last executing test programs: 15.510597425s ago: executing program 3 (id=378): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x4177, &(0x7f0000000180)={0x0, 0x313c, 0x200, 0x2, 0x190}, 0x0, &(0x7f0000000340)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x56, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000002, 0x20000000, 0x6, 0xe, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x31, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0x5, 0x3, 0x800, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x846, 0x8071, 0x7, 0x200, 0xffffffff, 0x7, 0x5, 0x4, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x200001, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0xcf1, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x8, 0x401, 0x6, 0x2ae, 0xff, 0x3, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x89, 0x3, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0x7f, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x401], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x2, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xb, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x3, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x80001000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x1, 0x80a2ed, 0x4, 0x29], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xf41, 0x0, 0xb9, 0xce7, 0x1ff, 0xf0f6, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0xa620, 0x200001, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x4, 0x4, 0xcc, 0x1, 0xfffff000, 0x5, 0x3, 0x8, 0x100, 0x3, 0x7, 0x3, 0x8, 0x6, 0x226, 0x5, 0x4005, 0x8, 0x30b1d694, 0xa1f, 0x9, 0x7, 0x5b, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x3f6, 0xffff343f, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14.471384415s ago: executing program 3 (id=380): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff08"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13.957019216s ago: executing program 3 (id=383): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x40810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xf6cb, 0xb98, 0x2, 0x10, 0xcb6, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 9.517465833s ago: executing program 0 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) close(0xffffffffffffffff) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_gettime(r5, &(0x7f0000000000)) 8.854654166s ago: executing program 3 (id=400): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.534874602s ago: executing program 0 (id=403): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x1b1, &(0x7f0000000280)="$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") r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002780)={@fallback=r0, 0x1, 0x1, 0xfffffbff, &(0x7f0000002680), 0x0, 0x0, &(0x7f00000026c0)=[0x0], &(0x7f0000002700), &(0x7f0000002740)=[0x0, 0x0]}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 6.392891254s ago: executing program 3 (id=405): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff080002"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff0700010004"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.390928534s ago: executing program 0 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40012102, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mincore(&(0x7f0000686000/0x4000)=nil, 0x4000, &(0x7f0000000200)=""/16) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x8000f83, 0x3}, 0x1c) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f00000000c0)={0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x9, 0x0) io_setup(0x2004, &(0x7f0000000680)) 6.390439614s ago: executing program 1 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.981942932s ago: executing program 2 (id=408): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x40) getsockopt(r0, 0x200000000114, 0x2715, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002"], 0x34}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0, 0x368}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0xfffffffffffffffe) socket$rds(0x15, 0x5, 0x0) 4.667359498s ago: executing program 1 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002", @ANYRES32=r3], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.57925854s ago: executing program 3 (id=410): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x40810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xf6cb, 0xb98, 0x2, 0x10, 0xcb6, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 4.277843596s ago: executing program 1 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}}], 0x1, 0x0) sendmmsg$unix(r5, &(0x7f0000010240), 0x0, 0x0) r6 = dup3(r5, r4, 0x0) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) pipe2$9p(&(0x7f0000001900), 0x0) 3.323169884s ago: executing program 1 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) fsopen(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) 3.07163532s ago: executing program 2 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800", @ANYRES32=r3], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.00797319s ago: executing program 4 (id=416): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.276492335s ago: executing program 4 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xa, 0x1, 0x7, 0x0, [@private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) pwritev(r4, &(0x7f0000000080), 0x0, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r7 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) close(r7) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400001f", @ANYRES16=r5, @ANYBLOB="010029bd7000000000003d00000008000300", @ANYRES32, @ANYBLOB='\b\x00]\x00\x00\x00\x00\x00'], 0x24}}, 0x0) 2.176111937s ago: executing program 0 (id=418): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket(0x10, 0x80002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) fallocate(r1, 0x8, 0x4000, 0x4000) 2.146122987s ago: executing program 1 (id=419): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001400010000008000000000000700"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.923483582s ago: executing program 2 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.888656503s ago: executing program 4 (id=421): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff080002"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff0700010004"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.551139889s ago: executing program 2 (id=422): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.444988981s ago: executing program 4 (id=423): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff080002"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ff"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.302152814s ago: executing program 4 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}}], 0x1, 0x0) sendmmsg$unix(r5, &(0x7f0000010240), 0x0, 0x0) r6 = dup3(r5, r4, 0x0) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) pipe2$9p(&(0x7f0000001900), 0x0) 1.064763899s ago: executing program 0 (id=425): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, &(0x7f0000000540)=""/246, 0x1b, 0xf6, 0x1}, 0x28) 1.050921979s ago: executing program 2 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) close(0xffffffffffffffff) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_gettime(r5, &(0x7f0000000000)) 1.039105889s ago: executing program 1 (id=427): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001400010000008000000000000700"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 795.681594ms ago: executing program 0 (id=428): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001400010000008000000000000700"], 0x1c}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 313.475964ms ago: executing program 4 (id=429): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30308c7696f1829ee53fbb4b", &(0x7f0000000180)=""/9, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x6}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x2c}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 0s ago: executing program 2 (id=430): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x40) getsockopt(r0, 0x200000000114, 0x2715, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002"], 0x34}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000804}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0xfffffffffffffffe) socket$rds(0x15, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 52.309731][ T4170] cgroup: Unknown subsys name 'net' [ 52.436052][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.899957][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.284340][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 55.308693][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 55.385569][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 55.438217][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 55.520485][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.527586][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.537268][ T4181] device bridge_slave_0 entered promiscuous mode [ 55.566234][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 55.575607][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.583028][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.590989][ T4181] device bridge_slave_1 entered promiscuous mode [ 55.615859][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.623098][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.631812][ T4182] device bridge_slave_0 entered promiscuous mode [ 55.644644][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.651839][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.659789][ T4183] device bridge_slave_0 entered promiscuous mode [ 55.686481][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.693815][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.702016][ T4182] device bridge_slave_1 entered promiscuous mode [ 55.718248][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.725461][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.734004][ T4183] device bridge_slave_1 entered promiscuous mode [ 55.761223][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.781717][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.788790][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.797693][ T4186] device bridge_slave_0 entered promiscuous mode [ 55.814879][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.834881][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.842172][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.850113][ T4186] device