last executing test programs: 20.519939856s ago: executing program 0 (id=169): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x1512, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20002f7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.714065046s ago: executing program 0 (id=171): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) close(0x3) 18.76241908s ago: executing program 0 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 18.301170621s ago: executing program 0 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8001}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r4, 0xffffffffffffffff, 0x4) 17.100236502s ago: executing program 0 (id=182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f0000000540)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x34}}]}, &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) unshare(0x2a020480) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x104201, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xd}, {0xe, 0x3}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004099}, 0x44800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="7a29f17f7d3004fd909f750b21fafda22dbd557c1cdb272d755557c701f6aa62a32c6d0831e2bbc7f1a19ae69390bfe46e5a5424", 0x34}, {&(0x7f00000000c0)="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", 0xfd}, {&(0x7f00000001c0)}, {&(0x7f0000000280)="a6386c19270413e8c4d34ce19c6af9d35140f69171564cf615dfb3b2ef14e40df695d0036c9a8e9e062b3664b5fe5e510adc3451f8e1650877c6f737bf4ba9b3511a4060d86ea0d6b50bad84914d2c89c94032a35c97c24a4f69ff2d89b825639058dc7c012856369aa63eae7d2cba381e1df3a486c4c2ea7ed6dcb80781aafd5b0dacbdfd165d0fe985d2261ba1f9b21e302c276e207a18bdee3dfa4d1b8019b872aa62e6990e77bb12c0affabec6e6b6ef851027a317968b18e13b578b9a9eb7114ee330009d23dcc843c4cde1752714c11e25de17ee", 0xd7}, {&(0x7f00000005c0)="08a444b6a9c614fd02ffa4cd85093dd99c9c8738972e1c9d723b83cb810b94bb3874684cc5a34da562caf900ab3cb1aae9241b7e03fb87d8d659e5b68e617fed808a8e19e69177945ba796761231975222ec10511ff31b765217d882cbe353f73e6899b24d5406dfd622e324e1d764f337ecf303b6cf4de5c1c866b1818d08275a0da12496f1754b8565357b561e01a8257063b574b77534585b12cf0d4ad79ccc1094130fe81d22ccf3a64a7e4fcb69f0", 0xb1}], 0x5, 0x7, 0x80000000) 14.882102717s ago: executing program 4 (id=191): ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x80000001) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 14.125278857s ago: executing program 3 (id=194): syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x2, 0x24, 0x66, 0x0, 0x9, 0x1, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x7, 0x1e, [@local]}]}}, @address_reply}}}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) close(0x3) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1b) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 12.006393959s ago: executing program 0 (id=199): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085f, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@abort}]}, 0x1, 0x548, &(0x7f00000008c0)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, &(0x7f00000006c0)={0x8001, 0x1000, 0x1ffe, 0xfffffffffffffffd, 0x80000000, 0xfff, 0x2401}) openat(0xffffffffffffffff, 0x0, 0x309441, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000e40)={[{@grpquota}, {@nolazytime}, {@usrquota}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'inode_readahead_blks'}}, {@fowner_eq}, {@obj_type={'obj_type', 0x3d, '.('}}, {@audit}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfsroot}, {@obj_role}, {@uid_eq}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") 11.610457499s ago: executing program 2 (id=201): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x400c0c0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@loopback, 0x80, r2}) r3 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000800)=0xa88) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x1000000}, 0x0, [0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xd451, 0x5, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x40800000000000, 0xfffffffffffffffc, 0x10000, 0x7785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x10, 0x6, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x40, 0x0, 0x59ed, 0x1000000000000000, 0x0, 0x4001ff, 0x0, 0x0, 0x0, 0x3, 0xd, 0x100000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x8, 0x2, 0x0, 0x80000000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x1, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11.596446649s ago: executing program 1 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0xc) 9.897688882s ago: executing program 1 (id=203): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0100", 0x2) read(r2, &(0x7f0000000314), 0x2) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40) 9.810464185s ago: executing program 3 (id=204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket(0x25, 0x5, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = dup3(0xffffffffffffffff, r0, 0x0) recvmmsg(r1, &(0x7f0000008840), 0x0, 0x40000001, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f0000000580)='7', 0x1) write$char_usb(r3, &(0x7f0000000bc0)="be", 0x1) syz_usb_disconnect(r2) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) 9.643138169s ago: executing program 4 (id=205): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6360, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.461515083s ago: executing program 4 (id=206): prlimit64(0x0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc", 0x27) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000280)={[{@nodioread_nolock}, {@noblock_validity}, {@resuid}, {@norecovery}, {@nodiscard}, {@nodioread_nolock}, {@nomblk_io_submit}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 8.982841945s ago: executing program 1 (id=207): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 8.108298647s ago: executing program 2 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 7.566338581s ago: executing program 1 (id=209): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7.531503861s ago: executing program 4 (id=210): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x12) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r0, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 7.098456942s ago: executing program 2 (id=211): setgroups(0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, 0x0) fchdir(0xffffffffffffffff) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, &(0x7f0000000600)='dir .', 0x5) write(r3, &(0x7f0000000700)='bind', 0x4) 5.330845967s ago: executing program 1 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x240088d4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, 0x0) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) 5.323227977s ago: executing program 3 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x1, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0xb, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6a, 0x2, 0x4, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x68, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0xa, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x87d0, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x5, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x1, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x1, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x8001, 0x3, 0x0, 0x200, 0xf, 0x7, 0x9, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x5, 0x1, 0x8, 0x2, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x20000010) 4.767754211s ago: executing program 3 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="6a9031c2d2f647e6ee164e02c2832642a30098b7f46758361b920bb9b2a55d0493235ba354095f3d4ce94c24779bf3f0b2f453fec24ee7ebf228dbecf7d1652d6caa1a47a959c37378cca7273419243065f948fcaf053f6fe74e6238bb35f0db3a6fbf635152de78931f1d4b958ddc0df723", 0x72, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r4, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0x901, 0x75, 0x2, {0x8f6, "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"}}, 0x901) unshare(0x22020600) syz_open_dev$usbfs(0x0, 0x9, 0x141301) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = fsmount(r6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x20}, 0x4000004) openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 4.135945427s ago: executing program 1 (id=215): syz_emit_ethernet(0x74, &(0x7f0000000180)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x10, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @remote, {[@timestamp={0x44, 0x4, 0x16, 0x0, 0x6}, @ra={0x94, 0x4}, @generic={0x44, 0x12, "8d01b1fc6291cfc6e89633504a929e9e"}, @ssrr={0x89, 0xf, 0x80, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}, "6616"}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 4.135148157s ago: executing program 2 (id=216): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$kcm(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 4.074419428s ago: executing program 3 (id=217): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, 0x0, 0x0) rt_sigqueueinfo(r6, 0x1f, &(0x7f0000000200)={0x3a, 0x7fffffff, 0x9}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmmsg$inet6(r7, &(0x7f0000003840)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c, &(0x7f0000000580)}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000740)="7d7cec", 0x3}], 0x1}}], 0x2, 0x0) 3.538295382s ago: executing program 4 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) dup3(r1, r0, 0x80000) 3.534988122s ago: executing program 2 (id=219): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.42368524s ago: executing program 3 (id=220): socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='fusectl\x00', 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[], 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) 2.361510851s ago: executing program 4 (id=221): ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r1, &(0x7f0000000240), &(0x7f0000001700)=""/4096}, 0x20) 0s ago: executing program 2 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x20000004, 0x7, 0xffeffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 63.336155][ T4174] cgroup: Unknown subsys name 'net' [ 63.441551][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.923699][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.432021][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 66.540142][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.587596][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 66.603633][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.667284][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.675588][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.684263][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.699075][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.706442][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.714922][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.736421][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.743847][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.752154][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.759819][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.797821][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.805093][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.813609][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.834132][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.849777][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.923293][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.936011][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.950738][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.958208][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.967368][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.981467][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.988628][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.997115][ T4193] device bridge_slave_1 entered promiscuous mode [ 67.007676][ T4186] team0: Port device team_slave_0 added [ 67.039566][ T4186] team0: Port device team_slave_1 added [ 67.058388][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.065925][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.075064][ T4195] device bridge_slave_0 entered promiscuous mode [ 67.082890][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.089970][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.098318][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.120112][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.134059][ T4188] team0: Port device team_slave_0 added [ 67.140072][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.147539][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.156009][ T4195] device bridge_slave_1 entered promiscuous mode [ 67.163908][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.171073][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.182595][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.191025][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.201421][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.208688][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.234955][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.249197][ T4188] team0: Port device team_slave_1 added [ 67.280915][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.288169][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.314264][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.354963][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.369099][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.376526][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.402576][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.420648][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.432512][ T4193] team0: Port device team_slave_0 added [ 67.439982][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.452124][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.463902][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.470884][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.497205][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.510046][ T4193] team0: Port device team_slave_1 added [ 67.563117][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.570594][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.600466][ T4191] team0: Port device team_slave_0 added [ 67.609592][ T4191] team0: Port device team_slave_1 added [ 67.631516][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.638806][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.665151][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.687979][ T4195] team0: Port device team_slave_0 added [ 67.706251][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.713495][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.720248][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.728319][ T4188] Cannot create hsr debugfs directory [ 67.734474][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.741458][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.767688][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.785076][ T4195] team0: Port device team_slave_1 added [ 67.818523][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.825889][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.852488][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.869554][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.877331][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.904785][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.954119][ T4193] device hsr_slave_0 entered promiscuous mode [ 67.961201][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.967912][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.975578][ T4193] Cannot create hsr debugfs directory [ 68.007833][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.014953][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.042115][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.058685][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.066391][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.092783][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.132501][ T4197] Bluetooth: hci0: command 0x0409 tx timeout [ 68.147317][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.154096][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.160638][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.168396][ T4191] Cannot create hsr debugfs directory [ 68.212294][ T4197] Bluetooth: hci4: command 0x0409 tx timeout [ 68.224376][ T4197] Bluetooth: hci3: command 0x0409 tx timeout [ 68.235664][ T4197] Bluetooth: hci2: command 0x0409 tx timeout [ 68.245327][ T4197] Bluetooth: hci1: command 0x0409 tx timeout [ 68.287616][ T4195] device hsr_slave_0 entered promiscuous mode [ 68.295476][ T4195] device hsr_slave_1 entered promiscuous mode [ 68.302422][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.309986][ T4195] Cannot create hsr debugfs directory [ 68.523256][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.536674][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.546337][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.557631][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.615337][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.639987][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.650985][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.670802][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.722374][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.732882][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.753906][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.768966][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.789705][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.825037][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.835415][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.849195][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.860067][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.901617][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.909931][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.921294][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.936071][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.987469][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.996485][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.007982][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.015304][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.026617][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.041444][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.050478][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.066117][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.077829][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.088026][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.096260][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.104686][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.114746][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.124211][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.131382][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.146437][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.156532][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.165821][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.172971][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.181177][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.191377][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.201178][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.208