last executing test programs: 1m13.493298962s ago: executing program 4 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x28, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x6400) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) 1m12.437820024s ago: executing program 4 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 1m9.405185833s ago: executing program 4 (id=160): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x4400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8054}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x2, 0xa}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xab55, 0x7a, 0x97aa, 0x1, 0x7, 0x4}}}}]}, 0x4c}}, 0x800) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1m8.367028524s ago: executing program 4 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x401, &(0x7f0000000100)={[], [{@smackfsroot={'smackfsroot', 0x3d, '$#})['}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x61, 0x30, 0x30, 0x32, 0x33, 0x35, 0x35], 0x2d, [0x33, 0x36, 0x66, 0x33], 0x2d, [0x62, 0x3, 0xf, 0x35], 0x2d, [0x35, 0x36, 0x34, 0x36], 0x2d, [0x63, 0x38, 0x64, 0x33, 0x33, 0x39, 0x32, 0x39]}}}]}, 0x0, 0x596, &(0x7f0000000d80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000500)=0x2) 1m5.693699512s ago: executing program 4 (id=168): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f0000000180)=""/133, 0xfdef) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000007000000000800090047000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in=@private=0xa010101, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0x0, 0x3, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffe}}, 0xe8) close(r4) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xf, "4ba06b6e"}]}}, 0x0}, 0x0) 1m1.554451745s ago: executing program 4 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ac1e00010000000018000000000000000000000007000000440561f7a3"], 0x38}}], 0x1, 0x0) 1m0.765598832s ago: executing program 32 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="00000000ac1e00010000000018000000000000000000000007000000440561f7a3"], 0x38}}], 0x1, 0x0) 10.028085749s ago: executing program 5 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 9.322931351s ago: executing program 5 (id=328): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_init_net_socket$ax25(0x3, 0x2, 0xce) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 9.142188682s ago: executing program 5 (id=331): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000514000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x500}], 0x2}, 0x5) 7.262457982s ago: executing program 2 (id=334): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) sendto$inet6(r2, &(0x7f0000000080)="cf", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0xffffff4f}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x400, @loopback, 0x3}}}, 0x84) 7.092512242s ago: executing program 3 (id=336): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x6dd, 0xffffffff, 0x3e7, 0x2, 0x6, 0x20, 0x1, 0x4, 0x7, &(0x7f0000000280)=[0x4, 0x9], 0x2, 0x0}) 6.381826584s ago: executing program 5 (id=338): r0 = socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x2f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x4) 6.253237971s ago: executing program 3 (id=340): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 6.252863902s ago: executing program 2 (id=341): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140)={0x6, 0x43, 0x8, 0xa, 0x22, 0x5, 0x5, 0x6, 0x3, 0x2, 0x4, 0x6d, 0x6, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 5.346929285s ago: executing program 1 (id=342): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0xae}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 5.109955119s ago: executing program 3 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 5.054217502s ago: executing program 2 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x1070bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, r9, {0xf000, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc00}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc8804) 5.053784592s ago: executing program 5 (id=346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004dc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.57197076s ago: executing program 0 (id=347): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r1, 0x0, 0x100000000000000}, 0x38) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16, {{0x4, 0x0, 0x4, 0x0, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x1, 0x10, 0x9, 0x0, 0xa000, 0x0, 0x0, 0x0, 0xfffffff9}}, {0x0, 0x14}}}, 0x0, 0x0}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 3.537212511s ago: executing program 3 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdff, {0x0, 0x0, 0x0, r8, {0x5, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000026c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff1, 0xfff3}, {0x5, 0xfff1}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) 3.434372118s ago: executing program 1 (id=349): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.342418883s ago: executing program 2 (id=350): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close(r3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x8000}, 0x14) splice(r1, 0x0, r4, 0x0, 0x5947, 0xc) 3.330484184s ago: executing program 0 (id=351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6(0xa, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x3, 0x5, 0xdd91]}, &(0x7f0000000240)=0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.282331686s ago: executing program 1 (id=352): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.255411698s ago: executing program 5 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x90, 0x7f, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.106399867s ago: executing program 0 (id=354): socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x4) sendmmsg(r2, 0x0, 0x0, 0x850) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 2.979908384s ago: executing program 2 (id=355): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0) ioctl$BLKROGET(r1, 0x125e, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r2, 0x3, 0x0, 0x404042bbe) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x1, 0x19f, &(0x7f0000000480)="$eJzs0b9rE2Ecx/H393me/KjQlqo4VNCAlXihmtxVHZyCU4QcuAoGDWlsionaXgZbWugiBan2X9CpgosKOgqCc3EQHORcukkzFAdxkJNLHoX+DT6v4T73/XC/+F4nWopywO+DtRZVhjQTfEIwwGkZdUqN8p2dv9vcHgVX7bxl84XN6Whl9W6z220vF64UmDpUAD+G3b8qes0JxUCoIl8O1lpNuR2SVOmp+VBTp/QE3TB4T5k24xy/hSYpbnFNsSTFOkyW+70H5Whl9fxir7nQXmjfC4K5y5WLlcqloHxnsduuvEW8x6J4xjpeSC5kzFsn0+DRrjnCrCBeR8VaSgMKDbZ39bkzswOUt08iBooDciKdZPLlBORvph9f45jwHB0yU2dMYRi+qIZcV2/EN5/Nz4wiv6H1hdb97vzmDSW/sjtV2c+Lv0em6BOUfObS1XCUD2zGzMTUYnZi9r6RsQu2+zQb6fGVnU5yCrI8bPb7y34WPooJCdL/OQXj6T1n08vq6fheDj2Ir39PHMdxHMdxHMdxnP/AnwAAAP//ytRf8g==") write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r4, 0x90044802, 0x0) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f00000000c0)) 2.941971776s ago: executing program 3 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000000810000048"], 0x18}}], 0x1, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_init(0x81, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.106345846s ago: executing program 0 (id=357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 2.062343139s ago: executing program 1 (id=358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x8) 1.219767198s ago: executing program 0 (id=359): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x2b3, 0x0) 1.02260791s ago: executing program 1 (id=360): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x301, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 919.217496ms ago: executing program 3 (id=361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip_vti0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 767.134615ms ago: executing program 2 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) shutdown(r3, 0x1) 765.453405ms ago: executing program 1 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 0 (id=364): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800)={0xffffffffffffffff}, 0xffffffffffffff12) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. [ 49.530403][ T4171] cgroup: Unknown subsys name 'net' [ 49.660209][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.849481][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.109148][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.137592][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.282761][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.311743][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.319116][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.327305][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.340869][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.348093][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.356185][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.368803][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.382052][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.389265][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.397426][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.409877][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.435133][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.442434][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.450350][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.459442][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.500385][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.518143][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.525205][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.532978][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.548503][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.568843][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.576087][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.583666][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.592537][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.613627][ T4192] team0: Port device team_slave_0 added [ 