last executing test programs: 35.251674879s ago: executing program 2 (id=414): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r3, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) socket(0x1, 0x803, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20001) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x2) 24.968237568s ago: executing program 2 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 23.567213936s ago: executing program 2 (id=436): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4040004) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) 21.69174055s ago: executing program 2 (id=439): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)=ANY=[@ANYBLOB='iocharset=ascii,noadinicb,adinicb,uid=forget,uid=forget,umask=00000000000000000000002,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0xfe, 0xc22, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_settime(0x0, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 19.750139501s ago: executing program 2 (id=443): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)=@x86={0x9, 0x7, 0xf2, 0x0, 0x3, 0x1, 0x6, 0x7, 0x1, 0x6, 0x6, 0xb, 0x0, 0x8, 0xb4d, 0x4, 0xa, 0x1, 0x8, '\x00', 0x1, 0x68a}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xfff, 0xae, 0x34325241, 0x3, [], [0x2b8, 0x0, 0x9, 0x7], [], [0x0, 0xfffffffffffffaa9]}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x82, 0x1b4, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3040, 0x40) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 18.275177476s ago: executing program 2 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x121840, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f00000000c0)={0x5d, 0x0, [{0x4, 0x859, 0x2, 0x7, 0x8, 0x5, 0x2}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x2000009a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55bd6c4c99fa884a, 0x2, '\x00', 0x0, @fallback=0x2c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, 0x0, 0x0) readv(r7, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) open_by_handle_at(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000f800000000000000fb15040c3053d7eab12f1ae7f0e8b6d3f932ea4f0206ca53135055ba4e470f0b3b6e57e3bde55040afc01892e6962c6963fc3c90dec2ab60b29cdebc1037f82697528ef1761171297f8ff2864a84a459f9f3e5ff33"], 0x60002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0xdc, 0xffffffff, 0x1c4, 0xffffffff, 0xffffffff, 0x1c4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@private=0xa010102, @multicast2, 0xffffffff, 0xffffffff, 'ip6gre0\x00', 'syzkaller0\x00', {0xff}, {}, 0x21, 0x3, 0x60}, 0x0, 0x70, 0xdc}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x5, 0x58ad, 0x4, 0x0, 0x0, "2d6683395228ec9762890fe5c9d0107a77ce6283723e24ff5179e472000480a670bf0b82c97399e88181fea5f96abde0ff6abcfe24fb78cd3b74e7bb502f9f0e"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0xffffff00, 'netdevsim0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x2, 0x28}, 0x0, 0xb4, 0xe8, 0x0, {}, [@common=@unspec=@nfacct={{0x44}, {'syz1\x00', 0x10001}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x2, 0x7}, {0x0, 0x3, 0x1}, {0x2, 0x4}, 0x0, 0x8}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000080), &(0x7f0000000100)=@v1={0x1000000, [{0x400, 0x2}]}, 0xc, 0x3) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 17.496726012s ago: executing program 0 (id=448): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0xfffffffe) listen(0xffffffffffffffff, 0x80000001) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x2) 16.138127606s ago: executing program 3 (id=450): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0xfffffffe) listen(0xffffffffffffffff, 0x80000001) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x2) 13.007415053s ago: executing program 3 (id=454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$rxrpc(0x21, 0x2, 0xa) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 12.965037657s ago: executing program 0 (id=455): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)=ANY=[@ANYBLOB='iocharset=ascii,noadinicb,adinicb,uid=forget,uid=forget,umask=00000000000000000000002,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0xfe, 0xc22, &(0x7f00000002c0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu43bTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22YXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKsmhTpCj7+2zqNzvz3sx7M+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/fOnMc+lhtwIAOEhXxr985qznPwB8rFz1//8AAAAAAAAAAAAAAHDYpSji8Ugxf2U9TVafOwYut2dv3Z4YGd252rFU1TxSlS9/Bp47e+78F54fvtDN96//oD0Zr45fvVR/ae7m/EJrcbE1XZ+YbU/NTbd2vYe91t9uqDoB9Zuv3Zq+fn2xfvbZc1s23x58r/+xk4MXh58+/VS37MTI6Oh4T5la34c++l3uNcLjaBRxOlI8890fp2ZEFLH3c3Gf785+O1Z1YqjqxMTIaNWRmXZzdqncONY9EUVEvadSo3uODuBa7EkjYrlsftngobJ74/PNhea1mVZ9rLmw1F5qz82OpU5ry/7Uo4gLKWIlItb6795dXxRRixTfPrGerkXEke55+Hw1MPje7Sj2sY+7ULaz3hexUjwC1+wQ648iXokUP3m7iKnynOWf+FzEK2V+P+LNMl+MSOUX43zEuzt8j3g01aKIvyiv/8X1NB0RGyc660frl79S/9Ls9bmest37yiP/fDhIh/zeNBBFNKs7/nr68L/ZAQAAAAAAAAAAAAAAAOBBOxZFPBkpXv6PP67GFUc1Lv3ExeE/GPzF3jHjT9xnP2XZZyNiudjdmNyjeQjxWBpL6SGPJf44G4gi/iSP//vmw24MAAAAAAAAAAAAAAAAAADAx1oRP4oUL7xzKq1E75zi7dkb9avNazOdWWG7c/9250zf2NjYqKdONnJO5lzOuZJzNedazihy/ZyNnJM5l3Ou5FzNuZYzjuT6ORs5J3Mu51zJuZpzLWfUcv2cjZyTOZdzruRczbmWMw7J3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8lRRTxs0jxra+tp0gR0YiYjE6u9nfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU38q4nuRov6HjTvrahGRqn87TpW/nI/G0TI/GY3hMl+MxqWczSprjW/e92hpX/rAh9eXivhhpOgfeOvO1cnXv6/zafOavfn1zU+/Uuvkke7Gwff6Hzt54uLw6K89ca/lHa/+0OX27K3b9YmR0dHxntW1fPRP9qwbzMctHkzXiYjF1994rTkz01qw8PFYqHUWanFI2nNQC/l+FYelPdsXGoejGZsLD/nGxIEon//vRorfeec/uw/87vP/Fzqf7jzh46d/uvn8f2H7jvbp+f94z7oX8u9G+moRA0s35/tORgwsvv7G6fbN5o3Wjdbs+TNnvjg8/MVzZ/qORgxcb8+0epb2fKoAAAAAAAAAAAAAAAAADlYq4vciRfOH66keEber8VqDF4efPv3UkThSjbfaMm7r1fGrl+ovzd2cX2gtLram6xOz7am56dZuDzdQDfeaGBndl87c17F9bv+xgZfm5l9faN/4o6Udtx8fuHRtcWmhObXz5jgWRUSjd81Q1eCJkdGq0TPt5mxVdewBvUqhLxXxX5Fi6nw9fTavy+P/to/w3zL+f3n7jvZp/N8netaVx0ypiJ9Git/+yyfis1U7j8dd5yyX+9tIMXThM7lcHC3LddvQea9AZ2RgWfb/IsU//mxr2e54yMc3yz636xP7iCiv/4lI8b0//078Rl639f0PO1//49t3tE/X/1M9645veV/BnrtOvv6nI8WLj78Vv5nXvd/7P4rY2Nj4RsSpXPjO+zn26fp/umfdYHSO+1sPrvsAAAAAAAAAAACPrL5UxN9FiqdGa+n5vG43f/9vevuO9unvf/1yz7rpA5qvaM8nFQAAAAAOib5UxI8ixY2lt+6Mod46/rtn/Ofvbs69PpK2ba3+nO+XqvcGPMg//+s1mI87ufduAwAAAAAAAAAAAAAAAAAAwKGSUhHP5/nUJ+8zn/pqpHj5f57J5dLJslx3HvjB6teBK3Ozpy/NzMxNNZea12Za9fH55lSrrPupSLH+N5/JdYtqfvXufPOdOd4HNrpzsS9EitG/75btzMXenZu8Mx94Zy72suwnIsV//8PWst15rD+9WfZsWfavI8VX/3nnsic3y54ry34nUvzgq/Vu2eNl2e77UTvvJB2oxUzr2am5mbtehQoAAAAAAAAAAAAAAAAAAAAfVF8q4s8ixf/eXInlPOw/z//fnYG/1i375td75vvf5nY1z/9gNf//vZY/zPz/gw+spwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OhIUcQbkWL+ynpa7S8/dwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lzw/fKGb71//QXsyXh2/eqn+0tzN+YXW4mJruj4x256am27teg97rb956jqGqhNQv/narenr1xfrZ589t2Xz7cH3+h87OXhx+OnTT3XLToyMjo73lKn1fYCjf6DGbToaRfxVpHjmuz9O/9IfUcTez8V9vjv77VjViaGqExMjo1VHZtrN2aVy41j3RBQR9Z5Kje45OoBrsSeNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv3t3fVHEa5Hi2yfW07/2RxzpnofPXxn/8pmz925HsY993IWynfW+iJXiEbhmh1h/FPFPkeInb5+Kf+uPqEXnJz4X8UqZ3494s8wXI1KK2PhGxLs7fI94NNWiiP8vr//F9fR2f3k/6N5XLn+l/qXZ63M9Zbv3lV09H3793sd86M+Hg3TI700DUcQPqjv+evp3/10DAAAAAAAAAAAAAAAAHCJF/GqkeOGdU6kaH3xnTHF79kb9avPaTGdYX3fsX3fM9MbGxkY9dbKRczLncs6VnKs513JGkevnbOSczLmccyXnas61nHEk18/ZyDmZcznnSs7VnGs5o5br52zknMy5nHMl52rOtZxxSMbuAQAAAAAAAAAAAAAAAAAAHy1F9U+Kb31tPW30d+aXnoxOrpoP9CPv5wEAAP//N4D+uw==") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_settime(0x0, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 11.763378825s ago: executing program 3 (id=456): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)=ANY=[@ANYBLOB='iocharset=ascii,noadinicb,adinicb,uid=forget,uid=forget,umask=00000000000000000000002,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0xfe, 0xc22, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_settime(0x0, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 10.90545675s ago: executing program 0 (id=457): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080)) getpid() r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 10.520896867s ago: executing program 1 (id=459): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x140}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) r6 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x8, 0x200) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x33, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r10, 0x4611, 0x2) 9.249770142s ago: executing program 3 (id=460): syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1) 9.198765947s ago: executing program 4 (id=461): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080)) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 9.090645948s ago: executing program 0 (id=462): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 8.238506521s ago: executing program 1 (id=463): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 8.162612729s ago: executing program 1 (id=464): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4040004) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) 6.737928219s ago: executing program 3 (id=465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 6.489961263s ago: executing program 0 (id=466): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4040004) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r3, 0x0, 0x0, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) 6.407465011s ago: executing program 4 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x121840, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f00000000c0)={0x5d, 0x0, [{0x4, 0x859, 0x2, 0x7, 0x8, 0x5, 0x2}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x2000009a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55bd6c4c99fa884a, 0x2, '\x00', 0x0, @fallback=0x2c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, 0x0, 0x0) readv(r7, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) open_by_handle_at(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000f800000000000000fb15040c3053d7eab12f1ae7f0e8b6d3f932ea4f0206ca53135055ba4e470f0b3b6e57e3bde55040afc01892e6962c6963fc3c90dec2ab60b29cdebc1037f82697528ef1761171297f8ff2864a84a459f9f3e5ff33"], 0x60002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0xdc, 0xffffffff, 0x1c4, 0xffffffff, 0xffffffff, 0x1c4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@private=0xa010102, @multicast2, 0xffffffff, 0xffffffff, 'ip6gre0\x00', 'syzkaller0\x00', {0xff}, {}, 0x21, 0x3, 0x60}, 0x0, 0x70, 0xdc}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x5, 0x58ad, 0x4, 0x0, 0x0, "2d6683395228ec9762890fe5c9d0107a77ce6283723e24ff5179e472000480a670bf0b82c97399e88181fea5f96abde0ff6abcfe24fb78cd3b74e7bb502f9f0e"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0xffffff00, 'netdevsim0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x2, 0x28}, 0x0, 0xb4, 0xe8, 0x0, {}, [@common=@unspec=@nfacct={{0x44}, {'syz1\x00', 0x10001}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x2, 0x7}, {0x0, 0x3, 0x1}, {0x2, 0x4}, 0x0, 0x8}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000080), &(0x7f0000000100)=@v1={0x1000000, [{0x400, 0x2}]}, 0xc, 0x3) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 4.524491546s ago: executing program 3 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x121840, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f00000000c0)={0x5d, 0x0, [{0x4, 0x859, 0x2, 0x7, 0x8, 0x5, 0x2}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x2000009a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55bd6c4c99fa884a, 0x2, '\x00', 0x0, @fallback=0x2c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, 0x0, 0x0) readv(r7, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) open_by_handle_at(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000f800000000000000fb15040c3053d7eab12f1ae7f0e8b6d3f932ea4f0206ca53135055ba4e470f0b3b6e57e3bde55040afc01892e6962c6963fc3c90dec2ab60b29cdebc1037f82697528ef1761171297f8ff2864a84a459f9f3e5ff33"], 