last executing test programs: 17.247467057s ago: executing program 1 (id=22): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 16.681236992s ago: executing program 1 (id=27): io_uring_setup(0x66a7, &(0x7f0000000100)={0x0, 0x9d56, 0x0, 0xffffffff, 0x35a}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x1, 0x8, 0x0, &(0x7f0000001ffc)) sysfs$1(0x1, &(0x7f0000000080)='/dev/ttyprintk\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8.876008123s ago: executing program 1 (id=57): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.419766218s ago: executing program 1 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) 6.835934772s ago: executing program 3 (id=63): r0 = syz_open_dev$sg(0x0, 0x0, 0x142000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffb, 0x6, 0xfe, @scatter={0x4, 0xdd, &(0x7f0000001c40)=[{&(0x7f0000000740)=""/136, 0x88}, {&(0x7f0000001a40)=""/147, 0x93}, {&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f0000001c80)=""/237, 0xed}]}, &(0x7f0000000300)="eded501ef663", 0x0, 0x840802, 0x8013, 0x1000, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0xd7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 5.938149305s ago: executing program 3 (id=64): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 5.777519478s ago: executing program 1 (id=66): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 5.608364403s ago: executing program 1 (id=68): io_uring_setup(0x66a7, &(0x7f0000000100)={0x0, 0x9d56, 0x0, 0xffffffff, 0x35a}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x1, 0x8, 0x0, &(0x7f0000001ffc)) sysfs$1(0x1, &(0x7f0000000080)='/dev/ttyprintk\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00'], 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5.586834534s ago: executing program 3 (id=69): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000140)=ANY=[], 0xfc, 0xc44, &(0x7f0000001080)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000004600), 0x0) write$binfmt_format(r2, &(0x7f0000000000)='1\x00', 0x2400) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xa1}) mount$9p_tcp(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=tcp,port=0x00p0200000004e24,privport,\x00']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) 5.273959901s ago: executing program 2 (id=73): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 5.071877826s ago: executing program 0 (id=74): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffeb9) 4.401552683s ago: executing program 3 (id=76): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r1, r0, 0x0, 0x40001) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @multicast2}, 0x3, 0x0, 0x4, 0xfffffffd}}, 0x2e) 4.275700826s ago: executing program 2 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mount(0x0, &(0x7f0000000000)='./cfg\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) 3.512523424s ago: executing program 4 (id=78): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 2.595525037s ago: executing program 0 (id=79): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 2.505623098s ago: executing program 4 (id=80): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 2.47546791s ago: executing program 2 (id=81): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 2.432708871s ago: executing program 3 (id=82): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) 2.308267774s ago: executing program 2 (id=83): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 2.274298955s ago: executing program 0 (id=84): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) 2.138903827s ago: executing program 4 (id=85): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 2.091566599s ago: executing program 0 (id=86): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000140)=ANY=[], 0xfc, 0xc44, &(0x7f0000001080)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000004600), 0x0) write$binfmt_format(r2, &(0x7f0000000000)='1\x00', 0x2400) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xa1}) mount$9p_tcp(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=tcp,port=0x00p0200000004e24,privport,\x00']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) 2.020644711s ago: executing program 2 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) socket$kcm(0x29, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) 1.705401658s ago: executing program 4 (id=88): gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000200)=""/7, 0x7) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f000089e000/0x3000)=nil, 0x3000, 0xb635773f06ebbeeb, 0x10010, r0, 0xb5b9e000) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x200000086, 0x80000000}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockname$inet(r6, &(0x7f00000002c0), &(0x7f0000000340)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 778.157021ms ago: executing program 2 (id=89): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffeb9) 679.913054ms ago: executing program 0 (id=90): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 455.627959ms ago: executing program 4 (id=91): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 332.229662ms ago: executing program 3 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mount(0x0, &(0x7f0000000000)='./cfg\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) 123.249777ms ago: executing program 4 (id=93): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[], [], 0x2c}) ioprio_set$pid(0x2, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r1, r0, 0x0, 0x40001) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @multicast2}, 0x3, 0x0, 0x4, 0xfffffffd}}, 0x2e) 0s ago: executing program 0 (id=94): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 60.868134][ T4260] cgroup: Unknown subsys name 'net' [ 60.998049][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.267736][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.061964][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.073966][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.082335][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.090788][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.099783][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.107331][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.109060][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.114972][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.128511][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.129417][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.143364][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.147589][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.151851][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.165409][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.167069][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.181037][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.181098][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.193370][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.197216][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.210417][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.217670][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.224920][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.225463][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.236761][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.240040][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.254447][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.256145][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.269401][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.269660][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.284484][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.595933][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 