316][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.223916][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.235807][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.247218][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.278339][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.322615][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.331459][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.340998][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.352870][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.361509][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.371236][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.383536][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.397565][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.411872][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.422239][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.430996][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.439755][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.448450][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.457053][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.466752][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.483681][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.508216][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.523988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.534045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.542899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.550775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.559815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.569163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.595535][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.608158][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.632565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.640851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.650121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.661166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.674218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.684296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.693204][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.700261][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.712179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.735937][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.745598][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.759419][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.766587][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.781485][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.790717][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.811352][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.844438][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.855399][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.866655][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.876192][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.905519][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.916896][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.929262][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.939683][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.949377][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.959580][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.968618][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.979640][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.995797][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.008400][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.015920][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.025090][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.034181][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.043209][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.050286][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.059069][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.069123][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.077345][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.108332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.116784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.130502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.149281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.159200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.176735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.189379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.207988][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.215890][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 70.230472][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.251449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.260686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.278010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.290090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.299235][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 70.309982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.312737][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 70.329150][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 70.337216][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 70.352207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.359716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.371980][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.400191][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.419594][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.429901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.440756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.487001][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.498390][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.514134][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.528774][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.537950][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.545347][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.561616][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.570840][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.583811][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.590955][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.599308][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.632525][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.649392][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.707611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.717131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.726769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.737867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.747159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.756519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.765519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.774662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.785779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.793606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.801043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.810336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.819059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.828075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.836923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.845728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.854560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.868258][ T4188] device veth0_vlan entered promiscuous mode [ 70.877806][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.894474][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.913824][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.931229][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.941996][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.949963][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.965812][ T4186] device veth0_vlan entered promiscuous mode [ 70.994039][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.003981][ T4188] device veth1_vlan entered promiscuous mode [ 71.017829][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.029819][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.042876][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.055964][ T4186] device veth1_vlan entered promiscuous mode [ 71.118489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.134337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.148079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.157222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.168862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.196649][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.206793][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.224551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.234352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.248116][ T4191] device veth0_vlan entered promiscuous mode [ 71.268532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.298398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.310667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.325219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.354767][ T4188] device veth0_macvtap entered promiscuous mode [ 71.374096][ T4186] device veth0_macvtap entered promiscuous mode [ 71.391285][ T4188] device veth1_macvtap entered promiscuous mode [ 71.408641][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.417693][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.429101][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.429249][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.445512][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.453998][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.463147][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.476910][ T4191] device veth1_vlan entered promiscuous mode [ 71.493968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.506021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.515450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.523604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.546296][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.555071][ T4186] device veth1_macvtap entered promiscuous mode [ 71.566869][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.576200][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.586336][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.597253][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.606460][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.615879][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.636127][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.647818][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.674415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.684398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.697405][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.709408][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.721971][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.730951][ T4193] device veth0_vlan entered promiscuous mode [ 71.753385][ T4191] device veth0_macvtap entered promiscuous mode [ 71.761233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.770693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.780108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.789478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.798102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.807723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.820231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.830255][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.841125][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.855898][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.864612][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.874167][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.883881][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.893186][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.906839][ T4191] device veth1_macvtap entered promiscuous mode [ 71.922149][ T4193] device veth1_vlan entered promiscuous mode [ 71.929045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.938303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.946949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.956080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.969671][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.979477][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.994739][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.004014][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.062982][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.075802][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.088109][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.098906][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.112576][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.136919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.149815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.161183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.172295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.188200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.204282][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.215459][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.228286][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.238895][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.250451][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.266398][ T4195] device veth0_vlan entered promiscuous mode [ 72.278641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.290294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.299386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.308891][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 72.314324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.335686][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.345171][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.355260][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.364366][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.373767][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 72.379976][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 72.386757][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 72.393387][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 72.433878][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.442491][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.456703][ T4193] device veth0_macvtap entered promiscuous mode [ 72.470919][ T4195] device veth1_vlan entered promiscuous mode [ 72.487703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.497059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.506502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.515413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.527926][ T4193] device veth1_macvtap entered promiscuous mode [ 72.549363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.560090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.570153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.604175][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.622179][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.655205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.680647][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.699470][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.710568][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.721381][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.731603][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.742873][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.757607][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.773628][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.781499][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.802159][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.811240][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.828416][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.840247][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.851457][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.870897][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.885171][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.895445][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.906036][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.917423][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.930052][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.940627][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.949911][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959393][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.983275][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.000310][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.011181][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.049181][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.075399][ T4195] device veth0_macvtap entered promiscuous mode [ 73.134418][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.145830][ T4195] device veth1_macvtap entered promiscuous mode [ 73.158854][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.208125][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.221425][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.233640][ T26] audit: type=1800 audit(1786113948.719:2): pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6" name="attr_allow_any_host" dev="configfs" ino=32956 res=0 errno=0 [ 73.244796][ T1195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.290258][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.302346][ T26] audit: type=1800 audit(1786113948.749:3): pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6" name="addr_trtype" dev="configfs" ino=32962 res=0 errno=0 [ 73.324909][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.338829][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.350004][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.360263][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.371082][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.381947][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.392899][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.405315][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.424993][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.431408][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.440876][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.453280][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.463132][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.475352][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.485489][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.498860][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.513016][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.528146][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.538954][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.550122][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.554592][ T4197] nvmet: creating controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3fc95329-4fcc-4dd4-aa1e-79b0e3112286. [ 73.563737][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.589517][ T4266] nvme nvme0: creating 2 I/O queues. [ 