last executing test programs: 8.802208719s ago: executing program 3 (id=502): openat(0xffffffffffffff9c, 0x0, 0x3070c3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.809425093s ago: executing program 1 (id=520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) 5.548495304s ago: executing program 1 (id=534): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.439512085s ago: executing program 3 (id=526): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$FUSE(r2, 0x0, 0x0) write$tun(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="26ee30b2d0f45d7681db380ca8de3c7ceac2fc9f067357e48ae9f23befda5201e189b551837b656b051e248548c280f7d129485dd311ae9ef7fac1803847934ffa5c505b0f1ce24d7f3b6649592d69bd91b183d2b3b3b91a8e7f3a54bc4316592f7a2f"], 0xa2) 4.763687208s ago: executing program 4 (id=529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x24) 4.678626818s ago: executing program 4 (id=531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x0, 0x1, 0x6, 0x4}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.643903748s ago: executing program 0 (id=532): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x8c01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0xc6e, &(0x7f0000000340)={0x0, 0x4ef8, 0x400, 0x4, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000005c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 4.556906789s ago: executing program 4 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32], 0x20}, 0x1, 0xc00000000000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0xd) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000010a0104000000000000000007000006"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4044010) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) 4.556355279s ago: executing program 4 (id=535): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0) syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}}, 0x0) 4.536267469s ago: executing program 3 (id=536): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01020301090212000100000000090400"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 4.414947109s ago: executing program 0 (id=537): openat(0xffffffffffffff9c, 0x0, 0x3070c3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.467286034s ago: executing program 1 (id=538): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 2.810555987s ago: executing program 2 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xab0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c011}, 0x0) 2.665409618s ago: executing program 2 (id=542): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)) socket$inet(0x2, 0x4000000805, 0x0) close(0x3) 2.633897348s ago: executing program 2 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x774a, 0x0, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x2a93, &(0x7f0000000240)={0x0, 0x528f, 0x10, 0x1, 0x371, 0x0, r1}, &(0x7f0000000340), &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=' '], 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "258df59b2c6f8f62", "13c139ab91b149458ed3dd894f1236fc", "3aff99c2", "0acf8709c30d8a0a"}, 0x28) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) 2.555204868s ago: executing program 1 (id=544): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) mkdir(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r3, 0x0, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='F'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.417305779s ago: executing program 1 (id=545): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100", @ANYRES32], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.384952109s ago: executing program 4 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32], 0x20}, 0x1, 0xc00000000000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0xd) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000010a0104000000000000000007000006"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4044010) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) 2.369566429s ago: executing program 0 (id=547): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x8c01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0xc6e, &(0x7f0000000340)={0x0, 0x4ef8, 0x400, 0x4, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000005c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x12, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.29022123s ago: executing program 0 (id=548): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xa3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000003880), 0x80900, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, 0x0) preadv(r3, &(0x7f0000004200)=[{0x0}], 0x1, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)}], 0x1, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000000)) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) 1.833470362s ago: executing program 3 (id=549): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af05e6bc8b382b89e30f180b1dd700d41d5c0200883795c04a31ba377a1b2fc32b38d3", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.694329893s ago: executing program 3 (id=550): syz_mount_image$reiserfs(&(0x7f0000000100), &(0x7f0000006000)='./file0\x00', 0xa04001, &(0x7f0000000640)={[{@errors_ro_remount}, {@user_xattr}, {@jqfmt_vfsold}, {@balloc_no_unhash_reloc}, {@jqfmt_vfsv0}, {@balloc_noborder}, {@commit={'commit', 0x3d, 0x7}}, {@barrier_flush}, {@balloc_border}, {@usrjquota_file}, {}, {@jdev={'jdev', 0x3d, './file0'}}, {@resize_auto}, {@acl}, {@noacl}, {@replayonly}]}, 0xfd, 0x111e, &(0x7f0000002580)="$eJzs2D9rFEEYB+Df7F38U61s+uVACwsJCWcvKRSusbC2kZBKq1yl5EP4Iaz8LJLaLqY3RcD+ZM9diDlFzJ2i8DwwvDMvszOz5fsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuNMPpdku0qaIVclKUnbnszOkrRD/s6HUZWSZ4ez+eOj6ZN5ktFye+lG91X3WZq9u00zbabNXvNwe/9eM3/95uWL968Oj/pjStqcXhwf5On5Rn+l9O9Ztagvr7b6eHujtwMAAMC/a7G2euXIetlW6N34SUm+tan7AQAAgF/5k70FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/VDJMqSUna9mR2lqT90eZbf/VpAAAAwBpKqjyvv0st8vHyctLHByn9rG8P5Evp5rt5V1+rG7C4ed1HAwAAwH/m7dXEp0cre0o/urr7fsbLOOQnGWdn59u6DznfT0ZJdq+cc3pxfDCMkii/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+MoOHAgAAAAACPK3HuQCAAAAAAAAAAAAAAAAAAAAAAAAANgrAAD//2J42y8=") read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) getgroups(0x0, &(0x7f00000014c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x40041) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000122630c1a1aa3c985ef9fceff8ec3cbccb5bb725d3d5a6f3fa057c78a37603f60fa9ac4d71caed6652b4477ab2bd18b5f43ef14a18d05f51f9f56e7c95b9f08e58016f04", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r4 = fanotify_init(0x0, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) readv(r4, 0x0, 0x0) fanotify_mark(r4, 0x1, 0x40001019, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000000000000007000000441505"], 0x30}, 0x0) 1.673834133s ago: executing program 2 (id=551): socket(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.374640334s ago: executing program 0 (id=552): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/25, 0x19}, {0x0}], 0x2) 1.097407975s ago: executing program 0 (id=553): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 636.944287ms ago: executing program 2 (id=554): syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x141000) r0 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000002c0)={0x0, 0x7df0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xec4, 0x0, 0x0, 0x0, 0x0) 596.264138ms ago: executing program 2 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x78}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 46.89746ms ago: executing program 4 (id=556): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 46.1708ms ago: executing program 1 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32], 0x20}, 0x1, 0xc00000000000000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0xd) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000010a0104000000000000000007000006"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4044010) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) 0s ago: executing program 3 (id=557): openat(0xffffffffffffff9c, 0x0, 0x3070c3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.36' (ED25519) to the list of known hosts. syzkaller login: [ 58.437077][ T4156] cgroup: Unknown subsys name 'net' [ 58.571422][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.047404][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.373213][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 61.386372][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 61.503195][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 61.543288][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.550498][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.559449][ T4166] device bridge_slave_0 entered promiscuous mode [ 61.600084][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.607631][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.616342][ T4166] device bridge_slave_1 entered promiscuous mode [ 61.645809][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.652889][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.660930][ T4179] device bridge_slave_0 entered promiscuous mode [ 61.688633][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.698558][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 