0x60002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0xdc, 0xffffffff, 0x1c4, 0xffffffff, 0xffffffff, 0x1c4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@private=0xa010102, @multicast2, 0xffffffff, 0xffffffff, 'ip6gre0\x00', 'syzkaller0\x00', {0xff}, {}, 0x21, 0x3, 0x60}, 0x0, 0x70, 0xdc}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x5, 0x58ad, 0x4, 0x0, 0x0, "2d6683395228ec9762890fe5c9d0107a77ce6283723e24ff5179e472000480a670bf0b82c97399e88181fea5f96abde0ff6abcfe24fb78cd3b74e7bb502f9f0e"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0xffffff00, 'netdevsim0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x2, 0x28}, 0x0, 0xb4, 0xe8, 0x0, {}, [@common=@unspec=@nfacct={{0x44}, {'syz1\x00', 0x10001}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x2, 0x7}, {0x0, 0x3, 0x1}, {0x2, 0x4}, 0x0, 0x8}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000080), &(0x7f0000000100)=@v1={0x1000000, [{0x400, 0x2}]}, 0xc, 0x3) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 3.024449183s ago: executing program 32 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x121840, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f00000000c0)={0x5d, 0x0, [{0x4, 0x859, 0x2, 0x7, 0x8, 0x5, 0x2}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x2000009a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55bd6c4c99fa884a, 0x2, '\x00', 0x0, @fallback=0x2c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, 0x0, 0x0) readv(r7, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) open_by_handle_at(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000f800000000000000fb15040c3053d7eab12f1ae7f0e8b6d3f932ea4f0206ca53135055ba4e470f0b3b6e57e3bde55040afc01892e6962c6963fc3c90dec2ab60b29cdebc1037f82697528ef1761171297f8ff2864a84a459f9f3e5ff33"], 0x60002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0xdc, 0xffffffff, 0x1c4, 0xffffffff, 0xffffffff, 0x1c4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@private=0xa010102, @multicast2, 0xffffffff, 0xffffffff, 'ip6gre0\x00', 'syzkaller0\x00', {0xff}, {}, 0x21, 0x3, 0x60}, 0x0, 0x70, 0xdc}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x5, 0x58ad, 0x4, 0x0, 0x0, "2d6683395228ec9762890fe5c9d0107a77ce6283723e24ff5179e472000480a670bf0b82c97399e88181fea5f96abde0ff6abcfe24fb78cd3b74e7bb502f9f0e"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff, 0xffffff00, 'netdevsim0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0x2, 0x28}, 0x0, 0xb4, 0xe8, 0x0, {}, [@common=@unspec=@nfacct={{0x44}, {'syz1\x00', 0x10001}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x2, 0x7}, {0x0, 0x3, 0x1}, {0x2, 0x4}, 0x0, 0x8}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000080), &(0x7f0000000100)=@v1={0x1000000, [{0x400, 0x2}]}, 0xc, 0x3) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 3.014774264s ago: executing program 4 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x721701, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a8, 0x8, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a", 0x11) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000640), 0x0}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 2.975759848s ago: executing program 1 (id=471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.940987852s ago: executing program 0 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x2b, &(0x7f0000024140)=ANY=[@ANYBLOB="0380c2000400bbbbbbbbbbbb0800450c001cfffffffff0019078ac1414bbac14f6a908009078000f00073e"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1.896998644s ago: executing program 4 (id=473): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)=@x86={0x9, 0x7, 0xf2, 0x0, 0x3, 0x1, 0x6, 0x7, 0x1, 0x6, 0x6, 0xb, 0x0, 0x8, 0xb4d, 0x4, 0xa, 0x1, 0x8, '\x00', 0x1, 0x68a}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xfff, 0xae, 0x34325241, 0x3, [], [0x2b8, 0x0, 0x9, 0x7], [], [0x0, 0xfffffffffffffaa9]}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x82, 0x1b4, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3040, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7) 1.790612425s ago: executing program 1 (id=474): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x140}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) r6 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x8, 0x200) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x33, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r10, 0x4611, 0x2) 1.064546115s ago: executing program 4 (id=475): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20004004) pipe2$watch_queue(0x0, 0x80) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x578, 0x40, 0x1001, 0x0, 0xd968d5b908ac0cde, 0x0, {0xfffffffc, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x4, 0x0, 0x6}) 901.743612ms ago: executing program 1 (id=476): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)=ANY=[@ANYBLOB='iocharset=ascii,noadinicb,adinicb,uid=forget,uid=forget,umask=00000000000000000000002,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0xfe, 0xc22, &(0x7f00000002c0)="$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") setrlimit(0x1, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_settime(0x0, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 0s ago: executing program 4 (id=477): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)=@x86={0x9, 0x7, 0xf2, 0x0, 0x3, 0x1, 0x6, 0x7, 0x1, 0x6, 0x6, 0xb, 0x0, 0x8, 0xb4d, 0x4, 0xa, 0x1, 0x8, '\x00', 0x1, 0x68a}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xfff, 0xae, 0x34325241, 0x3, [], [0x2b8, 0x0, 0x9, 0x7], [], [0x0, 0xfffffffffffffaa9]}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x82, 0x1b4, &(0x7f0000000640)="$eJzsVU+L00AU/71k2jQexKsieFC0PbRN45+rnqQfwA9gaWMtpqhNQVs8xFO/hwj9Gh7Er+BB2Uv3sCzsYfe6LFkm8yZN2sKyLGzLMj9If7/3ezOZN5ny5n30OXIAnFno4hVS2LiNf0QQAB6Q8l47ig/LihscHwjFNfZ/MP9njibTD50wDEYbRVIFio6NVedioVUdl5p2wwRtSMW41jL+OFg7ghjATnyf7QswiilYWy3M3fpnyQkSBce56guX4cvvFo7SXvb3+FtXircAkiRJpNdTD+XHyE70W41xpXdPpA/ZSLIxsvnJ4AmA05/DT81oMq0Php1+0A/I95++8J553nO/+W4QBp76pdwSFv8hJNcAyJ7q5vIlAHvcYG9hHbp8zpO7Ur5G9eFSE6+n5yYsCL+yudzbId/xBo9RAfAlpqWrC0e6pTYINkQatERuHbW3SppodD+GvRkIxCO9OQQsPW2BUhb4WSAK250Bd2VpjzhuM8+ZF8z6ztJ3kZA9CPscVWOgjK+d8XjUkpZSqadrVp5/J0bugOSqJ+Xi5u47G07FwMDAwMDAwGCncR4AAP//mMZQbw==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3040, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. [ 63.403703][ T4172] cgroup: Unknown subsys name 'net' [ 63.545838][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.064456][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.547851][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.631472][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 66.745998][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.754388][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.762721][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.772369][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 66.796009][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.803480][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.812081][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.840920][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.848081][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.856041][ T4183] device bridge_slave_0 entered promiscuous mode [ 66.872023][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 66.887748][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.897945][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.905234][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.913640][ T4183] device bridge_slave_1 entered promiscuous mode [ 66.950065][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.982210][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.993151][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.028647][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.058444][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.065792][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.073843][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.102695][ T4192] team0: Port device team_slave_0 added [ 67.113888][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.121208][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.129207][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.145885][ T4192] team0: Port device team_slave_1 added [ 67.174922][ T4183] team0: Port device team_slave_0 added [ 67.212035][ T4183] team0: Port device team_slave_1 added [ 67.220117][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.243879][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.251068][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.259025][ T4193] device bridge_slave_0 entered promiscuous mode [ 67.275348][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.286116][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.293362][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.319535][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.331440][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.338550][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.346949][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.354484][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.361680][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.369822][ T4193] device bridge_slave_1 entered promiscuous mode [ 67.392570][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.399607][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.425593][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.436864][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.444091][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.452396][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.466315][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.473462][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.499453][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.536686][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.544777][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.571097][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.585273][ T4186] team0: Port device team_slave_0 added [ 67.593140][ T4186] team0: Port device team_slave_1 added [ 67.615645][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.644420][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.655144][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.680783][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.687766][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.715836][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.729152][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.766308][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.773178][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.781683][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.788651][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.814758][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.836485][ T4193] team0: Port device team_slave_0 added [ 67.870659][ T4193] team0: Port device team_slave_1 added [ 67.878471][ T4187] team0: Port device team_slave_0 added [ 67.896587][ T4183] device hsr_slave_0 entered promiscuous mode [ 67.903596][ T4183] device hsr_slave_1 entered promiscuous mode [ 67.910320][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.918065][ T4183] Cannot create hsr debugfs directory [ 67.933530][ T4187] team0: Port device team_slave_1 added [ 67.961165][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.967943][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.975137][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.983016][ T4186] Cannot create hsr debugfs directory [ 68.034601][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.042614][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.068997][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.099601][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.106589][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.132873][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.144614][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.151938][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.178008][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.207469][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.214615][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.240668][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.251941][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 68.260123][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 68.266202][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 68.330254][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 68.331134][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.338298][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 68.349710][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.356184][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.363902][ T4187] Cannot create hsr debugfs directory [ 68.376123][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.383306][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.390417][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.398009][ T4193] Cannot create hsr debugfs directory [ 68.649805][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.673649][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.691898][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.704214][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.777112][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.786236][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.800932][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.816917][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.862491][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.872960][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.883873][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.893655][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.944808][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.979880][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.991414][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.008096][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.017520][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.054607][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.062676][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.073974][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.120683][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.130836][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.141460][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.148657][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.157670][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.166631][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.176104][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.183216][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.191078][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.230748][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.238853][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.247968][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.256749][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.266310][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.276402][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.302157][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.311869][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.335917][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.346703][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.373631][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.381080][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.390473][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.399214][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.423975][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.435093][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.447339][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.463320][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.480215][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.491016][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.499005][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.507848][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.516472][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.528878][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.538281][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.547661][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.557329][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.564459][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.577240][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.604247][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.614332][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.629784][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.638342][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.645499][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.661042][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.702684][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.716785][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.729549][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.736659][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.747675][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.756473][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.765338][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.772506][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.782553][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.791941][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.801439][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.810557][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.820123][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.827849][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.837320][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.869573][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.877665][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.887941][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.897145][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.908369][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.919181][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.928103][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.937809][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.944914][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.953349][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.962350][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.970997][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.978064][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.985968][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.994834][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.002616][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.025133][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.035572][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.044863][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.054768][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.063591][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.073009][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.087098][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.108335][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.117777][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.129597][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.138461][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.148629][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.158134][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.202428][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.215315][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.225130][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.238636][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.254054][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.262998][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.271980][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.281313][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.289987][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.298389][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.307150][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.327253][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.334857][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 70.341126][ T4243] Bluetooth: hci1: command 0x041b tx timeout [ 70.347338][ T4243] Bluetooth: hci2: command 0x041b tx timeout [ 70.373161][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.383578][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.411953][ T4243] Bluetooth: hci3: command 0x041b tx timeout [ 70.412859][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.419830][ T4243] Bluetooth: hci4: command 0x041b tx timeout [ 70.438342][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.467393][ T4183] device veth0_vlan entered promiscuous mode [ 70.478142][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.487580][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.498255][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.508603][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.517896][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.526254][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.545778][ T4183] device veth1_vlan entered promiscuous mode [ 70.565953][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.599612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.608222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.620140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.627675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.655623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.664738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.680659][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.691138][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.702418][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.713403][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.732716][ T4183] device veth0_macvtap entered promiscuous mode [ 70.759997][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.774513][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.785409][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.795621][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.802762][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.812892][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.830978][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.838465][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.848167][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.858121][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.868305][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.875460][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.884792][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.908327][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.917900][ T4183] device veth1_macvtap entered promiscuous mode [ 