T4194] Allocated by task 4894: [ 84.526798][ T4194] __kasan_kmalloc+0xaf/0xe0 [ 84.531392][ T4194] __svc_create+0x60/0x9d0 [ 84.535813][ T4194] svc_create_pooled+0x62f/0x810 [ 84.540751][ T4194] nfsd_create_serv+0x2f9/0x700 [ 84.545604][ T4194] nfsd_svc+0x132/0x9e0 [ 84.549757][ T4194] write_threads+0x2ea/0x350 [ 84.554345][ T4194] nfsctl_transaction_write+0x105/0x150 [ 84.559892][ T4194] vfs_write+0x304/0xd70 [ 84.564143][ T4194] ksys_write+0x153/0x260 [ 84.568483][ T4194] do_syscall_64+0x4c/0xa0 [ 84.572900][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.578794][ T4194] [ 84.581145][ T4194] Freed by task 4894: [ 84.585122][ T4194] kasan_set_track+0x4b/0x70 [ 84.589717][ T4194] kasan_set_free_info+0x1f/0x40 [ 84.594658][ T4194] ____kasan_slab_free+0xd5/0x110 [ 84.599687][ T4194] slab_free_freelist_hook+0xec/0x170 [ 84.605058][ T4194] kfree+0xef/0x2a0 [ 84.608864][ T4194] nfsd_svc+0x7cf/0x9e0 [ 84.613021][ T4194] write_threads+0x2ea/0x350 [ 84.617607][ T4194] nfsctl_transaction_write+0x105/0x150 [ 84.623153][ T4194] vfs_write+0x304/0xd70 [ 84.627396][ T4194] ksys_write+0x153/0x260 [ 84.631725][ T4194] do_syscall_64+0x4c/0xa0 [ 84.636141][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.642037][ T4194] [ 84.644358][ T4194] The buggy address belongs to the object at ffff88805ff7e400 [ 84.644358][ T4194] which belongs to the cache kmalloc-512 of size 512 [ 84.658406][ T4194] The buggy address is located 80 bytes inside of [ 84.658406][ T4194] 512-byte region [ffff88805ff7e400, ffff88805ff7e600) [ 84.671600][ T4194] The buggy address belongs to the page: [ 84.677230][ T4194] page:ffffea00017fdf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ff7c [ 84.687388][ T4194] head:ffffea00017fdf00 order:2 compound_mapcount:0 compound_pincount:0 [ 84.695710][ T4194] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 84.703696][ T4194] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80 [ 84.712278][ T4194] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 84.720854][ T4194] page dumped because: kasan: bad access detected [ 84.727277][ T4194] page_owner tracks the page as allocated [ 84.732990][ T4194] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4187, ts 50427751683, free_ts 13723315223 [ 84.752091][ T4194] get_page_from_freelist+0x24f6/0x2670 [ 84.757645][ T4194] __alloc_pages+0x1ee/0x480 [ 84.762239][ T4194] new_slab+0xc0/0x4b0 [ 84.766306][ T4194] ___slab_alloc+0x807/0xdd0 [ 84.770894][ T4194] __kmalloc_node_track_caller+0x13d/0x3a0 [ 84.776707][ T4194] __alloc_skb+0x22c/0x750 [ 84.781121][ T4194] netlink_ack+0x35c/0xb10 [ 84.785535][ T4194] netlink_rcv_skb+0x267/0x430 [ 84.790300][ T4194] netlink_unicast+0x78f/0x940 [ 84.795064][ T4194] netlink_sendmsg+0x8ba/0xbe0 [ 84.799826][ T4194] __sys_sendto+0x46d/0x620 [ 84.804327][ T4194] __x64_sys_sendto+0xda/0xf0 [ 84.808998][ T4194] do_syscall_64+0x4c/0xa0 [ 84.813409][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.819305][ T4194] page last free stack trace: [ 84.823966][ T4194] free_unref_page_prepare+0x637/0x6c0 [ 84.829421][ T4194] free_unref_page+0x8f/0x2a0 [ 84.834101][ T4194] free_contig_range+0x96/0xf0 [ 84.838867][ T4194] destroy_args+0xef/0xa00 [ 84.843278][ T4194] debug_vm_pgtable+0x321/0x380 [ 84.848127][ T4194] do_one_initcall+0x272/0x730 [ 84.852889][ T4194] do_initcall_level+0x13d/0x1f0 [ 84.857820][ T4194] do_initcalls+0x4b/0x90 [ 84.862145][ T4194] kernel_init_freeable+0x3d5/0x560 [ 84.867342][ T4194] kernel_init+0x19/0x1b0 [ 84.871676][ T4194] ret_from_fork+0x1f/0x30 [ 84.876092][ T4194] [ 84.878409][ T4194] Memory state around the buggy address: [ 84.884036][ T4194] ffff88805ff7e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.892090][ T4194] ffff88805ff7e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.900146][ T4194] >ffff88805ff7e400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.908196][ T4194] ^ [ 84.914861][ T4194] ffff88805ff7e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.922916][ T4194] ffff88805ff7e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.930971][ T4194] ================================================================== [ 84.939021][ T4194] Disabling lock debugging due to kernel taint [ 84.948133][ T4297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.949961][ T4194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.965559][ T4194] CPU: 0 PID: 4194 Comm: syz-executor Tainted: G B syzkaller #0 [ 84.974489][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.984543][ T4194] Call Trace: [ 84.987818][ T4194] [ 84.990746][ T4194] dump_stack_lvl+0x188/0x250 [ 84.995451][ T4194] ? show_regs_print_info+0x20/0x20 [ 85.000650][ T4194] ? load_image+0x410/0x410 [ 85.005157][ T4194] panic+0x2f8/0x850 [ 85.009058][ T4194] ? bpf_jit_dump+0xd0/0xd0 [ 85.013558][ T4194] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 85.019533][ T4194] ? _raw_spin_unlock+0x40/0x40 [ 85.024382][ T4194] ? nfsd_shutdown_threads+0x89/0x1a0 [ 85.029748][ T4194] check_panic_on_warn+0x80/0xa0 [ 85.034683][ T4194] ? nfsd_shutdown_threads+0x89/0x1a0 [ 85.040053][ T4194] end_report+0x6d/0xf0 [ 85.044206][ T4194] kasan_report+0x102/0x130 [ 85.048706][ T4194] ? nfsd_shutdown_threads+0x89/0x1a0 [ 85.054072][ T4194] kasan_check_range+0x235/0x290 [ 85.059008][ T4194] nfsd_shutdown_threads+0x89/0x1a0 [ 85.064219][ T4194] nfsd_umount+0x3e/0xc0 [ 85.068462][ T4194] deactivate_locked_super+0x93/0xf0 [ 85.073744][ T4194] cleanup_mnt+0x426/0x4d0 [ 85.078167][ T4194] task_work_run+0x125/0x1a0 [ 85.082760][ T4194] exit_to_user_mode_loop+0x10f/0x130 [ 85.088126][ T4194] exit_to_user_mode_prepare+0xee/0x180 [ 85.093668][ T4194] syscall_exit_to_user_mode+0x16/0x40 [ 85.099124][ T4194] do_syscall_64+0x58/0xa0 [ 85.103533][ T4194] ? clear_bhb_loop+0x30/0x80 [ 85.108203][ T4194] ? clear_bhb_loop+0x30/0x80 [ 85.112883][ T4194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.118777][ T4194] RIP: 0033:0x7f3f56530397 [ 85.123190][ T4194] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 85.142789][ T4194] RSP: 002b:00007ffd6756e1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.151202][ T4194] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3f56530397 [ 85.159170][ T4194] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6756e290 [ 85.167141][ T4194] RBP: 00007ffd6756e290 R08: 00007ffd6756f290 R09: 00000000ffffffff [ 85.175110][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6756f320 [ 85.183081][ T4194] R13: 00007f3f565c548b R14: 000000000001489a R15: 00007ffd6756f360 [ 85.191061][ T4194] [ 85.194290][ T4194] Kernel Offset: disabled [ 85.198606][ T4194] Rebooting in 86400 seconds..