bridge_slave_1 entered promiscuous mode [ 55.860644][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.882652][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.894547][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.918879][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.965123][ T4181] team0: Port device team_slave_0 added [ 55.978774][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.986946][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.996134][ T4193] device bridge_slave_0 entered promiscuous mode [ 56.005107][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.024712][ T4181] team0: Port device team_slave_1 added [ 56.033271][ T4183] team0: Port device team_slave_0 added [ 56.053332][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.060647][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.068359][ T4193] device bridge_slave_1 entered promiscuous mode [ 56.077802][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.088901][ T4182] team0: Port device team_slave_0 added [ 56.095901][ T4183] team0: Port device team_slave_1 added [ 56.102627][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.109601][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.135681][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.164446][ T4182] team0: Port device team_slave_1 added [ 56.177605][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.184799][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.211065][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.261192][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.273196][ T4186] team0: Port device team_slave_0 added [ 56.280894][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.296389][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.303657][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.330057][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.343603][ T4186] team0: Port device team_slave_1 added [ 56.363868][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.371008][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.403285][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.415403][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.422555][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.448604][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.483843][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.490996][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.517364][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.541297][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.548284][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.574962][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.588706][ T4193] team0: Port device team_slave_0 added [ 56.603781][ T4181] device hsr_slave_0 entered promiscuous mode [ 56.610967][ T4181] device hsr_slave_1 entered promiscuous mode [ 56.618101][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.625432][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.651558][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.664459][ T4193] team0: Port device team_slave_1 added [ 56.710812][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.717785][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.744187][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.758667][ T4182] device hsr_slave_0 entered promiscuous mode [ 56.765948][ T4182] device hsr_slave_1 entered promiscuous mode [ 56.773019][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.781040][ T4182] Cannot create hsr debugfs directory [ 56.810271][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.817242][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.843573][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.872028][ T4183] device hsr_slave_0 entered promiscuous mode [ 56.878862][ T4183] device hsr_slave_1 entered promiscuous mode [ 56.885746][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.893392][ T4183] Cannot create hsr debugfs directory [ 56.912672][ T4186] device hsr_slave_0 entered promiscuous mode [ 56.919437][ T4186] device hsr_slave_1 entered promiscuous mode [ 56.926239][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.934366][ T4186] Cannot create hsr debugfs directory [ 56.941411][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 56.948208][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 56.955039][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 57.020395][ T4172] Bluetooth: hci4: command 0x0409 tx timeout [ 57.026529][ T4172] Bluetooth: hci3: command 0x0409 tx timeout [ 57.037923][ T4193] device hsr_slave_0 entered promiscuous mode [ 57.045035][ T4193] device hsr_slave_1 entered promiscuous mode [ 57.052898][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.060589][ T4193] Cannot create hsr debugfs directory [ 57.314289][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.330159][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.339991][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.353763][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.389163][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.398521][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.426101][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.434993][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.492145][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.512435][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.525603][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.534856][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.607741][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.618034][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.653011][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.663332][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.674179][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.702692][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.712212][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.733928][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.744078][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.766956][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.797229][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.807907][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.823253][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.832861][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.842321][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.849611][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.858357][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.869287][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.878294][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.885709][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.893797][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.903670][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.912746][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.922326][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.930839][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.939595][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.948871][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.957635][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.967268][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.976209][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.985331][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.995714][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.003807][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.017703][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.027542][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.042098][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.097713][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.123302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.138900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.174387][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.188260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.197519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.206551][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.213690][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.242841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.252176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.263465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.272962][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.280274][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.287969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.298055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.307166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.315009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.334736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.346268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.364430][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.379430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.391460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.399846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.409793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.418645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.437643][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.445894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.457097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.489676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.498724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.508319][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.515538][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.525021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.534319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.543320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.578040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.586907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.596682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.606310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.615910][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.623087][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.633649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.644960][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.666647][ T4181] device veth0_vlan entered promiscuous mode [ 