73.600039][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.611256][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.615531][ T4266] nvme nvme0: new ctrl: "testnqn" [ 73.622416][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.638266][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.656900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.666614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.700811][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.723388][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.733295][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.742738][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.789959][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.810756][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.853518][ T4271] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.917007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.935546][ T4274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.977780][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.999877][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.040686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.160650][ T4279] loop3: detected capacity change from 0 to 1024 [ 74.196434][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.230178][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.258887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.276490][ T4279] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 74.302192][ T4287] loop7: detected capacity change from 0 to 7 [ 74.310828][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.325380][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.341188][ T4290] Zero length message leads to an empty skb [ 74.343958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.372068][ T4197] Bluetooth: hci0: command 0x0419 tx timeout [ 74.395683][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 74.452678][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 74.459175][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 74.488393][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 74.516227][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 74.904351][ T4302] 0: reclassify loop, rule prio 0, protocol 03 [ 75.362600][ T4313] device syzkaller0 entered promiscuous mode [ 75.408409][ T4313] tipc: Started in network mode [ 75.426168][ T4313] tipc: Node identity 4e5bb54e88dc, cluster identity 4711 [ 75.448386][ T4313] tipc: Enabled bearer , priority 0 [ 75.480761][ T4310] tipc: Resetting bearer [ 75.488279][ T4232] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 75.592828][ T4310] tipc: Disabling bearer [ 75.610898][ T4323] loop4: detected capacity change from 0 to 256 [ 75.680955][ T4323] ======================================================= [ 75.680955][ T4323] WARNING: The mand mount option has been deprecated and [ 75.680955][ T4323] and is ignored by this kernel. Remove the mand [ 75.680955][ T4323] option from the mount to silence this warning. [ 75.680955][ T4323] ======================================================= [ 75.871030][ T4328] jffs2: notice: (4328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.922326][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.965400][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.019670][ T4232] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 76.034976][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.061750][ T4336] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 76.067836][ T4232] usb 2-1: config 0 descriptor?? [ 76.230388][ T4343] smc: net device dummy0 applied user defined pnetid SYZ0 [ 76.257113][ T4343] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.802179][ T4232] usbhid 2-1:0.0: can't add hid device: -71 [ 77.557167][ T4232] usbhid: probe of 2-1:0.0 failed with error -71 [ 77.576544][ T4232] usb 2-1: USB disconnect, device number 2 [ 77.656834][ T4362] device syzkaller0 entered promiscuous mode [ 77.763704][ T4369] loop4: detected capacity change from 0 to 16 [ 77.884600][ T4369] erofs: (device loop4): mounted with root inode @ nid 36. [ 79.233226][ T4393] device wlan0 entered promiscuous mode [ 79.242880][ T4197] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.260733][ T4393] syz.0.39 (4393) used greatest stack depth: 20080 bytes left [ 79.642080][ T4197] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 79.678080][ T4197] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 79.882471][ T4197] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 79.907770][ T4197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.927365][ T4197] usb 2-1: Product: syz [ 79.940441][ T4197] usb 2-1: Manufacturer: syz [ 79.951529][ T4197] usb 2-1: SerialNumber: syz [ 80.015541][ T4390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.032686][ T4390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.054793][ T4197] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 80.499401][ T4197] mos7840: probe of ttyUSB0 failed with error -5 [ 80.680820][ T4434] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 80.747124][ T4434] 0: reclassify loop, rule prio 0, protocol 03 [ 81.683099][ T4187] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.746966][ T4229] usb 2-1: USB disconnect, device number 3 [ 81.773372][ T4454] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.802371][ T4229] mos7840 2-1:1.0: device disconnected [ 81.974477][ T4187] usb 3-1: Using ep0 maxpacket: 16 [ 81.991895][ T4457] smpboot: CPU 1 is now offline [ 82.125718][ T4187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.175747][ T4187] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.220899][ T4447] loop0: detected capacity change from 0 to 32768 [ 82.229171][ T4187] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 82.255852][ T4187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.337245][ T4187] usb 3-1: config 0 descriptor?? [ 82.421824][ T4447] JBD2: Ignoring recovery information on journal [ 82.440474][ T4187] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 82.600572][ T4470] loop3: detected capacity change from 0 to 512 [ 82.735976][ T4470] EXT4-fs (loop3): inline encryption not supported [ 82.743221][ T4447] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.823250][ T4470] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.864521][ T4444] udc-core: couldn't find an available UDC or it's busy [ 82.953825][ T4444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.967673][ T4470] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 83.030193][ T4444] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.092574][ T4470] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.61: invalid indirect mapped block 2683928664 (level 1) [ 83.183780][ T4470] EXT4-fs (loop3): 1 truncate cleaned up [ 83.216353][ T26] audit: type=1800 audit(1786113958.699:4): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.53" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 83.241292][ T4470] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 83.295292][ T4230] usb 3-1: USB disconnect, device number 2 [ 83.431701][ T4262] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.670913][ T4484] (syz.0.53,4484,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 83.697580][ T4487] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.875937][ T4495] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.007879][ T4496] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.021901][ T4262] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.126022][ T4447] syz.0.53 (4447) used greatest stack depth: 18240 bytes left [ 84.232994][ T4262] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 84.258128][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.285511][ T4262] usb 5-1: Product: syz [ 84.294449][ T4262] usb 5-1: Manufacturer: syz [ 84.307112][ T4262] usb 5-1: SerialNumber: syz [ 84.364018][ T4262] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 84.451115][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 84.965577][ T4511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'. [ 85.311802][ T4262] gspca_mr97310a: reg read [21] error -71 [ 85.342320][ T4262] mr97310a: probe of 5-1:1.0 failed with error -71 [ 85.411209][ T4262] usb 5-1: USB disconnect, device number 2 [ 85.640917][ T4527] block device autoloading is deprecated and will be removed. [ 86.782065][ T1106] cfg80211: failed to load regulatory.db [ 87.112010][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.120191][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.502064][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060ba1400: rx timeout, send abort [ 89.531390][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.624596][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.004859][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060ba2c00: rx timeout, send abort [ 90.013468][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060ba1400: abort rx timeout. Force session deactivation [ 90.098818][ T4580] loop4: detected capacity change from 0 to 512 [ 90.148823][ T4580] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.469133][ T4526] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.513247][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060ba2c00: abort rx timeout. Force session deactivation [ 90.553222][ T4526] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.566424][ T4584] loop4: detected capacity change from 0 to 256 [ 90.597844][ T4526] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.627788][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 90.647041][ T4526] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.071523][ T4589] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.231750][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.611946][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.649360][ T4232] usb 4-1: config 0 has no interfaces? [ 91.671915][ T4232] usb 4-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 91.693735][ T4608] loop4: detected capacity change from 0 to 1024 [ 91.700382][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.730970][ T4608] hfsplus: unable to parse mount options [ 91.775939][ T4232] usb 4-1: config 0 descriptor?? [ 92.019382][ T4610] device syzkaller0 entered promiscuous mode [ 92.267622][ T4232] usb 4-1: USB disconnect, device number 2 [ 94.324833][ T4620] loop4: detected capacity change from 0 to 16 [ 94.412709][ T4620] erofs: (device loop4): mounted with root inode @ nid 36. [ 94.466358][ T4624] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.555642][ T4618] process 'syz.0.107' launched '/dev/fd/3' with NULL argv: empty string added [ 94.896159][ T4640] binder: BINDER_SET_CONTEXT_MGR already set [ 94.945447][ T4640] binder: 4635:4640 ioctl 4018620d 200000004a80 returned -16 [ 95.212654][ T4652] loop0: detected capacity change from 0 to 128 [ 95.238959][ T4651] loop2: detected capacity change from 0 to 512 [ 95.373097][ T4652] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 95.380901][ T4652] FAT-fs (loop0): Filesystem has been set read-only [ 95.395348][ T4651] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.117: iget: bad i_size value: 38620345925642 [ 95.447160][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 95.546606][ T4651] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.117: couldn't read orphan inode 15 (err -117) [ 95.702203][ T4651] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.746966][ T26] audit: type=1800 audit(1786113971.229:5): pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.121" name="size" dev="configfs" ino=36130 res=0 errno=0 [ 95.819472][ T4664] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(9) [ 95.994454][ T26] audit: type=1800 audit(1786113971.269:6): pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.121" name="zone_size" dev="configfs" ino=36134 res=0 errno=0 [ 96.184346][ T4682] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.117: bg 0: block 5: invalid block bitmap [ 96.210334][ T4681] device syzkaller0 entered promiscuous mode [ 96.377486][ T4682] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 392 with error 28 [ 96.516713][ T4682] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.516713][ T4682] [ 96.727291][ T4682] EXT4-fs (loop2): Total free blocks count 0 [ 96.776660][ T4682] EXT4-fs (loop2): Free/Dirty block details [ 96.813630][ T4682] EXT4-fs (loop2): free_blocks=0 [ 96.859266][ T4682] EXT4-fs (loop2): dirty_blocks=392 [ 96.887428][ T4682] EXT4-fs (loop2): Block reservation details [ 96.924134][ T4682] EXT4-fs (loop2): i_reserved_data_blocks=392 [ 98.345964][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.353372][ T4689] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.298800][ T4736] loop4: detected capacity change from 0 to 128 [ 101.391296][ T4736] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 101.398997][ T4736] FAT-fs (loop4): Filesystem has been set read-only [ 101.787340][ T4742] loop2: detected capacity change from 0 to 8192 [ 101.880627][ T26] audit: type=1800 audit(1786113977.359:7): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.136" name="file2" dev="loop2" ino=1048593 res=0 errno=0 [ 101.969914][ T4742] attempt to access beyond end of device [ 101.969914][ T4742] loop2: rw=0, want=57848, limit=8192 [ 102.048346][ T4742] Buffer I/O error on dev loop2, logical block 57847, async page read [ 102.090885][ T4748] attempt to access beyond end of device [ 102.090885][ T4748] loop2: rw=0, want=57848, limit=8192 [ 102.170944][ T4742] attempt to access beyond end of device [ 102.170944][ T4742] loop2: rw=0, want=57848, limit=8192 [ 102.212166][ T4742] Buffer I/O error on dev loop2, logical block 57847, async page read [ 102.272916][ T26] audit: type=1800 audit(1786113977.759:8): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.136" name="file2" dev="loop2" ino=1048593 res=0 errno=0 [ 102.495524][ T4689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.649145][ T4689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.706709][ T4745] ODEBUG: Out of memory. ODEBUG disabled [ 103.582086][ T4689] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.597119][ T4689] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.606794][ T4689] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.620826][ T4689] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.122492][ T4767] loop4: detected capacity change from 0 to 512 [ 104.376251][ T4771] netlink: 64 bytes leftover after parsing attributes in process `syz.1.140'. [ 104.456846][ T4767] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.141: iget: bad i_size value: 38620345925642 [ 104.555751][ T4777] device syzkaller0 entered promiscuous mode [ 104.567226][ T4767] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.141: couldn't read orphan inode 15 (err -117) [ 104.660303][ T4780] tipc: Started in network mode [ 104.676956][ T4767] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.719979][ T4780] tipc: Node identity 2007ff, cluster identity 4711 [ 104.821374][ T4780] tipc: Node number set to 2099199 [ 104.839868][ T4787] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.141: bg 0: block 5: invalid block bitmap [ 104.899863][ T4787] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 44 with error 28 [ 104.958868][ T4787] EXT4-fs (loop4): This should not happen!! Data will be lost [ 104.958868][ T4787] [ 105.006593][ T4792] device bond_slave_0 entered promiscuous mode [ 105.013051][ T4792] device bond_slave_1 entered promiscuous mode [ 105.025134][ T4787] EXT4-fs (loop4): Total free blocks count 0 [ 105.053309][ T4787] EXT4-fs (loop4): Free/Dirty block details [ 105.085352][ T4787] EXT4-fs (loop4): free_blocks=0 [ 105.107763][ T4787] EXT4-fs (loop4): dirty_blocks=48 [ 105.114978][ T4792] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.124312][ T4787] EXT4-fs (loop4): Block reservation details [ 106.744598][ T4792] bond1: (slave macvlan2): making interface the new active one [ 106.759992][ T4787] EXT4-fs (loop4): i_reserved_data_blocks=48 [ 106.804144][ T4792] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 107.086605][ T4803] loop4: detected capacity change from 0 to 128 [ 107.205838][ T4803] EXT4-fs (loop4): Test dummy encryption mode enabled [ 107.233456][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.258282][ T4807] bridge0: port 3(vxlan0) entered blocking state [ 107.289374][ T4803] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 107.325923][ T4807] bridge0: port 3(vxlan0) entered disabled state [ 107.366389][ T4807] device vxlan0 entered promiscuous mode [ 107.373612][ T4803] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.631741][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 108.072204][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.105731][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.144932][ T13] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 108.176783][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.218247][ T13] usb 4-1: config 0 descriptor?? [ 108.774334][ T13] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 109.016765][ T4799] netlink: 'syz.3.148': attribute type 1 has an invalid length. [ 109.065869][ T4799] netlink: 'syz.3.148': attribute type 2 has an invalid length. [ 109.103903][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 109.246100][ T1106] usb 4-1: USB disconnect, device number 3 [ 109.439392][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.446749][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.502837][ T4814] device bond_slave_0 left promiscuous mode [ 109.509265][ T4814] device bond_slave_1 left promiscuous mode [ 109.931351][ T4843] loop3: detected capacity change from 0 to 512 [ 109.979688][ T4843] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.161: iget: bad i_size value: 38620345925642 [ 110.022087][ T4843] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.161: couldn't read orphan inode 15 (err -117) [ 110.057239][ T4843] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.178956][ T4846] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.161: bg 0: block 5: invalid block bitmap [ 110.211440][ T4846] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 476 with error 28 [ 110.254544][ T4846] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.254544][ T4846] [ 110.280214][ T4814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.310440][ T4846] EXT4-fs (loop3): Total free blocks count 0 [ 110.327839][ T4846] EXT4-fs (loop3): Free/Dirty block details [ 110.349593][ T4846] EXT4-fs (loop3): free_blocks=0 [ 110.364674][ T4846] EXT4-fs (loop3): dirty_blocks=480 [ 110.377216][ T4846] EXT4-fs (loop3): Block reservation details [ 110.393108][ T4814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.405852][ T4846] EXT4-fs (loop3): i_reserved_data_blocks=480 [ 112.748429][ T4814] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.762890][ T4814] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.775497][ T4814] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.785491][ T4814] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.698108][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.756391][ T4858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.810572][ T4858] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.859155][ T4858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.937026][ C0] Unknown status report in ack skb [ 114.080108][ T26] audit: type=1326 audit(1786113989.559:9): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=4880 comm="syz.0.171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21bfb8a0d9 