last executing test programs: 8.713778817s ago: executing program 3 (id=82): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000003c0)={r4, 0x4}, &(0x7f0000000400)=0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000500)={0x7, {{0x29, 0x0, 0xb000000, @remote, 0x1000004}}}, 0x88) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1, 0x1000000}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r6, &(0x7f0000000280)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) 8.459374403s ago: executing program 3 (id=85): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 5.944272542s ago: executing program 3 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 4.699901761s ago: executing program 3 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0xffffffffffffffff, {0x0, 0x0, 0x4}, 0xfe}, 0x18) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x4, 0xde93, 0x9, 0x44a00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x202, 0x1, 0x4, 0x6}, 0x50) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 4.549507831s ago: executing program 0 (id=110): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x6450, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0) sendmmsg$sock(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x6, @private1, 0xff, 0x4}, 0x80, 0x0}}], 0x3, 0x40500f0) 4.372049792s ago: executing program 0 (id=112): r0 = syz_io_uring_setup(0x7672, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0xf0e0fc9000f8e609}) io_uring_enter(r0, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 4.367540993s ago: executing program 0 (id=113): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.307546406s ago: executing program 4 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x2c}}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x4) 4.180135414s ago: executing program 4 (id=115): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004850) poll(&(0x7f0000001300)=[{r2, 0x200}], 0x1, 0xffffffc0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0x5) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sendmsg(r3, 0x0, 0x40000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.548102794s ago: executing program 3 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x10, 0x83) io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x9000, 0x5}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r7, 0x0, 0xffffffff004) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000000580)={0x3, [[0xa29, 0x0, 0x10, 0x4, 0xb72e, 0x5, 0x2, 0x8001], [0x1, 0x6, 0x8, 0xe, 0x2, 0x6, 0x6, 0x10], [0xb, 0x3, 0x2, 0x8, 0x6, 0x1, 0x40, 0x5]], '\x00', [{0x0, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x2}, {0x3ff, 0xa2e3, 0x1}, {0x400, 0x7, 0x0, 0x1, 0x0, 0x1}, {0xce42, 0x5, 0x0, 0x1, 0x1}, {0x0, 0x101, 0x1, 0x0, 0x1}, {0x7, 0x6, 0x1, 0x1, 0x1}, {0x2, 0x6, 0x1}, {0xfffffff9, 0x10000, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xc1, 0x1, 0x1}, {0x81, 0x3}, {0x34c0000, 0x7f, 0x1, 0x1, 0x1}], '\x00', 0x8}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) 3.274568842s ago: executing program 0 (id=120): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000ac0)={0x73622a85, 0x2301, 0x400000000000001}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000580)=[@increfs], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 3.136092291s ago: executing program 4 (id=121): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r5, 0xa3d2, 0x0) 2.586025425s ago: executing program 4 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.426816206s ago: executing program 4 (id=129): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.339187371s ago: executing program 0 (id=130): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x7, 0x0, 0xfffff00c}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000010200000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 2.276020085s ago: executing program 2 (id=131): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x2000400) timerfd_settime(r2, 0x2, &(0x7f0000002f80)={{0x77359400}}, 0x0) r3 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000000c0)={0xc20d6df5d4742ddd, @broadcast, 0x4e20, 0x0, 'rr\x00', 0x66, 0x47b, 0x7c}, 0x2c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e1f, @multicast1}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x7, r4, 'id1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r12, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x69f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) ioctl$DRM_IOCTL_MAP_BUFS(r5, 0xc00c6419, &(0x7f0000000200)={0x2, &(0x7f0000000380)=""/174, &(0x7f0000000180)=[{0x9, 0x89, 0x4, &(0x7f0000000440)=""/137}, {0xef, 0x29, 0x3, &(0x7f0000000140)=""/41}]}) 2.146150023s ago: executing program 0 (id=132): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04224c05ff"], 0x4f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x4, "20635698"}, 0x3, 0x1, {}, 0x4}) userfaultfd(0x80001) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) io_setup(0x2007, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.083041187s ago: executing program 4 (id=134): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a717291880102030109022400"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1.269025649s ago: executing program 1 (id=139): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x4e20, @private=0xa010102}}) 1.263807669s ago: executing program 2 (id=140): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="4490", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="f77d2b5dd5", 0x5}], 0x1}}], 0x2, 0x2090) 1.156167056s ago: executing program 3 (id=141): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r3], 0x44}}, 0x804) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) io_uring_setup(0x7, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) sendto$packet(r4, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.155881446s ago: executing program 1 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8840}, 0x20008080) 1.134028577s ago: executing program 2 (id=143): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a4", 0x35}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.023207525s ago: executing program 1 (id=144): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000740)={0x0, 0x3238, 0x400, 0x0, 0x9a, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup(r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000180)='./file0\x00', 0x1a3, 0x911180, 0x245dda35716126dc, {0x0, r4}}) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 820.038337ms ago: executing program 2 (id=145): r0 = socket(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x24) r1 = socket(0x2, 0x80805, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={r3, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 810.495728ms ago: executing program 1 (id=146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="12", 0x1}], 0x1}, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 751.523212ms ago: executing program 2 (id=147): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x4}}, 0x18) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 328.236319ms ago: executing program 1 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x88a8}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}}}}}, 0x32) 52.162626ms ago: executing program 1 (id=149): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)="ceb30fc12833c653f097665e808f6f3083f98d610a7a177bcc4ea3eb3c2fc5f4cc69515061a935bdccafb1c464bd76c15e98303f3eae59c9b75444208d6eb2f5ff2a25886f0f2933f46adc573f4c768e9c79cb94ffbf973ef6719b99b8112f21bd174281a740328160e7433152b45433cd08f5a73b2450a164e5db3300c264d701f7f251c3", 0x85}, {&(0x7f0000000900)="e87ce9f7d0571621c9996151b43306b72970c0a4313e36b2ce41cf7c07bf33908daf32271c24912021cc1b21f4266672d7cc9b092e28e6b2cb23a75b690fc624aa2cf70f98ad5d55f7e1988e075c1dbf378987fe5cbf105b773384149d33ec5cf48d3e180366e202e111eedf7d1a2d65b55cd299a04b2c496afac703ac2fbd2c8dab5e6de4f4495ee91f2574212537bf911e21a3da365b2f38d8a9ca35296cac5d96bb0fc93785b6e229a22c7d72ddac0392475ec959772c03aff69e59d89eec1a21d9b7d9430194d0bca66cfa827c4c809aa9fe8dad8f2de88dfb2f98063031e3fe48a65aa978cb", 0xe8}], 0x2}, 0xc0d0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 0s ago: executing program 2 (id=150): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x3000000, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 64.795997][ T4172] cgroup: Unknown subsys name 'net' [ 