52.631386][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.638483][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.646478][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.659391][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.666976][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.674587][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.692599][ T4192] team0: Port device team_slave_1 added [ 52.716677][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.743777][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.762081][ T4184] team0: Port device team_slave_0 added [ 52.776797][ T4184] team0: Port device team_slave_1 added [ 52.783359][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.790456][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.816585][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.835505][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.842571][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.868714][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.881718][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.891352][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.898794][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.906704][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.925133][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.932629][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.940502][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.952804][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.982203][ T4185] team0: Port device team_slave_0 added [ 53.001369][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.008520][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.035314][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.048847][ T4183] team0: Port device team_slave_0 added [ 53.057212][ T4185] team0: Port device team_slave_1 added [ 53.064035][ T4183] team0: Port device team_slave_1 added [ 53.071646][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.087902][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.094969][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.122167][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.151871][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.171273][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.178327][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.200403][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.207441][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.234065][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.252693][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.259915][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.290805][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.307736][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.314893][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.341345][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.382339][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.389515][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.416181][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.429251][ T4186] team0: Port device team_slave_0 added [ 53.448513][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.455156][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.462039][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.469800][ T4184] Cannot create hsr debugfs directory [ 53.488715][ T4186] team0: Port device team_slave_1 added [ 53.543058][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.549938][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.556740][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.564289][ T4185] Cannot create hsr debugfs directory [ 53.573089][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.581645][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.588618][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.596221][ T4183] Cannot create hsr debugfs directory [ 53.605986][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.612932][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.638939][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.653603][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.660698][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.687273][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.792813][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.799833][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.806488][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.814030][ T4186] Cannot create hsr debugfs directory [ 53.926495][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 53.933322][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 53.955432][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 53.961501][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 53.968651][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 54.020510][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.037576][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.047045][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.056686][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.112626][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.123245][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.148204][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.169399][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.191570][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.201491][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.218932][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.232344][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.306781][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.325887][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.346363][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.374731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.384494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.394200][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.412089][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.430779][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.444811][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.456157][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.465906][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.475123][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.482435][ T4216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.501313][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.510931][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.524492][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.534478][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.557362][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.567412][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.576955][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.584050][ T4216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.599061][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.622382][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.644452][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.653842][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.662239][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.679639][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.692385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.709129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.718861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.737504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.748225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.758046][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.765168][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.774086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.782772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.791779][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.799202][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.807060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.822107][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.844771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.853439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.863494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.872044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.881003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.892945][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.900301][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.911985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.920019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.930259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.939388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.963553][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.980620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.990127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.998889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.010368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.019594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.028556][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.035645][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.043736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.052761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.061382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.070865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.079907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.090178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.117827][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.128799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.139744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.148565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.159388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.168167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.177015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.186935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.195965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.203730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.211787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.221908