64.688585][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 64.757144][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.765188][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.773492][ T4278] device bridge_slave_0 entered promiscuous mode [ 64.784975][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 64.804608][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.811745][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.820578][ T4278] device bridge_slave_1 entered promiscuous mode [ 64.884500][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.891690][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.899948][ T4272] device bridge_slave_0 entered promiscuous mode [ 64.910279][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.919764][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 64.937685][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.944881][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.952777][ T4272] device bridge_slave_1 entered promiscuous mode [ 64.961025][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.015258][ T4278] team0: Port device team_slave_0 added [ 65.028952][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 65.047847][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.061753][ T4278] team0: Port device team_slave_1 added [ 65.079653][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.086719][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.113067][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.135225][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.147593][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.154797][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.180793][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.191987][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.199642][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.207882][ T4286] device bridge_slave_0 entered promiscuous mode [ 65.220886][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.228254][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.236327][ T4286] device bridge_slave_1 entered promiscuous mode [ 65.297590][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.316169][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.335810][ T4272] team0: Port device team_slave_0 added [ 65.347626][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.354896][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.362915][ T4277] device bridge_slave_0 entered promiscuous mode [ 65.380107][ T4278] device hsr_slave_0 entered promiscuous mode [ 65.387391][ T4278] device hsr_slave_1 entered promiscuous mode [ 65.396071][ T4272] team0: Port device team_slave_1 added [ 65.408055][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.415351][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.424199][ T4277] device bridge_slave_1 entered promiscuous mode [ 65.467106][ T4286] team0: Port device team_slave_0 added [ 65.495016][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.501993][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.528959][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.541320][ T4286] team0: Port device team_slave_1 added [ 65.549891][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.557147][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.566312][ T4273] device bridge_slave_0 entered promiscuous mode [ 65.578392][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.585680][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.593884][ T4273] device bridge_slave_1 entered promiscuous mode [ 65.605392][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.622769][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.629736][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.655881][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.695846][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.720027][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.728696][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.755498][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.789455][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.799561][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.809541][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.838376][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.865970][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.887830][ T4272] device hsr_slave_0 entered promiscuous mode [ 65.895225][ T4272] device hsr_slave_1 entered promiscuous mode [ 65.902064][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.910352][ T4272] Cannot create hsr debugfs directory [ 65.926074][ T4277] team0: Port device team_slave_0 added [ 65.960339][ T4273] team0: Port device team_slave_0 added [ 65.967996][ T4277] team0: Port device team_slave_1 added [ 65.991549][ T4273] team0: Port device team_slave_1 added [ 66.053122][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.060121][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.089026][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.115590][ T4286] device hsr_slave_0 entered promiscuous mode [ 66.122618][ T4286] device hsr_slave_1 entered promiscuous mode [ 66.130043][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.137742][ T4286] Cannot create hsr debugfs directory [ 66.153108][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.160128][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.187276][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.198815][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.206130][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.232656][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.268679][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.276929][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.303037][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.314654][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 66.320844][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 66.327107][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 66.333447][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 66.370761][ T4277] device hsr_slave_0 entered promiscuous mode [ 66.378255][ T4277] device hsr_slave_1 entered promiscuous mode [ 66.385371][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.393181][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 66.399477][ T4277] Cannot create hsr debugfs directory [ 66.537958][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.560538][ T4273] device hsr_slave_0 entered promiscuous mode [ 66.567319][ T4273] device hsr_slave_1 entered promiscuous mode [ 66.576893][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.584724][ T4273] Cannot create hsr debugfs directory [ 66.596306][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.607250][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.635422][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.719219][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.750646][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.759667][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.786876][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.812763][ T4286] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.823603][ T4286] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.856576][ T4286] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.879367][ T4286] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.956167][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.968206][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.993217][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.010795][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.038508][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.077404][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.094648][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.115196][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.127702][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.140775][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.147755][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.158331][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.170038][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.200929][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.212657][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.228019][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.245013][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.251982][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.263870][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.272935][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.280233][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.292321][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.300952][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.309709][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.318535][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.325695][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.366615][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.379170][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.388585][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.397892][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.405051][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.413628][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.422209][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.430970][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.439693][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.448501][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.457306][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.467066][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.475926][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.485416][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.493283][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.501004][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.510091][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.518660][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.543396][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.555990][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.564914][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.572064][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.581437][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.590152][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.604111][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.616972][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.648365][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.658742][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.668622][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.678428][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.687849][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.710609][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.742849][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.751689][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.760604][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.767799][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.779431][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.789052][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.802669][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.815489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.828995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.838433][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.845556][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.871742][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.885200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.895341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.904420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.913719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.928675][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.945511][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.964660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.974009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.982929][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.990010][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.018289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.027515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.036725][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.043866][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.052082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.074593][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.102626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.110566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.137902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.150790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.166261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.177528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.189442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.200492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.215488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.225426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.236043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.244628][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.251689][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.259557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.267905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.278379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.287130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.296022][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.303176][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.311208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.324140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.349850][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.367152][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.385293][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.394035][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 68.394056][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 68.400046][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 68.407953][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 68.444207][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.459363][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.470246][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.478244][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 