61.708374][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.715731][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.723533][ T4179] device bridge_slave_1 entered promiscuous mode [ 61.739624][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.791096][ T4166] team0: Port device team_slave_0 added [ 61.811202][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.818594][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.827310][ T4168] device bridge_slave_0 entered promiscuous mode [ 61.834897][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 61.844281][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.852153][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.860159][ T4168] device bridge_slave_1 entered promiscuous mode [ 61.870080][ T4166] team0: Port device team_slave_1 added [ 61.880676][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.921309][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.928903][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.955862][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.969530][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.001238][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.008349][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.034385][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.062624][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.088498][ T4179] team0: Port device team_slave_0 added [ 62.096318][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.120382][ T4179] team0: Port device team_slave_1 added [ 62.132705][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.140037][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.148124][ T4167] device bridge_slave_0 entered promiscuous mode [ 62.182330][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.189552][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.198068][ T4167] device bridge_slave_1 entered promiscuous mode [ 62.228916][ T4168] team0: Port device team_slave_0 added [ 62.237217][ T4168] team0: Port device team_slave_1 added [ 62.252223][ T4166] device hsr_slave_0 entered promiscuous mode [ 62.259587][ T4166] device hsr_slave_1 entered promiscuous mode [ 62.274862][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.282141][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.308136][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.344555][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.351797][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.360424][ T4173] device bridge_slave_0 entered promiscuous mode [ 62.368233][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.375595][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.401976][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.428883][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.443304][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.453003][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.460315][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.468350][ T4173] device bridge_slave_1 entered promiscuous mode [ 62.492866][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.499932][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.525963][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.538473][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.545556][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.571808][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.631209][ T4167] team0: Port device team_slave_0 added [ 62.639279][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.665609][ T4167] team0: Port device team_slave_1 added [ 62.674255][ T4179] device hsr_slave_0 entered promiscuous mode [ 62.681526][ T4179] device hsr_slave_1 entered promiscuous mode [ 62.688426][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.696502][ T4179] Cannot create hsr debugfs directory [ 62.703580][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.768885][ T4173] team0: Port device team_slave_0 added [ 62.784123][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.791349][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.817553][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.832626][ T4168] device hsr_slave_0 entered promiscuous mode [ 62.839554][ T4168] device hsr_slave_1 entered promiscuous mode [ 62.847401][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.855179][ T4168] Cannot create hsr debugfs directory [ 62.866293][ T4173] team0: Port device team_slave_1 added [ 62.888950][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.895966][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.922144][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.985600][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.992563][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.018693][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.056709][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.063686][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.090579][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.104732][ T4167] device hsr_slave_0 entered promiscuous mode [ 63.111499][ T4167] device hsr_slave_1 entered promiscuous mode [ 63.118806][ T2364] Bluetooth: hci1: command 0x0409 tx timeout [ 63.125325][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 63.126020][ T2364] Bluetooth: hci4: command 0x0409 tx timeout [ 63.131376][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 63.143850][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 63.143929][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.157805][ T4167] Cannot create hsr debugfs directory [ 63.271305][ T4173] device hsr_slave_0 entered promiscuous mode [ 63.278165][ T4173] device hsr_slave_1 entered promiscuous mode [ 63.285507][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.293075][ T4173] Cannot create hsr debugfs directory [ 63.436391][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.448355][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.485433][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.495003][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.535727][ T4179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.553166][ T4179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.562462][ T4179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.578195][ T4179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.648692][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.681505][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.706515][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.718850][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.749598][ T4167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.779399][ T4167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.798583][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.807643][ T4167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.818032][ T4167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.839982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.851136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.876341][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.887690][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.899216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.908328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.917926][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.925218][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.959944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.969780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.979271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.988958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.999006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.008006][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.015132][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.028062][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.047845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.057374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.067007][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.074072][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.083647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.094754][ T4173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.125260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.133596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.143029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.152150][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.159276][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.168419][ T4173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.178595][ T4173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.188010][ T4173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.215421][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.226531][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.238561][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.257715][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.268285][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.299263][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.308806][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.319443][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.329025][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.338758][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.350965][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.366462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.376027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.385348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.393092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.414867][ T4179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.427674][ T4179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.451921][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.461617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.471117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.483195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.492869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.501938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.511604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.522791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.539411][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.548783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.560250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.571541][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.580912][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.590315][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.597436][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.607547][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.616959][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.627734][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.667332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.676810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.686531][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.693722][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.701972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.711352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.719872][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.726985][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.736476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.745723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.754044][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.761131][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.768999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.782689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.791230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.801483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.812000][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.823100][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.838794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.846645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.888868][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.905159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.914030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.923561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.933097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.942343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.951278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.960918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.969833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.991584][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.999754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.016897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.031767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.045304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.061018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.070075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.081198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.089911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.103991][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.122487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.135416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.150726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.159987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.178441][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.198033][ T4211] Bluetooth: hci3: command 0x041b tx timeout [ 65.201155][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.204100][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 65.211475][ T4208] Bluetooth: hci0: command 0x041b tx timeout [ 65.228556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.256666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.265135][ T4211] Bluetooth: hci2: command 0x041b tx timeout [ 65.271202][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 65.280851][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.297443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.305999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.313478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.323278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.336795][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.343945][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.351949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.361730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.370732][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.377911][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.389240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.432427][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.444566][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.464107][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.487601][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.497168][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.506874][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.552194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.562748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.574249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.583968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.593055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.608566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.617656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.626374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.635074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.642514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.650379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.659240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.667916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.676780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.685576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.706185][ T4166] device veth0_vlan entered promiscuous mode [ 65.716316][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.729524][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.738330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.746919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.756821][ T4179] device veth0_vlan entered promiscuous mode [ 65.786183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.802646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.819586][ T4179] device veth1_vlan entered promiscuous mode [ 65.843520][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.853810][ T4166] device veth1_vlan entered promiscuous mode [ 65.862239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.872278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.881435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.895932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.903427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.915212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.951803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.960460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.969731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.979810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.988579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.996880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.009279][ T4179] device veth0_macvtap entered promiscuous mode [ 66.035859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.044123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.052527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.065981][ T4168] device veth0_vlan entered promiscuous mode [ 66.078739][ T4166] device veth0_macvtap entered promiscuous mode [ 66.089436][ T4179] device veth1_macvtap entered promiscuous mode [ 66.098235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.106426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.114127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.122187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.131627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.147481][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.157142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.176615][ T4168] device veth1_vlan entered promiscuous mode [ 