58.687883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.697617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.707934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.717697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.727187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.736236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.746078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.754548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.766976][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.786716][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.796700][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.812049][ T4181] device veth1_vlan entered promiscuous mode [ 58.821835][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.838417][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.846938][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.870099][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.887252][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.906039][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.924424][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.939912][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.949495][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.960354][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.968777][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.978580][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.987481][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.014404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.020502][ T4240] Bluetooth: hci1: command 0x041b tx timeout [ 59.023102][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 59.041876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.052887][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.056042][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 59.060061][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.075639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.086439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.094348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.102970][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 59.103587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.109008][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 59.137733][ T4181] device veth0_macvtap entered promiscuous mode [ 59.148075][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.156017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.166131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.176730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.186137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.196277][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.203576][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.212068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.221569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.261151][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.269949][ T4181] device veth1_macvtap entered promiscuous mode [ 59.279059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.289597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.299123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.308402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.317354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.326554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.335788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.344711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.352766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.366765][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.378129][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.417748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.427961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.437109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.448184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.456654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.465460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.477464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.486915][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.494049][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.503225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.512507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.521382][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.528453][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.536854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.546020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.562583][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.573357][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.609839][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.628037][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.652839][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.672562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.689037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.700482][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.718502][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.733050][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.745580][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.759365][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.776194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.785460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.794502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.803601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.813715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.852616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.862551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.873057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.882554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.897626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.906860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.918543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.927072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.939588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.947615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.965727][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.003750][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.024713][ T4183] device veth0_vlan entered promiscuous mode [ 60.035531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.044466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.055823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.064652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.077460][ T4182] device veth0_vlan entered promiscuous mode [ 60.106617][ T4183] device veth1_vlan entered promiscuous mode [ 60.114272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.122764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.131986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.141015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.148829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.173851][ T4182] device veth1_vlan entered promiscuous mode [ 60.226613][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.235643][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.251188][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.259993][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.260706][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.274193][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.286073][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.295560][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.318304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.331537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.362006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.370690][ T413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.376762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.378740][ T413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.397365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.411248][ T4183] device veth0_macvtap entered promiscuous mode [ 60.424966][ T4186] device veth0_vlan entered promiscuous mode [ 60.433860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.442671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.451609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.482213][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.489644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.510859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.537404][ T4183] device veth1_macvtap entered promiscuous mode [ 60.563658][ T4186] device veth1_vlan entered promiscuous mode [ 60.593263][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.604093][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.626240][ T4182] device veth0_macvtap entered promiscuous mode [ 60.667667][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.686503][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.699445][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.724916][ T4182] device veth1_macvtap entered promiscuous mode [ 60.738982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.747783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.757217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.765951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.774789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.783942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.809339][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.819907][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.833424][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.858165][ T4292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 60.872241][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.882394][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.894035][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.903597][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.914513][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.924494][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.936026][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.947615][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.958032][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.968179][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.988213][ T4186] device veth0_macvtap entered promiscuous mode [ 60.997359][ T4193] device veth0_vlan