70.927912][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.945236][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.955530][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.963729][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.979155][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.999318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.008770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.045670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.055992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.064619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.074277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.086848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.096245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.114863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.130674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.144098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.153080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.165565][ T4193] device veth0_vlan entered promiscuous mode [ 71.183374][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.194368][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.220342][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.232659][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.241672][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.256066][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.264571][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.292107][ T4193] device veth1_vlan entered promiscuous mode [ 71.305053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.317273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.325859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.351799][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.363533][ T4186] device veth0_vlan entered promiscuous mode [ 71.373432][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.376347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.380575][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.388947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.408343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.421248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.445306][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.455009][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.467819][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.484370][ T4186] device veth1_vlan entered promiscuous mode [ 71.523132][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.534611][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.543957][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.553040][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.562561][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.571110][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.579626][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.587580][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.598213][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.607739][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.619242][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.630610][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.650152][ T4192] device veth0_vlan entered promiscuous mode [ 71.699039][ T4193] device veth0_macvtap entered promiscuous mode [ 71.712597][ T4192] device veth1_vlan entered promiscuous mode [ 71.722949][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.732710][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.742166][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.754467][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.763774][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.772972][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.783007][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.795958][ T4193] device veth1_macvtap entered promiscuous mode [ 71.812132][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.845294][ T4186] device veth0_macvtap entered promiscuous mode [ 71.880425][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.891514][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.903303][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.911696][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.920532][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.929007][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.938382][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.947522][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.958638][ T4186] device veth1_macvtap entered promiscuous mode [ 71.977929][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.986621][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.996232][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.006084][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.015548][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.026770][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.037672][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.049127][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.073294][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.082335][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.114354][ T4192] device veth0_macvtap entered promiscuous mode [ 72.123034][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.132956][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.142374][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.151436][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.168305][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.183677][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.193841][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.206465][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.217720][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.234830][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.245799][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.256581][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.267372][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.279581][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.287051][ T4187] device veth0_vlan entered promiscuous mode [ 72.295017][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.303722][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.314042][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.322816][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.332719][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.341809][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.351350][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.367264][ T4192] device veth1_macvtap entered promiscuous mode [ 72.374621][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.383741][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.390229][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.405717][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.415111][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 72.421400][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 72.421944][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.427504][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 72.443284][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.460438][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.468463][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.477119][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.485234][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.490656][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 72.498525][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 72.529605][ T4187] device veth1_vlan entered promiscuous mode [ 72.536706][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.546477][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.577583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.590466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.598510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.664483][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.681741][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.697675][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.709889][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.720443][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.731958][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.743933][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.753281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.762462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.771641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.781084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.796199][ T4187] device veth0_macvtap entered promiscuous mode [ 72.807753][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.826124][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.836340][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.854233][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.873732][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.884792][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.903526][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.926222][ T4187] device veth1_macvtap entered promiscuous mode [ 72.937781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.946599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.955440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.970681][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.979705][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.988430][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.997490][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.065086][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.076115][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.096191][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.108856][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.109665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.130811][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.142186][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.153557][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.164147][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.174422][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.185198][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.195701][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.206209][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.219173][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.247080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.255786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.265846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.278670][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.291607][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.302637][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.313151][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.323032][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.333830][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.344063][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.354929][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.371318][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.401559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.412195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.433442][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.448624][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.457729][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.468238][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.488521][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.503989][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.506069][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.529183][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.538893][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.570556][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.625530][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.655204][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.675066][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.806147][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.836377][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.845964][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 