66.193318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.202455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.211260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.220689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.246893][ T4166] device veth1_macvtap entered promiscuous mode [ 66.262889][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.274910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.282931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.293169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.302045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.310796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.321421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.329889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.353092][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.366426][ T4167] device veth0_vlan entered promiscuous mode [ 66.374537][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.387477][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.400667][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.409448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.418245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.427434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.436143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.447613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.456763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.471697][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.481555][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.490804][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.499840][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.530249][ T4168] device veth0_macvtap entered promiscuous mode [ 66.539705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.549305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.562132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.573703][ T4167] device veth1_vlan entered promiscuous mode [ 66.589318][ T4168] device veth1_macvtap entered promiscuous mode [ 66.605071][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.615701][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.627136][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.640649][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.649270][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.658027][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.666814][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.675652][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.683440][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.707187][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.716978][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.726513][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.735672][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.751006][ T4173] device veth0_vlan entered promiscuous mode [ 66.806112][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.821124][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.831404][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.842916][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.854073][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.870096][ T4167] device veth0_macvtap entered promiscuous mode [ 66.889231][ T4173] device veth1_vlan entered promiscuous mode [ 66.901820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.910517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.923177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.932333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.942102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.952734][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.966980][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.977125][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.991796][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.002846][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.013743][ T4167] device veth1_macvtap entered promiscuous mode [ 67.044674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.052965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.068892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.077479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.087310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.098771][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.108496][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.117712][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.126544][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.173259][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.189508][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.201527][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.212286][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.222195][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.233260][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.246097][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.258009][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.268833][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.280424][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.285561][ T4208] Bluetooth: hci2: command 0x040f tx timeout [ 67.293046][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.297507][ T4208] Bluetooth: hci4: command 0x040f tx timeout [ 67.312875][ T4208] Bluetooth: hci0: command 0x040f tx timeout [ 67.314737][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.319538][ T4208] Bluetooth: hci3: command 0x040f tx timeout [ 67.335632][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.347970][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.367863][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.376069][ T4241] Bluetooth: hci1: command 0x040f tx timeout [ 67.383262][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.393829][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.402455][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.411140][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.420286][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.438477][ T4173] device veth0_macvtap entered promiscuous mode [ 67.448432][ T1405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.456945][ T1405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.461629][ T4167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.477270][ T4167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.486331][ T4167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.495357][ T4167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.515303][ T1405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.523309][ T1405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.539251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.549709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.559549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.587623][ T4173] device veth1_macvtap entered promiscuous mode [ 67.633667][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.669392][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.680317][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.690509][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.701396][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.712107][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.722331][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.732961][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.743007][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.753661][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.767676][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.792496][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.807607][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.809071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.822930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.832169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.842526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.854136][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.865423][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.877613][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.891597][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.901638][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.912399][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.922967][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.933758][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.946004][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.961863][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.991676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.000474][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.010698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.047677][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.058940][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.076292][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.089804][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.102616][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.111749][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.122391][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.131092][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.167624][ T1405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.178829][ T1405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.203793][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.356131][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 68.414676][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.422839][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.463528][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.612509][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.645470][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.737011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.903643][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.913993][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.937923][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.263133][ T4265] loop3: detected capacity change from 0 to 2048 [ 69.271642][ T4267] loop1: detected capacity change from 0 to 512 [ 69.365719][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 69.372654][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 69.402158][ T4267] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.425424][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 69.454851][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 69.462568][ T4267] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 69.509662][ T4213] Bluetooth: hci1: command 0x0419 tx timeout [ 69.544054][ T4265] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,user_xattr,norecovery,auto_da_alloc,usrquota,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,,errors=continue. Quota mode: writeback. [ 69.565501][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.566799][ T4267] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.10: casefold flag without casefold feature [ 70.368734][ T4267] EXT4-fs (loop1): get root inode failed [ 70.374667][ T4267] EXT4-fs (loop1): mount failed [ 71.472415][ T4301] ODEBUG: Out of memory. ODEBUG disabled [ 71.587068][ T4301] syz.1.19 (4301): drop_caches: 2 [ 71.627541][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.636846][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.820575][ T4313] loop1: detected capacity change from 0 to 4096 [ 72.910636][ T4312] loop3: detected capacity change from 0 to 8192 [ 73.068046][ T4312] REISERFS warning (device loop3): super-6506 reiserfs_getopt: empty argument for "resize" [ 73.068046][ T4312] [ 73.342795][ T4326] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.805711][ T4313] attempt to access beyond end of device [ 73.805711][ T4313] loop1: rw=524288, want=2097328, limit=4096 [ 73.886236][ T4313] attempt to access beyond end of device [ 73.886236][ T4313] loop1: rw=0, want=2097328, limit=4096 [ 73.914267][ T26] audit: type=1800 audit(1732089159.854:2): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.21" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 73.934064][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.210076][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.269232][ T4366] loop4: detected capacity change from 0 to 2048 [ 75.889948][ T4366] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,user_xattr,norecovery,auto_da_alloc,usrquota,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,,errors=continue. Quota mode: writeback. [ 76.863195][ T4376] loop2: detected capacity change from 0 to 8192 [ 76.986362][ T4376] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "resize" [ 76.986362][ T4376] [ 78.233207][ T4405] loop3: detected capacity change from 0 to 1024 [ 78.301236][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 78.346739][ T4412] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.365244][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.458729][ T4405] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.894539][ T4405] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,prjquota,jqfmt=vfsold,data_err=ignore,noquota,dioread_nolock,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 79.307688][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 81.406909][ T4436] loop0: detected capacity change from 0 to 4096 [ 81.618745][ T1324] cfg80211: failed to load regulatory.db [ 81.692561][ T4449] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.000923][ T4436] attempt to access beyond end of device [ 82.000923][ T4436] loop0: rw=524288, want=2097328, limit=4096 [ 82.334450][ T26] audit: type=1800 audit(1732089168.254:3): pid=4436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.58" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 82.500734][ T4447] loop3: detected capacity change from 0 to 8192 [ 82.600596][ T4458] loop4: detected capacity change from 0 to 256 [ 82.885791][ T4447] REISERFS warning (device loop3): super-6506 reiserfs_getopt: empty argument for "resize" [ 82.885791][ T4447] [ 86.704915][ T4501] dlm: non-version read from control device 233 [ 88.300030][ T4511] loop2: detected capacity change from 0 to 4096 [ 88.459839][ T4523] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.478548][ T4522] Zero length message leads to an empty skb [ 88.520189][ T4511] attempt to access beyond end of device [ 88.520189][ T4511] loop2: rw=524288, want=2097328, limit=4096 [ 88.566707][ T26] audit: type=1800 audit(1732089174.514:4): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.75" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 88.637059][ T4518] loop0: detected capacity change from 0 to 8192 [ 89.019224][ T4518] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 89.019224][ T4518] [ 90.624145][ T13] Bluetooth: hci4: command 0x2016 tx timeout [ 91.736679][ T4557] loop1: detected capacity change from 0 to 256 [ 93.862572][ T1324] Bluetooth: hci4: command 0x0406 tx timeout [ 93.935077][ T4557] ======================================================= [ 93.935077][ T4557] WARNING: The mand mount option has been deprecated and [ 93.935077][ T4557] and is ignored by this kernel. Remove the mand [ 93.935077][ T4557] option from the mount to silence this warning. [ 93.935077][ T4557] ======================================================= [ 93.969942][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.430925][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.439628][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.318609][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.357435][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.819812][ T4539] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.829257][ T4539] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.839156][ T4539] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.848763][ T4539] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.968586][ T4570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.93'. [ 95.978078][ T4539] syz.2.82 (4539) used greatest stack depth: 19960 bytes left [ 95.985729][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 95.998305][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.006176][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.139531][ T4591] loop2: detected capacity change from 0 to 1024 [ 96.600555][ T4594] loop0: detected capacity change from 0 to 8192 [ 96.713341][ T4594] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 96.713341][ T4594] [ 97.807917][ T4622] syz.4.105[4622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.808049][ T4622] syz.4.105[4622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.592544][ T4642] loop0: detected capacity change from 0 to 1024 [ 100.458551][ T4661] loop4: detected capacity change from 0 to 8192 [ 100.595719][ T4661] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 100.595719][ T4661] [ 101.246207][ T4687] loop3: detected capacity change from 0 to 1024 [ 102.592955][ T4704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.132'. [ 103.306233][ T4722] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.134' sets config #0 [ 104.024461][ T4736] loop0: detected capacity change from 0 to 8192 [ 104.311998][ T4736] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 104.311998][ T4736] [ 105.103364][ T4747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 107.518065][ T4776] loop3: detected capacity change from 0 to 8192 [ 107.535674][ T4782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.156'. [ 107.575506][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 107.676289][ T4776] REISERFS warning (device loop3): super-6506 reiserfs_getopt: empty argument for "resize" [ 107.676289][ T4776] [ 109.398612][ T4826] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.162' sets config #0 [ 110.747614][ T4850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.172'. [ 110.863191][ T4857] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.870651][ T4857] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.079748][ T4854] loop0: detected capacity change from 0 to 8192 [ 111.787101][ T4854] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 111.787101][ T4854] [ 112.254230][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 112.274936][ T4877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.182'. [ 