entered promiscuous mode [ 61.009538][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.018906][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.029550][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.046152][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.058151][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.069008][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.079751][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.092094][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.100887][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 61.106507][ T4186] device veth1_macvtap entered promiscuous mode [ 61.114009][ T4247] Bluetooth: hci2: command 0x040f tx timeout [ 61.126219][ T4193] device veth1_vlan entered promiscuous mode [ 61.138559][ T4247] Bluetooth: hci0: command 0x040f tx timeout [ 61.145356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.155934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.164710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.173282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.182251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.191006][ T4239] Bluetooth: hci4: command 0x040f tx timeout [ 61.202484][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.206918][ T4239] Bluetooth: hci3: command 0x040f tx timeout [ 61.213629][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.229216][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.239768][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.251191][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.262650][ T4294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 61.278939][ T4193] device veth0_macvtap entered promiscuous mode [ 61.301518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.312943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.334082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.344910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.367025][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.377040][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.387975][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.397896][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.413434][ T4193] device veth1_macvtap entered promiscuous mode [ 61.438744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.461775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.523152][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.535527][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.545545][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.556199][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.566137][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.576629][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.596721][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.607461][ T4297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 61.628049][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.653877][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.659437][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.675996][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.686606][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.715537][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.726235][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.737396][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.748934][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.765876][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.777457][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.788667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.797130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.806827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.815903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.825255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.850712][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.862792][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.872766][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.883316][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.893811][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.907297][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.919843][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.939019][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.949628][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.964292][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.977948][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.998495][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.027236][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.038469][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.049219][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.061306][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.074904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.083748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.094791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.104458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.114278][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.115867][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.130617][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.138245][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.147703][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.156751][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.184511][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.193894][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.206099][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.215181][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.227875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.315645][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.329610][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.366275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.462668][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.493443][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.513217][ T413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.538542][ T413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.547292][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.554959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.574959][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.594747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.631557][ T413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.639646][ T413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.657693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.676517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.711125][ T4311] tipc: Started in network mode [ 62.716082][ T4311] tipc: Node identity ba546a4d04a1, cluster identity 4711 [ 62.724923][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.748100][ T4311] tipc: Enabled bearer , priority 0 [ 62.755394][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.789988][ T4315] device syzkaller0 entered promiscuous mode [ 62.826693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.883158][ T4311] tipc: Resetting bearer [ 62.942184][ T4310] tipc: Resetting bearer [ 62.978440][ T4310] tipc: Disabling bearer [ 62.989779][ T4319] loop0: detected capacity change from 0 to 512 [ 63.010577][ T4320] device wg1 entered promiscuous mode [ 63.086320][ T4319] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 63.155351][ T4319] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1: Unimplemented hash flags: 0x0001 [ 63.181408][ T4172] Bluetooth: hci0: command 0x0419 tx timeout [ 63.193727][ T4172] Bluetooth: hci2: command 0x0419 tx timeout [ 63.200498][ T4172] Bluetooth: hci1: command 0x0419 tx timeout [ 63.208876][ T4319] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 63.229653][ T4326] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1: Unimplemented hash flags: 0x0001 [ 63.242593][ T4326] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 63.261606][ T4172] Bluetooth: hci4: command 0x0419 tx timeout [ 63.264450][ T4247] Bluetooth: hci3: command 0x0419 tx timeout [ 63.270908][ T4319] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1: Unimplemented hash flags: 0x0001 [ 63.284716][ T4327] device wg1 entered promiscuous mode [ 63.286035][ T4319] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 63.372446][ T4319] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1: Unimplemented hash flags: 0x0001 [ 63.416505][ T4319] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 63.486106][ T4319] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1: Unimplemented hash flags: 0x0001 [ 63.535972][ T4319] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1: Corrupt directory, running e2fsck is recommended [ 63.561619][ T4326] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 63.776985][ T4333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.581116][ T23] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.667173][ T26] audit: type=1326 audit(1759307524.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7ef9aec9 code=0x7ffc0000 [ 65.768634][ T26] audit: type=1326 audit(1759307524.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7ef9aec9 code=0x7ffc0000 [ 65.860275][ T26] audit: type=1326 audit(1759307524.270:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a7ef99710 code=0x7ffc0000 [ 65.928965][ T26] audit: type=1326 audit(1759307524.270:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4a7ef9c6f7 code=0x7ffc0000 [ 66.100645][ T26] audit: type=1326 audit(1759307524.270:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a7ef9aec9 code=0x7ffc0000 [ 66.205133][ T4378] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 66.230265][ T26] audit: type=1326 audit(1759307524.270:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4a7ef9c6f7 code=0x7ffc0000 [ 66.262952][ T4378] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 66.291932][ T26] audit: type=1326 audit(1759307524.270:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4a7ef99b2a code=0x7ffc0000 [ 66.345598][ T26] audit: type=1326 audit(1759307524.270:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7ef9aec9 code=0x7ffc0000 [ 66.433278][ T26] audit: type=1326 audit(1759307524.270:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7ef9aec9 code=0x7ffc0000 [ 66.517794][ T26] audit: type=1326 audit(1759307524.