64.934767][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.447838][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.333172][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.372104][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.428989][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 68.482599][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.558351][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.569327][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.576809][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.585649][ T4193] device bridge_slave_0 entered promiscuous mode [ 68.626808][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.633980][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.642568][ T4193] device bridge_slave_1 entered promiscuous mode [ 68.651291][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.661580][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.670139][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.683368][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.691082][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.699721][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.762319][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.771566][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.778891][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.787482][ T4195] device bridge_slave_0 entered promiscuous mode [ 68.797205][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.823372][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.832901][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.840275][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.848820][ T4195] device bridge_slave_1 entered promiscuous mode [ 68.864762][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.918233][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.925562][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.933825][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.951420][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.963412][ T4189] team0: Port device team_slave_0 added [ 68.971873][ T4193] team0: Port device team_slave_0 added [ 68.978716][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.986250][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.994881][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.010836][ T4189] team0: Port device team_slave_1 added [ 69.016965][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.024588][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.032778][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.042076][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.053050][ T4193] team0: Port device team_slave_1 added [ 69.086709][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.094211][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.102420][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.126044][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.158881][ T4195] team0: Port device team_slave_0 added [ 69.172730][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.183010][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.190385][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.216767][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.229708][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.236773][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.262913][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.276075][ T4195] team0: Port device team_slave_1 added [ 69.282738][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.290147][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.316365][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.330190][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.349192][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.359050][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.366543][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.392643][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.450782][ T4185] team0: Port device team_slave_0 added [ 69.467368][ T4184] team0: Port device team_slave_0 added [ 69.480881][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.488214][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.514634][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.536052][ T4185] team0: Port device team_slave_1 added [ 69.542212][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.554314][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.580859][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.593732][ T4184] team0: Port device team_slave_1 added [ 69.623585][ T4193] device hsr_slave_0 entered promiscuous mode [ 69.630415][ T4193] device hsr_slave_1 entered promiscuous mode [ 69.659549][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.667153][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.673944][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.682120][ T4189] Cannot create hsr debugfs directory [ 69.698555][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.705708][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.731857][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.750377][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.757600][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.783736][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.795582][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.802559][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.828785][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.868309][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.880516][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.906657][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.955553][ T4195] device hsr_slave_0 entered promiscuous mode [ 69.962740][ T4195] device hsr_slave_1 entered promiscuous mode [ 69.970009][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.977950][ T4195] Cannot create hsr debugfs directory [ 70.019427][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 70.025787][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 70.030885][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 70.043144][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 70.051461][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 70.064237][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.071119][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.077883][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.085643][ T4184] Cannot create hsr debugfs directory [ 70.153103][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.160233][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.167681][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.176072][ T4185] Cannot create hsr debugfs directory [ 70.432390][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.449051][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.459610][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.469335][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.517082][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.530793][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.547289][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.566979][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.617831][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.649202][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.659605][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.672562][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.762023][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.785877][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.795847][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.808654][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.833709][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.858870][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.881971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.892799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.904210][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.920190][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.931258][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.942664][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.965440][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.976115][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.989639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