112.945762][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 113.243384][ T4877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.182'. [ 113.334552][ T4877] netlink: 104 bytes leftover after parsing attributes in process `syz.1.182'. [ 113.744103][ T4897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.188'. [ 113.791718][ T4892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.818281][ T4892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.494965][ T4892] bond0 (unregistering): Released all slaves [ 114.772643][ T4910] syz.4.194 uses obsolete (PF_INET,SOCK_PACKET) [ 115.077960][ T4923] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.204' sets config #0 [ 115.917845][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 115.948852][ T4938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.199'. [ 115.980602][ T4938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 115.992562][ T4935] loop2: detected capacity change from 0 to 8192 [ 116.010394][ T4938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.199'. [ 116.047752][ T4938] netlink: 104 bytes leftover after parsing attributes in process `syz.0.199'. [ 116.083394][ T4935] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "resize" [ 116.083394][ T4935] [ 118.500971][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 118.559929][ T4977] netlink: 60 bytes leftover after parsing attributes in process `syz.4.215'. [ 118.597553][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 118.606846][ T4977] netlink: 60 bytes leftover after parsing attributes in process `syz.4.215'. [ 118.615934][ T4977] netlink: 104 bytes leftover after parsing attributes in process `syz.4.215'. [ 118.866665][ T4996] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.217' sets config #0 [ 118.913042][ T4988] loop2: detected capacity change from 0 to 8192 [ 118.938713][ T5000] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 119.016122][ T5000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.033738][ T4988] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "resize" [ 119.033738][ T4988] [ 119.161344][ T5003] bond1: (slave ip6gretap1): making interface the new active one [ 119.182070][ T5003] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 119.401002][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 122.095736][ T5045] loop4: detected capacity change from 0 to 8192 [ 122.324194][ T5045] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 122.324194][ T5045] [ 125.669414][ T5096] loop0: detected capacity change from 0 to 8192 [ 125.711630][ T5096] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 125.711630][ T5096] [ 125.759008][ T5106] netlink: 256 bytes leftover after parsing attributes in process `syz.4.258'. [ 126.033435][ T5111] tipc: Started in network mode [ 126.223238][ T5111] tipc: Node identity 3699ec6fed97, cluster identity 4711 [ 127.465199][ T5111] tipc: Enabled bearer , priority 0 [ 127.730323][ T5110] tipc: Resetting bearer [ 127.808525][ T5110] tipc: Disabling bearer [ 128.159742][ T5144] device syzkaller1 entered promiscuous mode [ 128.426934][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 128.863529][ T5169] tipc: Started in network mode [ 128.880141][ T5169] tipc: Node identity 925750abb819, cluster identity 4711 [ 128.903806][ T5169] tipc: Enabled bearer , priority 0 [ 129.212244][ T5168] tipc: Resetting bearer [ 129.434022][ T5168] tipc: Disabling bearer [ 130.273192][ T5210] device vlan2 entered promiscuous mode [ 130.304254][ T5210] device team_slave_0 entered promiscuous mode [ 130.310887][ T5210] device team_slave_1 entered promiscuous mode [ 130.353907][ T5210] device team0 entered promiscuous mode [ 130.376011][ T5210] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 130.447494][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 131.735605][ T5246] crypto_alloc_aead failed rc=-4 [ 132.220160][ T5272] device vlan2 entered promiscuous mode [ 132.431798][ T5285] device syzkaller1 entered promiscuous mode [ 132.636801][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.725730][ T5301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 134.224286][ C0] sched: RT throttling activated [ 134.470010][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'. [ 134.563990][ T5335] device syzkaller1 entered promiscuous mode [ 134.995561][ T5342] syz.3.338 sent an empty control message without MSG_MORE. [ 135.038933][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 135.069755][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 135.166295][ T5348] lo speed is unknown, defaulting to 1000 [ 135.183784][ T5348] lo speed is unknown, defaulting to 1000 [ 135.210770][ T5348] lo speed is unknown, defaulting to 1000 [ 135.267369][ T5348] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.309975][ T5348] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.167753][ T5348] lo speed is unknown, defaulting to 1000 [ 136.178547][ T5348] lo speed is unknown, defaulting to 1000 [ 136.213818][ T5348] lo speed is unknown, defaulting to 1000 [ 136.235001][ T5348] lo speed is unknown, defaulting to 1000 [ 136.371520][ T5348] lo speed is unknown, defaulting to 1000 [ 137.185991][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.348'. [ 137.329654][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 137.435571][ T5370] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.562746][ T5370] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.723928][ T5370] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.750306][ T5388] siw: device registration error -23 [ 138.519686][ T5370] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.885026][ T5370] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.331360][ T5370] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.520691][ T5370] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.677072][ T5370] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.725742][ T5408] netlink: 'syz.1.364': attribute type 10 has an invalid length. [ 139.785082][ T5408] team0: Port device netdevsim0 added [ 139.864045][ T5408] syz.1.364 (5408) used greatest stack depth: 19792 bytes left [ 146.246943][ T5527] loop1: detected capacity change from 0 to 8192 [ 146.542330][ T5527] REISERFS warning (device loop1): super-6506 reiserfs_getopt: empty argument for "resize" [ 146.542330][ T5527] [ 148.894643][ T5561] loop0: detected capacity change from 0 to 8192 [ 148.996970][ T5561] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 148.996970][ T5561] [ 152.910246][ T5605] process 'syz.0.427' launched './file1' with NULL argv: empty string added [ 154.080825][ T5618] loop4: detected capacity change from 0 to 8192 [ 154.174484][ T5618] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 154.174484][ T5618] [ 157.178023][ T5707] capability: warning: `syz.2.464' uses 32-bit capabilities (legacy support in use) [ 157.313716][ T26] audit: type=1326 audit(1732089243.244:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.4.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa19f191759 code=0xffff0000 [ 157.336098][ T26] audit: type=1326 audit(1732089243.254:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.4.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=273 compat=0 ip=0x7fa19f1481b7 code=0xffff0000 [ 158.539270][ T5751] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 159.813427][ T26] audit: type=1326 audit(1732089245.754:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd14f7759 code=0x7ffc0000 [ 159.866268][ T26] audit: type=1326 audit(1732089245.754:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd14f7759 code=0x7ffc0000 [ 160.064413][ T26] audit: type=1326 audit(1732089245.804:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f4cd14f7759 code=0x7ffc0000 [ 160.137414][ T26] audit: type=1326 audit(1732089245.804:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.2.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd14f7759 code=0x7ffc0000 [ 161.435771][ T5810] netlink: 32 bytes leftover after parsing attributes in process `syz.4.495'. [ 161.622487][ T5806] loop0: detected capacity change from 0 to 8192 [ 161.699984][ T5806] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 161.699984][ T5806] [ 163.256280][ T5854] rdma_op ffff88807a29e9f0 conn xmit_rdma 0000000000000000 [ 163.261847][ T5845] loop0: detected capacity change from 0 to 8192 [ 163.291961][ T5845] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 163.291961][ T5845] [ 165.095028][ T5900] sg_write: data in/out 1985868972/110 bytes for SCSI command 0x83-- guessing data in; [ 165.095028][ T5900] program syz.3.526 not setting count and/or reply_len properly [ 165.524751][ T1324] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 165.814667][ T1324] usb 2-1: Using ep0 maxpacket: 32 [ 165.864487][ T5910] loop2: detected capacity change from 0 to 8192 [ 165.913125][ T5910] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "resize" [ 165.913125][ T5910] [ 165.974839][ T1324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.986696][ T1324] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.000683][ T1324] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 166.010352][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.031632][ T1324] usb 2-1: config 0 descriptor?? [ 