last executing test programs: 1m4.941792769s ago: executing program 0 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 59.548665561s ago: executing program 0 (id=137): sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 58.321663819s ago: executing program 0 (id=134): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 57.033511568s ago: executing program 0 (id=136): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8=0,shortname=winnt,usefree,discard,rodir,utf8=1,shortname=lower,nfs=nostale_ro,shortname=mixed,nonumtail,utf8=1,\x00'/132], 0x0, 0x2ad, &(0x7f0000000580)="$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") pwrite64(r0, 0x0, 0x0, 0x92f6) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') stat(&(0x7f0000000200)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000240)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) socket(0x10, 0x3, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r2, 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 56.426050421s ago: executing program 0 (id=141): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x103e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 54.965845754s ago: executing program 0 (id=145): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2c, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x3ff, 0x0) truncate(&(0x7f00000009c0)='./file1\x00', 0xc) 54.28942463s ago: executing program 32 (id=145): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2c, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x3ff, 0x0) truncate(&(0x7f00000009c0)='./file1\x00', 0xc) 22.924983131s ago: executing program 4 (id=191): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xa3, 0x99, 0x94, 0x10, 0x12d1, 0x8bec, 0x2974, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xe, 0x10, 0x96, "", [{{0x9, 0x4, 0x8e, 0x9, 0x0, 0xff, 0x4, 0x64, 0x3}}]}}]}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r1], 0x7) 16.76301118s ago: executing program 4 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xb2a42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 15.625002176s ago: executing program 4 (id=208): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000400)='ns\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) syz_usb_connect$midi(0x4, 0x3e, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./mnt\x00', r2, &(0x7f00000000c0)='./mnt\x00') read$FUSE(r0, &(0x7f0000001100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000003140)={0x28, 0xffffffffffffffda, r4, {{0x1, 0x3, 0x1, r1}}}, 0x28) readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f00000004c0)=""/163, 0xa3) 15.46257899s ago: executing program 3 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x2a, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x404401d}, 0x0) 14.082953071s ago: executing program 1 (id=211): socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) 13.993542993s ago: executing program 2 (id=212): r0 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r0, 0x30}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xf48e6962210582ca) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/149, 0x95, 0x0, &(0x7f0000000300)=""/172, 0xac}, &(0x7f0000000400)=0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0x9}}) r3 = socket$inet(0x2, 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x52a10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x5a, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6gretap0\x00', 0x10) sendto$inet(r3, &(0x7f0000000140)='\a', 0x1, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) 13.842139677s ago: executing program 3 (id=213): syz_open_dev$mtd(0x0, 0x260c, 0xa02) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000000c0)=0x6f) 13.837648837s ago: executing program 1 (id=214): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 13.71429065s ago: executing program 2 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_open(0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000280), 0xfffbfff8, r3}, 0x38) 12.754227101s ago: executing program 1 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 12.753267041s ago: executing program 3 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r3, 0x4b48, &(0x7f0000000040)) 11.315793414s ago: executing program 2 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xb2a42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 11.175963637s ago: executing program 3 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 11.140194788s ago: executing program 1 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002ac0)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, 0x0, 0x0) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 11.081198069s ago: executing program 4 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 9.748608849s ago: executing program 3 (id=221): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) 7.358632974s ago: executing program 4 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$inet(0x2, 0x2, 0x0) 7.358268674s ago: executing program 2 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 5.692363382s ago: executing program 1 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.691782611s ago: executing program 2 (id=226): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x5, 0x0, 0x0) 4.202182165s ago: executing program 4 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.123357849s ago: executing program 1 (id=228): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r2 = fcntl$dupfd(r1, 0x406, r1) sendmmsg$inet(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001a00)="04", 0x1}], 0x1, &(0x7f0000001c40)=ANY=[], 0xc}}], 0x1, 0x8000) 1.552738165s ago: executing program 3 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 0s ago: executing program 2 (id=230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) getpid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 73.501519][ T5763] cgroup: Unknown subsys name 'net' [ 