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4a7ef9aec9 code=0x7ffc0000 [ 66.920218][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.928343][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.878347][ T4402] Bluetooth: hci0: command 0x0406 tx timeout [ 68.418770][ T4387] device wg1 left promiscuous mode [ 68.968984][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.987123][ T4426] loop0: detected capacity change from 0 to 32768 [ 69.018322][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.838889][ T4387] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.855297][ T4387] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.865870][ T4387] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.879749][ T4387] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.119178][ T4387] syz.4.27 (4387) used greatest stack depth: 21032 bytes left [ 70.208058][ T4438] binder: 4435:4438 unknown command 0 [ 70.230398][ T4438] binder: 4435:4438 ioctl c0306201 200000000080 returned -22 [ 71.629193][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.636093][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.688500][ T4462] Zero length message leads to an empty skb [ 72.287513][ T4481] binder: 4480:4481 unknown command 0 [ 72.361083][ T4481] binder: 4480:4481 ioctl c0306201 200000000080 returned -22 [ 72.426982][ T4481] binder: 4480:4481 ioctl 4018620d 0 returned -22 [ 72.450612][ T4481] binder: 4480:4481 ioctl c0306201 200000000000 returned -14 [ 72.535085][ T4467] loop3: detected capacity change from 0 to 32768 [ 73.007468][ T4490] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.047350][ T4490] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 73.896239][ T4506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 74.193742][ T4515] binder: 4514:4515 ioctl c0306201 200000000000 returned -14 [ 74.219984][ T4515] binder: 4514:4515 ioctl c0306201 0 returned -14 [ 74.314486][ T4520] binder: 4519:4520 unknown command 0 [ 74.358577][ T4520] binder: 4519:4520 ioctl c0306201 200000000080 returned -22 [ 74.422688][ T4520] binder: 4519:4520 ioctl 4018620d 0 returned -22 [ 74.451268][ T4520] binder: 4519:4520 ioctl c0306201 200000000000 returned -14 [ 74.970809][ T4534] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 75.000424][ T4534] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 75.065562][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 75.226761][ T4540] netlink: 64 bytes leftover after parsing attributes in process `syz.1.69'. [ 76.322383][ T4554] binder: 4553:4554 ioctl c0306201 200000000000 returned -14 [ 76.586476][ T4562] binder: 4561:4562 unknown command 0 [ 76.636542][ T4562] binder: 4561:4562 ioctl c0306201 200000000080 returned -22 [ 76.652477][ T4562] binder: 4561:4562 ioctl 4018620d 0 returned -22 [ 77.042523][ T4565] binder: 4561:4565 ioctl c0306201 200000000000 returned -14 [ 77.057873][ T4531] loop3: detected capacity change from 0 to 32768 [ 77.910641][ T4584] netlink: 64 bytes leftover after parsing attributes in process `syz.2.82'. [ 78.267289][ T4590] device syzkaller0 entered promiscuous mode [ 78.680357][ T4594] binder: 4593:4594 ioctl c0306201 200000000000 returned -14 [ 79.646726][ T4601] binder: 4599:4601 unknown command 0 [ 79.731873][ T4605] binder: BINDER_SET_CONTEXT_MGR already set [ 79.737568][ T4601] binder: 4599:4601 ioctl c0306201 200000000080 returned -22 [ 79.738132][ T4605] binder: 4599:4605 ioctl 4018620d 200000000100 returned -16 [ 79.900823][ T4601] binder: 4599:4601 ioctl c0306201 200000000000 returned -14 [ 80.020433][ T4240] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.138237][ T4614] netlink: 64 bytes leftover after parsing attributes in process `syz.0.93'. [ 80.331860][ T4602] loop4: detected capacity change from 0 to 32768 [ 80.380833][ T4240] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.393784][ T4240] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.404099][ T4240] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.417835][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.500516][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.508065][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.517975][ T4604] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.743286][ T1110] cfg80211: failed to load regulatory.db [ 81.989750][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.008676][ T4607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.358543][ T4607] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.368576][ T4607] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.377576][ T4607] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.387071][ T4607] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.012459][ T13] usb 3-1: USB disconnect, device number 2 [ 84.329251][ T4660] binder: 4659:4660 unknown command 0 [ 84.349873][ T4660] binder: 4659:4660 ioctl c0306201 200000000080 returned -22 [ 84.370879][ T4660] binder: BINDER_SET_CONTEXT_MGR already set [ 84.377013][ T4660] binder: 4659:4660 ioctl 4018620d 2000000002c0 returned -16 [ 84.386414][ T4660] binder: 4659:4660 ioctl c0306201 200000000000 returned -22 [ 84.431884][ T4660] binder_alloc: 4659: binder_alloc_buf, no vma [ 85.138604][ T4677] netlink: 88 bytes leftover after parsing attributes in process `syz.0.107'. [ 85.781530][ T4682] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 85.802308][ T4682] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 85.930350][ T1110] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.105179][ T4665] loop4: detected capacity change from 0 to 32768 [ 87.110336][ T1110] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.144253][ T1110] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.193909][ T1110] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.230515][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.281213][ T4683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.367502][ T4697] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 87.480215][ T4697] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 87.529085][ T4705] binder: 4704:4705 unknown command 0 [ 87.570251][ T4705] binder: 4704:4705 ioctl c0306201 200000000080 returned -22 [ 87.650484][ T4705] binder: BINDER_SET_CONTEXT_MGR already set [ 87.687134][ T4705] binder: 4704:4705 ioctl 4018620d 2000000002c0 returned -16 [ 87.752753][ T4713] binder: 4704:4713 ioctl c0306201 200000000000 returned -22 [ 88.097384][ T4705] binder_alloc: 4704: binder_alloc_buf, no vma [ 88.729500][ T4727] netlink: 88 bytes leftover after parsing attributes in process `syz.3.120'. [ 89.851401][ T4631] usb 1-1: USB disconnect, device number 2 [ 90.034435][ T4742] device vlan2 entered promiscuous mode [ 90.431550][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 91.361049][ T4755] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 91.380832][ T4758] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 91.389001][ T4758] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.398626][ T4755] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.718765][ T4735] loop3: detected capacity change from 0 to 32768 [ 91.785518][ T4765] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 91.806894][ T4765] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.926188][ T4769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 93.329077][ T4404] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.438653][ T4794] netlink: 'syz.0.139': attribute type 13 has an invalid length. [ 94.479941][ T4794] netlink: 'syz.0.139': attribute type 17 has an invalid length. [ 94.562677][ T4404] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.590320][ T4404] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.615912][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.640376][ T4404] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.664780][ T4794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.670347][ T4404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.791653][ T4782] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.163851][ T4808] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.171891][ T4808] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.201000][ T4824] tipc: Enabling of bearer rejected, failed to enable media [ 96.241503][ T4816] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 96.273764][ T4816] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 96.286596][ T4821] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 96.299869][ T4821] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 96.747370][ T4844] loop1: detected capacity change from 0 to 256 [ 96.753617][ T4837] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 96.762921][ T4837] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 96.813179][ T4844] FAT-fs (loop1): Unrecognized mount option "fs" or missing value [ 97.390624][ T4399] usb 5-1: USB disconnect, device number 2 [ 97.847482][ T4863] device syzkaller0 entered promiscuous mode [ 98.182017][ T4870] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 98.196577][ T4870] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.403201][ T4881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 98.441243][ T4881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 98.467994][ T4860] loop4: detected capacity change from 0 to 32768 [ 98.554431][ T4860] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.152 (4860) [ 98.624360][ T4883] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 98.643478][ T4883] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.663739][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 98.734956][ T4860] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 98.767679][ T4860] BTRFS info (device loop4): setting nodatasum [ 98.789809][ T4860] BTRFS info (device loop4): force zlib compression, level 3 [ 98.807893][ T4860] BTRFS info (device loop4): enabling ssd optimizations [ 98.825208][ T4860] BTRFS info (device loop4): allowing degraded mounts [ 98.880252][ T4860] BTRFS info (device loop4): using free space tree [ 98.891502][ T4891] loop3: detected capacity change from 0 to 256 [ 98.930729][ T4860] BTRFS info (device loop4): has skinny extents [ 98.931529][ T4891] FAT-fs (loop3): Unrecognized mount option "fs" or missing value [ 98.992941][ T4894] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.781425][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 99.781441][ T26] audit: type=1804 audit(1759307558.360:26): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.152" name="/newroot/32/file1/file1" dev="loop4" ino=260 res=1 errno=0 [ 100.500981][ T4932] netlink: 'syz.1.168': attribute type 13 has an invalid length. [ 100.574914][ T4932] netlink: 'syz.1.168': attribute type 17 has an invalid length. [ 100.685543][ T4909] loop3: detected capacity change from 0 to 32768 [ 100.877550][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.928604][ T4932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.007847][ T4948] tipc: Started in network mode [ 101.021393][ T4948] tipc: Node identity 4a4c1e739124, cluster identity 4711 [ 101.029562][ T4944] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 101.041009][ T4948] tipc: Enabled bearer , priority 0 [ 101.052157][ T4939] device syzkaller0 entered promiscuous mode [ 101.059302][ T4944] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 101.167867][ T4952] device syzkaller0 entered promiscuous mode [ 101.240410][ T4941] tipc: Resetting bearer [ 101.350577][ T4938] tipc: Resetting bearer [ 101.396118][ T4938] tipc: Disabling bearer [ 101.449226][ T4959] netlink: 'syz.2.172': attribute type 13 has an invalid length. [ 101.479030][ T4959] netlink: 'syz.2.172': attribute type 17 has an invalid length. [ 101.672834][ T4959] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.680056][ T4959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.688320][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.695792][ T4959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.719574][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.781398][ T4959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.994959][ T4972] loop0: detected capacity change from 0 to 256 [ 102.044806][ T4972] FAT-fs (loop0): Unrecognized mount option "fs" or missing value [ 102.200417][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.320023][ T4980] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 102.576518][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 102.590577][ T26] audit: type=1326 audit(1759307561.160:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4979 comm="syz.4.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9046f78ec9 code=0x0 [ 102.880663][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 102.889746][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 102.898887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 102.908082][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.917217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.926306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.935400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.944599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 102.953752][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 103.671656][ T4993] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 103.740078][ T4993] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 103.823379][ T5000] device syzkaller0 entered promiscuous mode [ 104.201593][ T5003] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.219886][ T5003] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 105.460170][ C1] sched: RT throttling activated [ 106.073153][ T4991] loop2: detected capacity change from 0 to 32768 [ 106.229816][ T5017] loop0: detected capacity change from 0 to 256 [ 106.280594][ T5017] FAT-fs (loop0): Unrecognized mount option "fs" or missing value [ 106.315294][ T5015] netlink: 'syz.3.191': attribute type 13 has an invalid length. [ 106.360761][ T5015] netlink: 'syz.3.191': attribute type 17 has an invalid length. [ 106.695642][ T5019] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 106.747573][ T5019] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 106.762349][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.821479][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.888116][ T5015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.938948][ T5015] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.021473][ T5027] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 107.050612][ T5015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.067947][ T5027] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 107.344898][ T5015] syz.3.191 (5015) used greatest stack depth: 19808 bytes left [ 107.519955][ T5034] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 107.548647][ T5034] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 108.799948][ T5060] loop0: detected capacity change from 0 to 256 [ 108.955455][ T5060] FAT-fs (loop0): Unrecognized mount option "fs" or missing value [ 109.713011][ T5070] binder: 5068:5070 unknown command 0 [ 109.765152][ T5070] binder: 5068:5070 ioctl c0306201 200000000080 returned -22 [ 109.801767][ T5070] binder: 5068:5070 ioctl c0306201 200000000000 returned -14 [ 110.313349][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.320632][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.024626][ T5057] device wg1 left promiscuous mode [ 111.567751][ T5085] loop1: detected capacity change from 0 to 32768 [ 111.633697][ T5085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.208 (5085) [ 111.735266][ T5085] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 111.745076][ T5057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.767191][ T5085] BTRFS info (device loop1): setting nodatasum [ 111.787774][ T5085] BTRFS info (device loop1): force zlib compression, level 3 [ 111.806941][ T5085] BTRFS info (device loop1): enabling ssd optimizations [ 111.822755][ T5085] BTRFS info (device loop1): allowing degraded mounts [ 111.835105][ T5057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.840369][ T5085] BTRFS info (device loop1): using free space tree [ 111.849087][ T5085] BTRFS info (device loop1): has skinny extents [ 112.496071][ T26] audit: type=1804 audit(1759307571.070:28): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.208" name="/newroot/36/file1/file1" dev="loop1" ino=260 res=1 errno=0 [ 113.157950][ T5057] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.173498][ T5057] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.189381][ T5057] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.198437][ T5057] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.379025][ T5073] device syzkaller0 entered promiscuous mode [ 113.405654][ T5087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.209'. [ 113.434039][ T5087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.209'. [ 113.546137][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.213'. [ 115.375789][ T5139] binder: 5137:5139 unknown command 0 [ 115.394757][ T5139] binder: 5137:5139 ioctl c0306201 200000000080 returned -22 [ 115.413213][ T5142] loop3: detected capacity change from 0 to 256 [ 115.437191][ T5139] binder: 5137:5139 ioctl c0306201 200000000000 returned -14 [ 115.469260][ T5142] FAT-fs (loop3): Unrecognized mount option "fs" or missing value [ 115.933993][ T5148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.072848][ T5148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.099678][ T5148] bond0 (unregistering): Released all slaves [ 116.270901][ T5155] tipc: Started in network mode [ 116.276451][ T5155] tipc: Node identity 061d9cc48c22, cluster identity 4711 [ 116.350920][ T5155] tipc: Enabled bearer , priority 0 [ 116.572205][ T5151] tipc: Disabling bearer [ 116.666848][ T5164] loop1: detected capacity change from 0 to 128 [ 116.744451][ T5164] EXT4-fs (loop1): Ignoring removed nobh option [ 118.628571][ T5164] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 118.650429][ T5164] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.283095][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 120.732301][ T5195] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 120.753251][ T5197] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 120.760284][ T5195] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 120.796777][ T5197] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 121.056189][ T5203] tipc: Enabled bearer , priority 0 [ 121.085003][ T5203] device syzkaller0 entered promiscuous mode [ 121.136762][ T5203] tipc: Resetting bearer [ 121.188574][ T5202] tipc: Resetting bearer [ 121.208104][ T5202] tipc: Disabling bearer [ 121.920422][ T5229] loop4: detected capacity change from 0 to 256 [ 121.944025][ T5229] FAT-fs (loop4): Unrecognized mount option "fs" or missing value [ 123.176077][ T5237] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 124.112671][ T5256] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.120565][ T5256] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.845589][ T5276] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.280586][ T5290] loop0: detected capacity change from 0 to 128 [ 129.316246][ T5290] EXT4-fs (loop0): Ignoring removed nobh option [ 129.628383][ T5294] loop1: detected capacity change from 0 to 1024 [ 129.651155][ T5290] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 129.731054][ T5290] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.739326][ T5294] EXT4-fs (loop1): Mount option "journal_checksum" incompatible with ext3 [ 130.041910][ T5296] tipc: Started in network mode [ 132.264702][ T5296] tipc: Node identity 4edea6dddee1, cluster identity 4711 [ 132.290665][ T5296] tipc: Enabled bearer , priority 0 [ 132.345878][ T5302] tipc: Resetting bearer [ 132.431266][ T5295] tipc: Disabling bearer [ 132.971431][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.712364][ T5321] loop2: detected capacity change from 0 to 128 [ 133.757781][ T5321] EXT4-fs (loop2): Ignoring removed nobh option [ 133.796405][ T5323] loop4: detected capacity change from 0 to 1024 [ 133.837764][ T5321] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 133.867972][ T5321] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.998567][ T5323] EXT4-fs (loop4): Mount option "journal_checksum" incompatible with ext3 [ 134.200078][ T5337] loop3: detected capacity change from 0 to 256 [ 136.442032][ T5337] FAT-fs (loop3): Unrecognized mount option "fs" or missing value [ 137.687426][ T5351] loop3: detected capacity change from 0 to 128 [ 138.310479][ T5351] EXT4-fs (loop3): Ignoring removed nobh option [ 138.764930][ T5362] loop1: detected capacity change from 0 to 128 [ 138.791212][ T5351] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 138.810430][ T5351] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.907956][ T5362] EXT4-fs (loop1): Ignoring removed nobh option [ 138.971646][ T5362] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 139.099402][ T5362] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.590969][ T5381] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 141.855620][ T5380] loop0: detected capacity change from 0 to 256 [ 141.964952][ T5380] FAT-fs (loop0): Unrecognized mount option "fs" or missing value [ 144.007858][ T5420] loop0: detected capacity change from 0 to 128 [ 144.109022][ T5420] EXT4-fs (loop0): Ignoring removed nobh option [ 144.371462][ T5420] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 144.429901][ T5432] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 144.606807][ T5420] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.441459][ T5437] binder: 5436:5437 unknown command 0 [ 145.456402][ T5437] binder: 5436:5437 ioctl c0306201 200000000080 returned -22 [ 145.576369][ T5435] tipc: Enabled bearer , priority 0 [ 145.620308][ T5437] binder: 5436:5437 ioctl 4018620d 0 returned -22 [ 145.802750][ T5437] binder: 5436:5437 ioctl c0306201 200000000000 returned -14 [ 146.526092][ T5434] tipc: Disabling bearer [ 149.611403][ T5477] loop0: detected capacity change from 0 to 128 [ 149.674969][ T5477] FAT-fs (loop0): Unrecognized mount option "gid=0xffffffffffffffffέ҂PPՐLI7ȒOuصfOƁV'6ybuU`=\)`N^{$*Apg?