73.871133][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 73.880889][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.888904][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.922438][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.930122][ T4308] capability: warning: `syz.1.6' uses deprecated v2 capabilities in a way that may be insecure [ 73.955999][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 73.981595][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 74.025867][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.056593][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 74.089118][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.117462][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.138163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.250051][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.259354][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.269311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.279311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.288455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.297451][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.306379][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.315305][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 74.324224][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.333230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.491824][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 74.519560][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 74.561314][ T4307] loop2: detected capacity change from 0 to 32768 [ 74.623810][ T4315] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 74.817700][ T4307] ======================================================= [ 74.817700][ T4307] WARNING: The mand mount option has been deprecated and [ 74.817700][ T4307] and is ignored by this kernel. Remove the mand [ 74.817700][ T4307] option from the mount to silence this warning. [ 74.817700][ T4307] ======================================================= [ 74.854785][ T4315] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 74.929706][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 75.221450][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 75.273776][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 75.352358][ T4307] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 76.587894][ T26] audit: type=1804 audit(1760964118.730:2): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7" name="/newroot/1/file1/bus" dev="loop2" ino=17058 res=1 errno=0 [ 76.759895][ T26] audit: type=1326 audit(1760964118.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4325 comm="syz.1.10" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53cc05dfc9 code=0x0 [ 76.854315][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 77.917994][ T4340] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.951315][ T4340] loop0: detected capacity change from 0 to 512 [ 78.184140][ T4340] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.828242][ T4390] serio: Serial port ptm3 [ 86.737602][ T1325] cfg80211: failed to load regulatory.db [ 89.748174][ T4427] netlink: 'syz.4.38': attribute type 10 has an invalid length. [ 89.819674][ T4429] tipc: Can't bind to reserved service type 0 [ 92.424330][ T4432] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.791677][ T4427] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.246021][ T4424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.280372][ T4446] netlink: 'syz.3.44': attribute type 10 has an invalid length. [ 94.485897][ T4446] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.950251][ T4445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.211986][ T4463] device syzkaller0 entered promiscuous mode [ 98.666951][ T26] audit: type=1326 audit(1760964140.810:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.3.52" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ef9924fc9 code=0x0 [ 99.589427][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 103.112786][ T4498] device syzkaller0 entered promiscuous mode [ 104.343901][ T4229] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.824465][ T4517] loop3: detected capacity change from 0 to 2048 [ 105.835794][ T4229] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.877602][ T4517] EXT4-fs (loop3): quotafile must be on filesystem root [ 105.934355][ T4518] device syzkaller0 entered promiscuous mode [ 107.262971][ T4530] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 107.417303][ T4529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.660778][ T4541] fido_id[4541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.182642][ T4530] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.219559][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 110.871595][ T4571] netlink: 'syz.4.75': attribute type 10 has an invalid length. [ 115.669595][ T7] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 115.785534][ T7] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.829231][ T4594] loop3: detected capacity change from 0 to 2048 [ 116.056225][ T4594] EXT4-fs (loop3): quotafile must be on filesystem root [ 116.719037][ T4568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.865361][ T4614] serio: Serial port ptm0 [ 118.075470][ T4604] fido_id[4604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.337217][ T4257] Bluetooth: hci4: command 0x0405 tx timeout [ 120.760946][ T4631] netlink: 'syz.4.93': attribute type 10 has an invalid length. [ 121.668251][ T4628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.021707][ T4646] Zero length message leads to an empty skb [ 126.611931][ T4258] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 126.705335][ T4258] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.794732][ T4661] loop0: detected capacity change from 0 to 2048 [ 126.827055][ T4661] EXT4-fs (loop0): quotafile must be on filesystem root [ 127.944168][ T4667] serio: Serial port ptm1 [ 128.172000][ T4663] fido_id[4663]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.385230][ T7] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 128.409808][ T7] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.460450][ T4671] loop2: detected capacity change from 0 to 2048 [ 128.484302][ T4671] EXT4-fs (loop2): quotafile must be on filesystem root [ 128.539892][ T4675] netlink: 'syz.0.106': attribute type 10 has an invalid length. [ 128.782129][ T4676] fido_id[4676]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.840836][ T4675] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.915268][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 128.934579][ T7] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.981772][ T4681] loop4: detected capacity change from 0 to 2048 [ 129.057379][ T4681] EXT4-fs (loop4): quotafile must be on filesystem root [ 129.306102][ T4672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.010970][ T4698] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 130.119032][ T4698] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.468454][ T4706] device syzkaller0 entered promiscuous mode [ 130.601058][ T4454] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 130.632231][ T4454] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.699096][ T4710] loop2: detected capacity change from 0 to 2048 [ 130.772425][ T4710] EXT4-fs (loop2): quotafile must be on filesystem root [ 130.830482][ T4694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.982817][ T4713] serio: Serial port ptm1 [ 132.649651][ T4730] device syzkaller0 entered promiscuous mode [ 132.652082][ T4258] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 132.687753][ T4258] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.713565][ T4732] loop2: detected capacity change from 0 to 2048 [ 132.763399][ T4732] EXT4-fs (loop2): quotafile must be on filesystem root [ 132.812343][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818742][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.165120][ T4743] netlink: 'syz.1.124': attribute type 10 has an invalid length. [ 133.303931][ T4745] serio: Serial port ptm0 [ 133.550253][ T4734] fido_id[4734]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.945966][ T4737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.453130][ T4800] serio: Serial port ptm0 [ 141.583083][ T4810] loop1: detected capacity change from 0 to 512 [ 141.640562][ T4810] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 141.746824][ T4812] loop3: detected capacity change from 0 to 2048 [ 142.421819][ T4812] EXT4-fs (loop3): quotafile must be on filesystem root [ 143.103909][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 143.169383][ T4270] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.376600][ T4270] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.918137][ T4847] serio: Serial port ptm0 [ 150.009593][ T4853] fido_id[4853]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.985087][ T4872] serio: Serial port ptm0 [ 159.842111][ T26] audit: type=1326 audit(1760964201.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4908 comm="syz.3.172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ef9924fc9 code=0x0 [ 160.375526][ T4883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.513471][ T4916] serio: Serial port ptm0 [ 161.682614][ T4921] afs: Unknown parameter 'dynck' [ 161.692428][ T4921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.173'. [ 168.743503][ T26] audit: type=1326 audit(1760964210.890:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.3.186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ef9924fc9 code=0x0 [ 171.675907][ T4984] device syzkaller0 entered promiscuous mode [ 172.085016][ T4993] afs: Unknown parameter 'dynck' [ 172.094924][ T4993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.193'. [ 173.445919][ T5002] serio: Serial port ptm0 [ 174.927655][ T5022] netlink: 'syz.4.201': attribute type 10 has an invalid length. [ 176.779088][ T5020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.642302][ T5042] afs: Unknown parameter 'dynck' [ 180.650532][ T5042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 184.032625][ T5072] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 184.305099][ T5075] afs: Unknown parameter 'dynck' [ 184.314185][ T5075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.216'. [ 185.206355][ T5069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.115193][ T26] audit: type=1326 audit(1760964228.