166.292287][ T1324] hub 2-1:0.0: bad descriptor, ignoring hub [ 166.306209][ T1324] hub: probe of 2-1:0.0 failed with error -5 [ 166.313594][ T1324] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 166.364508][ T1107] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 166.570693][ T4209] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 166.844527][ T1107] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 166.853916][ T1107] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 166.862685][ T4209] usb 4-1: Using ep0 maxpacket: 8 [ 166.906984][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.974728][ T1107] usb 5-1: config 0 has no interface number 0 [ 167.007812][ T1107] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 167.058114][ T1107] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.096273][ T1107] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 167.115934][ T1107] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 167.129554][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.141729][ T1324] usb 2-1: USB disconnect, device number 2 [ 167.178238][ T1107] usb 5-1: config 0 descriptor?? [ 167.218199][ T4209] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 167.270326][ T4209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.297285][ T4209] usb 4-1: Product: syz [ 167.309168][ T4209] usb 4-1: Manufacturer: syz [ 167.322886][ T4209] usb 4-1: SerialNumber: syz [ 167.402472][ T4209] usb 4-1: config 0 descriptor?? [ 167.466509][ T4209] gspca_main: se401-2.14.0 probing 047d:5003 [ 167.478442][ T1107] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 167.504771][ T9] usb 5-1: Failed to submit usb control message: -71 [ 167.519221][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 167.541136][ T9] usb 5-1: unable to get target info from device [ 167.547616][ T9] usb 5-1: could not get target info (-71) [ 167.553472][ T9] usb 5-1: could not probe fw (-71) [ 167.585130][ T1107] usb 5-1: USB disconnect, device number 2 [ 167.705036][ T5951] ALSA: seq fatal error: cannot create timer (-22) [ 167.869727][ C0] Unknown status report in ack skb [ 167.896849][ T4209] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 167.925958][ T4209] se401: probe of 4-1:0.0 failed with error -71 [ 167.952887][ T4209] usb 4-1: USB disconnect, device number 2 [ 168.194408][ T2364] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.444421][ T2364] usb 2-1: Using ep0 maxpacket: 32 [ 168.574741][ T2364] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 168.603311][ T2364] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.672074][ T2364] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 168.785796][ T2364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.825761][ T2364] usb 2-1: config 0 descriptor?? [ 168.866738][ T2364] hub 2-1:0.0: bad descriptor, ignoring hub [ 168.887830][ T2364] hub: probe of 2-1:0.0 failed with error -5 [ 168.912854][ T2364] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 169.169903][ T5974] loop3: detected capacity change from 0 to 8192 [ 169.295199][ T5974] REISERFS warning (device loop3): super-6506 reiserfs_getopt: empty argument for "resize" [ 169.295199][ T5974] [ 169.357480][ T1110] usb 2-1: USB disconnect, device number 3 [ 169.574428][ T2364] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 170.902910][ C0] ------------[ cut here ]------------ [ 170.908456][ C0] WARNING: CPU: 0 PID: 5992 at net/mac80211/tx.c:4851 __ieee80211_beacon_get+0x183d/0x2080 [ 170.918589][ C0] Modules linked in: [ 170.922520][ C0] CPU: 0 PID: 5992 Comm: syz.2.555 Not tainted 5.15.173-syzkaller #0 [ 170.930625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 170.940738][ C0] RIP: 0010:__ieee80211_beacon_get+0x183d/0x2080 [ 170.947127][ C0] Code: ff e8 e7 c9 b4 f7 0f 0b e9 4b fa ff ff e8 db c9 b4 f7 0f 0b e9 3b fe ff ff e8 cf c9 b4 f7 0f 0b e9 06 ee ff ff e8 c3 c9 b4 f7 <0f> 0b e9 91 f0 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 2d ea [ 170.966792][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010246 [ 170.972884][ C0] RAX: ffffffff89cba9dd RBX: 0000000000000000 RCX: ffff8880674d3b80 [ 170.980891][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.988893][ C0] RBP: ffffc90000007a70 R08: ffffffff89cb9a68 R09: ffffffff89cb943b [ 170.996903][ C0] R10: 0000000000000003 R11: ffff8880674d3b80 R12: dffffc0000000000 [ 171.004916][ C0] R13: ffff88807c8fcc80 R14: ffff88807c8fe298 R15: 1ffff92000000f18 [ 171.012993][ C0] FS: 00007f4ccf96f6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 171.021989][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.028624][ C0] CR2: 00007fa19f31c178 CR3: 000000001efd9000 CR4: 00000000003506f0 [ 171.036654][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.044766][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.052825][ C0] Call Trace: [ 171.056148][ C0] [ 171.059020][ C0] ? __warn+0x15b/0x300 [ 171.063295][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 171.069076][ C0] ? report_bug+0x1b7/0x2e0 [ 171.073640][ C0] ? handle_bug+0x3d/0x70 [ 171.078035][ C0] ? exc_invalid_op+0x16/0x40 [ 171.082732][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 171.087824][ C0] ? __ieee80211_beacon_get+0x29b/0x2080 [ 171.093510][ C0] ? __ieee80211_beacon_get+0x8c8/0x2080 [ 171.099179][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 171.104935][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 171.110683][ C0] ? reacquire_held_locks+0x660/0x660 [ 171.116107][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 171.122117][ C0] ? mark_lock+0x98/0x340 [ 171.126521][ C0] ieee80211_beacon_get_tim+0xb7/0x950 [ 171.132005][ C0] ? __ieee80211_beacon_get+0x2080/0x2080 [ 171.137791][ C0] ? read_lock_is_recursive+0x10/0x10 [ 171.143435][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 171.149453][ C0] mac80211_hwsim_beacon_tx+0xe2/0x8a0 [ 171.155074][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 171.160289][ C0] __iterate_interfaces+0x21e/0x4b0 [ 171.165525][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 171.171788][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 171.178068][ C0] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 171.185152][ C0] mac80211_hwsim_beacon+0xa7/0x180 [ 171.190373][ C0] ? hw_scan_work+0xe70/0xe70 [ 171.195096][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 171.200506][ C0] ? hrtimer_interrupt+0x980/0x980 [ 171.205669][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 171.211785][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 171.216958][ C0] handle_softirqs+0x3a7/0x930 [ 171.221842][ C0] ? __irq_exit_rcu+0x157/0x240 [ 171.226776][ C0] ? do_softirq+0x240/0x240 [ 171.231435][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 171.236714][ C0] __irq_exit_rcu+0x157/0x240 [ 171.241414][ C0] ? irq_exit_rcu+0x20/0x20 [ 171.245964][ C0] irq_exit_rcu+0x5/0x20 [ 171.250221][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 171.255888][ C0] [ 171.258826][ C0] [ 171.261766][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 171.267959][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 171.273699][ C0] Code: 45 31 c9 68 f7 aa 59 81 e8 9c 11 09 00 48 83 c4 08 4c 89 ff e8 50 db fe ff 66 90 4c 89 ff e8 e6 5a e4 08 e8 c1 46 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 171.293359][ C0] RSP: 0018:ffffc9000483f298 EFLAGS: 00000286 [ 171.299473][ C0] RAX: a224f5e25750fd00 RBX: ffff888021211df4 RCX: ffffffff9686af03 [ 171.307533][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90540 [ 171.315558][ C0] RBP: ffffc9000483f310 R08: ffffffff8186f220 R09: ffffed1017207461 [ 171.323559][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 171.331605][ C0] R13: 1ffff1101720760b R14: ffff8880b903b058 R15: ffff8880b903a300 [ 171.339647][ C0] ? trace_hardirqs_on+0x30/0x80 [ 171.344685][ C0] finish_task_switch+0x134/0x630 [ 171.349754][ C0] ? __switch_to_asm+0x34/0x60 [ 171.354482][ T2364] usb 1-1: Using ep0 maxpacket: 16 [ 171.354593][ C0] __schedule+0x12cc/0x45b0 [ 171.364205][ C0] ? release_firmware_map_entry+0x190/0x190 [ 171.370176][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 171.376228][ C0] schedule+0x11b/0x1f0 [ 171.380442][ C0] schedule_timeout+0xac/0x300 [ 171.385286][ C0] ? console_conditional_schedule+0x40/0x40 [ 171.391220][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 171.396497][ C0] ? prepare_to_wait_exclusive+0xc5/0x220 [ 171.402302][ C0] unix_wait_for_peer+0x24b/0x330 [ 171.407405][ C0] ? unix_find_other+0x860/0x860 [ 171.412366][ C0] ? init_wait_entry+0xd0/0xd0 [ 171.417214][ C0] ? __rwlock_init+0x140/0x140 [ 171.422087][ C0] ? unix_dgram_sendmsg+0xca9/0x2090 [ 171.427445][ C0] ? unix_dgram_sendmsg+0xcb3/0x2090 [ 171.432760][ C0] ? bpf_lsm_unix_may_send+0x5/0x10 [ 171.438034][ C0] unix_dgram_sendmsg+0x1441/0x2090 [ 171.443277][ C0] ? unix_dgram_poll+0x640/0x640 [ 171.448299][ C0] ? __might_sleep+0xc0/0xc0 [ 171.452910][ C0] ? aa_sock_msg_perm+0x91/0x150 [ 171.457922][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.463227][ C0] ? security_socket_sendmsg+0x7d/0xa0 [ 171.468760][ C0] ? unix_dgram_poll+0x640/0x640 [ 171.473749][ C0] ____sys_sendmsg+0x59e/0x8f0 [ 171.474608][ T2364] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.478578][ C0] ? iovec_from_user+0x5d/0x390 [ 