68.486197][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.495566][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.504304][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.513421][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.521884][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.533568][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.575852][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.609385][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.630053][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.640305][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.650008][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.664251][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.673666][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.682134][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.696496][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.705074][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.716477][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.726079][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.763742][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.781160][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.817196][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.826204][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.849201][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.876909][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.893116][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.928319][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.000110][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.028985][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.075437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.096623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.126628][ T4272] device veth0_vlan entered promiscuous mode [ 69.148139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.157560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.184206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.203273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.231853][ T4272] device veth1_vlan entered promiscuous mode [ 69.282737][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.292089][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.326762][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.357408][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.374707][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.393618][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.407270][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.418992][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.427334][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.451867][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.460143][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.471091][ T4278] device veth0_vlan entered promiscuous mode [ 69.495645][ T4272] device veth0_macvtap entered promiscuous mode [ 69.503945][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.514785][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.523542][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.532140][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.541757][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.561040][ T4278] device veth1_vlan entered promiscuous mode [ 69.569546][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.579022][ T4272] device veth1_macvtap entered promiscuous mode [ 69.597731][ T4277] device veth0_vlan entered promiscuous mode [ 69.613742][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.621915][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.630817][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.639894][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.648015][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.655641][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.664790][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.674047][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.681920][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.695223][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.710036][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.730393][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.745103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.757731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.766736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.775916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.788705][ T4277] device veth1_vlan entered promiscuous mode [ 69.816169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.825633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.837553][ T4278] device veth0_macvtap entered promiscuous mode [ 69.847896][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.857792][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.867091][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.876163][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.901272][ T4278] device veth1_macvtap entered promiscuous mode [ 69.931385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.940505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.948959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.958847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.967960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.977743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.026172][ T4277] device veth0_macvtap entered promiscuous mode [ 70.037983][ T4277] device veth1_macvtap entered promiscuous mode [ 70.049446][ T4286] device veth0_vlan entered promiscuous mode [ 70.060576][ T4273] device veth0_vlan entered promiscuous mode [ 70.071552][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.080341][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.104255][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.112742][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.121087][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.130022][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.139888][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.157014][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.168538][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.190025][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.208595][ T4273] device veth1_vlan entered promiscuous mode [ 70.215682][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.223775][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.231480][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.239730][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.247903][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.256569][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.265068][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.273873][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.302909][ T4286] device veth1_vlan entered promiscuous mode [ 70.312631][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.334009][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.345723][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.370413][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.381324][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.391885][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.403181][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.414962][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.435747][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.444220][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.452230][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.460445][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.469670][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.479104][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 70.479163][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 70.485943][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 70.485972][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 