code=0x0 [ 114.651801][ T4887] netem: change failed [ 114.688140][ T4887] device syzkaller0 entered promiscuous mode [ 114.759238][ T4896] tipc: Started in network mode [ 114.779969][ T4896] tipc: Node identity 9ae692956a14, cluster identity 4711 [ 114.818300][ T4896] tipc: Enabled bearer , priority 0 [ 114.897181][ T4885] tipc: Resetting bearer [ 114.968236][ T4885] tipc: Disabling bearer [ 116.685518][ T4919] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 116.778549][ T4921] device syzkaller0 entered promiscuous mode [ 118.197005][ T4898] syz.3.176 (4898): drop_caches: 2 [ 118.288383][ T4938] device syzkaller0 entered promiscuous mode [ 118.658891][ T26] audit: type=1326 audit(1786113994.139:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 118.836924][ T26] audit: type=1326 audit(1786113994.189:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 118.876152][ T4951] loop3: detected capacity change from 0 to 64 [ 118.995820][ T26] audit: type=1326 audit(1786113994.189:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 119.141519][ T26] audit: type=1326 audit(1786113994.189:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 119.314111][ T26] audit: type=1326 audit(1786113994.189:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 119.370543][ T4954] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 119.458620][ T26] audit: type=1326 audit(1786113994.189:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 119.638194][ T26] audit: type=1326 audit(1786113994.189:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 119.720731][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.915490][ T4965] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 119.942282][ T26] audit: type=1326 audit(1786113994.189:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 120.204313][ T4966] netlink: 64 bytes leftover after parsing attributes in process `syz.2.195'. [ 120.235889][ T4961] device bridge_slave_0 left promiscuous mode [ 120.260754][ T4961] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.326775][ T26] audit: type=1326 audit(1786113994.189:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 120.355330][ T4961] device bridge_slave_1 left promiscuous mode [ 120.379676][ T4961] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.449676][ T4961] bond0: (slave bond_slave_0): Releasing backup interface [ 120.605866][ T26] audit: type=1326 audit(1786113994.199:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 120.636209][ T4961] bond0: (slave bond_slave_1): Releasing backup interface [ 121.145125][ T4961] team0: Port device team_slave_0 removed [ 121.164127][ T4961] team0: Port device team_slave_1 removed [ 121.174823][ T26] audit: type=1326 audit(1786113994.199:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 121.436363][ T4977] netlink: 64 bytes leftover after parsing attributes in process `syz.1.197'. [ 121.470214][ T4961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.489120][ T4961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.586626][ T26] audit: type=1326 audit(1786113994.199:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 121.710467][ T26] audit: type=1326 audit(1786113994.199:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aacdef0d9 code=0x7ffc0000 [ 123.603445][ T4992] sched: RT throttling activated [ 123.741719][ T4187] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.943195][ T4187] usb 3-1: device descriptor read/64, error -71 [ 124.056623][ T5002] device syzkaller0 entered promiscuous mode [ 124.114747][ T4229] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.225277][ T4187] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.270841][ T5005] loop4: detected capacity change from 0 to 1024 [ 124.309595][ T5005] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 124.358507][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.206: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.373800][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 124.398335][ T5005] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 124.418270][ T5005] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.206: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.447325][ T5005] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 124.461659][ T4187] usb 3-1: device descriptor read/64, error -71 [ 124.481356][ T5005] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.206: Failed to acquire dquot type 0 [ 124.508577][ T5005] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 124.522502][ T4229] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 124.539897][ T4229] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 124.564044][ T5005] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.206: mark_inode_dirty error [ 124.583096][ T4229] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 124.595152][ T4187] usb usb3-port1: attempt power cycle [ 124.612887][ T5005] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 124.630445][ T4229] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 124.664865][ T5005] EXT4-fs (loop4): 1 orphan inode deleted [ 124.704950][ T5005] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,resuid=0x0000000000000000,norecovery,nodiscard,nodioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: none. [ 124.730862][ T4229] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.776899][ T5009] loop1: detected capacity change from 0 to 2048 [ 124.793365][ T1195] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.871002][ T1195] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 124.925550][ T4229] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 124.945085][ T5009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.962963][ T1195] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 124.975727][ T5005] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.206: Invalid inode table block 1 in block_group 0 [ 124.998016][ T4229] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 125.021691][ T4187] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.065071][ T4229] usb 4-1: Product: syz [ 125.069356][ T4229] usb 4-1: Manufacturer: syz [ 125.239813][ T5005] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 125.261730][ T4187] usb 3-1: device descriptor read/8, error -71 [ 125.279590][ T4229] usb 4-1: SerialNumber: syz [ 125.563460][ T5005] EXT4-fs error (device loop4): ext4_setattr:5490: inode #2: comm syz.4.206: mark_inode_dirty error [ 125.579245][ T4229] usb 4-1: config 0 descriptor?? [ 126.066303][ T4229] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 126.130269][ T4229] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 126.185648][ T1275] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.237525][ T1275] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 126.306664][ T1275] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 126.821330][ T4998] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 127.848071][ T4262] usb 4-1: USB disconnect, device number 4 [ 127.861836][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 128.045310][ T4193] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 128.096331][ T4262] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 128.277153][ T4193] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 128.308306][ T5023] CacheFiles: Failed to register: -95 [ 128.371216][ T4193] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 128.534372][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 129.998960][ T5044] netlink: 64 bytes leftover after parsing attributes in process `syz.3.217'. [ 131.291776][ T4187] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 133.612149][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.618727][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.006110][ C0] ------------[ cut here ]------------ [ 134.011662][ C0] WARNING: CPU: 0 PID: 5055 at net/mac80211/tx.c:4876 __ieee80211_beacon_get+0x178a/0x1ff0 [ 134.022017][ C0] Modules linked in: [ 134.025948][ C0] CPU: 0 PID: 5055 Comm: syz.3.220 Not tainted syzkaller #0 [ 134.033390][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.043749][ C0] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 134.050115][ C0] Code: 26 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 82 68 26 f8 0f 0b e9 16 ef ff ff e8 76 68 26 f8 <0f> 0b e9 7c f2 ff ff e8 3a 80 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 134.069748][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.075884][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 134.082008][ C0] RAX: ffffffff8952943a RBX: ffff88805ff68400 RCX: ffff888023865940 [ 134.090115][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.098148][ C0] RBP: ffffc90000007af8 R08: ffff888023865940 R09: 0000000000000003 [ 134.106181][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 134.114184][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 134.122276][ C0] FS: 00007fdfc763a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 134.131241][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.137868][ C0] CR2: 000055556ae1ca38 CR3: 0000000076e39000 CR4: 00000000003506f0 [ 134.145901][ C0] Call Trace: [ 134.149191][ C0] [ 134.152078][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 134.158076][ C0] ? verify_lock_unused+0x140/0x140 [ 134.163327][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 134.168817][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 134.174392][ C0] __iterate_interfaces+0x225/0x4c0 [ 134.179592][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 134.185941][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 134.192216][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 134.199367][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 134.204602][ C0] ? hw_scan_work+0xef0/0xef0 [ 