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.4.218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08332defc9 code=0x0 [ 186.301493][ T5089] afs: Unknown parameter 'dynck' [ 186.309482][ T5089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.219'. [ 189.709079][ T5101] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.283617][ T5104] loop3: detected capacity change from 0 to 512 [ 190.399035][ T5104] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.754706][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 190.770096][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 190.792015][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 190.801324][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 190.811287][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 191.000614][ T5116] afs: Unknown parameter 'dynck' [ 191.266357][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 191.402917][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 191.905000][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 192.180940][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 192.209399][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 193.569459][ T5135] device syzkaller0 entered promiscuous mode [ 193.929400][ T5141] afs: Unknown parameter 'dynck' [ 193.938249][ T5141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'. [ 194.254877][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.263748][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.273500][ T5156] loop2: detected capacity change from 0 to 512 [ 196.312733][ T5154] overlayfs: failed to resolve './file0': -2 [ 196.440176][ T5156] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.421576][ T5172] device syzkaller0 entered promiscuous mode [ 200.398538][ T5179] netlink: 'syz.0.241': attribute type 4 has an invalid length. [ 214.842218][ T5260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.260'. [ 215.230274][ T5273] netlink: 'syz.2.264': attribute type 10 has an invalid length. [ 226.369480][ T4257] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 226.779587][ T4257] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 226.823698][ T4257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.940621][ T4257] usb 4-1: config 0 descriptor?? [ 227.042566][ T4257] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 227.479385][ T4257] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 229.230670][ T4257] gspca_cpia1: usb_control_msg 02, error -110 [ 229.269513][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 230.169495][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 230.289356][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 230.341840][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 230.374580][ T4257] cpia1 4-1:0.0: unexpected systemstate: 00 [ 230.483354][ T4257] usb 4-1: USB disconnect, device number 2 [ 232.679355][ T4257] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 234.786963][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.825408][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.930331][ T4257] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 234.999173][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.052167][ T4257] usb 2-1: config 0 descriptor?? [ 235.142212][ T4257] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 235.589424][ T4257] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 236.860388][ T5409] serio: Serial port ptm0 [ 237.359664][ T4257] gspca_cpia1: usb_control_msg 02, error -110 [ 237.909373][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 237.929343][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 237.959337][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 237.979867][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 237.986212][ T4257] cpia1 2-1:0.0: unexpected systemstate: 00 [ 239.826598][ T4243] usb 2-1: USB disconnect, device number 2 [ 241.874784][ T5445] loop4: detected capacity change from 0 to 2048 [ 241.995921][ T5445] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 242.083916][ T5445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.869207][ C0] sched: RT throttling activated [ 246.739725][ T4257] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 247.158086][ T4270] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 247.219672][ T4257] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 247.238886][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.385684][ T4257] usb 3-1: config 0 descriptor?? [ 247.452479][ T4257] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 247.589517][ T4270] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 247.607916][ T4270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.663337][ T4270] usb 1-1: config 0 descriptor?? [ 247.711433][ T4270] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 247.962804][ T4257] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 248.848652][ T4270] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 249.059562][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 249.489722][ T21] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 249.503032][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.539680][ T21] usb 4-1: config 0 descriptor?? [ 249.612514][ T21] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 249.959613][ T4257] gspca_cpia1: usb_control_msg 02, error -110 [ 249.989368][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 250.009470][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 250.076038][ T21] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 250.083314][ T4270] gspca_cpia1: usb_control_msg 02, error -110 [ 250.139631][ T4270] gspca_cpia1: usb_control_msg 05, error -32 [ 250.161556][ T4257] gspca_cpia1: usb_control_msg 05, error -71 [ 250.197940][ T4257] cpia1 3-1:0.0: unexpected systemstate: 00 [ 250.204753][ T4270] gspca_cpia1: usb_control_msg 05, error -32 [ 250.231890][ T4257] usb 3-1: USB disconnect, device number 2 [ 250.259375][ T4270] gspca_cpia1: usb_control_msg 05, error -71 [ 250.275855][ T4270] cpia1 1-1:0.0: unexpected systemstate: 00 [ 250.287230][ T4270] usb 1-1: USB disconnect, device number 2 [ 251.319355][ T21] gspca_cpia1: usb_control_msg 02, error -110 [ 251.938295][ T21] gspca_cpia1: usb_control_msg 05, error -32 [ 251.948416][ T5487] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 252.349358][ T21] gspca_cpia1: usb_control_msg 05, error -32 [ 252.389595][ T21] gspca_cpia1: usb_control_msg 05, error -32 [ 252.419482][ T21] gspca_cpia1: usb_control_msg 05, error -32 [ 252.425616][ T21] cpia1 4-1:0.0: unexpected systemstate: 00 [ 252.466658][ T21] usb 4-1: USB disconnect, device number 3 [ 255.455201][ T5521] loop1: detected capacity change from 0 to 2048 [ 255.610976][ T5525] netlink: 'syz.2.326': attribute type 10 has an invalid length. [ 255.642487][ T5521] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 255.691239][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.697607][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.701418][ T5521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.200499][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 263.392222][ T5556] loop0: detected capacity change from 0 to 2048 [ 263.542839][ T5556] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 263.710048][ T5556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.223509][ T5570] loop3: detected capacity change from 0 to 2048 [ 266.011001][ T5570] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 266.372181][ T5570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.441314][ T5582] loop1: detected capacity change from 0 to 2048 [ 267.538309][ T5582] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 267.572175][ T5582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.919380][ T4270] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 272.049470][ T4270] usb 4-1: unable to read config index 0 descriptor/all [ 272.056510][ T4270] usb 4-1: can't read configurations, error -71 [ 273.072564][ T5614] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 273.118706][ T5617] loop1: detected capacity change from 0 to 2048 [ 273.200638][ T5612] loop3: detected capacity change from 0 to 512 [ 273.238291][ T5617] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 273.317177][ T5617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.356243][ T5612] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.099479][ T4257] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 277.693795][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 277.794195][ T5641] loop4: detected capacity change from 0 to 2048 [ 277.828392][ T5641] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 277.899824][ T4257] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 277.910598][ T4257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.922965][ T4257] usb 3-1: config 0 descriptor?? [ 277.966323][ T5641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.981476][ T4257] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 278.530096][ T4257] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 279.271954][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 280.269570][ T4257] gspca_cpia1: usb_control_msg 02, error -110 [ 280.739553][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 280.899625][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 281.009698][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 281.081661][ T4257] gspca_cpia1: usb_control_msg 05, error -32 [ 281.087694][ T4257] cpia1 3-1:0.0: unexpected systemstate: 00 [ 281.174299][ T5661] loop4: detected capacity change from 0 to 2048 [ 281.295778][ T5667] loop1: detected capacity change from 0 to 2048 [ 281.349994][ T5661] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 281.409952][ T4257] usb 3-1: USB disconnect, device number 3 [ 281.669083][ T5667] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 281.699284][ T5661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.293282][ T5667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.906458][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 284.367382][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 287.238477][ T5700] netlink: 'syz.3.371': attribute type 10 has an invalid length. [ 287.444062][ T4229] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 287.839522][ T4229] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 287.849322][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.898066][ T4229] usb 3-1: config 0 descriptor?? [ 287.961717][ T4229] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 288.379522][ T4229] cpia1 3-1:0.0: unexpected state after lo power cmd: 01 [ 289.769663][ T4229] gspca_cpia1: usb_control_msg 01, error -110 [ 289.775854][ T4229] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 291.553208][ T4236] usb 3-1: USB disconnect, device number 4 [ 291.721148][ T5730] loop3: detected capacity change from 0 to 2048 [ 291.797293][ T5730] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 291.841741][ T5730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.936607][ T5750] loop2: detected capacity change from 0 to 2048 [ 294.182627][ T5750] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 294.201049][ T5750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.273764][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.399306][ T4229] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 294.415326][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.789466][ T4229] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 295.533173][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.537935][ T4229] usb 4-1: config 0 descriptor?? [ 296.860682][ T26] audit: type=1326 audit(1760964338.950:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb134fa6fc9 code=0x7ffc0000 [ 297.540026][ T26] audit: type=1326 audit(1760964338.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb134fa6fc9 code=0x7ffc0000 [ 297.563286][ T26] audit: type=1326 audit(1760964338.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb134fa6fc9 code=0x7ffc0000 [ 297.563787][ T4229] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 297.591579][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 297.606291][ T26] audit: type=1326 audit(1760964338.