70.486895][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.514491][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.526257][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.535647][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.544725][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.553767][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 70.560676][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.579207][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.593345][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.603910][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.614408][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.625828][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.640596][ T4273] device veth0_macvtap entered promiscuous mode [ 70.652211][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.661658][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.669774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.679338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.689020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.697957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.706795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.716536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.731151][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.742640][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.751366][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.760135][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.781505][ T4286] device veth0_macvtap entered promiscuous mode [ 70.800884][ T4273] device veth1_macvtap entered promiscuous mode [ 70.814591][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.824336][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.832947][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.841435][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.862902][ T4286] device veth1_macvtap entered promiscuous mode [ 70.910678][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.922177][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.936863][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.947472][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.959363][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.970116][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.983912][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.021678][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.031608][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.047206][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.058613][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.069374][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.078721][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.089955][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.103977][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.115249][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.125786][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.135900][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.146554][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.159241][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.167499][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.178840][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.189040][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.200198][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.211345][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.222093][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.233831][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.242681][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.250994][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.260150][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.269778][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.283552][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.290091][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.291076][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.313346][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.328549][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.338994][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.352150][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.363121][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.373929][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.386196][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.396893][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.409075][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.425021][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.434633][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.444217][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.453260][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.482653][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.492180][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.514788][ T4286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.534129][ T4286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.543630][ T4286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.552438][ T4286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.594311][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.623598][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.654817][ T4359] sctp: [Deprecated]: syz.3.4 (pid 4359) Use of int in max_burst socket option deprecated. [ 71.654817][ T4359] Use struct sctp_assoc_value instead [ 71.671536][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.704689][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.738059][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.761846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.793736][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.801587][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.825995][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.849571][ T4363] ======================================================= [ 71.849571][ T4363] WARNING: The mand mount option has been deprecated and [ 71.849571][ T4363] and is ignored by this kernel. Remove the mand [ 71.849571][ T4363] option from the mount to silence this warning. [ 71.849571][ T4363] ======================================================= [ 71.852564][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.934378][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.943007][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.968064][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.988939][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.007413][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.018335][ T4365] loop3: detected capacity change from 0 to 256 [ 72.042897][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.062844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.070846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.101898][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.127699][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.138506][ T4365] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 72.172281][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.182879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.184374][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.245176][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.316248][ T4367] loop4: detected capacity change from 0 to 512 [ 72.553019][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 72.559084][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 72.572637][ T4353] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.585567][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 