73.656846][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.398592][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.970976][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.000371][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.007861][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.018510][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.039513][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.039965][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.054204][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.056910][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.061577][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.069502][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.076570][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.086584][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.091579][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.103831][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.111346][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.118871][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.126961][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.134745][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.155681][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.164901][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.172526][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.180307][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.187814][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.195183][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.527906][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.651332][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 78.714756][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.724211][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.731670][ T5776] bridge_slave_0: entered allmulticast mode [ 78.739357][ T5776] bridge_slave_0: entered promiscuous mode [ 78.778985][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.786251][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.793802][ T5776] bridge_slave_1: entered allmulticast mode [ 78.800735][ T5776] bridge_slave_1: entered promiscuous mode [ 78.831333][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.848761][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 78.870469][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.960463][ T5776] team0: Port device team_slave_0 added [ 78.974624][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.982105][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.989512][ T5775] bridge_slave_0: entered allmulticast mode [ 78.996315][ T5775] bridge_slave_0: entered promiscuous mode [ 79.003808][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 79.017801][ T5776] team0: Port device team_slave_1 added [ 79.036633][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.043965][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.052072][ T5775] bridge_slave_1: entered allmulticast mode [ 79.059166][ T5775] bridge_slave_1: entered promiscuous mode [ 79.152712][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.159831][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.185969][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.201880][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.213979][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.223662][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.231148][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.238772][ T5777] bridge_slave_0: entered allmulticast mode [ 79.245555][ T5777] bridge_slave_0: entered promiscuous mode [ 79.263574][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.271760][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.298089][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.329955][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.337241][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.344844][ T5777] bridge_slave_1: entered allmulticast mode [ 79.352491][ T5777] bridge_slave_1: entered promiscuous mode [ 79.423678][ T5775] team0: Port device team_slave_0 added [ 79.432812][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.455549][ T5776] hsr_slave_0: entered promiscuous mode [ 79.462052][ T5776] hsr_slave_1: entered promiscuous mode [ 79.483837][ T5775] team0: Port device team_slave_1 added [ 79.494453][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.585780][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.593294][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.600669][ T5778] bridge_slave_0: entered allmulticast mode [ 79.607634][ T5778] bridge_slave_0: entered promiscuous mode [ 79.617595][ T5777] team0: Port device team_slave_0 added [ 79.628590][ T5777] team0: Port device team_slave_1 added [ 79.643110][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.650824][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.685203][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.696906][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.704831][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.712471][ T5778] bridge_slave_1: entered allmulticast mode [ 79.720358][ T5778] bridge_slave_1: entered promiscuous mode [ 79.755652][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.762744][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.789120][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.834214][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.841315][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.867424][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.904745][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.919133][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.945550][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.952684][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.979185][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.994111][ T5775] hsr_slave_0: entered promiscuous mode [ 80.002435][ T5775] hsr_slave_1: entered promiscuous mode [ 80.008938][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.016797][ T5775] Cannot create hsr debugfs directory [ 80.092063][ T5777] hsr_slave_0: entered promiscuous mode [ 80.098653][ T5777] hsr_slave_1: entered promiscuous mode [ 80.104893][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.112529][ T5777] Cannot create hsr debugfs directory [ 80.120980][ T5778] team0: Port device team_slave_0 added [ 80.149091][ T5780] Bluetooth: hci0: command tx timeout [ 80.171179][ T5778] team0: Port device team_slave_1 added [ 80.229840][ T5780] Bluetooth: hci3: command tx timeout [ 80.238752][ T5780] Bluetooth: hci2: command tx timeout [ 80.261801][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.268885][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.295061][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.318358][ T5780] Bluetooth: hci1: command tx timeout [ 80.332450][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.340363][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.366848][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.470651][ T5778] hsr_slave_0: entered promiscuous mode [ 80.476989][ T5778] hsr_slave_1: entered promiscuous mode [ 80.483488][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.491743][ T5778] Cannot create hsr debugfs directory [ 80.622869][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.649959][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.666553][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.698639][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.770471][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.786688][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.810807][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.822922][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.914271][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.935035][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.946772][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.998438][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.047878][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.061342][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.074045][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.085391][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.186983][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.253937][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.281395][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.288734][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.321803][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.349828][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.357001][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.382455][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.406631][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.442813][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.469361][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.483321][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.490792][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.511026][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.526314][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.533530][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.552187][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.575567][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.582780][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.593091][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.601615][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.630514][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.637663][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.654334][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.661548][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.833781][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.112820][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.238224][ T5780] Bluetooth: hci0: command tx timeout [ 82.286721][ T5776] veth0_vlan: entered promiscuous mode [ 82.308941][ T5780] Bluetooth: hci2: command tx timeout [ 82.309391][ T5785] Bluetooth: hci3: command tx timeout [ 82.353476][ T5776] veth1_vlan: entered promiscuous mode [ 82.390408][ T5785] Bluetooth: hci1: command tx timeout [ 82.405623][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.484632][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.501206][ T5776] veth0_macvtap: entered promiscuous mode [ 82.508072][ T5777] veth0_vlan: entered promiscuous mode [ 82.518902][ T5776] veth1_macvtap: entered promiscuous mode [ 82.529151][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.559140][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.583912][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.592726][ T5777] veth1_vlan: entered promiscuous mode [ 82.617109][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.628420][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.637164][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.647381][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.732073][ T5777] veth0_macvtap: entered promiscuous mode [ 82.777273][ T5777] veth1_macvtap: entered promiscuous mode [ 82.837541][ T5775] veth0_vlan: entered promiscuous mode [ 82.844327][ T5778] veth0_vlan: entered promiscuous mode [ 82.884077][ T5778] veth1_vlan: entered promiscuous mode [ 82.893466][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.910310][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.922033][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.925691][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.934297][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.956170][ T5775] veth1_vlan: entered promiscuous mode [ 82.980704][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.992246][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.003820][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.047927][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.048828][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.056504][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.074431][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.084072][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.093225][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.126861][ T5775] veth0_macvtap: entered promiscuous mode [ 83.151156][ T5775] veth1_macvtap: entered promiscuous mode [ 83.205439][ T5778] veth0_macvtap: entered promiscuous mode [ 83.246939][ T5778] veth1_macvtap: entered promiscuous mode [ 83.273490][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.285081][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.295788][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.313764][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.342996][ T5840] syz.3.4[5840]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.345083][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.366499][ T5840] loop3: detected capacity change from 0 to 1024 [ 