}4@v." or missing value [ 149.880759][ T5479] binder: 5478:5479 unknown command 0 [ 149.897196][ T5479] binder: 5478:5479 ioctl c0306201 200000000080 returned -22 [ 149.928550][ T5479] binder: 5478:5479 ioctl 4018620d 0 returned -22 [ 149.980318][ T5483] binder: 5478:5483 ioctl c0306201 200000000000 returned -14 [ 153.165553][ T5495] loop3: detected capacity change from 0 to 128 [ 153.280442][ T5495] EXT4-fs (loop3): Ignoring removed nobh option [ 153.441605][ T5495] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 153.607264][ T5495] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.625295][ T5503] loop2: detected capacity change from 0 to 1024 [ 153.683790][ T5503] EXT4-fs (loop2): Mount option "journal_checksum" incompatible with ext3 [ 158.478407][ T5529] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.498485][ T5529] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 158.523650][ T5540] loop4: detected capacity change from 0 to 128 [ 158.629474][ T5541] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 159.527991][ T5540] EXT4-fs (loop4): Ignoring removed nobh option [ 159.643515][ T5540] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 159.680511][ T5540] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.463886][ T5570] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 164.480962][ T5584] loop0: detected capacity change from 0 to 128 [ 164.495470][ T5570] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 164.579561][ T5584] EXT4-fs (loop0): Ignoring removed nobh option [ 164.722278][ T5584] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 164.795867][ T5584] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.625198][ T5601] loop2: detected capacity change from 0 to 128 [ 166.793876][ T5601] EXT4-fs (loop2): Ignoring removed nobh option [ 166.881800][ T5614] loop1: detected capacity change from 0 to 128 [ 166.901598][ T5601] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 166.927839][ T5601] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.488639][ T5614] EXT4-fs (loop1): Ignoring removed nobh option [ 167.918892][ T5614] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 167.965896][ T5614] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.914816][ T5634] loop2: detected capacity change from 0 to 128 [ 170.030358][ T5634] FAT-fs (loop2): Unrecognized mount option "gid=0xffffffffffffffffέ҂PPՐLI7ȒOuصfOƁV'6ybuU`=\)`N^{$*Apg?}4@v." or missing value [ 171.489602][ T5644] loop4: detected capacity change from 0 to 128 [ 171.521467][ T5638] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 171.543668][ T5644] EXT4-fs (loop4): Ignoring removed nobh option [ 171.560709][ T5638] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 171.637685][ T5644] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 171.696864][ T5644] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.042164][ T5651] loop0: detected capacity change from 0 to 1024 [ 172.083726][ T5651] EXT4-fs (loop0): Mount option "journal_checksum" incompatible with ext3 [ 173.525211][ T5665] loop0: detected capacity change from 0 to 128 [ 173.594038][ T5665] EXT4-fs (loop0): Ignoring removed nobh option [ 173.643492][ T5665] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 173.740402][ T4931] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 173.755307][ T5665] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.813097][ T5667] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 173.871710][ T5667] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 174.145845][ T5675] tipc: Enabled bearer , priority 0 [ 174.163452][ T5675] device syzkaller0 entered promiscuous mode [ 174.318559][ T4931] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.993186][ T5675] tipc: Resetting bearer [ 175.019640][ T4931] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.063637][ T4931] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.096562][ T4931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.707317][ T5674] tipc: Resetting bearer [ 175.708252][ T23] tipc: Node number set to 2319424708 [ 175.713953][ T5661] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.782797][ T4931] usb 4-1: USB disconnect, device number 2 [ 175.807629][ T5674] tipc: Disabling bearer [ 177.592376][ T5709] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 177.610389][ T5709] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 177.706721][ T5713] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 177.732307][ T5718] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 177.747214][ T5718] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 177.770306][ T5713] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 178.620445][ T4631] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 178.651743][ T5734] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 178.673350][ T5734] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 179.009957][ T5743] tipc: Enabling of bearer rejected, failed to enable media [ 179.866875][ T4631] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.878406][ T4631] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.888919][ T4631] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.923843][ T4631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.970740][ T5723] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.100386][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 181.109558][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 181.275696][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 181.320559][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 181.541558][ T5766] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 182.092587][ T5766] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 182.137035][ T5770] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 182.145428][ T5770] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 182.888729][ T4399] usb 4-1: USB disconnect, device number 3 [ 183.255027][ T5792] loop0: detected capacity change from 0 to 128 [ 183.321271][ T5791] tipc: Enabling of bearer rejected, failed to enable media [ 183.502859][ T5792] FAT-fs (loop0): Unrecognized mount option "gid=0xffffffffffffffffέ҂PPՐLI7ȒOuصfOƁV'6ybuU`=\)`N^{$*Apg?}4@v." or missing value [ 186.764069][ T5805] tipc: Started in network mode [ 186.769002][ T5805] tipc: Node identity 6e89ec800149, cluster identity 4711 [ 186.790486][ T5805] tipc: Enabled bearer , priority 0 [ 186.838707][ T5808] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 186.854291][ T5805] tipc: Resetting bearer [ 186.880508][ T5808] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 186.931826][ T5802] tipc: Disabling bearer [ 187.019032][ T5810] tipc: Enabling of bearer rejected, failed to enable media [ 187.172244][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 187.285700][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 187.522786][ T4631] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.318260][ T5838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'. [ 189.384910][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 189.451556][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 189.585915][ T4631] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.597724][ T4631] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.615979][ T4631] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.619492][ T5856] loop0: detected capacity change from 0 to 128 [ 189.638420][ T4631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.670450][ T5851] device hsr_slave_1 left promiscuous mode [ 189.683945][ T5822] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.704777][ T5856] EXT4-fs (loop0): Ignoring removed nobh option [ 189.739993][ T5856] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 189.757299][ T5856] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.840011][ T5862] device syzkaller0 entered promiscuous mode [ 190.201562][ T5864] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 190.214931][ T5864] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 190.433143][ T5870] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 190.533211][ T5870] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 190.928064][ T5881] device bpq0 entered promiscuous mode [ 190.972929][ T5890] device bpq0 left promiscuous mode [ 190.978863][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 191.704407][ T5887] ================================================================== [ 191.712838][ T5887] BUG: KASAN: use-after-free in rose_transmit_link+0x5b0/0x730 [ 191.720424][ T5887] Read of size 1 at addr ffff8880618cf432 by task syz.1.427/5887 [ 191.725002][ T5896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.430'. [ 191.728255][ T5887] [ 191.728283][ T5887] CPU: 1 PID: 5887 Comm: syz.1.427 Not tainted syzkaller #0 [ 191.728303][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.756850][ T5887] Call Trace: [ 191.760159][ T5887] [ 191.763118][ T5887] dump_stack_lvl+0x168/0x230 [ 191.767838][ T5887] ? show_regs_print_info+0x20/0x20 [ 191.773210][ T5887] ? _printk+0xcc/0x110 [ 191.777400][ T5887] ? rose_transmit_link+0x5b0/0x730 [ 191.782637][ T5887] ? load_image+0x3b0/0x3b0 [ 191.787262][ T5887] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 191.792680][ T5887] print_address_description+0x60/0x2d0 [ 191.798268][ T5887] ? rose_transmit_link+0x5b0/0x730 [ 191.803498][ T5887] kasan_report+0xdf/0x130 [ 191.808043][ T5887] ? rose_transmit_link+0x5b0/0x730 [ 191.813281][ T5887] ? __phys_addr+0xb6/0x170 [ 191.817823][ T5887] rose_transmit_link+0x5b0/0x730 [ 191.822890][ T5887] ? skb_put+0x117/0x210 [ 191.827361][ T5887] rose_write_internal+0x673/0x1e80 [ 191.832704][ T5887] ? rose_validate_nr+0x120/0x120 [ 191.837772][ T5887] ? del_timer+0x11a/0x1b0 [ 191.842231][ T5887] ? skb_queue_purge+0x62/0x290 [ 191.847215][ T5887] rose_release+0x22a/0x4e0 [ 191.851753][ T5887] sock_close+0xd5/0x240 [ 191.856016][ T5887] ? sock_mmap+0x90/0x90 [ 191.860272][ T5887] __fput+0x234/0x930 [ 191.864301][ T5887] task_work_run+0x125/0x1a0 [ 191.868911][ T5887] get_signal+0x1222/0x12c0 [ 191.873473][ T5887] arch_do_signal_or_restart+0xc1/0x1300 [ 191.879114][ T5887] ? kick_process+0xd4/0x140 [ 191.883706][ T5887] ? task_work_add+0x1a7/0x1d0 [ 191.888476][ T5887] ? get_sigframe_size+0x10/0x10 [ 191.893457][ T5887] ? __sys_connect+0x239/0x410 [ 191.898233][ T5887] ? exit_to_user_mode_loop+0x3b/0x130 [ 191.903699][ T5887] exit_to_user_mode_loop+0x9e/0x130 [ 191.908987][ T5887] exit_to_user_mode_prepare+0xee/0x180 [ 191.914539][ T5887] syscall_exit_to_user_mode+0x16/0x40 [ 191.920001][ T5887] do_syscall_64+0x58/0xa0 [ 191.924427][ T5887] ? clear_bhb_loop+0x30/0x80 [ 191.929109][ T5887] ? clear_bhb_loop+0x30/0x80 [ 191.933793][ T5887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.939687][ T5887] RIP: 0033:0x7fa7ec5f4ec9 [ 191.944107][ T5887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.963711][ T5887] RSP: 002b:00007fa7ea81a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 191.972125][ T5887] RAX: fffffffffffffe00 RBX: 00007fa7ec84c180 RCX: 00007fa7ec5f4ec9 [ 191.980270][ T5887] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000c [ 191.988504][ T5887] RBP: 00007fa7ec677f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.996477][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.004455][ T5887] R13: 00007fa7ec84c218 R14: 00007fa7ec84c180 R15: 00007ffc17bb90a8 [ 192.012463][ T5887] [ 192.015480][ T5887] [ 192.017800][ T5887] Allocated by task 5190: [ 192.022119][ T5887] __kasan_kmalloc+0xb5/0xf0 [ 192.026710][ T5887] rose_add_node+0x227/0xdb0 [ 192.031301][ T5887] rose_rt_ioctl+0x9db/0xe20 [ 192.035886][ T5887] rose_ioctl+0x27a/0x790 [ 192.040210][ T5887] sock_do_ioctl+0xd3/0x2f0 [ 192.044722][ T5887] sock_ioctl+0x4ed/0x6e0 [ 192.049047][ T5887] __se_sys_ioctl+0xfa/0x170 [ 192.053636][ T5887] do_syscall_64+0x4c/0xa0 [ 192.058050][ T5887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.063940][ T5887] [ 192.066263][ T5887] Freed by task 5881: [ 192.070235][ T5887] kasan_set_track+0x4b/0x70 [ 192.074822][ T5887] kasan_set_free_info+0x1f/0x40 [ 192.079757][ T5887] ____kasan_slab_free+0xd5/0x110 [ 192.084780][ T5887] slab_free_freelist_hook+0xea/0x170 [ 192.090237][ T5887] kfree+0xef/0x2a0 [ 192.094048][ T5887] rose_rt_device_down+0x4e2/0x530 [ 192.099154][ T5887] rose_device_event+0x5ec/0x680 [ 192.104090][ T5887] raw_notifier_call_chain+0xcb/0x160 [ 192.109462][ T5887] __dev_notify_flags+0x178/0x2d0 [ 192.114494][ T5887] dev_change_flags+0xe3/0x1a0 [ 192.119263][ T5887] dev_ifsioc+0x147/0xe70 [ 192.123599][ T5887] dev_ioctl+0x55f/0xe50 [ 192.127848][ T5887] sock_do_ioctl+0x222/0x2f0 [ 192.132440][ T5887] sock_ioctl+0x4ed/0x6e0 [ 192.136771][ T5887] __se_sys_ioctl+0xfa/0x170 [ 192.141367][ T5887] do_syscall_64+0x4c/0xa0 [ 192.145781][ T5887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.151674][ T5887] [ 192.153996][ T5887] Last potentially related work creation: [ 192.159700][ T5887] kasan_save_stack+0x35/0x60 [ 192.164394][ T5887] kasan_record_aux_stack+0xb8/0x100 [ 192.169675][ T5887] insert_work+0x54/0x3d0 [ 192.174001][ T5887] __queue_work+0x9c5/0xd50 [ 192.178498][ T5887] call_timer_fn+0x16c/0x530 [ 192.183085][ T5887] __run_timers+0x550/0x7c0 [ 192.187587][ T5887] run_timer_softirq+0x63/0xf0 [ 192.192541][ T5887] handle_softirqs+0x328/0x820 [ 192.197304][ T5887] __irq_exit_rcu+0x12f/0x220 [ 192.201973][ T5887] irq_exit_rcu+0x5/0x20 [ 192.206212][ T5887] sysvec_apic_timer_interrupt+0x52/0xc0 [ 192.211846][ T5887] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.217821][ T5887] [ 192.220140][ T5887] The buggy address belongs to the object at ffff8880618cf400 [ 192.220140][ T5887] which belongs to the cache kmalloc-512 of size 512 [ 192.234188][ T5887] The buggy address is located 50 bytes inside of [ 192.234188][ T5887] 512-byte region [ffff8880618cf400, ffff8880618cf600) [ 192.247375][ T5887] The buggy address belongs to the page: [ 192.253002][ T5887] page:ffffea0001863300 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880618cc000 pfn:0x618cc [ 192.264464][ T5887] head:ffffea0001863300 order:2 compound_mapcount:0 compound_pincount:0 [ 192.272785][ T5887] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 192.281046][ T5887] raw: 00fff00000010200 ffffea0001842d08 ffffea0000936008 ffff888016841c80 [ 192.289631][ T5887] raw: ffff8880618cc000 000000000010000a 00000001ffffffff 0000000000000000 [ 192.298204][ T5887] page dumped because: kasan: bad access detected [ 192.304614][ T5887] page_owner tracks the page as allocated [ 192.310323][ T5887] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4182, ts 55753587616, free_ts 16791282148 [ 192.329418][ T5887] get_page_from_freelist+0x1b77/0x1c60 [ 192.334968][ T5887] __alloc_pages+0x1e1/0x470 [ 192.339556][ T5887] new_slab+0xc0/0x4b0 [ 192.343622][ T5887] ___slab_alloc+0x81e/0xdf0 [ 192.348291][ T5887] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 192.354096][ T5887] __alloc_skb+0x22c/0x750 [ 192.358511][ T5887] alloc_uevent_skb+0x7d/0x230 [ 192.363269][ T5887] kobject_uevent_net_broadcast+0x17e/0x530 [ 192.369160][ T5887] kobject_uevent_env+0x556/0x890 [ 192.374176][ T5887] net_rx_queue_update_kobjects+0x221/0x490 [ 192.380063][ T5887] netdev_register_kobject+0x223/0x310 [ 192.385517][ T5887] register_netdevice+0x1019/0x16b0 [ 192.390712][ T5887] veth_newlink+0x668/0xda0 [ 192.395216][ T5887] rtnl_newlink+0x114c/0x17d0 [ 192.399895][ T5887] rtnetlink_rcv_msg+0x9b9/0xe60 [ 192.404829][ T5887] netlink_rcv_skb+0x1e0/0x430 [ 192.409594][ T5887] page last free stack trace: [ 192.414264][ T5887] free_unref_page_prepare+0x637/0x6c0 [ 192.419720][ T5887] free_unref_page+0x94/0x280 [ 192.424392][ T5887] free_contig_range+0x96/0xf0 [ 192.429151][ T5887] destroy_args+0x100/0xa20 [ 192.433652][ T5887] debug_vm_pgtable+0x318/0x370 [ 192.438586][ T5887] do_one_initcall+0x1ee/0x680 [ 192.443352][ T5887] do_initcall_level+0x137/0x1f0 [ 192.448456][ T5887] do_initcalls+0x4b/0x90 [ 192.452902][ T5887] kernel_init_freeable+0x3ce/0x560 [ 192.458108][ T5887] kernel_init+0x19/0x1b0 [ 192.462459][ T5887] ret_from_fork+0x1f/0x30 [ 192.466880][ T5887] [ 192.469204][ T5887] Memory state around the buggy address: [ 192.474829][ T5887] ffff8880618cf300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.482888][ T5887] ffff8880618cf380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 192.490942][ T5887] >ffff8880618cf400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.498999][ T5887] ^ [ 192.504621][ T5887] ffff8880618cf480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.512682][ T5887] ffff8880618cf500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.520749][ T5887] ================================================================== [ 192.528805][ T5887] Disabling lock debugging due to kernel taint [ 192.550688][ T5887] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.557934][ T5887] CPU: 1 PID: 5887 Comm: syz.1.427 Tainted: G B syzkaller #0 [ 192.566631][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.576688][ T5887] Call Trace: [ 192.579967][ T5887] [ 192.582894][ T5887] dump_stack_lvl+0x168/0x230 [ 192.587577][ T5887] ? show_regs_print_info+0x20/0x20 [ 192.592775][ T5887] ? load_image+0x3b0/0x3b0 [ 192.597279][ T5887] panic+0x2c9/0x7f0 [ 192.601174][ T5887] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 192.607329][ T5887] ? bpf_jit_dump+0xd0/0xd0 [ 192.611831][ T5887] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 192.617734][ T5887] ? _raw_spin_unlock+0x40/0x40 [ 192.622585][ T5887] ? rose_transmit_link+0x5b0/0x730 [ 192.627780][ T5887] check_panic_on_warn+0x80/0xa0 [ 192.632715][ T5887] ? rose_transmit_link+0x5b0/0x730 [ 192.637919][ T5887] end_report+0x6d/0xf0 [ 192.642103][ T5887] kasan_report+0x102/0x130 [ 192.646621][ T5887] ? rose_transmit_link+0x5b0/0x730 [ 192.651915][ T5887] ? __phys_addr+0xb6/0x170 [ 192.656414][ T5887] rose_transmit_link+0x5b0/0x730 [ 192.661435][ T5887] ? skb_put+0x117/0x210 [ 192.665675][ T5887] rose_write_internal+0x673/0x1e80 [ 192.670986][ T5887] ? rose_validate_nr+0x120/0x120 [ 192.676101][ T5887] ? del_timer+0x11a/0x1b0 [ 192.680685][ T5887] ? skb_queue_purge+0x62/0x290 [ 192.685534][ T5887] rose_release+0x22a/0x4e0 [ 192.690040][ T5887] sock_close+0xd5/0x240 [ 192.694311][ T5887] ? sock_mmap+0x90/0x90 [ 192.698554][ T5887] __fput+0x234/0x930 [ 192.702725][ T5887] task_work_run+0x125/0x1a0 [ 192.707434][ T5887] get_signal+0x1222/0x12c0 [ 192.711954][ T5887] arch_do_signal_or_restart+0xc1/0x1300 [ 192.717595][ T5887] ? kick_process+0xd4/0x140 [ 192.722183][ T5887] ? task_work_add+0x1a7/0x1d0 [ 192.726946][ T5887] ? get_sigframe_size+0x10/0x10 [ 192.731883][ T5887] ? __sys_connect+0x239/0x410 [ 192.736653][ T5887] ? exit_to_user_mode_loop+0x3b/0x130 [ 192.742121][ T5887] exit_to_user_mode_loop+0x9e/0x130 [ 192.747406][ T5887] exit_to_user_mode_prepare+0xee/0x180 [ 192.752959][ T5887] syscall_exit_to_user_mode+0x16/0x40 [ 192.758427][ T5887] do_syscall_64+0x58/0xa0 [ 192.762842][ T5887] ? clear_bhb_loop+0x30/0x80 [ 192.767523][ T5887] ? clear_bhb_loop+0x30/0x80 [ 192.772196][ T5887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.778082][ T5887] RIP: 0033:0x7fa7ec5f4ec9 [ 192.782504][ T5887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.802299][ T5887] RSP: 002b:00007fa7ea81a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 192.810718][ T5887] RAX: fffffffffffffe00 RBX: 00007fa7ec84c180 RCX: 00007fa7ec5f4ec9 [ 192.818775][ T5887] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000c [ 192.826743][ T5887] RBP: 00007fa7ec677f91 R08: 0000000000000000 R09: 0000000000000000 [ 192.834803][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.842766][ T5887] R13: 00007fa7ec84c218 R14: 00007fa7ec84c180 R15: 00007ffc17bb90a8 [ 192.850739][ T5887] [ 192.853968][ T5887] Kernel Offset: disabled [ 192.858285][ T5887] Rebooting in 86400 seconds..