.998948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.008439][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.018135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.028016][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.035434][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.045432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.057992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.067149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.076113][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.083217][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.096475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.106454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.116242][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.123332][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.132250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.149106][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.165706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.181198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.191048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.201464][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.208731][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.240750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.248954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.259778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.271808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.297952][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.310047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.354788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.365624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.375397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.388200][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.395134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.397891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.409258][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.417414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.426400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.435541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.443849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.452829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.462628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.471790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.484280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.493097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.502357][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.509679][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.518063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.547835][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.558516][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.572141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.591888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.601739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.617271][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.641697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.653332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.662575][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.682160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.691106][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.707799][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.715235][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.730813][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.762406][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.807896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.817658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.832473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.842666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.852853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.862279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.880874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.889474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.898806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.908397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.918287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.931979][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.939144][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.947264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.956316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.965438][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.972612][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.980837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.997147][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.031823][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.056242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.071024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.079738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.094263][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 72.095205][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 72.106774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.120212][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 72.126314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.135918][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 72.140109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.149645][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 72.158169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.177822][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.190461][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.210886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.221315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.230925][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.238202][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.247783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.257719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.267718][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.274874][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.283062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.292513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.301853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.311912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.329887][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.369317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.387886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.403648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.412311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.428156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.440149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.452867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.464371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.473017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.482628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.522903][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.539300][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.558540][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.570451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.585766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.606268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.622879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.632786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.661329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.670573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.687282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.705208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.728421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.747870][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.767401][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.800732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.815097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.868172][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.882392][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.890391][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.900643][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.918297][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.938757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.962073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.991408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.006294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.027962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.039824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.074699][ T4189] device veth0_vlan entered promiscuous mode [ 73.101035][ T4189] device veth1_vlan entered promiscuous mode [ 73.121030][ T4193] device veth0_vlan entered promiscuous mode [ 73.134927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.143897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.157799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.167988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.176514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.189979][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.218441][ T4193] device veth1_vlan entered promiscuous mode [ 73.226836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.236440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.244990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.252923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.262486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.271950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.322766][ T4189] device veth0_macvtap entered promiscuous mode [ 73.335348][ T4189] device veth1_macvtap entered promiscuous mode [ 73.350459][ T4193] device veth0_macvtap entered promiscuous mode [ 73.365082][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.373277][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.383168][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.392869][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.401683][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.410390][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.420719][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.429729][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.438814][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.447359][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.463223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.471602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.483964][ T4195] device veth0_vlan entered promiscuous mode [ 73.496882][ T4193] device veth1_macvtap entered promiscuous mode [ 73.515287][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.526443][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.538297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.548003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.557059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.565972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.575059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.584603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.592945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.608447][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.625185][ T4195] device veth1_vlan entered promiscuous mode [ 73.635880][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.647999][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.657623][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.666638][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.685639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.695374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.735337][ T4195] device veth0_macvtap entered promiscuous mode [ 73.762248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.772267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.782198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.791918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.801057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.810512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.819853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.828548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.837085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.851343][ T4195] device veth1_macvtap entered promiscuous mode [ 73.870334][ T4184] device veth0_vlan entered promiscuous mode [ 73.886382][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.901062][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.915818][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.953061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.966820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.979234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.998516][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.010528][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.022504][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.033146][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.045794][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.056207][ T4184] device veth1_vlan entered promiscuous mode [ 74.073736][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.082522][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.091690][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.103433][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.112069][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.122412][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.130658][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.139013][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.150004][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.161344][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.172885][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.182185][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.191714][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.195430][ T1110] Bluetooth: hci0: command 0x040f tx timeout [ 74.202277][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.218891][ T1110] Bluetooth: hci4: command 0x040f tx timeout [ 74.226087][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 74.232261][ T1110] Bluetooth: hci3: command 0x040f tx timeout [ 74.243361][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 74.264999][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.273124][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.282773][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.293555][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.304855][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.315565][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.326388][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.339890][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.351399][ T4185] device veth0_vlan entered promiscuous mode [ 74.363591][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.383148][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.387698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.400193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.412599][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.423922][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.432933][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.442481][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.470916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.479193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.488672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.514669][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.522678][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.533718][ T4185] device veth1_vlan entered promiscuous mode [ 74.544345][ T4184] device veth0_macvtap entered promiscuous mode [ 74.552166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.562125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.573788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.610165][ T4184] device veth1_macvtap entered promiscuous mode [ 