134.209284][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 134.214730][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 134.219884][ C0] hrtimer_run_softirq+0x176/0x240 [ 134.225039][ C0] handle_softirqs+0x336/0x830 [ 134.229817][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 134.234723][ C0] ? do_softirq+0x210/0x210 [ 134.239269][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 134.244427][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 134.249644][ C0] __irq_exit_rcu+0x13b/0x230 [ 134.254350][ C0] ? irq_exit_rcu+0x20/0x20 [ 134.258862][ C0] irq_exit_rcu+0x5/0x20 [ 134.263123][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 134.268789][ C0] [ 134.271742][ C0] [ 134.274682][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.280665][ C0] RIP: 0010:lock_acquire+0x153/0x400 [ 134.286100][ C0] Code: 3e 00 0f 85 16 01 00 00 43 c6 44 3d 08 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 4c 8b b4 24 a0 00 00 00 <43> c6 44 3d 08 f8 fa 48 c7 c7 e0 39 2b 8a e8 ba 49 63 08 65 ff 05 [ 134.305812][ C0] RSP: 0018:ffffc90003f8f640 EFLAGS: 00000246 [ 134.311929][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 7ee8d9169b338a00 [ 134.319921][ C0] RDX: 0000000000000000 RSI: ffffffff8a7a41e0 RDI: ffffffff8a7a41a0 [ 134.328108][ C0] RBP: ffffc90003f8f758 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 134.336130][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: ffff888060a30690 [ 134.344140][ C0] R13: 1ffff920007f1ed4 R14: 0000000000000246 R15: dffffc0000000000 [ 134.352202][ C0] ? read_lock_is_recursive+0x10/0x10 [ 134.357608][ C0] ? sk_filter_trim_cap+0x56c/0x7d0 [ 134.362843][ C0] ? init_wait_entry+0xd0/0xd0 [ 134.367616][ C0] ? __rwlock_init+0x140/0x140 [ 134.372415][ C0] ? unix_dgram_sendmsg+0xb56/0x19c0 [ 134.377702][ C0] _raw_spin_lock+0x2a/0x40 [ 134.382234][ C0] ? unix_dgram_sendmsg+0xbef/0x19c0 [ 134.387554][ C0] unix_dgram_sendmsg+0xbef/0x19c0 [ 134.392726][ C0] ? unix_dgram_poll+0x680/0x680 [ 134.397666][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 134.404122][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 134.409671][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 134.415210][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 134.420714][ C0] ? unix_dgram_poll+0x680/0x680 [ 134.425691][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 134.430663][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 134.435755][ C0] ? rcu_is_watching+0x11/0xa0 [ 134.440541][ C0] ? import_iovec+0x6f/0xa0 [ 134.445107][ C0] ___sys_sendmsg+0x236/0x2e0 [ 134.449811][ C0] ? __sys_sendmsg+0x290/0x290 [ 134.454688][ C0] ? __might_fault+0xb3/0x110 [ 134.459383][ C0] __sys_sendmmsg+0x2ba/0x500 [ 134.464108][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 134.469180][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 134.475197][ C0] ? lock_chain_count+0x20/0x20 [ 134.480193][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 134.485121][ C0] do_syscall_64+0x4c/0xa0 [ 134.489603][ C0] ? clear_bhb_loop+0x30/0x80 [ 134.494449][ C0] ? clear_bhb_loop+0x30/0x80 [ 134.499144][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.505317][ C0] RIP: 0033:0x7fdfc93e20d9 [ 134.509748][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.529586][ C0] RSP: 002b:00007fdfc763a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.538039][ C0] RAX: ffffffffffffffda RBX: 00007fdfc9669fa0 RCX: 00007fdfc93e20d9 [ 134.546057][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000007 [ 134.554102][ C0] RBP: 00007fdfc9479024 R08: 0000000000000000 R09: 0000000000000000 [ 134.562131][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.570137][ C0] R13: 00007fdfc966a038 R14: 00007fdfc9669fa0 R15: 00007ffd9e156c88 [ 134.578178][ C0] [ 134.581308][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.588606][ C0] CPU: 0 PID: 5055 Comm: syz.3.220 Not tainted syzkaller #0 [ 134.595907][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.605966][ C0] Call Trace: [ 134.609251][ C0] [ 134.612093][ C0] dump_stack_lvl+0x188/0x250 [ 134.616778][ C0] ? show_regs_print_info+0x20/0x20 [ 134.621985][ C0] ? load_image+0x410/0x410 [ 134.626518][ C0] panic+0x2f8/0x850 [ 134.630418][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 134.634931][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 134.640662][ C0] __warn+0x248/0x2b0 [ 134.644647][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 134.650392][ C0] report_bug+0x1b9/0x2e0 [ 134.654740][ C0] handle_bug+0x3a/0x70 [ 134.659039][ C0] exc_invalid_op+0x16/0x40 [ 134.663781][ C0] asm_exc_invalid_op+0x16/0x20 [ 134.668655][ C0] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 134.674993][ C0] Code: 26 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 82 68 26 f8 0f 0b e9 16 ef ff ff e8 76 68 26 f8 <0f> 0b e9 7c f2 ff ff e8 3a 80 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 134.694667][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 134.700758][ C0] RAX: ffffffff8952943a RBX: ffff88805ff68400 RCX: ffff888023865940 [ 134.708755][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.716740][ C0] RBP: ffffc90000007af8 R08: ffff888023865940 R09: 0000000000000003 [ 134.724717][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 134.732687][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 134.740662][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 134.746405][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 134.752409][ C0] ? verify_lock_unused+0x140/0x140 [ 134.757635][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 134.763104][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 134.768675][ C0] __iterate_interfaces+0x225/0x4c0 [ 134.773896][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 134.780146][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 134.786393][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 134.793437][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 134.798654][ C0] ? hw_scan_work+0xef0/0xef0 [ 134.803336][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 134.808559][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 134.813686][ C0] hrtimer_run_softirq+0x176/0x240 [ 134.818813][ C0] handle_softirqs+0x336/0x830 [ 134.823582][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 134.828435][ C0] ? do_softirq+0x210/0x210 [ 134.832940][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 134.838053][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 134.843255][ C0] __irq_exit_rcu+0x13b/0x230 [ 134.848024][ C0] ? irq_exit_rcu+0x20/0x20 [ 134.852534][ C0] irq_exit_rcu+0x5/0x20 [ 134.856778][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 134.862424][ C0] [ 134.865371][ C0] [ 134.868317][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 134.874301][ C0] RIP: 0010:lock_acquire+0x153/0x400 [ 134.879592][ C0] Code: 3e 00 0f 85 16 01 00 00 43 c6 44 3d 08 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 4c 8b b4 24 a0 00 00 00 <43> c6 44 3d 08 f8 fa 48 c7 c7 e0 39 2b 8a e8 ba 49 63 08 65 ff 05 [ 134.899223][ C0] RSP: 0018:ffffc90003f8f640 EFLAGS: 00000246 [ 134.905316][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 7ee8d9169b338a00 [ 134.913289][ C0] RDX: 0000000000000000 RSI: ffffffff8a7a41e0 RDI: ffffffff8a7a41a0 [ 134.921347][ C0] RBP: ffffc90003f8f758 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 134.929317][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: ffff888060a30690 [ 134.937286][ C0] R13: 1ffff920007f1ed4 R14: 0000000000000246 R15: dffffc0000000000 [ 134.945286][ C0] ? read_lock_is_recursive+0x10/0x10 [ 134.950754][ C0] ? sk_filter_trim_cap+0x56c/0x7d0 [ 134.955951][ C0] ? init_wait_entry+0xd0/0xd0 [ 134.960724][ C0] ? __rwlock_init+0x140/0x140 [ 134.965553][ C0] ? unix_dgram_sendmsg+0xb56/0x19c0 [ 134.970972][ C0] _raw_spin_lock+0x2a/0x40 [ 134.975713][ C0] ? unix_dgram_sendmsg+0xbef/0x19c0 [ 134.981013][ C0] unix_dgram_sendmsg+0xbef/0x19c0 [ 134.986156][ C0] ? unix_dgram_poll+0x680/0x680 [ 134.991098][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 134.997535][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 135.003104][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 135.008406][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 135.013885][ C0] ? unix_dgram_poll+0x680/0x680 [ 135.018826][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 135.023598][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 135.028644][ C0] ? rcu_is_watching+0x11/0xa0 [ 135.033418][ C0] ? import_iovec+0x6f/0xa0 [ 135.037933][ C0] ___sys_sendmsg+0x236/0x2e0 [ 135.042629][ C0] ? __sys_sendmsg+0x290/0x290 [ 135.047437][ C0] ? __might_fault+0xb3/0x110 [ 135.052133][ C0] __sys_sendmmsg+0x2ba/0x500 [ 135.056816][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 135.061859][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.067845][ C0] ? lock_chain_count+0x20/0x20 [ 135.072706][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 135.077563][ C0] do_syscall_64+0x4c/0xa0 [ 135.082058][ C0] ? clear_bhb_loop+0x30/0x80 [ 135.086758][ C0] ? clear_bhb_loop+0x30/0x80 [ 135.091479][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.097394][ C0] RIP: 0033:0x7fdfc93e20d9 [ 135.102008][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.121649][ C0] RSP: 002b:00007fdfc763a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 135.130224][ C0] RAX: ffffffffffffffda RBX: 00007fdfc9669fa0 RCX: 00007fdfc93e20d9 [ 135.138214][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000007 [ 135.146199][ C0] RBP: 00007fdfc9479024 R08: 0000000000000000 R09: 0000000000000000 [ 135.154179][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.162157][ C0] R13: 00007fdfc966a038 R14: 00007fdfc9669fa0 R15: 00007ffd9e156c88 [ 135.170165][ C0] [ 135.173262][ C0] Kernel Offset: disabled [ 135.178000][ C0] Rebooting in 86400 seconds..