72.591655][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 72.633032][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 74.368121][ T4376] loop2: detected capacity change from 0 to 512 [ 74.800155][ T4376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.155867][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 75.622399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.632416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.642397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.652397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.662397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.672396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.682397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.692396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.702398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 75.712397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 76.417690][ T4405] vivid-000: ================= START STATUS ================= [ 76.497546][ T4405] vivid-000: Radio HW Seek Mode: Bounded [ 76.521301][ T4405] vivid-000: Radio Programmable HW Seek: false [ 76.562831][ T4405] vivid-000: RDS Rx I/O Mode: Block I/O [ 76.580563][ C0] Unknown status report in ack skb [ 76.597381][ T4405] vivid-000: Generate RBDS Instead of RDS: false [ 76.623604][ T4405] vivid-000: RDS Reception: true [ 76.658723][ T4405] vivid-000: RDS Program Type: 0 inactive [ 76.704690][ T4405] vivid-000: RDS PS Name: inactive [ 76.739738][ T4405] vivid-000: RDS Radio Text: inactive [ 76.759593][ T4405] vivid-000: RDS Traffic Announcement: false inactive [ 76.787494][ T4405] vivid-000: RDS Traffic Program: false inactive [ 76.829653][ T4405] vivid-000: RDS Music: false inactive [ 76.865755][ T4405] vivid-000: ================== END STATUS ================== [ 76.866232][ T4415] loop4: detected capacity change from 0 to 2048 [ 77.000175][ T4415] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 77.180273][ T4426] file system registered [ 77.404135][ T4415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.782217][ T27] audit: type=1800 audit(1786666957.012:2): pid=4415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 81.516660][ T128] cfg80211: failed to load regulatory.db [ 82.859162][ T4453] syz.1.27 (4453): drop_caches: 2 [ 82.947794][ T4477] loop2: detected capacity change from 0 to 2048 [ 83.019565][ T4477] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 83.101237][ T4477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.167965][ T27] audit: type=1800 audit(1786666962.402:3): pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 83.699731][ T27] audit: type=1800 audit(1786666962.932:4): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.36" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 85.772754][ T4522] loop3: detected capacity change from 0 to 2048 [ 85.881604][ T4522] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 85.929546][ T4522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.969519][ T27] audit: type=1800 audit(1786666965.202:5): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.52" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 85.988510][ T4527] loop4: detected capacity change from 0 to 2048 [ 86.698187][ T27] audit: type=1800 audit(1786666965.932:6): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.52" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 86.725690][ T4527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.872983][ T4548] overlayfs: missing 'lowerdir' [ 89.002637][ T27] audit: type=1800 audit(1786666968.232:7): pid=4545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.54" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 89.607725][ T4574] loop3: detected capacity change from 0 to 2048 [ 89.671310][ T4574] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 89.748993][ T4574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.809317][ T27] audit: type=1800 audit(1786666969.042:8): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.69" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 90.514166][ T27] audit: type=1800 audit(1786666969.752:9): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.69" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 91.585827][ T4601] overlayfs: missing 'lowerdir' [ 93.019262][ T4628] loop0: detected capacity change from 0 to 2048 [ 93.038271][ T4628] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 93.077130][ T4628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.101894][ T27] audit: type=1800 audit(1786666972.332:10): pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.86" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 94.240120][ T27] audit: type=1800 audit(1786666973.472:11): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.86" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 95.028418][ T4654] overlayfs: missing 'lowerdir' [ 95.266309][ C0] ------------[ cut here ]------------ [ 95.271812][ C0] WARNING: CPU: 0 PID: 4652 at net/mac80211/tx.c:4961 __ieee80211_beacon_get+0x1141/0x1520 [ 95.281834][ C0] Modules linked in: [ 95.285776][ C0] CPU: 0 PID: 4652 Comm: syz.3.92 Not tainted syzkaller #0 [ 95.292995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.303095][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 95.309417][ C0] Code: f7 4c 89 ef e8 80 75 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 db d0 ce f7 0f 0b e9 61 f8 ff ff e8 cf d0 ce f7 <0f> 0b e9 85 fb ff ff e8 c3 d0 ce f7 48 c7 c7 a0 fc fb 8d 4c 89 e6 [ 95.329075][ C0] RSP: 0018:ffffc90000007a48 EFLAGS: 00010246 [ 95.335176][ C0] RAX: ffffffff89b35d51 RBX: dffffc0000000000 RCX: ffff888024ca0000 [ 95.343162][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.351145][ C0] RBP: 0000000000000000 R08: ffff888024ca0000 R09: 0000000000000003 [ 95.359141][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807530e228 [ 95.367146][ C0] R13: ffff8880799f3424 R14: ffff88807530e760 R15: ffff8880799f3400 [ 95.375189][ C0] FS: 00007fae660196c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 95.384154][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.390752][ C0] CR2: 000000110c2a0ab3 CR3: 000000002eda1000 CR4: 00000000003506f0 [ 95.398751][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.406770][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.414762][ C0] Call Trace: [ 95.418047][ C0] [ 95.420890][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 95.426561][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 95.432032][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 95.437617][ C0] __iterate_interfaces+0x225/0x4c0 [ 95.442843][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 95.449103][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 95.456354][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 95.462615][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 95.469652][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 95.474907][ C0] __hrtimer_run_queues+0x522/0xc90 [ 95.480119][ C0] ? hw_scan_work+0xf00/0xf00 [ 95.484833][ C0] ? hrtimer_interrupt+0x980/0x980 [ 95.489945][ C0] hrtimer_run_softirq+0x173/0x290 [ 95.495084][ C0] handle_softirqs+0x291/0x910 [ 95.499855][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 95.504734][ C0] ? do_softirq+0x210/0x210 [ 95.509235][ C0] ? hrtimer_interrupt+0x775/0x980 [ 95.514410][ C0] __irq_exit_rcu+0x13b/0x230 [ 95.519089][ C0] ? irq_exit_rcu+0x20/0x20 [ 95.523643][ C0] irq_exit_rcu+0x5/0x20 [ 95.527878][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 95.533527][ C0] [ 95.536445][ C0] [ 95.539370][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 95.545368][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 