74.693937][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.707440][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.717877][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.731057][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.741974][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.760813][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.772345][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.787072][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.798314][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.812457][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.823912][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.834159][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.845799][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.857952][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.876858][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.886366][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.902081][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.912238][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.924931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.926940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.945070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.954967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.013824][ T4185] device veth0_macvtap entered promiscuous mode [ 75.019294][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.041717][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.056602][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.067829][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.077489][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.087274][ T4272] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 75.107072][ T4185] device veth1_macvtap entered promiscuous mode [ 75.143139][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.153141][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.223572][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.238643][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.254772][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.269179][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.279780][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.280559][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.299650][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.310553][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.321247][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.332115][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.342554][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.353267][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.366117][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.382509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.400292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.409990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.426035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.441703][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.463703][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.481516][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.492514][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.502959][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.515626][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.526126][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.539548][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.551340][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.577180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.598307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.615864][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.625671][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.635210][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.643961][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.669715][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.678863][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.713453][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.787331][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.816771][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.832217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.943498][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.962153][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.973945][ T4280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.989627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.997843][ T4280] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.040727][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.058087][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.074295][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.137943][ T4284] loop0: detected capacity change from 0 to 64 [ 76.161481][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.172478][ T4282] loop2: detected capacity change from 0 to 2048 [ 76.203682][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.231037][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.255691][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 76.266649][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 76.281342][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 76.304256][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 76.346697][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 76.420466][ T4286] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.668018][ T4292] loop3: detected capacity change from 0 to 2048 [ 76.673089][ T4277] loop4: detected capacity change from 0 to 32768 [ 76.728879][ T4294] loop1: detected capacity change from 0 to 64 [ 76.755281][ T4277] ======================================================= [ 76.755281][ T4277] WARNING: The mand mount option has been deprecated and [ 76.755281][ T4277] and is ignored by this kernel. Remove the mand [ 76.755281][ T4277] option from the mount to silence this warning. [ 76.755281][ T4277] ======================================================= [ 76.777122][ T4292] UDF-fs: bad mount option "\j9-7" or missing value [ 76.857818][ T4277] JBD2: Ignoring recovery information on journal [ 76.964346][ T4234] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 77.127597][ T4277] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 77.365038][ T4234] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 77.522340][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.596068][ T4234] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 77.714169][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.810119][ T4234] usb 3-1: config 0 descriptor?? [ 78.023086][ T4314] mmap: syz.3.11 (4314) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 78.518597][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 78.726481][ T4313] input: syz0 as /devices/virtual/input/input5 [ 78.758158][ T1346] cfg80211: failed to load regulatory.db [ 78.928645][ T4330] loop3: detected capacity change from 0 to 256 [ 79.011727][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 79.047513][ T4330] exfat: Unknown parameter '00000000000000000003þOž™USÓ' [ 79.055805][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 79.164460][ T4234] usbhid 3-1:0.0: can't add hid device: -71 [ 79.199948][ T4234] usbhid: probe of 3-1:0.0 failed with error -71 [ 79.246296][ T4234] usb 3-1: USB disconnect, device number 2 [ 79.371242][ T4341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.425428][ T4341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.481090][ T4341] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 79.501680][ T4342] loop1: detected capacity change from 0 to 256 [ 79.508421][ T4237] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.527732][ T4341] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 79.600718][ T4341] overlayfs: d_ino too big (5, ino=9223372036854775847, xinobits=3) [ 79.619288][ T4342] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 79.642824][ T4341] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 79.683948][ T4341] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 79.706814][ T4341] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 79.721183][ T4341] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 79.730643][ T4341] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 79.757635][ T4341] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 79.768983][ T4341] overlayfs: d_ino too big (io.pressure, ino=4611686018427387914, xinobits=3) [ 79.783756][ T4237] usb 5-1: Using ep0 maxpacket: 32 [ 79.845192][ T4237] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 79.964447][ T4237] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 79.972592][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.073087][ T4237] usb 5-1: config 0 has no interface number 0 [ 