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.230912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.256244][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.264409][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.274123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.284120][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.291222][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.300900][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.321281][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.338508][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.357975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.373068][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.382769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.391828][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.399298][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.408790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.418614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.430935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.440541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.450089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.459064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.473560][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.494271][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.518383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.552357][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.577274][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.586866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.596204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.604803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.613883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.622635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.632450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.640478][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.674561][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.693077][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.711987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.721536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.730408][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.737527][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.746481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.754768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.764711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.773668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.782390][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.789498][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.797437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.806078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.815721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.824230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.832345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.840824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.849600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.864733][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.880523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.894099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.902063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.917085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.927118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.936266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.945815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.954969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.969021][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.992744][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.996174][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 56.005825][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 56.025956][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 56.032096][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 56.037014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.047513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.050243][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 56.054971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.070458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.079661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.089818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.098291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.107739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.117008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.126778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.136919][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.171709][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.181445][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.204177][ T4192] device veth0_vlan entered promiscuous mode [ 56.214987][ T4184] device veth0_vlan entered promiscuous mode [ 56.223154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.239373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.247715][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.256633][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.264910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.272906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.280685][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.288775][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.309173][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.321084][ T4192] device veth1_vlan entered promiscuous mode [ 56.335622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.354266][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.363742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.414176][ T4184] device veth1_vlan entered promiscuous mode [ 56.426329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.434760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.442891][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.450610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.458805][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.468225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.478236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.486530][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.499335][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.508141][ T4183] device veth0_vlan entered promiscuous mode [ 56.542056][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.552908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.570151][ T4183] device veth1_vlan entered promiscuous mode [ 56.608549][ T4192] device veth0_macvtap entered promiscuous mode [ 56.616542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.624665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.642077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.652535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.667490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.678757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.688907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.700874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.709766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.727269][ T4184] device veth0_macvtap entered promiscuous mode [ 56.736097][ T4192] device veth1_macvtap entered promiscuous mode [ 56.763216][ T4184] device veth1_macvtap entered promiscuous mode [ 56.773669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.782819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.791720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.800067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.809570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.818634][ T4186] device veth0_vlan entered promiscuous mode [ 56.833568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.842393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.856881][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.878265][ T4183] device veth0_macvtap entered promiscuous mode [ 56.886682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.894877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.903778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.916191][ T4186] device veth1_vlan entered promiscuous mode [ 56.934179][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.943949][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.957395][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.969092][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.981093][ T4183] device veth1_macvtap entered promiscuous mode [ 56.988420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.996886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.004843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.013394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.022018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.030620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.041088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.050019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.058779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.067709][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.076497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.087231][ T4185] device veth0_vlan entered promiscuous mode [ 57.094815][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.106282][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.114974][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.124122][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.140697][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.151432][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.162784][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.198386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.208761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.220474][ T4185] device veth1_vlan entered promiscuous mode [ 