83.397930][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.413165][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.429374][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.440483][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.464618][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.477849][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.496102][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.511070][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.528071][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.566514][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.583730][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.594728][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.605600][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.616737][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.627592][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.639958][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.666991][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.685796][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.696919][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.713141][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.723117][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.739319][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.755980][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.801573][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.813583][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.853108][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.867003][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.883758][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.892848][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.953026][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.963888][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.124592][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.136291][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.253441][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.287540][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.309380][ T5785] Bluetooth: hci0: command tx timeout [ 84.389076][ T5785] Bluetooth: hci2: command tx timeout [ 84.390465][ T5780] Bluetooth: hci3: command tx timeout [ 84.478344][ T5780] Bluetooth: hci1: command tx timeout [ 84.576887][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.594073][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.622719][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.631451][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.368129][ C0] sched: RT throttling activated [ 86.388395][ T5780] Bluetooth: hci0: command tx timeout [ 86.456340][ T5875] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.519410][ T5780] Bluetooth: hci3: command tx timeout [ 86.524955][ T5780] Bluetooth: hci2: command tx timeout [ 86.549344][ T5785] Bluetooth: hci1: command tx timeout [ 90.058404][ T5909] Zero length message leads to an empty skb [ 90.383590][ T5911] »»»»»»: renamed from vlan0 (while UP) [ 90.490759][ T5914] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 90.816140][ T5918] syzkaller0: entered promiscuous mode [ 90.829674][ T5918] syzkaller0: entered allmulticast mode [ 92.007545][ T5932] syzkaller0: entered promiscuous mode [ 92.013288][ T5932] syzkaller0: entered allmulticast mode [ 92.140754][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'. [ 92.234148][ T9] cfg80211: failed to load regulatory.db [ 92.366353][ T5944] loop1: detected capacity change from 0 to 256 [ 92.372773][ T5943] syzkaller0: entered promiscuous mode [ 92.381144][ T5943] syzkaller0: entered allmulticast mode [ 93.873662][ T5956] »»»»»»: renamed from vlan0 (while UP) [ 94.146100][ T5960] syzkaller0: entered promiscuous mode [ 94.164510][ T5960] syzkaller0: entered allmulticast mode [ 94.205626][ T5960] tipc: Started in network mode [ 94.212607][ T5960] tipc: Node identity 462259a2c2a1, cluster identity 4711 [ 94.223805][ T5960] tipc: Enabled bearer , priority 0 [ 94.234499][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.243195][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.270796][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.278338][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.286468][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.293704][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.318736][ T5963] team0: Port device bridge0 added [ 94.325623][ T5959] tipc: Resetting bearer [ 94.394020][ T5959] tipc: Disabling bearer [ 94.421890][ T5965] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 94.445172][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.455469][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.469021][ T5965] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 94.480978][ T5965] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 98.249247][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 98.258552][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.438492][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.679783][ T6011] »»»»»»: renamed from vlan0 (while UP) [ 99.837884][ T6014] syzkaller0: entered promiscuous mode [ 99.856471][ T6014] syzkaller0: entered allmulticast mode [ 100.222877][ T6023] syzkaller0: entered promiscuous mode [ 100.231395][ T6023] syzkaller0: entered allmulticast mode [ 100.375326][ T6025] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 100.413070][ T6025] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 100.511583][ T6025] bridge1: entered promiscuous mode [ 100.545015][ T6032] loop0: detected capacity change from 0 to 164 [ 100.589576][ T6032] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 101.995299][ T5765] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.078253][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 103.104865][ T5765] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 103.148162][ T5765] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 103.156934][ T5765] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 103.202377][ T5765] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 103.223357][ T5765] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.223393][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.223416][ T5765] usb 3-1: Product: syz [ 103.223432][ T5765] usb 3-1: Manufacturer: syz [ 103.223449][ T5765] usb 3-1: SerialNumber: syz [ 103.448932][ T5765] usb 3-1: 0:2 : does not exist [ 103.487433][ T5765] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 