80.120192][ T4237] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 80.160692][ T4237] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.204097][ T4344] loop3: detected capacity change from 0 to 32768 [ 80.275789][ T4352] FAULT_INJECTION: forcing a failure. [ 80.275789][ T4352] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.289792][ T4352] CPU: 0 PID: 4352 Comm: syz.2.23 Not tainted syzkaller #0 [ 80.297040][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.307151][ T4352] Call Trace: [ 80.310469][ T4352] [ 80.310740][ T4350] FAULT_INJECTION: forcing a failure. [ 80.310740][ T4350] name failslab, interval 1, probability 0, space 0, times 1 [ 80.313425][ T4352] dump_stack_lvl+0x188/0x250 [ 80.334169][ T4352] ? show_regs_print_info+0x20/0x20 [ 80.340369][ T4352] ? load_image+0x400/0x400 [ 80.344956][ T4352] ? __lock_acquire+0x7d10/0x7d10 [ 80.350049][ T4352] should_fail+0x38c/0x4c0 [ 80.354845][ T4352] _copy_to_user+0x2e/0x130 [ 80.359690][ T4352] simple_read_from_buffer+0xe3/0x150 [ 80.365409][ T4352] proc_fail_nth_read+0x1a6/0x220 [ 80.370759][ T4352] ? proc_fault_inject_write+0x310/0x310 [ 80.376448][ T4352] ? fsnotify_perm+0x254/0x560 [ 80.381263][ T4352] ? proc_fault_inject_write+0x310/0x310 [ 80.387091][ T4352] vfs_read+0x301/0xd60 [ 80.391420][ T4352] ? kernel_read+0x1e0/0x1e0 [ 80.396061][ T4352] ? __fget_files+0x40f/0x480 [ 80.400790][ T4352] ? mutex_lock_nested+0x17/0x20 [ 80.405160][ T4237] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 80.405763][ T4352] ? __fdget_pos+0x2bf/0x370 [ 80.413773][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.428446][ T4352] ? ksys_read+0x71/0x260 [ 80.432832][ T4352] ksys_read+0x152/0x260 [ 80.437125][ T4352] ? vfs_write+0xd60/0xd60 [ 80.437156][ T4352] ? lockdep_hardirqs_on+0x94/0x140 [ 80.446816][ T4352] do_syscall_64+0x4c/0xa0 [ 80.451363][ T4352] ? clear_bhb_loop+0x30/0x80 [ 80.456080][ T4352] ? clear_bhb_loop+0x30/0x80 [ 80.460808][ T4352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.461869][ T4237] usb 5-1: config 0 has no interface number 0 [ 80.466749][ T4352] RIP: 0033:0x7f88f15a104e [ 80.466772][ T4352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.466789][ T4352] RSP: 002b:00007f88ef839fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.466812][ T4352] RAX: ffffffffffffffda RBX: 00007f88ef83a6c0 RCX: 00007f88f15a104e [ 80.466828][ T4352] RDX: 000000000000000f RSI: 00007f88ef83a0a0 RDI: 0000000000000003 [ 80.476954][ T4237] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 80.477439][ T4352] RBP: 00007f88ef83a090 R08: 0000000000000000 R09: 0000000000000000 [ 80.531340][ T4237] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.531920][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.560994][ T4352] R13: 00007f88f185a038 R14: 00007f88f1859fa0 R15: 00007ffd0eca0048 [ 80.569025][ T4352] [ 80.582140][ T4350] CPU: 0 PID: 4350 Comm: syz.0.24 Not tainted syzkaller #0 [ 80.589413][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.599624][ T4350] Call Trace: [ 80.602941][ T4350] [ 80.605901][ T4350] dump_stack_lvl+0x188/0x250 [ 80.610626][ T4350] ? show_regs_print_info+0x20/0x20 [ 80.615873][ T4350] ? load_image+0x400/0x400 [ 80.620454][ T4350] should_fail+0x38c/0x4c0 [ 80.624932][ T4350] should_failslab+0x5/0x20 [ 80.629577][ T4350] slab_pre_alloc_hook+0x51/0xc0 [ 80.634562][ T4350] __kmalloc_node_track_caller+0x68/0x3a0 [ 80.640329][ T4350] ? create_monitor_ctrl_event+0x38/0x400 [ 80.646096][ T4350] ? kmem_cache_alloc_node+0x162/0x2d0 [ 80.651643][ T4350] ? __alloc_skb+0xf4/0x750 [ 80.656239][ T4350] ? create_monitor_ctrl_event+0x38/0x400 [ 80.662019][ T4350] __alloc_skb+0x22c/0x750 [ 80.666773][ T4350] create_monitor_ctrl_event+0x38/0x400 [ 80.672386][ T4350] ? mgmt_cmd_complete+0x1a7/0x480 [ 80.677712][ T4350] mgmt_cmd_complete+0x208/0x480 [ 80.682862][ T4350] disconnect+0x239/0x540 [ 80.687251][ T4350] ? load_long_term_keys+0x950/0x950 [ 80.692879][ T4350] ? mgmt_init_hdev+0x245/0x260 [ 80.697777][ T4350] ? eir_has_uuids+0x650/0x650 [ 80.703190][ T4350] hci_mgmt_cmd+0x960/0xd90 [ 80.708221][ T4350] hci_sock_sendmsg+0x378/0xa30 [ 80.713225][ T4350] ? hci_sock_getsockopt+0x470/0x470 [ 80.718791][ T4350] ? aa_sock_msg_perm+0x94/0x150 [ 80.723991][ T4350] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 80.729539][ T4350] ? security_socket_sendmsg+0x7c/0xa0 [ 80.735057][ T4350] sock_write_iter+0x2a6/0x3a0 [ 80.735186][ T4237] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 80.740151][ T4350] ? sock_read_iter+0x380/0x380 [ 80.740186][ T4350] ? memset+0x1e/0x40 [ 80.740211][ T4350] ? iov_iter_init+0xb4/0x170 [ 80.762352][ T4350] vfs_write+0x745/0xd60 [ 80.766751][ T4350] ? file_end_write+0x250/0x250 [ 80.771669][ T4350] ? __fget_files+0x40f/0x480 [ 80.776434][ T4350] ? __fdget_pos+0x1e2/0x370 [ 80.781100][ T4350] ? ksys_write+0x71/0x260 [ 80.785663][ T4350] ksys_write+0x152/0x260 [ 80.790038][ T4350] ? __ia32_sys_read+0x80/0x80 [ 80.794863][ T4350] ? lockdep_hardirqs_on+0x94/0x140 [ 80.800117][ T4350] do_syscall_64+0x4c/0xa0 [ 80.804142][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.804575][ T4350] ? clear_bhb_loop+0x30/0x80 [ 80.819546][ T4350] ? clear_bhb_loop+0x30/0x80 [ 80.824265][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.830213][ T4350] RIP: 0033:0x7f8d3dec9819 [ 80.834750][ T4350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.854492][ T4350] RSP: 002b:00007f8d3c123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.863068][ T4350] RAX: ffffffffffffffda RBX: 00007f8d3e142fa0 RCX: 00007f8d3dec9819 [ 80.871167][ T4350] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 80.874153][ T4237] usb 5-1: config 0 has no interface number 0 [ 80.879700][ T4350] RBP: 00007f8d3c123090 R08: 0000000000000000 R09: 0000000000000000 [ 80.879716][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.879729][ T4350] R13: 00007f8d3e143038 R14: 00007f8d3e142fa0 R15: 00007ffd8f6a2268 [ 80.879762][ T4350] [ 81.085181][ T4237] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 81.101155][ T4237] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.154066][ T4344] XFS (loop3): Mounting V5 Filesystem [ 81.194408][ T4237] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.217024][ T4371] netlink: 'syz.1.22': attribute type 2 has an invalid length. [ 81.253257][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.271323][ T4344] XFS (loop3): Ending clean mount [ 81.286422][ T4344] XFS (loop3): Quotacheck needed: Please wait. [ 81.323702][ T4237] usb 5-1: config 0 has no interface number 0 [ 81.357932][ T4237] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 81.391822][ T4237] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.525560][ T4344] XFS (loop3): Quotacheck: Done. [ 81.534284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 81.543354][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 81.550352][ T4237] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.745826][ T4237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.764321][ T1110] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.799425][ T4237] usb 5-1: config 0 has no interface number 0 [ 81.812727][ T4237] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 81.838140][ T4237] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.926917][ T4185] XFS (loop3): Unmounting Filesystem [ 82.024588][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 82.040193][ T4237] usb 5-1: unable to read config index 5 descriptor/all [ 82.059673][ T4237] usb 5-1: can't read configurations, error -71 [ 82.214259][ T1110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.245227][ T1110] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 82.607414][ T4373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'. [ 82.724377][ T4373] netlink: 260 bytes leftover after parsing attributes in process `syz.2.25'. [ 82.862919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 83.049782][ T4396] capability: warning: `syz.3.30' uses deprecated v2 capabilities in a way that may be insecure [ 83.322501][ T4400] process 'syz.1.37' launched './file0' with NULL argv: empty string added [ 83.374918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 84.175479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 84.184464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 84.193673][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 84.202733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 