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb134fa6fc9 code=0x7ffc0000 [ 297.709394][ T26] audit: type=1326 audit(1760964338.970:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb134fa6fc9 code=0x7ffc0000 [ 297.828126][ T26] audit: type=1326 audit(1760964338.970:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb134fa8e5c code=0x7ffc0000 [ 297.881117][ T4229] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 298.029493][ T23] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 298.042518][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.042620][ T26] audit: type=1326 audit(1760964338.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb134fa8d94 code=0x7ffc0000 [ 298.100479][ T23] usb 2-1: config 0 descriptor?? [ 298.132116][ T26] audit: type=1326 audit(1760964338.980:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb134fa8d94 code=0x7ffc0000 [ 298.155930][ T23] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 298.165620][ T26] audit: type=1326 audit(1760964338.980:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb134fa6fc9 code=0x7ffc0000 [ 298.218154][ T26] audit: type=1326 audit(1760964338.980:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb134fa6fc9 code=0x7ffc0000 [ 299.089375][ T23] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 299.239741][ T4229] gspca_cpia1: usb_control_msg 02, error -110 [ 299.342014][ T4229] gspca_cpia1: usb_control_msg 05, error -32 [ 300.389670][ T23] gspca_cpia1: usb_control_msg 02, error -110 [ 300.397572][ T4229] gspca_cpia1: usb_control_msg 05, error -32 [ 300.479399][ T4229] gspca_cpia1: usb_control_msg 05, error -32 [ 300.485582][ T23] gspca_cpia1: usb_control_msg 05, error -32 [ 300.509679][ T4229] gspca_cpia1: usb_control_msg 05, error -71 [ 300.515703][ T4229] cpia1 4-1:0.0: unexpected systemstate: 00 [ 300.549367][ T23] gspca_cpia1: usb_control_msg 05, error -32 [ 300.569368][ T23] gspca_cpia1: usb_control_msg 05, error -32 [ 300.589378][ T23] gspca_cpia1: usb_control_msg 05, error -32 [ 300.595408][ T23] cpia1 2-1:0.0: unexpected systemstate: 00 [ 300.611110][ T4229] usb 4-1: USB disconnect, device number 6 [ 300.640206][ T23] usb 2-1: USB disconnect, device number 3 [ 300.665984][ T5781] loop4: detected capacity change from 0 to 2048 [ 300.668184][ T5785] loop2: detected capacity change from 0 to 2048 [ 300.705740][ T5785] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 300.736639][ T5785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.763244][ T5787] loop0: detected capacity change from 0 to 2048 [ 302.579957][ T5656] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 302.859632][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 302.859670][ T26] audit: type=1326 audit(1760964344.800:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08332defc9 code=0x7ffc0000 [ 302.897839][ T26] audit: type=1326 audit(1760964344.800:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08332defc9 code=0x7ffc0000 [ 303.116459][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 303.451580][ T5656] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 303.460777][ T5656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.481825][ T26] audit: type=1326 audit(1760964344.810:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08332defc9 code=0x7ffc0000 [ 303.482582][ T5656] usb 1-1: config 0 descriptor?? [ 303.570912][ T5656] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 303.587160][ T26] audit: type=1326 audit(1760964344.820:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08332defc9 code=0x7ffc0000 [ 303.658815][ T26] audit: type=1326 audit(1760964344.820:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08332defc9 code=0x7ffc0000 [ 303.686167][ T26] audit: type=1326 audit(1760964344.820:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f08332e0e5c code=0x7ffc0000 [ 303.715070][ T26] audit: type=1326 audit(1760964344.820:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08332e0d94 code=0x7ffc0000 [ 303.766031][ T26] audit: type=1326 audit(1760964344.830:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08332e0d94 code=0x7ffc0000 [ 303.805965][ T26] audit: type=1326 audit(1760964344.830:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08332defc9 code=0x7ffc0000 [ 303.835285][ T26] audit: type=1326 audit(1760964344.830:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5809 comm="syz.4.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08332defc9 code=0x7ffc0000 [ 303.910910][ T4229] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 303.922940][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.940300][ T4229] usb 2-1: config 0 descriptor?? [ 303.991593][ T4229] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 304.019471][ T5656] cpia1 1-1:0.0: unexpected state after lo power cmd: 01 [ 304.789433][ T4229] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 304.929545][ T5656] gspca_cpia1: usb_control_msg 01, error -71 [ 304.935586][ T5656] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 304.962718][ T5656] usb 1-1: USB disconnect, device number 3 [ 306.430023][ T4229] gspca_cpia1: usb_control_msg 02, error -110 [ 306.520888][ T4229] gspca_cpia1: usb_control_msg 05, error -32 [ 306.559921][ T4229] gspca_cpia1: usb_control_msg 05, error -32 [ 306.599335][ T4229] gspca_cpia1: usb_control_msg 05, error -32 [ 306.619327][ T4229] gspca_cpia1: usb_control_msg 05, error -32 [ 306.625365][ T4229] cpia1 2-1:0.0: unexpected systemstate: 00 [ 308.271571][ T4229] usb 2-1: USB disconnect, device number 4 [ 308.763897][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 308.763963][ T26] audit: type=1326 audit(1760964350.860:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cc05dfc9 code=0x7ffc0000 [ 309.376977][ T26] audit: type=1326 audit(1760964350.860:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cc05dfc9 code=0x7ffc0000 [ 309.531623][ T26] audit: type=1326 audit(1760964350.870:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53cc05dfc9 code=0x7ffc0000 [ 309.559298][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 309.929205][ T5858] loop1: detected capacity change from 0 to 8 [ 310.418282][ T26] audit: type=1326 audit(1760964350.870:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cc05dfc9 code=0x7ffc0000 [ 310.518617][ T26] audit: type=1326 audit(1760964350.870:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cc05dfc9 code=0x7ffc0000 [ 310.551629][ T26] audit: type=1326 audit(1760964350.870:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f53cc05fe5c code=0x7ffc0000 [ 310.610919][ T26] audit: type=1326 audit(1760964350.880:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53cc05fd94 code=0x7ffc0000 [ 310.786088][ T26] audit: type=1326 audit(1760964350.880:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f53cc05fd94 code=0x7ffc0000 [ 310.836789][ T26] audit: type=1326 audit(1760964350.880:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cc05dfc9 code=0x7ffc0000 [ 310.839528][ T4229] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 310.963383][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.017552][ T26] audit: type=1326 audit(1760964350.880:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cc05dfc9 code=0x7ffc0000 [ 311.071638][ T4229] usb 5-1: config 0 descriptor?? [ 311.201031][ T4229] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 311.439434][ T4229] gspca_cpia1: usb_control_msg 05, error -71 [ 311.483962][ T4229] gspca_cpia1: usb_control_msg 01, error -71 [ 311.493512][ T4229] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 311.590212][ T4229] usb 5-1: USB disconnect, device number 2 [ 311.705393][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 314.984602][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 314.984639][ T26] audit: type=1326 audit(1760964357.080:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef9924fc9 code=0x7ffc0000 [ 316.181694][ T26] audit: type=1326 audit(1760964357.080:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef9924fc9 code=0x7ffc0000 [ 316.414797][ T26] audit: type=1326 audit(1760964357.090:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ef9924fc9 code=0x7ffc0000 [ 317.030298][ T26] audit: type=1326 audit(1760964357.090:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef9924fc9 code=0x7ffc0000 [ 317.132030][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.144786][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.128228][ T26] audit: type=1326 audit(1760964357.090:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef9924fc9 code=0x7ffc0000 [ 318.282454][ T26] audit: type=1326 audit(1760964357.100:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2ef9926e5c code=0x7ffc0000 [ 318.429330][ T26] audit: type=1326 audit(1760964357.100:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2ef9926d94 code=0x7ffc0000 [ 319.443133][ T26] audit: type=1326 audit(1760964357.100:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2ef9926d94 code=0x7ffc0000 [ 319.499781][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 319.635753][ T26] audit: type=1326 audit(1760964357.100:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef9924fc9 code=0x7ffc0000 [ 319.658208][ T26] audit: type=1326 audit(1760964357.100:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef9924fc9 code=0x7ffc0000 [ 321.917423][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 322.027713][ T5938] loop2: detected capacity change from 0 to 2048 [ 322.084687][ T5938] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 322.109348][ T4236] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 322.396008][ T5938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.530123][ T4236] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 322.932419][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.408571][ T4236] usb 5-1: config 0 descriptor?? [ 323.981469][ T4236] usb 5-1: can't set config #0, error -71 [ 323.991145][ T4236] usb 5-1: USB disconnect, device number 3 [ 324.395017][ T5959] loop2: detected capacity change from 0 to 8 [ 331.025036][ T5994] loop1: detected capacity change from 0 to 8 [ 331.750041][ T5999] loop0: detected capacity change from 0 to 2048 [ 331.810307][ T5999] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 331.838484][ T5999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.948238][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 331.948253][ T26] audit: type=1800 audit(1760964374.090:72): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.453" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 332.105709][ T6001] loop3: detected capacity change from 0 to 2048 [ 332.228243][ T6001] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 332.779856][ T6001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.539236][ T1107] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 342.628985][ T6072] loop4: detected capacity change from 0 to 128 [ 342.766891][ T6072] EXT4-fs (loop4): Test dummy encryption mode enabled [ 342.842125][ T6072] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 342.860726][ T6072] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.999468][ T1107] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 343.037489][ T6077] loop1: detected capacity change from 0 to 2048 [ 343.064460][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.082986][ T1107] usb 1-1: config 0 descriptor?? [ 343.525077][ T1107] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 343.679827][ T6077] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 343.749048][ T6077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.188950][ T6084] loop4: detected capacity change from 0 to 8 [ 344.204676][ T1107] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 344.246310][ C0] ------------[ cut here ]------------ [ 344.252172][ C0] WARNING: CPU: 0 PID: 6083 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x172c/0x1f80 [ 344.262642][ C0] Modules linked in: [ 344.266569][ C0] CPU: 0 PID: 6083 Comm: syz.4.477 Not tainted syzkaller #0 [ 344.273995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.284116][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 344.290511][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 51 6c 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 40 6c 3a f8 0f 0b e9 3c ef ff ff e8 34 6c 3a f8 <0f> 0b e9 b8 f2 ff ff e8 68 ef 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 344.310265][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 344.316366][ C0] RAX: ffffffff893d5e5c RBX: ffff88805effcc80 RCX: ffff88801d8b5940 [ 344.324409][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.332440][ C0] RBP: ffffc90000007ae8 R08: ffff88801d8b5940 R09: 0000000000000003 [ 344.340466][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888059d3fe00 [ 344.348460][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 344.356495][ C0] FS: 00007f08315256c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 344.365494][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.372129][ C0] CR2: 00007f0831504d58 CR3: 0000000058d51000 CR4: 00000000003526f0 [ 344.380153][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.388143][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.396161][ C0] Call Trace: [ 344.399519][ C0] [ 344.402403][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 344.408512][ C0] ? verify_lock_unused+0x140/0x140 [ 344.413803][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 344.419347][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 344.424851][ C0] __iterate_interfaces+0x243/0x500 [ 344.430115][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 344.436388][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 344.442691][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 344.449788][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 344.455022][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 344.460288][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 344.466296][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 344.472374][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 344.477128][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 344.482305][ C0] hrtimer_run_softirq+0x176/0x240 [ 344.487453][ C0] handle_softirqs+0x328/0x820 [ 344.492373][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 344.497254][ C0] ? do_softirq+0x200/0x200 [ 344.501812][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 344.507050][ C0] __irq_exit_rcu+0x12f/0x220 [ 344.511777][ C0] ? irq_exit_rcu+0x20/0x20 [ 344.516315][ C0] irq_exit_rcu+0x5/0x20 [ 344.520607][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 344.526272][ C0] [ 344.529240][ C0] [ 344.532306][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.538306][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 344.544865][ C0] Code: 74 05 e8 5e 2c cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 b5 9e f7 65 8b 05 87 b3 4f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 344.564615][ C0] RSP: 0018:ffffc90003a8f5e0 EFLAGS: 00000206 [ 344.570744][ C0] RAX: 39644bbdd63f7000 RBX: 0000000000000a02 RCX: 39644bbdd63f7000 [ 344.578822][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 0000000000000001 [ 344.586845][ C0] RBP: ffffc90003a8f678 R08: dffffc0000000000 R09: fffffbfff1ff7a2f [ 344.594873][ C0] R10: fffffbfff1ff7a2f R11: 1ffffffff1ff7a2e R12: dffffc0000000000 [ 344.602893][ C0] R13: 1ffff1100f12bd44 R14: ffff88807895e9c8 R15: 1ffff92000751ebc [ 344.610936][ C0] ? _raw_spin_unlock+0x40/0x40 [ 344.615816][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 344.621159][ C0] __skb_try_recv_datagram+0x179/0x4d0 [ 344.626740][ C0] ? sock_load_diag_module+0x130/0x130 [ 344.632266][ C0] __unix_dgram_recvmsg+0x2d3/0xd50 [ 344.637486][ C0] ? lock_chain_count+0x20/0x20 [ 344.642400][ C0] ? unix_unhash+0x10/0x10 [ 344.646845][ C0] ? mark_lock+0x94/0x320 [ 344.651229][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 344.656280][ C0] ? unix_dgram_sendmsg+0x1890/0x1890 [ 344.661701][ C0] ____sys_recvmsg+0x291/0x580 [ 344.666503][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 344.671596][ C0] ? import_iovec+0x6f/0xa0 [ 344.676135][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 344.680879][ C0] ? __sys_recvmsg+0x250/0x250 [ 344.685694][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 344.690776][ C0] ? __might_fault+0x4c/0x110 [ 344.695498][ C0] ? __might_fault+0xb3/0x110 [ 344.700324][ C0] do_recvmmsg+0x344/0x7a0 [ 344.704779][ C0] ? __sys_recvmmsg+0x280/0x280 [ 344.709700][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 344.714767][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 344.719852][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 344.724477][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 344.729743][ C0] do_syscall_64+0x4c/0xa0 [ 344.734190][ C0] ? clear_bhb_loop+0x30/0x80 [ 344.738893][ C0] ? clear_bhb_loop+0x30/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 344.743635][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.749671][ C0] RIP: 0033:0x7f08332defc9 [ 344.754114][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.773787][ C0] RSP: 002b:00007f0831525038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 344.782428][ C0] RAX: ffffffffffffffda RBX: 00007f0833536090 RCX: 00007f08332defc9 [ 344.790468][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 344.798462][ C0] RBP: 00007f0833361f91 R08: 0000000000000000 R09: 0000000000000000 [ 344.806483][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 344.814484][ C0] R13: 00007f0833536128 R14: 00007f0833536090 R15: 00007ffd34896ff8 [ 344.822512][ C0] [ 344.825546][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 344.832829][ C0] CPU: 0 PID: 6083 Comm: syz.4.477 Not tainted syzkaller #0 [ 344.840122][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.850183][ C0] Call Trace: [ 344.853495][ C0] [ 344.856339][ C0] dump_stack_lvl+0x168/0x230 [ 344.861044][ C0] ? show_regs_print_info+0x20/0x20 [ 344.866255][ C0] ? load_image+0x3b0/0x3b0 [ 344.870777][ C0] panic+0x2c9/0x7f0 [ 344.874688][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 344.879214][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 344.884955][ C0] __warn+0x248/0x2b0 [ 344.888942][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 344.894665][ C0] report_bug+0x1b7/0x2e0 [ 344.899011][ C0] handle_bug+0x3a/0x70 [ 344.903191][ C0] exc_invalid_op+0x16/0x40 [ 344.907812][ C0] asm_exc_invalid_op+0x16/0x20 [ 344.912699][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 344.919233][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 51 6c 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 40 6c 3a f8 0f 0b e9 3c ef ff ff e8 34 6c 3a f8 <0f> 0b e9 b8 f2 ff ff e8 68 ef 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 344.938870][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 344.944965][ C0] RAX: ffffffff893d5e5c RBX: ffff88805effcc80 RCX: ffff88801d8b5940 [ 344.952941][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.960923][ C0] RBP: ffffc90000007ae8 R08: ffff88801d8b5940 R09: 0000000000000003 [ 344.968904][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888059d3fe00 [ 344.976968][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 344.984960][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 344.990732][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 344.996733][ C0] ? verify_lock_unused+0x140/0x140 [ 345.002085][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 345.007730][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 345.013197][ C0] __iterate_interfaces+0x243/0x500 [ 345.018402][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 345.024650][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 345.030895][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 345.037929][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 345.043137][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 345.048339][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 345.054332][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 345.060333][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 345.065021][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 345.070143][ C0] hrtimer_run_softirq+0x176/0x240 [ 345.075333][ C0] handle_softirqs+0x328/0x820 [ 345.080130][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 345.084992][ C0] ? do_softirq+0x200/0x200 [ 345.089502][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 345.094701][ C0] __irq_exit_rcu+0x12f/0x220 [ 345.099379][ C0] ? irq_exit_rcu+0x20/0x20 [ 345.103888][ C0] irq_exit_rcu+0x5/0x20 [ 345.108126][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 345.113761][ C0] [ 345.116690][ C0] [ 345.119620][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 345.125606][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 345.132132][ C0] Code: 74 05 e8 5e 2c cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 b5 9e f7 65 8b 05 87 b3 4f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 345.152093][ C0] RSP: 0018:ffffc90003a8f5e0 EFLAGS: 00000206 [ 345.158163][ C0] RAX: 39644bbdd63f7000 RBX: 0000000000000a02 RCX: 39644bbdd63f7000 [ 345.166139][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 0000000000000001 [ 345.174122][ C0] RBP: ffffc90003a8f678 R08: dffffc0000000000 R09: fffffbfff1ff7a2f [ 345.182107][ C0] R10: fffffbfff1ff7a2f R11: 1ffffffff1ff7a2e R12: dffffc0000000000 [ 345.190087][ C0] R13: 1ffff1100f12bd44 R14: ffff88807895e9c8 R15: 1ffff92000751ebc [ 345.198105][ C0] ? _raw_spin_unlock+0x40/0x40 [ 345.202958][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 345.208163][ C0] __skb_try_recv_datagram+0x179/0x4d0 [ 345.213630][ C0] ? sock_load_diag_module+0x130/0x130 [ 345.219095][ C0] __unix_dgram_recvmsg+0x2d3/0xd50 [ 345.224301][ C0] ? lock_chain_count+0x20/0x20 [ 345.229170][ C0] ? unix_unhash+0x10/0x10 [ 345.233616][ C0] ? mark_lock+0x94/0x320 [ 345.237964][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 345.243022][ C0] ? unix_dgram_sendmsg+0x1890/0x1890 [ 345.248415][ C0] ____sys_recvmsg+0x291/0x580 [ 345.253471][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 345.258508][ C0] ? import_iovec+0x6f/0xa0 [ 345.263036][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 345.267729][ C0] ? __sys_recvmsg+0x250/0x250 [ 345.272521][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 345.277551][ C0] ? __might_fault+0x4c/0x110 [ 345.282336][ C0] ? __might_fault+0xb3/0x110 [ 345.287015][ C0] do_recvmmsg+0x344/0x7a0 [ 345.291442][ C0] ? __sys_recvmmsg+0x280/0x280 [ 345.296317][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 345.301382][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 345.306411][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 345.311002][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 345.316208][ C0] do_syscall_64+0x4c/0xa0 [ 345.320629][ C0] ? clear_bhb_loop+0x30/0x80 [ 345.325309][ C0] ? clear_bhb_loop+0x30/0x80 [ 345.329988][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.335881][ C0] RIP: 0033:0x7f08332defc9 [ 345.340298][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.359903][ C0] RSP: 002b:00007f0831525038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 345.368325][ C0] RAX: ffffffffffffffda RBX: 00007f0833536090 RCX: 00007f08332defc9 [ 345.376303][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 345.384304][ C0] RBP: 00007f0833361f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.392277][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 345.400264][ C0] R13: 00007f0833536128 R14: 00007f0833536090 R15: 00007ffd34896ff8 [ 345.408338][ C0] [ 345.411745][ C0] Kernel Offset: disabled [ 345.424043][ C0] Rebooting in 86400 seconds..