171.491424][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 171.496535][ C0] ___sys_sendmsg+0x252/0x2e0 [ 171.501243][ C0] ? __sys_sendmsg+0x260/0x260 [ 171.506119][ C0] ? __might_fault+0xb4/0x110 [ 171.510824][ C0] __sys_sendmmsg+0x2bf/0x560 [ 171.515580][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 171.517884][ T2364] usb 1-1: config 0 has no interface number 0 [ 171.520628][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 171.520654][ C0] ? __sys_connect+0x18a/0x410 [ 171.536839][ C0] ? print_irqtrace_events+0x210/0x210 [ 171.542335][ C0] ? vtime_user_exit+0x2d1/0x400 [ 171.547351][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 171.553367][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 171.558280][ C0] do_syscall_64+0x3b/0xb0 [ 171.562726][ C0] ? clear_bhb_loop+0x15/0x70 [ 171.567484][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.573418][ C0] RIP: 0033:0x7f4cd14f7759 [ 171.577899][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.597557][ C0] RSP: 002b:00007f4ccf96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.606044][ C0] RAX: ffffffffffffffda RBX: 00007f4cd16aef80 RCX: 00007f4cd14f7759 [ 171.614044][ C0] RDX: 0000000000000651 RSI: 0000000020000000 RDI: 0000000000000004 [ 171.622093][ C0] RBP: 00007f4cd156a75e R08: 0000000000000000 R09: 0000000000000000 [ 171.630204][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.638266][ C0] R13: 0000000000000000 R14: 00007f4cd16aef80 R15: 00007ffd0c9fdd58 [ 171.646414][ C0] [ 171.649464][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.656759][ C0] CPU: 0 PID: 5992 Comm: syz.2.555 Not tainted 5.15.173-syzkaller #0 [ 171.664844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 171.674922][ C0] Call Trace: [ 171.678217][ C0] [ 171.681078][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 171.685775][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 171.691433][ C0] ? panic+0x860/0x860 [ 171.695531][ C0] ? __ieee80211_beacon_get+0x1760/0x2080 [ 171.701274][ C0] ? __ieee80211_beacon_get+0x1760/0x2080 [ 171.707020][ C0] panic+0x318/0x860 [ 171.710939][ C0] ? __warn+0x16a/0x300 [ 171.715113][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 171.720351][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 171.726094][ C0] __warn+0x2b2/0x300 [ 171.730100][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 171.735844][ C0] report_bug+0x1b7/0x2e0 [ 171.740216][ C0] handle_bug+0x3d/0x70 [ 171.744390][ C0] exc_invalid_op+0x16/0x40 [ 171.744711][ T2364] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 171.748912][ C0] asm_exc_invalid_op+0x16/0x20 [ 171.748940][ C0] RIP: 0010:__ieee80211_beacon_get+0x183d/0x2080 [ 171.769115][ C0] Code: ff e8 e7 c9 b4 f7 0f 0b e9 4b fa ff ff e8 db c9 b4 f7 0f 0b e9 3b fe ff ff e8 cf c9 b4 f7 0f 0b e9 06 ee ff ff e8 c3 c9 b4 f7 <0f> 0b e9 91 f0 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 2d ea [ 171.788836][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010246 [ 171.794928][ C0] RAX: ffffffff89cba9dd RBX: 0000000000000000 RCX: ffff8880674d3b80 [ 171.797028][ T2364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.802917][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.802935][ C0] RBP: ffffc90000007a70 R08: ffffffff89cb9a68 R09: ffffffff89cb943b [ 171.802951][ C0] R10: 0000000000000003 R11: ffff8880674d3b80 R12: dffffc0000000000 [ 171.802966][ C0] R13: ffff88807c8fcc80 R14: ffff88807c8fe298 R15: 1ffff92000000f18 [ 171.802989][ C0] ? __ieee80211_beacon_get+0x29b/0x2080 [ 171.848687][ C0] ? __ieee80211_beacon_get+0x8c8/0x2080 [ 171.854478][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 171.860250][ C0] ? reacquire_held_locks+0x660/0x660 [ 171.865648][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 171.871767][ C0] ? mark_lock+0x98/0x340 [ 171.876139][ C0] ieee80211_beacon_get_tim+0xb7/0x950 [ 171.881630][ C0] ? __ieee80211_beacon_get+0x2080/0x2080 [ 171.887374][ C0] ? read_lock_is_recursive+0x10/0x10 [ 171.892806][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 171.898819][ C0] mac80211_hwsim_beacon_tx+0xe2/0x8a0 [ 171.899639][ T2364] usb 1-1: Product: syz [ 171.904307][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 171.904340][ C0] __iterate_interfaces+0x21e/0x4b0 [ 171.904373][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 171.904400][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 171.904424][ C0] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 171.904451][ C0] mac80211_hwsim_beacon+0xa7/0x180 [ 171.904474][ C0] ? hw_scan_work+0xe70/0xe70 [ 171.904497][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 171.904534][ C0] ? hrtimer_interrupt+0x980/0x980 [ 171.929087][ T2364] usb 1-1: Manufacturer: syz [ 171.931532][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 171.931572][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 171.974754][ C0] handle_softirqs+0x3a7/0x930 [ 171.979557][ C0] ? __irq_exit_rcu+0x157/0x240 [ 171.984447][ C0] ? do_softirq+0x240/0x240 [ 171.988983][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 171.994215][ C0] __irq_exit_rcu+0x157/0x240 [ 171.998917][ C0] ? irq_exit_rcu+0x20/0x20 [ 172.003454][ C0] irq_exit_rcu+0x5/0x20 [ 172.007714][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 172.009764][ T2364] usb 1-1: SerialNumber: syz [ 172.013372][ C0] [ 172.020913][ C0] [ 172.024038][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 172.030047][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 172.035793][ C0] Code: 45 31 c9 68 f7 aa 59 81 e8 9c 11 09 00 48 83 c4 08 4c 89 ff e8 50 db fe ff 66 90 4c 89 ff e8 e6 5a e4 08 e8 c1 46 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 172.055505][ C0] RSP: 0018:ffffc9000483f298 EFLAGS: 00000286 [ 172.061595][ C0] RAX: a224f5e25750fd00 RBX: ffff888021211df4 RCX: ffffffff9686af03 [ 172.069597][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90540 [ 172.077590][ C0] RBP: ffffc9000483f310 R08: ffffffff8186f220 R09: ffffed1017207461 [ 172.080728][ T2364] usb 1-1: config 0 descriptor?? [ 172.085576][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 172.085596][ C0] R13: 1ffff1101720760b R14: ffff8880b903b058 R15: ffff8880b903a300 [ 172.085620][ C0] ? trace_hardirqs_on+0x30/0x80 [ 172.085657][ C0] finish_task_switch+0x134/0x630 [ 172.085685][ C0] ? __switch_to_asm+0x34/0x60 [ 172.085711][ C0] __schedule+0x12cc/0x45b0 [ 172.085759][ C0] ? release_firmware_map_entry+0x190/0x190 [ 172.131882][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 172.137905][ C0] schedule+0x11b/0x1f0 [ 172.142087][ C0] schedule_timeout+0xac/0x300 [ 172.146880][ C0] ? console_conditional_schedule+0x40/0x40 [ 172.152805][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 172.158026][ C0] ? prepare_to_wait_exclusive+0xc5/0x220 [ 172.163774][ C0] unix_wait_for_peer+0x24b/0x330 [ 172.168823][ C0] ? unix_find_other+0x860/0x860 [ 172.173779][ C0] ? init_wait_entry+0xd0/0xd0 [ 172.176725][ T2364] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 172.178562][ C0] ? __rwlock_init+0x140/0x140 [ 172.189553][ C0] ? unix_dgram_sendmsg+0xca9/0x2090 [ 172.194857][ C0] ? unix_dgram_sendmsg+0xcb3/0x2090 [ 172.200163][ C0] ? bpf_lsm_unix_may_send+0x5/0x10 [ 172.205472][ C0] unix_dgram_sendmsg+0x1441/0x2090 [ 172.210713][ C0] ? unix_dgram_poll+0x640/0x640 [ 172.215681][ C0] ? __might_sleep+0xc0/0xc0 [ 172.220295][ C0] ? aa_sock_msg_perm+0x91/0x150 [ 172.225265][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 172.230573][ C0] ? security_socket_sendmsg+0x7d/0xa0 [ 172.236052][ C0] ? unix_dgram_poll+0x640/0x640 [ 172.241018][ C0] ____sys_sendmsg+0x59e/0x8f0 [ 172.245810][ C0] ? iovec_from_user+0x5d/0x390 [ 172.250696][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 172.255771][ C0] ___sys_sendmsg+0x252/0x2e0 [ 172.260489][ C0] ? __sys_sendmsg+0x260/0x260 [ 172.265321][ C0] ? __might_fault+0xb4/0x110 [ 172.270033][ C0] __sys_sendmmsg+0x2bf/0x560 [ 172.274742][ C0] ? __ia32_sys_sendmsg+0x80/0x80 [ 172.279803][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 172.284850][ C0] ? __sys_connect+0x18a/0x410 [ 172.289738][ C0] ? print_irqtrace_events+0x210/0x210 [ 172.295218][ C0] ? vtime_user_exit+0x2d1/0x400 [ 172.300188][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 172.306203][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 172.311080][ C0] do_syscall_64+0x3b/0xb0 [ 172.314662][ T2364] gspca_spca1528: reg_w err -71 [ 172.315510][ C0] ? clear_bhb_loop+0x15/0x70 [ 172.325037][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.330954][ C0] RIP: 0033:0x7f4cd14f7759 [ 172.335393][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.353639][ T2364] spca1528: probe of 1-1:0.1 failed with error -71 [ 172.355064][ C0] RSP: 002b:00007f4ccf96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 172.355091][ C0] RAX: ffffffffffffffda RBX: 00007f4cd16aef80 RCX: 00007f4cd14f7759 [ 172.355106][ C0] RDX: 0000000000000651 RSI: 0000000020000000 RDI: 0000000000000004 [ 172.355118][ C0] RBP: 00007f4cd156a75e R08: 0000000000000000 R09: 0000000000000000 [ 172.355131][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.355143][ C0] R13: 0000000000000000 R14: 00007f4cd16aef80 R15: 00007ffd0c9fdd58 [ 172.355170][ C0] [ 172.355472][ C0] Kernel Offset: disabled [ 172.417494][ C0] Rebooting in 86400 seconds..