84.211781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 84.220899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 85.694773][ T1110] usb 3-1: string descriptor 0 read error: -71 [ 85.701224][ T1110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.762074][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.884277][ T1110] usb 3-1: can't set config #1, error -71 [ 85.974356][ T1110] usb 3-1: USB disconnect, device number 3 [ 86.072016][ T26] audit: type=1326 audit(1775268531.532:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4424 comm="syz.2.43" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88f15e0819 code=0x0 [ 87.484794][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.493601][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.873685][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.970895][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.976455][ T4422] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.987897][ T4422] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.998514][ T4422] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.008311][ T4422] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.221995][ T4450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 90.318601][ T4470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.58'. [ 90.396509][ T4422] syz.0.41 (4422) used greatest stack depth: 19472 bytes left [ 91.419247][ T4500] device syzkaller0 entered promiscuous mode [ 93.246806][ T4561] fuse: root generation should be zero [ 94.281413][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.288909][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.480291][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.510191][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.031396][ T4554] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.040551][ T4554] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.049543][ T4554] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.058514][ T4554] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.378252][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 96.458651][ T4602] netlink: 'syz.4.108': attribute type 4 has an invalid length. [ 96.492533][ T4598] netlink: 'syz.4.108': attribute type 4 has an invalid length. [ 96.700630][ T4614] netlink: 'syz.4.114': attribute type 8 has an invalid length. [ 97.565520][ T4628] Zero length message leads to an empty skb [ 97.824751][ T4628] crypto_alloc_aead failed rc=-2 [ 98.114122][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.154991][ T26] audit: type=1326 audit(1775268543.622:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.4.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba121c0819 code=0x7ffc0000 [ 98.294215][ T26] audit: type=1326 audit(1775268543.622:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.4.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba121c0819 code=0x7ffc0000 [ 98.354697][ T4634] binder: 4633:4634 unknown command 1074553619 [ 98.361400][ T4634] binder: 4633:4634 ioctl c0306201 200000000540 returned -22 [ 98.618753][ T4670] netlink: 'syz.4.129': attribute type 4 has an invalid length. [ 98.730009][ T4672] netlink: 'syz.4.129': attribute type 4 has an invalid length. [ 98.950770][ T4677] netlink: 'syz.2.131': attribute type 6 has an invalid length. [ 99.334221][ T4233] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.461045][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 99.574724][ T4695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.592956][ T4697] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 99.605442][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 99.754320][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.804178][ T4233] usb 5-1: config 0 has no interfaces? [ 99.872624][ T4704] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 99.904998][ T4707] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 99.984316][ T4233] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 100.003737][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.022274][ T4233] usb 5-1: Product: syz [ 100.034317][ T4233] usb 5-1: Manufacturer: syz [ 100.049388][ T4233] usb 5-1: SerialNumber: syz [ 100.081707][ T4233] usb 5-1: config 0 descriptor?? [ 100.354150][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.380676][ T4233] usb 5-1: USB disconnect, device number 4 [ 100.676084][ T4723] device syzkaller1 entered promiscuous mode [ 100.759880][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.778039][ T1107] usb 4-1: no configurations [ 100.788169][ T1107] usb 4-1: can't read configurations, error -22 [ 101.062997][ T4728] ================================================================== [ 101.071648][ T4728] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 101.081262][ T4728] Read of size 1 at addr ffff888019dc4608 by task syz.2.150/4728 [ 101.089138][ T4728] [ 101.091497][ T4728] CPU: 1 PID: 4728 Comm: syz.2.150 Not tainted syzkaller #0 [ 101.098811][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.109409][ T4728] Call Trace: [ 101.112748][ T4728] [ 101.115757][ T4728] dump_stack_lvl+0x188/0x250 [ 101.120492][ T4728] ? show_regs_print_info+0x20/0x20 [ 101.125752][ T4728] ? load_image+0x400/0x400 [ 101.130302][ T4728] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 101.135834][ T4728] print_address_description+0x60/0x2d0 [ 101.141425][ T4728] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 101.147973][ T4728] kasan_report+0xdf/0x130 [ 101.152535][ T4728] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 101.159109][ T4728] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 101.165511][ T4728] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 101.171736][ T4728] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 101.178078][ T4728] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 101.184078][ T4728] xfrm_policy_inexact_insert+0xe0/0x1460 [ 101.189994][ T4728] ? do_raw_spin_lock+0x128/0x2f0 [ 101.195110][ T4728] ? __rwlock_init+0x140/0x140 [ 101.199921][ T4728] ? policy_hash_bysel+0x135/0x7b0 [ 101.205127][ T4728] xfrm_policy_insert+0x112/0x930 [ 101.210420][ T4728] xfrm_add_policy+0x4f2/0x880 [ 101.215255][ T4728] ? xfrm_dump_sa_done+0xc0/0xc0 [ 101.220247][ T4728] ? apparmor_capable+0x12c/0x190 [ 101.225471][ T4728] ? __nla_parse+0x3c/0x50 [ 101.229951][ T4728] xfrm_user_rcv_msg+0x5e5/0x910 [ 101.235181][ T4728] ? xfrm_netlink_rcv+0x90/0x90 [ 101.240412][ T4728] ? xfrm_netlink_rcv+0x66/0x90 [ 101.245315][ T4728] ? __mutex_lock_common+0x465/0x2400 [ 101.250841][ T4728] ? __skb_clone+0x480/0x790 [ 101.255494][ T4728] netlink_rcv_skb+0x1f5/0x440 [ 101.260309][ T4728] ? xfrm_netlink_rcv+0x90/0x90 [ 101.265207][ T4728] ? netlink_ack+0xb50/0xb50 [ 101.269845][ T4728] ? __lock_acquire+0x7d10/0x7d10 [ 101.274937][ T4728] xfrm_netlink_rcv+0x75/0x90 [ 101.279660][ T4728] netlink_unicast+0x774/0x920 [ 101.284474][ T4728] netlink_sendmsg+0x8ba/0xbe0 [ 101.289321][ T4728] ? netlink_getsockopt+0x570/0x570 [ 101.294582][ T4728] ? aa_sock_msg_perm+0x94/0x150 [ 101.299569][ T4728] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 101.304910][ T4728] ? security_socket_sendmsg+0x7c/0xa0 [ 101.310417][ T4728] ? netlink_getsockopt+0x570/0x570 [ 101.315659][ T4728] ____sys_sendmsg+0x5b7/0x8f0 [ 101.320538][ T4728] ? __sys_sendmsg_sock+0x30/0x30 [ 101.325720][ T4728] ? import_iovec+0x6f/0xa0 [ 101.330283][ T4728] ___sys_sendmsg+0x236/0x2e0 [ 101.335028][ T4728] ? __sys_sendmsg+0x2a0/0x2a0 [ 101.339878][ T4728] ? percpu_counter_add_batch+0x13b/0x160 [ 101.345680][ T4728] __se_sys_sendmsg+0x1af/0x290 [ 101.350583][ T4728] ? __x64_sys_sendmsg+0x80/0x80 [ 101.355544][ T4728] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 101.362034][ T4728] ? lockdep_hardirqs_on+0x94/0x140 [ 101.367265][ T4728] do_syscall_64+0x4c/0xa0 [ 101.371869][ T4728] ? clear_bhb_loop+0x30/0x80 [ 101.376806][ T4728] ? clear_bhb_loop+0x30/0x80 [ 101.381580][ T4728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.387531][ T4728] RIP: 0033:0x7f88f15e0819 [ 101.391995][ T4728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.411650][ T4728] RSP: 002b:00007f88ef83a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.420113][ T4728] RAX: ffffffffffffffda RBX: 00007f88f1859fa0 RCX: 00007f88f15e0819 [ 101.428103][ T4728] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 101.436089][ T4728] RBP: 00007f88f1676c91 R08: 0000000000000000 R09: 0000000000000000 [ 