95.551446][ C0] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 00 df 9e 0c 48 89 de 5b e9 77 62 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 14 41 80 7e 65 8b 15 15 41 80 7e 81 e2 00 01 ff 00 74 [ 95.571617][ C0] RSP: 0018:ffffc900053dfa48 EFLAGS: 00000246 [ 95.577707][ C0] RAX: ffffffff8415c388 RBX: 0000000000000038 RCX: 0000000000000002 [ 95.585717][ C0] RDX: ffff888024ca0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.593723][ C0] RBP: 0000000000000000 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 95.601696][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffffc900053dfbe0 [ 95.609685][ C0] R13: ffffc900053dfae0 R14: ffffc900053dfae0 R15: 000020000017b140 [ 95.617697][ C0] ? _copy_from_user+0xa8/0x170 [ 95.622575][ C0] _copy_from_user+0xa8/0x170 [ 95.627262][ C0] ___sys_recvmsg+0x170/0x590 [ 95.631937][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 95.636731][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 95.641748][ C0] ? __might_fault+0xc2/0x120 [ 95.646442][ C0] ? __might_fault+0xa6/0x120 [ 95.651108][ C0] do_recvmmsg+0x370/0x810 [ 95.655566][ C0] ? __sys_recvmmsg+0x290/0x290 [ 95.660437][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 95.666342][ C0] ? rcu_read_lock_sched_held+0x86/0x110 [ 95.671973][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 95.677083][ C0] ? do_recvmmsg+0x810/0x810 [ 95.681839][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 95.687070][ C0] do_syscall_64+0x4c/0xa0 [ 95.691489][ C0] ? clear_bhb_loop+0x60/0xb0 [ 95.696224][ C0] ? clear_bhb_loop+0x60/0xb0 [ 95.700927][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.706849][ C0] RIP: 0033:0x7fae6519e0d9 [ 95.711271][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.730908][ C0] RSP: 002b:00007fae66019028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 95.739387][ C0] RAX: ffffffffffffffda RBX: 00007fae65426090 RCX: 00007fae6519e0d9 [ 95.747446][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 95.755458][ C0] RBP: 00007fae65235024 R08: 0000000000000000 R09: 0000000000000000 [ 95.763451][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 95.771426][ C0] R13: 00007fae65426128 R14: 00007fae65426090 R15: 00007fff6d5cbbc8 [ 95.779507][ C0] [ 95.782532][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.789792][ C0] CPU: 0 PID: 4652 Comm: syz.3.92 Not tainted syzkaller #0 [ 95.796968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.807113][ C0] Call Trace: [ 95.810377][ C0] [ 95.813213][ C0] dump_stack_lvl+0x188/0x24e [ 95.817880][ C0] ? memcpy+0x3c/0x60 [ 95.821861][ C0] ? show_regs_print_info+0x12/0x12 [ 95.827044][ C0] ? load_image+0x410/0x410 [ 95.831535][ C0] panic+0x2d3/0x710 [ 95.835429][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 95.839921][ C0] __warn+0x2f8/0x4f0 [ 95.843885][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 95.849590][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 95.855308][ C0] report_bug+0x2ba/0x4f0 [ 95.859639][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 95.865428][ C0] handle_bug+0x3a/0x70 [ 95.869568][ C0] exc_invalid_op+0x16/0x40 [ 95.874064][ C0] asm_exc_invalid_op+0x16/0x20 [ 95.878911][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 95.885224][ C0] Code: f7 4c 89 ef e8 80 75 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 db d0 ce f7 0f 0b e9 61 f8 ff ff e8 cf d0 ce f7 <0f> 0b e9 85 fb ff ff e8 c3 d0 ce f7 48 c7 c7 a0 fc fb 8d 4c 89 e6 [ 95.904840][ C0] RSP: 0018:ffffc90000007a48 EFLAGS: 00010246 [ 95.910895][ C0] RAX: ffffffff89b35d51 RBX: dffffc0000000000 RCX: ffff888024ca0000 [ 95.918848][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.926806][ C0] RBP: 0000000000000000 R08: ffff888024ca0000 R09: 0000000000000003 [ 95.934777][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807530e228 [ 95.942746][ C0] R13: ffff8880799f3424 R14: ffff88807530e760 R15: ffff8880799f3400 [ 95.950713][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 95.956428][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 95.962131][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 95.967663][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 95.973106][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 95.978637][ C0] __iterate_interfaces+0x225/0x4c0 [ 95.983820][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 95.990037][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 95.997242][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 96.003468][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 96.010477][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 96.015683][ C0] __hrtimer_run_queues+0x522/0xc90 [ 96.020872][ C0] ? hw_scan_work+0xf00/0xf00 [ 96.025553][ C0] ? hrtimer_interrupt+0x980/0x980 [ 96.030647][ C0] hrtimer_run_softirq+0x173/0x290 [ 96.035756][ C0] handle_softirqs+0x291/0x910 [ 96.040524][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 96.045360][ C0] ? do_softirq+0x210/0x210 [ 96.049845][ C0] ? hrtimer_interrupt+0x775/0x980 [ 96.054943][ C0] __irq_exit_rcu+0x13b/0x230 [ 96.059624][ C0] ? irq_exit_rcu+0x20/0x20 [ 96.064155][ C0] irq_exit_rcu+0x5/0x20 [ 96.068392][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 96.074039][ C0] [ 96.076975][ C0] [ 96.079910][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 96.085897][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 96.092037][ C0] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 00 df 9e 0c 48 89 de 5b e9 77 62 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 14 41 80 7e 65 8b 15 15 41 80 7e 81 e2 00 01 ff 00 74 [ 96.111637][ C0] RSP: 0018:ffffc900053dfa48 EFLAGS: 00000246 [ 96.117691][ C0] RAX: ffffffff8415c388 RBX: 0000000000000038 RCX: 0000000000000002 [ 96.125748][ C0] RDX: ffff888024ca0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.133701][ C0] RBP: 0000000000000000 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 96.141653][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffffc900053dfbe0 [ 96.149609][ C0] R13: ffffc900053dfae0 R14: ffffc900053dfae0 R15: 000020000017b140 [ 96.157589][ C0] ? _copy_from_user+0xa8/0x170 [ 96.162435][ C0] _copy_from_user+0xa8/0x170 [ 96.167094][ C0] ___sys_recvmsg+0x170/0x590 [ 96.171761][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 96.176522][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 96.181532][ C0] ? __might_fault+0xc2/0x120 [ 96.186188][ C0] ? __might_fault+0xa6/0x120 [ 96.190845][ C0] do_recvmmsg+0x370/0x810 [ 96.195253][ C0] ? __sys_recvmmsg+0x290/0x290 [ 96.200093][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 96.205984][ C0] ? rcu_read_lock_sched_held+0x86/0x110 [ 96.211606][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 96.216634][ C0] ? do_recvmmsg+0x810/0x810 [ 96.221229][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 96.226419][ C0] do_syscall_64+0x4c/0xa0 [ 96.230822][ C0] ? clear_bhb_loop+0x60/0xb0 [ 96.235485][ C0] ? clear_bhb_loop+0x60/0xb0 [ 96.240156][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.246039][ C0] RIP: 0033:0x7fae6519e0d9 [ 96.250453][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.270068][ C0] RSP: 002b:00007fae66019028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 96.278466][ C0] RAX: ffffffffffffffda RBX: 00007fae65426090 RCX: 00007fae6519e0d9 [ 96.286419][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 96.294400][ C0] RBP: 00007fae65235024 R08: 0000000000000000 R09: 0000000000000000 [ 96.302350][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 96.310307][ C0] R13: 00007fae65426128 R14: 00007fae65426090 R15: 00007fff6d5cbbc8 [ 96.318278][ C0] [ 96.321420][ C0] Kernel Offset: disabled [ 96.325779][ C0] Rebooting in 86400 seconds..