57.234293][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.245414][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.255218][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.267082][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.278535][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.288683][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.300425][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.309242][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.318013][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.337016][ T4186] device veth0_macvtap entered promiscuous mode [ 57.344268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.352495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.363266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.372016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.381475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.390944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.402247][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.414185][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.424345][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.443478][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.456271][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.475496][ T4186] device veth1_macvtap entered promiscuous mode [ 57.493434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.502751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.511216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.521863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.535007][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.544452][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.553420][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.562886][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.582993][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.593965][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.604796][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.615997][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.625847][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.636351][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.647443][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.657324][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.669142][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.679565][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.689994][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.700230][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.711102][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.722331][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.743734][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.753706][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.764010][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.772831][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.801344][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.810198][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.819029][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.827915][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.897439][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.910142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.918892][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.928837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.945695][ T4185] device veth0_macvtap entered promiscuous mode [ 57.960446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.968558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.983421][ T4185] device veth1_macvtap entered promiscuous mode [ 58.004786][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.014282][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.043129][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.052422][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.080632][ T2396] Bluetooth: hci1: command 0x040f tx timeout [ 58.088922][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.089123][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.097984][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.118619][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.127301][ T2396] Bluetooth: hci0: command 0x040f tx timeout [ 58.130379][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.138234][ T2396] Bluetooth: hci4: command 0x040f tx timeout [ 58.145480][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.152903][ T2396] Bluetooth: hci3: command 0x040f tx timeout [ 58.162866][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.171986][ T2396] Bluetooth: hci2: command 0x040f tx timeout [ 58.179395][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.193848][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.204449][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.216482][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.229444][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.229975][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.247249][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.256540][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.256877][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.264619][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.287653][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.295998][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.300880][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.317698][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.328305][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.338319][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.349194][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.359078][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.369825][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.381178][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.426198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.434103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.448568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.461320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.484632][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.496542][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.505867][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.514693][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.542355][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.555947][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.564312][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.581251][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.623594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.637061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.662163][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.674363][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.687215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.783258][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.839899][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.902252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.094822][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.188978][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.559967][ T4305] ima: Can not allocate md4 (reason: -2) [ 59.575048][ T26] audit: type=1800 audit(1768935742.192:2): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="/" dev="fuse" ino=1 res=0 errno=0 [ 59.665715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.916085][ T4320] 9pnet_virtio: no channels available for device syz [ 60.002345][ T1235] block nbd2: Attempted send on invalid socket [ 60.009535][ T1235] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.026378][ T4327] efs: cannot read volume header [ 60.126525][ T4331] loop0: detected capacity change from 0 to 1024 [ 60.156140][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 60.173244][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 60.230525][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 60.315158][ T4331] ======================================================= [ 60.315158][ T4331] WARNING: The mand mount option has been deprecated and [ 60.315158][ T4331] and is ignored by this kernel. Remove the mand [ 60.315158][ T4331] option from the mount to silence this warning. [ 60.315158][ T4331] ======================================================= [ 60.350089][ C0] vkms_vblank_simulate: vblank timer overrun [ 60.533392][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 60.696175][ T4331] EXT4-fs (loop0): Ignoring removed oldalloc option [ 60.703386][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 60.711994][ T4331] EXT4-fs (loop0): Ignoring removed bh option [ 60.778598][ T4331] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.888148][ T4302] mkiss: ax0: crc mode is auto. [ 61.091995][ T4331] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 61.896532][ T4353] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.927023][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 61.963874][ T4331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.122398][ T4361] af_packet: tpacket_rcv: packet too big, clamped from 120 to 4294967272. macoff=96 [ 62.138536][ T4361] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 62.246894][ T4365] syz.0.19 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.602086][ T4239] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.095579][ T4239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.137585][ T4239] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 63.872995][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.904098][ T4239] usb 2-1: config 0 descriptor?? [ 63.954881][ T4383] netlink: 'syz.4.23': attribute type 10 has an invalid length. [ 63.989316][ T4383] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 64.081724][ T4374] loop0: detected capacity change from 0 to 32768 [ 64.482996][ T4239] elecom 0003:056E:00FF.0001: item fetching failed at offset 0/3 [ 64.736925][ T4239] elecom: probe of 0003:056E:00FF.0001 failed with error -22 [ 64.936063][ T4239] usb 2-1: USB disconnect, device number 2 [ 65.047921][ T4401] loop2: detected capacity change from 0 to 128 [ 65.125545][ T4401] FAT-fs (loop2): bogus sectors per cluster 0 [ 65.144730][ T4406] device syzkaller0 entered promiscuous mode [ 