101.444088][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.452302][ T4728] R13: 00007f88f185a038 R14: 00007f88f1859fa0 R15: 00007ffd0eca0048 [ 101.460327][ T4728] [ 101.463386][ T4728] [ 101.465739][ T4728] Allocated by task 4728: [ 101.470088][ T4728] __kasan_kmalloc+0xb5/0xf0 [ 101.474691][ T4728] sk_prot_alloc+0xe7/0x210 [ 101.479217][ T4728] sk_alloc+0x2f/0x310 [ 101.483322][ T4728] pfkey_create+0xd8/0x560 [ 101.487772][ T4728] __sock_create+0x47b/0x900 [ 101.492380][ T4728] __sys_socket+0xe2/0x170 [ 101.496840][ T4728] __x64_sys_socket+0x76/0x80 [ 101.501563][ T4728] do_syscall_64+0x4c/0xa0 [ 101.506018][ T4728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.511929][ T4728] [ 101.514310][ T4728] The buggy address belongs to the object at ffff888019dc4000 [ 101.514310][ T4728] which belongs to the cache kmalloc-2k of size 2048 [ 101.528402][ T4728] The buggy address is located 1544 bytes inside of [ 101.528402][ T4728] 2048-byte region [ffff888019dc4000, ffff888019dc4800) [ 101.541903][ T4728] The buggy address belongs to the page: [ 101.547596][ T4728] page:ffffea0000677000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19dc0 [ 101.557819][ T4728] head:ffffea0000677000 order:3 compound_mapcount:0 compound_pincount:0 [ 101.566441][ T4728] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 101.574554][ T4728] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42000 [ 101.583333][ T4728] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 101.591954][ T4728] page dumped because: kasan: bad access detected [ 101.598416][ T4728] page_owner tracks the page as allocated [ 101.604169][ T4728] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4185, ts 68821078520, free_ts 68761226855 [ 101.623335][ T4728] get_page_from_freelist+0x1bbd/0x1ca0 [ 101.628932][ T4728] __alloc_pages+0x1ee/0x480 [ 101.633575][ T4728] new_slab+0xc0/0x4b0 [ 101.637701][ T4728] ___slab_alloc+0x80a/0xdd0 [ 101.642344][ T4728] __kmalloc+0x1cd/0x330 [ 101.646633][ T4728] __register_sysctl_table+0xe0/0x1230 [ 101.652221][ T4728] __devinet_sysctl_register+0x2ca/0x3a0 [ 101.658118][ T4728] devinet_sysctl_register+0x17c/0x1f0 [ 101.663724][ T4728] inetdev_init+0x28c/0x4d0 [ 101.668278][ T4728] inetdev_event+0x26f/0x1370 [ 101.673270][ T4728] raw_notifier_call_chain+0xcb/0x160 [ 101.678727][ T4728] register_netdevice+0x12a6/0x1710 [ 101.683950][ T4728] wg_newlink+0x4b2/0x750 [ 101.688670][ T4728] rtnl_newlink+0x1359/0x1a50 [ 101.693459][ T4728] rtnetlink_rcv_msg+0x844/0xf30 [ 101.698434][ T4728] netlink_rcv_skb+0x1f5/0x440 [ 101.703230][ T4728] page last free stack trace: [ 101.707911][ T4728] free_unref_page_prepare+0x637/0x6c0 [ 101.713495][ T4728] free_unref_page+0x8f/0x2a0 [ 101.718334][ T4728] qlist_free_all+0x35/0x90 [ 101.722879][ T4728] kasan_quarantine_reduce+0x150/0x160 [ 101.728371][ T4728] __kasan_slab_alloc+0x2f/0xd0 [ 101.733240][ T4728] slab_post_alloc_hook+0x4c/0x380 [ 101.738397][ T4728] kmem_cache_alloc_trace+0x103/0x2a0 [ 101.743790][ T4728] __netdev_adjacent_dev_insert+0x163/0x8f0 [ 101.750097][ T4728] __netdev_upper_dev_link+0x39c/0x590 [ 101.755576][ T4728] netdev_master_upper_dev_link+0xb9/0x100 [ 101.761504][ T4728] bond_master_upper_dev_link+0x183/0x200 [ 101.767239][ T4728] bond_enslave+0x1eb4/0x3c50 [ 101.772125][ T4728] do_setlink+0xe90/0x3d60 [ 101.776671][ T4728] rtnl_newlink+0x1658/0x1a50 [ 101.781384][ T4728] rtnetlink_rcv_msg+0x844/0xf30 [ 101.786345][ T4728] netlink_rcv_skb+0x1f5/0x440 [ 101.791154][ T4728] [ 101.793490][ T4728] Memory state around the buggy address: [ 101.799229][ T4728] ffff888019dc4500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.807312][ T4728] ffff888019dc4580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 101.815404][ T4728] >ffff888019dc4600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.823610][ T4728] ^ [ 101.827958][ T4728] ffff888019dc4680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.836051][ T4728] ffff888019dc4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.844131][ T4728] ================================================================== [ 101.852463][ T4728] Disabling lock debugging due to kernel taint [ 101.859348][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.865722][ T4728] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.872935][ T4728] CPU: 1 PID: 4728 Comm: syz.2.150 Tainted: G B syzkaller #0 [ 101.881884][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.891953][ T4728] Call Trace: [ 101.895264][ T4728] [ 101.898224][ T4728] dump_stack_lvl+0x188/0x250 [ 101.902942][ T4728] ? show_regs_print_info+0x20/0x20 [ 101.908374][ T4728] ? load_image+0x400/0x400 [ 101.913038][ T4728] panic+0x2e5/0x810 [ 101.916999][ T4728] ? bpf_jit_dump+0xd0/0xd0 [ 101.921612][ T4728] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 101.927641][ T4728] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 101.933702][ T4728] ? _raw_spin_unlock+0x40/0x40 [ 101.938686][ T4728] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 101.945365][ T4728] check_panic_on_warn+0x80/0xa0 [ 101.950363][ T4728] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 101.956907][ T4728] end_report+0x6d/0xf0 [ 101.961081][ T4728] kasan_report+0x102/0x130 [ 101.965611][ T4728] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 101.972137][ T4728] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 101.978703][ T4728] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 101.984895][ T4728] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 101.991192][ T4728] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 101.997143][ T4728] xfrm_policy_inexact_insert+0xe0/0x1460 [ 102.003179][ T4728] ? do_raw_spin_lock+0x128/0x2f0 [ 102.008256][ T4728] ? __rwlock_init+0x140/0x140 [ 102.013088][ T4728] ? policy_hash_bysel+0x135/0x7b0 [ 102.018348][ T4728] xfrm_policy_insert+0x112/0x930 [ 102.023434][ T4728] xfrm_add_policy+0x4f2/0x880 [ 102.028248][ T4728] ? xfrm_dump_sa_done+0xc0/0xc0 [ 102.033227][ T4728] ? apparmor_capable+0x12c/0x190 [ 102.038480][ T4728] ? __nla_parse+0x3c/0x50 [ 102.043033][ T4728] xfrm_user_rcv_msg+0x5e5/0x910 [ 102.048011][ T4728] ? xfrm_netlink_rcv+0x90/0x90 [ 102.052958][ T4728] ? xfrm_netlink_rcv+0x66/0x90 [ 102.058050][ T4728] ? __mutex_lock_common+0x465/0x2400 [ 102.063473][ T4728] ? __skb_clone+0x480/0x790 [ 102.068108][ T4728] netlink_rcv_skb+0x1f5/0x440 [ 102.072912][ T4728] ? xfrm_netlink_rcv+0x90/0x90 [ 102.077815][ T4728] ? netlink_ack+0xb50/0xb50 [ 102.082459][ T4728] ? __lock_acquire+0x7d10/0x7d10 [ 102.087527][ T4728] xfrm_netlink_rcv+0x75/0x90 [ 102.092224][ T4728] netlink_unicast+0x774/0x920 [ 102.097009][ T4728] netlink_sendmsg+0x8ba/0xbe0 [ 102.101823][ T4728] ? netlink_getsockopt+0x570/0x570 [ 102.107256][ T4728] ? aa_sock_msg_perm+0x94/0x150 [ 102.112220][ T4728] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 102.117691][ T4728] ? security_socket_sendmsg+0x7c/0xa0 [ 102.123182][ T4728] ? netlink_getsockopt+0x570/0x570 [ 102.128392][ T4728] ____sys_sendmsg+0x5b7/0x8f0 [ 102.133422][ T4728] ? __sys_sendmsg_sock+0x30/0x30 [ 102.138558][ T4728] ? import_iovec+0x6f/0xa0 [ 102.143101][ T4728] ___sys_sendmsg+0x236/0x2e0 [ 102.147896][ T4728] ? __sys_sendmsg+0x2a0/0x2a0 [ 102.152829][ T4728] ? percpu_counter_add_batch+0x13b/0x160 [ 102.158577][ T4728] __se_sys_sendmsg+0x1af/0x290 [ 102.163469][ T4728] ? __x64_sys_sendmsg+0x80/0x80 [ 102.168421][ T4728] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 102.174523][ T4728] ? lockdep_hardirqs_on+0x94/0x140 [ 102.179758][ T4728] do_syscall_64+0x4c/0xa0 [ 102.184279][ T4728] ? clear_bhb_loop+0x30/0x80 [ 102.189061][ T4728] ? clear_bhb_loop+0x30/0x80 [ 102.193791][ T4728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.199812][ T4728] RIP: 0033:0x7f88f15e0819 [ 102.204250][ T4728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.223967][ T4728] RSP: 002b:00007f88ef83a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.232434][ T4728] RAX: ffffffffffffffda RBX: 00007f88f1859fa0 RCX: 00007f88f15e0819 [ 102.240549][ T4728] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 102.248552][ T4728] RBP: 00007f88f1676c91 R08: 0000000000000000 R09: 0000000000000000 [ 102.256546][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.264660][ T4728] R13: 00007f88f185a038 R14: 00007f88f1859fa0 R15: 00007ffd0eca0048 [ 102.272845][ T4728] [ 102.276159][ T4728] Kernel Offset: disabled [ 102.281504][ T4728] Rebooting in 86400 seconds..