65.175901][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.217095][ T4401] FAT-fs (loop2): Can't find a valid FAT filesystem [ 65.280672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 65.298643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 65.308186][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.363764][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.569003][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.670906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.773281][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 66.153946][ T4412] loop0: detected capacity change from 0 to 512 [ 66.192403][ T4400] loop2: detected capacity change from 0 to 8192 [ 66.232718][ T4410] loop4: detected capacity change from 0 to 164 [ 66.246610][ T4412] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.259934][ T4412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.363849][ T4412] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.378401][ T4412] EXT4-fs (loop0): 1 truncate cleaned up [ 66.384066][ T4412] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=journal,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 68.231326][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.333846][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.460834][ T4449] loop3: detected capacity change from 0 to 512 [ 70.470565][ T4459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.45'. [ 70.501236][ T4459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.45'. [ 70.581840][ T4459] Zero length message leads to an empty skb [ 70.682205][ T4461] loop0: detected capacity change from 0 to 32768 [ 70.756891][ T4461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.46 (4461) [ 70.830347][ T4461] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 70.840658][ T4461] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 70.850495][ T4461] BTRFS info (device loop0): force zstd compression, level 3 [ 70.857940][ T4461] BTRFS info (device loop0): turning on sync discard [ 70.864927][ T4461] BTRFS info (device loop0): force clearing of disk cache [ 70.872204][ T4461] BTRFS info (device loop0): enabling disk space caching [ 70.879341][ T4461] BTRFS info (device loop0): disabling tree log [ 70.885626][ T4461] BTRFS info (device loop0): disk space caching is enabled [ 70.892832][ T4461] BTRFS info (device loop0): has skinny extents [ 71.954052][ T4484] loop2: detected capacity change from 0 to 512 [ 71.968922][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.976143][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.010271][ T4490] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 72.042367][ T4484] EXT4-fs (loop2): invalid first ino: 0 [ 72.061836][ T4498] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 72.115043][ T4461] BTRFS info (device loop0): enabling ssd optimizations [ 72.130478][ T4461] BTRFS info (device loop0): clearing free space tree [ 72.137814][ T4461] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.147870][ T4461] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.227292][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 72.255637][ T4239] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.255414][ T4239] usb 2-1: Using ep0 maxpacket: 16 [ 73.678653][ T4239] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 73.746114][ T4239] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 73.792799][ T4239] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.985551][ T4239] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 74.006345][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.014810][ T4239] usb 2-1: Product: syz [ 74.027203][ T4239] usb 2-1: Manufacturer: syz [ 74.032035][ T4239] usb 2-1: SerialNumber: syz [ 74.045612][ T2396] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.090588][ T4239] usb 2-1: config 0 descriptor?? [ 74.115710][ T4493] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.161008][ T4239] iuu_phoenix 2-1:0.0: required endpoints missing [ 74.256448][ T4436] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.401092][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.402134][ T4239] usb 2-1: USB disconnect, device number 3 [ 74.410872][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.467357][ T2396] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.480818][ T2396] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.488123][ T2396] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 74.498030][ T2396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.499939][ T4436] usb 3-1: Using ep0 maxpacket: 32 [ 74.519681][ T2396] usb 5-1: config 0 descriptor?? [ 74.617485][ T4541] loop0: detected capacity change from 0 to 256 [ 74.636054][ T4436] usb 3-1: config index 0 descriptor too short (expected 37924, got 36) [ 74.660426][ T4436] usb 3-1: config 199 has too many interfaces: 82, using maximum allowed: 32 [ 74.677791][ T4436] usb 3-1: config 199 has an invalid descriptor of length 248, skipping remainder of the config [ 74.686745][ T4541] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 74.691157][ T4436] usb 3-1: config 199 has 0 interfaces, different from the descriptor's value: 82 [ 74.885712][ T4436] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 74.901983][ T4436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.918461][ T4436] usb 3-1: Product: syz [ 74.922701][ T4436] usb 3-1: Manufacturer: syz [ 74.928052][ T4436] usb 3-1: SerialNumber: syz [ 74.992021][ T2396] kye 0003:0458:5015.0002: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 75.003602][ T2396] kye 0003:0458:5015.0002: tablet-enabling feature report not found [ 75.012380][ T2396] kye 0003:0458:5015.0002: tablet enabling failed [ 75.103116][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.156288][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.189029][ T4518] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.236311][ T26] audit: type=1800 audit(1768935757.852:3): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.59" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 75.238790][ T4436] usb 3-1: USB disconnect, device number 2 [ 76.183344][ T4239] usb 5-1: USB disconnect, device number 2 [ 76.929296][ T1107] cfg80211: failed to load regulatory.db [ 79.042467][ T4578] process 'syz.1.70' launched '/dev/fd/6' with NULL argv: empty string added [ 79.076662][ T4576] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.189103][ T4514] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.206684][ T4514] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.237542][ T4514] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.250219][ T4514] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.342998][ T4514] syz.3.58 (4514) used greatest stack depth: 19064 bytes left [ 81.288775][ T4614] loop2: detected capacity change from 0 to 128 [ 81.444458][ T4614] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 81.481187][ T4614] FAT-fs (loop2): Filesystem has been set read-only [ 81.530540][ T4614] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 83.718625][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 83.749183][ T4615] loop3: detected capacity change from 0 to 32768 [ 83.775546][ T4632] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.784691][ T4632] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.793613][ T4632] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.802608][ T4632] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.889120][ T4632] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.898758][ T4632] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.903773][ T4615] XFS: attr2 mount option is deprecated. [ 83.908554][ T4632] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.922174][ T4632] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.164899][ T4615] XFS (loop3): Mounting V5 Filesystem [ 84.482744][ T4615] XFS (loop3): log mount failed [ 84.715397][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 84.770850][ T4649] loop1: detected capacity change from 0 to 40427 [ 84.784480][ T4632] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.793526][ T4632] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.802263][ T4632] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.810996][ T4632] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.857630][ T4632] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.867026][ T4632] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.876202][ T4632] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.885083][ T4632] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.995049][ T4649] F2FS-fs (loop1): invalid crc value [ 85.026307][ T4649] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.067746][ T4649] F2FS-fs (loop1): Start checkpoint disabled! [ 85.128226][ T4649] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 85.661285][ T26] audit: type=1326 audit(1768935768.282:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 85.792041][ T26] audit: type=1326 audit(1768935768.312:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 86.285733][ T26] audit: type=1326 audit(1768935768.312:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 86.308300][ T26] audit: type=1326 audit(1768935768.312:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 86.330644][ T26] audit: type=1326 audit(1768935768.312:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 86.352964][ T26] audit: type=1326 audit(1768935768.312:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 86.422916][ T26] audit: type=1326 audit(1768935768.322:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 87.561960][ T26] audit: type=1326 audit(1768935768.322:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 87.617268][ T4673] netlink: 'syz.3.96': attribute type 10 has an invalid length. [ 87.630527][ T4679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'. [ 87.647303][ T4673] device syz_tun entered promiscuous mode [ 87.649032][ T4337] attempt to access beyond end of device [ 87.649032][ T4337] loop1: rw=2049, want=45104, limit=40427 [ 87.669023][ T26] audit: type=1326 audit(1768935768.322:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 87.702910][ T4673] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 87.731383][ T26] audit: type=1326 audit(1768935768.322:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8cdd405cb9 code=0x7ffc0000 [ 87.910006][ T4691] 9pnet: p9_errstr2errno: server reported unknown error [ 88.139693][ T4693] binder_alloc: 4692: binder_alloc_buf size 8 failed, no address space [ 88.154277][ T4693] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 88.356427][ T4699] overlayfs: failed to clone lowerpath [ 90.909830][ T4731] syz.0.112 uses obsolete (PF_INET,SOCK_PACKET) [ 91.002765][ T4730] sctp: [Deprecated]: syz.2.114 (pid 4730) Use of int in max_burst socket option deprecated. [ 91.002765][ T4730] Use struct sctp_assoc_value instead [ 91.340816][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 92.996322][ T4746] sched: RT throttling activated [ 98.404484][ T4786] loop3: detected capacity change from 0 to 32768 [ 99.120979][ T4786] (syz.3.129,4786,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 99.142094][ T4786] (syz.3.129,4786,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 99.221184][ T4786] JBD2: Ignoring recovery information on journal [ 99.630667][ T4786] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 101.299213][ T4804] overlayfs: failed to clone upperpath [ 101.327533][ T4790] ppp0: PPP: VJ uncompressed error [ 103.042352][ T4186] ocfs2: Unmounting device (7,3) on (node local)                                      [ 105.264406][ T4858] device syzkaller0 entered promiscuous mode syzkaller syzkaller login: [ 105.940079][ T4870] overlayfs: failed to clone upperpath [ 108.065377][ T4890] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 108.090842][ T4885] netlink: 'syz.3.157': attribute type 16 has an invalid length. [ 108.111720][ T4885] netlink: 'syz.3.157': attribute type 17 has an invalid length. [ 108.124648][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 108.139682][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 108.149505][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 108.159832][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 108.170284][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 108.181048][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 108.192142][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 108.206777][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 108.320264][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 108.472484][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 108.583513][ T4885] device syz_tun left promiscuous mode [ 108.694607][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 108.808515][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.816269][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.825118][ T4885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.832360][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 108.840985][ T4337] bond0: (slave bond_slave_0): interface is now down [ 108.867116][ T4337] bond0: (slave bond_slave_1): interface is now down [ 108.892192][ T4337] bond0: (slave syz_tun): interface is now down [ 108.899571][ T4885] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.927992][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 108.936687][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 108.947925][ T4885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.950409][ T4337] bond0: (slave bond_slave_0): interface is now down [ 108.977670][ T4337] bond0: (slave bond_slave_1): interface is now down [ 108.992567][ T4337] bond0: (slave syz_tun): interface is now down [ 109.083963][ T4337] bond0: now running without any active interface! [ 109.183174][ T4903] loop4: detected capacity change from 0 to 512 [ 110.660977][ T4903] EXT4-fs (loop4): Unrecognized mount option "smackfsroot=$#})[" or missing value [ 112.977425][ T4908] loop3: detected capacity change from 0 to 8192 [ 115.705180][ T4942] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 115.754770][ T4944] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 115.862646][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 115.862660][ T26] audit: type=1804 audit(1768935798.482:29): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.177" name="/newroot/28/file0" dev="fuse" ino=1 res=1 errno=0 [ 115.982504][ T4339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.538561][ T4339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.018193][ T4339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.118148][ T4962] loop1: detected capacity change from 0 to 128 [ 117.757644][ T4339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.874529][ T4962] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 118.072577][ T4962] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.280894][ T4962] ext2 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.450567][ T4977] chnl_net:caif_netlink_parms(): no params data found [ 120.636322][ T5018] fuse: Bad value for 'fd' [ 120.715353][ T2396] Bluetooth: hci2: command 0x0409 tx timeout [ 121.523536][ T4977] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.531848][ T4977] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.540712][ T4977] device bridge_slave_0 entered promiscuous mode [ 121.549954][ T4977] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.557806][ T4977] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.566173][ T4977] device bridge_slave_1 entered promiscuous mode [ 121.593177][ T4977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.605990][ T4977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.631911][ T4977] team0: Port device team_slave_0 added [ 121.655680][ T4977] team0: Port device team_slave_1 added [ 121.803245][ T4977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.837814][ T4977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.864514][ T4977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.915540][ T4977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.581392][ T4977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.654147][ T4977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.850390][ T2396] Bluetooth: hci2: command 0x041b tx timeout [ 123.371888][ T4977] device hsr_slave_0 entered promiscuous mode [ 123.520869][ T4977] device hsr_slave_1 entered promiscuous mode [ 123.623815][ T4977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.646734][ T4977] Cannot create hsr debugfs directory [ 125.221256][ T2396] Bluetooth: hci2: command 0x040f tx timeout [ 125.389510][ T5095] loop3: detected capacity change from 0 to 128 [ 125.626989][ T5095] tipc: Started in network mode [ 125.650480][ T5095] tipc: Node identity 4, cluster identity 4711 [ 125.740435][ T5095] tipc: Node number set to 4 [ 126.578085][ T4977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.976564][ T2396] Bluetooth: hci2: command 0x0419 tx timeout [ 127.985382][ T2396] Bluetooth: hci4: command 0x2016 tx timeout [ 128.188615][ T4977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.359512][ T5135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'. [ 129.468785][ T4339] bond0: (slave wlan1): Releasing backup interface [ 129.527178][ T4977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.631119][ T4977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.701600][ T5142] loop1: detected capacity change from 0 to 2048 [ 130.848885][ T5142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.762861][ T4339] device hsr_slave_0 left promiscuous mode [ 132.981087][ T4339] device hsr_slave_1 left promiscuous mode [ 133.546922][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.557129][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.324801][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.341965][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.237069][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.408746][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.470961][ T4339] device bridge_slave_1 left promiscuous mode [ 135.482666][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.938950][ T4339] device bridge_slave_0 left promiscuous mode [ 136.105638][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.244791][ T4339] device veth1_macvtap left promiscuous mode [ 136.256843][ T4339] device veth0_macvtap left promiscuous mode [ 137.039969][ T4339] device veth1_vlan left promiscuous mode [ 137.046203][ T4339] device veth0_vlan left promiscuous mode [ 137.538218][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 137.557478][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 137.572734][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.590768][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.688226][ T4339] bond0 (unregistering): Released all slaves [ 140.371926][ T4977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.466598][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.491613][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.558572][ T4977] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.633169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.657271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.674179][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.681333][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.699291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.717824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.733485][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.740657][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.755355][ T4537] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.790618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.884505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.918796][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.927899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.950513][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.961176][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.983950][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.002216][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.033664][ T26] audit: type=1800 audit(1768935823.652:30): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.251" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 141.054846][ T5291] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 141.075674][ T5291] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 141.100629][ T5301] loop3: detected capacity change from 0 to 1024 [ 141.118569][ T5291] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 141.127959][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.136312][ T4537] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 141.155501][ T4537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.170133][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.179160][ T4537] usb 2-1: config 0 descriptor?? [ 141.189370][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.198627][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.000766][ T5291] syz.2.251 (5291) used greatest stack depth: 18768 bytes left [ 142.055468][ T4537] [drm] vendor descriptor length:c3 data:02 03 00 00 00 00 00 00 00 00 00 [ 142.064474][ T4537] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 142.315608][ T4537] [drm:udl_init] *ERROR* Selecting channel failed [ 142.349622][ T4537] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 142.351601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.369187][ T4537] [drm] Initialized udl on minor 2 [ 142.374210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.511490][ T4977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.844646][ T4537] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.857122][ T4537] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 142.876071][ T4537] usb 2-1: USB disconnect, device number 4 [ 143.043372][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 143.053994][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 143.064115][ T1107] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 146.535368][ T5348] loop1: detected capacity change from 0 to 4096 [ 147.010271][ T5348] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 147.393320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.439194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.498298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.529897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.553355][ T4977] device veth0_vlan entered promiscuous mode [ 147.564383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.580821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.604972][ T4977] device veth1_vlan entered promiscuous mode [ 147.663963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.692769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.722756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.770975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.807312][ T4977] device veth0_macvtap entered promiscuous mode [ 147.847450][ T4977] device veth1_macvtap entered promiscuous mode [ 147.938745][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.995447][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.027278][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.052932][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.093969][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.120748][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.157759][ T4977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.206804][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.219905][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.326491][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.487196][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.829427][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.883132][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.945648][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.999583][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.037796][ T4977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.078195][ T4977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.138589][ T4977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.152996][ T4977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.162257][ T4977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.181297][ T4977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.252008][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 149.785086][ T4977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.798055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.844535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.932142][ T5402] ip6t_REJECT: ECHOREPLY is not supported [ 150.672298][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.701097][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.783668][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.951253][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.996006][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.511681][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.812807][ T5450] netlink: 60 bytes leftover after parsing attributes in process `syz.5.180'. [ 153.045772][ T5459] overlayfs: failed to clone upperpath [ 153.249564][ T5464] loop1: detected capacity change from 0 to 4096 [ 154.582439][ T5487] loop5: detected capacity change from 0 to 1024 [ 155.539619][ T5487] hfsplus: bad catalog folder entry [ 155.834969][ T5504] ptrace attach of "./syz-executor exec"[4186] was attempted by " [ 156.718285][ T5513] netlink: 277 bytes leftover after parsing attributes in process `syz.5.292'. [ 157.364811][ T5355] ntfs3: loop1: ntfs3_write_inode r=5 failed, -2. [ 157.378616][ C0] Unknown status report in ack skb [ 158.533169][ T5521] netlink: 'syz.2.295': attribute type 12 has an invalid length. [ 158.572902][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 158.586633][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 162.473819][ T5581] netlink: 'syz.2.308': attribute type 4 has an invalid length. [ 162.481621][ T5581] netlink: 152 bytes leftover after parsing attributes in process `syz.2.308'. [ 162.510155][ T5581] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 163.168398][ T5583] tipc: Enabling of bearer rejected, failed to enable media [ 167.433341][ T5664] device syzkaller0 entered promiscuous mode [ 167.599180][ T5671] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 167.607044][ T5671] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.323'. [ 169.578661][ T5691] IPv6: sit1: Disabled Multicast RS [ 170.293640][ T5696] device syzkaller0 entered promiscuous mode [ 170.327251][ T5700] netem: change failed [ 170.404690][ T5707] comedi comedi4: bad chanlist[1]=0x00000009 chan=9 range length=2 [ 172.538700][ T5735] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 174.162692][ T26] audit: type=1326 audit(1768935856.784:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 174.218680][ T26] audit: type=1326 audit(1768935856.784:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 174.241816][ T26] audit: type=1326 audit(1768935856.814:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 174.266204][ T26] audit: type=1326 audit(1768935856.814:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 174.288929][ T26] audit: type=1326 audit(1768935856.814:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 174.312160][ T26] audit: type=1326 audit(1768935856.814:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 174.388548][ T26] audit: type=1326 audit(1768935856.814:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 174.417725][ T26] audit: type=1326 audit(1768935856.814:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 175.296135][ T4526] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 175.311780][ T26] audit: type=1326 audit(1768935856.814:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 175.346342][ T26] audit: type=1326 audit(1768935856.814:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6179e24cb9 code=0x7ffc0000 [ 176.086418][ T4526] usb 6-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 176.189288][ T4526] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.220110][ T4526] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.237922][ T1324] Bluetooth: hci0: command 0x0406 tx timeout [ 176.238472][ T4526] usb 6-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 176.265605][ T4526] usb 6-1: config 0 interface 0 has no altsetting 0 [ 176.273173][ T4526] usb 6-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 176.283123][ T4526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.366548][ T4526] usb 6-1: config 0 descriptor?? [ 176.372910][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 176.379167][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 176.385323][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 176.450475][ T5821] device syzkaller0 entered promiscuous mode [ 177.594456][ C0] ------------[ cut here ]------------ [ 177.600069][ C0] WARNING: CPU: 0 PID: 5837 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 177.610151][ C0] Modules linked in: [ 177.614065][ C0] CPU: 0 PID: 5837 Comm: syz.5.353 Not tainted syzkaller #0 [ 177.621529][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.631846][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 177.638218][ C0] Code: 2c f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 8d 24 2c f8 0f 0b e9 03 ef ff ff e8 81 24 2c f8 <0f> 0b e9 76 f2 ff ff e8 e5 8a 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 177.658140][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246 [ 177.664491][ C0] RAX: ffffffff894ceb1f RBX: ffff88805f4fe298 RCX: ffff888023d60000 [ 177.672628][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.681010][ C0] RBP: ffffc90000007b08 R08: ffff888023d60000 R09: 0000000000000003 [ 177.689116][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880600c6800 [ 177.697228][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f2c [ 177.705345][ C0] FS: 00007f8556a446c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 177.714300][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.721039][ C0] CR2: 00007f54d5723a00 CR3: 000000007b97b000 CR4: 00000000003506f0 [ 177.729065][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.737192][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.745347][ C0] Call Trace: [ 177.748638][ C0] [ 177.751721][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 177.757776][ C0] ? verify_lock_unused+0x140/0x140 [ 177.763147][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 177.768278][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 177.773753][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 177.779292][ C0] __iterate_interfaces+0x243/0x500 [ 177.784591][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 177.790910][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 177.797198][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 177.804327][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 177.809591][ C0] ? hw_scan_work+0xed0/0xed0 [ 177.814278][ C0] __hrtimer_run_queues+0x4eb/0xb70 [ 177.819566][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 177.824697][ C0] hrtimer_run_softirq+0x176/0x240 [ 177.829878][ C0] handle_softirqs+0x339/0x830 [ 177.834678][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 177.839592][ C0] ? do_softirq+0x210/0x210 [ 177.844103][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 177.849369][ C0] __irq_exit_rcu+0x13b/0x230 [ 177.854141][ C0] ? irq_exit_rcu+0x20/0x20 [ 177.858711][ C0] irq_exit_rcu+0x5/0x20 [ 177.862966][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 177.868673][ C0] [ 177.871605][ C0] [ 177.874541][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 177.880596][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 177.887143][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 bf 6f 8e f7 65 8b 05 40 8c 3e 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 177.906996][ C0] RSP: 0018:ffffc90003dff5c0 EFLAGS: 00000206 [ 177.913179][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: e8e9154e27f24900 [ 177.921220][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b1c00 RDI: 0000000000000001 [ 177.929593][ C0] RBP: ffffc90003dff650 R08: ffffffff901b9177 R09: 1ffffffff203722e [ 177.937643][ C0] R10: dffffc0000000000 R11: fffffbfff203722f R12: dffffc0000000000 [ 177.945751][ C0] R13: 0000000000000000 R14: ffff88802ae6bec0 R15: 1ffff920007bfeb8 [ 177.953877][ C0] ? _raw_spin_unlock+0x40/0x40 [ 177.958798][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 177.963841][ C0] __wake_up_sync_key+0x128/0x190 [ 177.968930][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 177.974933][ C0] ? sock_load_diag_module+0x130/0x130 [ 177.980475][ C0] __unix_dgram_recvmsg+0x4c0/0xd90 [ 177.985722][ C0] ? unix_unhash+0x10/0x10 [ 177.990153][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 177.995412][ C0] ? mark_lock+0x94/0x320 [ 177.999762][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 178.004797][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 178.010232][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 178.015016][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 178.020151][ C0] ? import_iovec+0x6f/0xa0 [ 178.024681][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 178.029457][ C0] ? __sys_recvmsg+0x280/0x280 [ 178.034249][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 178.039354][ C0] ? __might_fault+0x1c/0x110 [ 178.044053][ C0] ? __might_fault+0xb3/0x110 [ 178.048811][ C0] do_recvmmsg+0x382/0x850 [ 178.053251][ C0] ? __sys_recvmmsg+0x290/0x290 [ 178.058184][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 178.063328][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 178.068438][ C0] ? do_recvmmsg+0x850/0x850 [ 178.073311][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 178.078581][ C0] do_syscall_64+0x4c/0xa0 [ 178.083019][ C0] ? clear_bhb_loop+0x30/0x80 [ 178.087781][ C0] ? clear_bhb_loop+0x30/0x80 [ 178.092465][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.098427][ C0] RIP: 0033:0x7f8558809cb9 [ 178.102881][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.122583][ C0] RSP: 002b:00007f8556a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 178.131132][ C0] RAX: ffffffffffffffda RBX: 00007f8558a85090 RCX: 00007f8558809cb9 [ 178.139178][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 178.147235][ C0] RBP: 00007f8558877bf7 R08: 0000000000000000 R09: 0000000000000000 [ 178.155271][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 178.163257][ C0] R13: 00007f8558a85128 R14: 00007f8558a85090 R15: 00007ffea82204d8 [ 178.171325][ C0] [ 178.174390][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.181692][ C0] CPU: 0 PID: 5837 Comm: syz.5.353 Not tainted syzkaller #0 [ 178.189174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.199236][ C0] Call Trace: [ 178.202523][ C0] [ 178.205383][ C0] dump_stack_lvl+0x188/0x250 [ 178.210077][ C0] ? show_regs_print_info+0x20/0x20 [ 178.215290][ C0] ? load_image+0x400/0x400 [ 178.219822][ C0] panic+0x2e5/0x810 [ 178.223707][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 178.228210][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 178.233933][ C0] __warn+0x248/0x2b0 [ 178.238297][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 178.244003][ C0] report_bug+0x1b7/0x2e0 [ 178.248331][ C0] handle_bug+0x3a/0x70 [ 178.252467][ C0] exc_invalid_op+0x16/0x40 [ 178.256964][ C0] asm_exc_invalid_op+0x16/0x20 [ 178.261829][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 178.268190][ C0] Code: 2c f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 8d 24 2c f8 0f 0b e9 03 ef ff ff e8 81 24 2c f8 <0f> 0b e9 76 f2 ff ff e8 e5 8a 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 178.288076][ C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246 [ 178.294133][ C0] RAX: ffffffff894ceb1f RBX: ffff88805f4fe298 RCX: ffff888023d60000 [ 178.302090][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.310044][ C0] RBP: ffffc90000007b08 R08: ffff888023d60000 R09: 0000000000000003 [ 178.318284][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880600c6800 [ 178.326283][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f2c [ 178.334302][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 178.340028][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 178.346201][ C0] ? verify_lock_unused+0x140/0x140 [ 178.351396][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 178.356436][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 178.361997][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 178.367442][ C0] __iterate_interfaces+0x243/0x500 [ 178.372624][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 178.378874][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 178.385135][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 178.392159][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 178.397520][ C0] ? hw_scan_work+0xed0/0xed0 [ 178.402180][ C0] __hrtimer_run_queues+0x4eb/0xb70 [ 178.407389][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 178.412492][ C0] hrtimer_run_softirq+0x176/0x240 [ 178.417604][ C0] handle_softirqs+0x339/0x830 [ 178.422394][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 178.427242][ C0] ? do_softirq+0x210/0x210 [ 178.431853][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 178.437070][ C0] __irq_exit_rcu+0x13b/0x230 [ 178.441864][ C0] ? irq_exit_rcu+0x20/0x20 [ 178.446357][ C0] irq_exit_rcu+0x5/0x20 [ 178.450669][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 178.456416][ C0] [ 178.459343][ C0] [ 178.462289][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 178.469428][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 178.476040][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 bf 6f 8e f7 65 8b 05 40 8c 3e 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 178.495811][ C0] RSP: 0018:ffffc90003dff5c0 EFLAGS: 00000206 [ 178.501877][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: e8e9154e27f24900 [ 178.509976][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b1c00 RDI: 0000000000000001 [ 178.517945][ C0] RBP: ffffc90003dff650 R08: ffffffff901b9177 R09: 1ffffffff203722e [ 178.525967][ C0] R10: dffffc0000000000 R11: fffffbfff203722f R12: dffffc0000000000 [ 178.533946][ C0] R13: 0000000000000000 R14: ffff88802ae6bec0 R15: 1ffff920007bfeb8 [ 178.542094][ C0] ? _raw_spin_unlock+0x40/0x40 [ 178.546949][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 178.551973][ C0] __wake_up_sync_key+0x128/0x190 [ 178.556994][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 178.563067][ C0] ? sock_load_diag_module+0x130/0x130 [ 178.568525][ C0] __unix_dgram_recvmsg+0x4c0/0xd90 [ 178.573818][ C0] ? unix_unhash+0x10/0x10 [ 178.578294][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 178.583614][ C0] ? mark_lock+0x94/0x320 [ 178.587998][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 178.593028][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 178.598541][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 178.603988][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 178.609034][ C0] ? import_iovec+0x6f/0xa0 [ 178.613552][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 178.618231][ C0] ? __sys_recvmsg+0x280/0x280 [ 178.623020][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 178.628225][ C0] ? __might_fault+0x1c/0x110 [ 178.632917][ C0] ? __might_fault+0xb3/0x110 [ 178.637589][ C0] do_recvmmsg+0x382/0x850 [ 178.642020][ C0] ? __sys_recvmmsg+0x290/0x290 [ 178.646898][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 178.652014][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 178.657040][ C0] ? do_recvmmsg+0x850/0x850 [ 178.661639][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 178.666850][ C0] do_syscall_64+0x4c/0xa0 [ 178.671264][ C0] ? clear_bhb_loop+0x30/0x80 [ 178.675929][ C0] ? clear_bhb_loop+0x30/0x80 [ 178.680613][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.686519][ C0] RIP: 0033:0x7f8558809cb9 [ 178.690923][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.710537][ C0] RSP: 002b:00007f8556a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 178.718961][ C0] RAX: ffffffffffffffda RBX: 00007f8558a85090 RCX: 00007f8558809cb9 [ 178.727027][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 178.735299][ C0] RBP: 00007f8558877bf7 R08: 0000000000000000 R09: 0000000000000000 [ 178.743417][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 178.751572][ C0] R13: 00007f8558a85128 R14: 00007f8558a85090 R15: 00007ffea82204d8 [ 178.759539][ C0] [ 178.762878][ C0] Kernel Offset: disabled [ 178.767371][ C0] Rebooting in 86400 seconds..