103.579747][ T5765] usb 3-1: USB disconnect, device number 2 [ 103.612465][ T6060] syzkaller0: entered promiscuous mode [ 103.638957][ T6060] syzkaller0: entered allmulticast mode [ 103.702012][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.611026][ T6067] syzkaller0: entered promiscuous mode [ 104.616541][ T6067] syzkaller0: entered allmulticast mode [ 105.556379][ T6086] loop1: detected capacity change from 0 to 512 [ 106.751846][ T6076] mmap: syz.0.71 (6076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.944261][ T6076] loop0: detected capacity change from 0 to 128 [ 107.212924][ T6086] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.228427][ T6069] syz.2.69 (6069): drop_caches: 2 [ 107.439762][ T6086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.884881][ T6086] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.73: invalid indirect mapped block 4294967295 (level 0) [ 107.973678][ T6086] EXT4-fs (loop1): Remounting filesystem read-only [ 107.998724][ T6086] EXT4-fs (loop1): 1 orphan inode deleted [ 108.018780][ T6086] EXT4-fs (loop1): 1 truncate cleaned up [ 108.026056][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.079181][ T6102] syzkaller0: entered promiscuous mode [ 108.084735][ T6102] syzkaller0: entered allmulticast mode [ 108.316241][ T6106] ======================================================= [ 108.316241][ T6106] WARNING: The mand mount option has been deprecated and [ 108.316241][ T6106] and is ignored by this kernel. Remove the mand [ 108.316241][ T6106] option from the mount to silence this warning. [ 108.316241][ T6106] ======================================================= [ 112.319424][ T6135] fuse: Bad value for 'fd' [ 112.615983][ T6132] loop0: detected capacity change from 0 to 512 [ 112.660113][ T6132] EXT4-fs warning (device loop0): read_mmp_block:115: Error -74 while reading MMP block 13 [ 113.652636][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.508587][ T6147] syzkaller0: entered promiscuous mode [ 114.514136][ T6147] syzkaller0: entered allmulticast mode [ 115.842915][ T6162] loop1: detected capacity change from 0 to 512 [ 115.851433][ T6162] EXT4-fs: Ignoring removed orlov option [ 115.946102][ T6162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.043031][ T6162] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.067673][ T6167] loop0: detected capacity change from 0 to 1024 [ 116.145317][ T6167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.380816][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.839897][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.968736][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'. [ 118.035090][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.99'. [ 118.058768][ T6192] ipvlan1: entered promiscuous mode [ 118.244732][ T6192] ipvlan1: entered allmulticast mode [ 118.263080][ T6192] veth0_vlan: entered allmulticast mode [ 119.197112][ T6206] overlayfs: failed to clone upperpath [ 120.382380][ T6220] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 120.717031][ T6224] veth3: entered allmulticast mode [ 121.503870][ T6224] bond1: (slave veth3): Enslaving as an active interface with a down link [ 122.478902][ T6220] bond1: (slave veth0_to_bond): making interface the new active one [ 122.490409][ T6220] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 122.616606][ T6220] syz.3.106 (6220) used greatest stack depth: 20520 bytes left [ 123.821056][ T28] audit: type=1326 audit(1784281461.558:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.3.115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e32f9de99 code=0x0 [ 126.435976][ T6275] netlink: 'syz.2.124': attribute type 4 has an invalid length. [ 126.468794][ T6273] netlink: 'syz.1.122': attribute type 13 has an invalid length. [ 126.491940][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 126.529412][ T6273] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 128.186001][ T6280] loop2: detected capacity change from 0 to 512 [ 128.229053][ T6280] EXT4-fs warning (device loop2): read_mmp_block:115: Error -74 while reading MMP block 13 [ 130.819672][ T6321] dns_resolver: Unsupported server list version (6) [ 131.213181][ T6325] loop0: detected capacity change from 0 to 128 [ 131.474038][ T5778] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 131.509658][ T5778] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 133.117457][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.196264][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.251535][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.422242][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.582060][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.825186][ T6345] warning: `syz.2.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.729876][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.749859][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.758572][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.158764][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.264508][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.273643][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.535865][ T6379] loop1: detected capacity change from 0 to 1024 [ 139.304169][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 139.340964][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 139.598378][ T5780] Bluetooth: hci1: command tx timeout [ 140.599044][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.606956][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.933530][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 141.932590][ T5780] Bluetooth: hci1: command tx timeout [ 143.378341][ T6448] dns_resolver: Unsupported server list version (6) [ 143.988196][ T5780] Bluetooth: hci1: command tx timeout [ 144.140268][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.147500][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.218582][ T6362] bridge_slave_0: entered allmulticast mode [ 144.226829][ T6362] bridge_slave_0: entered promiscuous mode [ 144.270321][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.288001][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.314140][ T6362] bridge_slave_1: entered allmulticast mode [ 144.342044][ T6362] bridge_slave_1: entered promiscuous mode [ 144.681568][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.864105][ T49] hsr_slave_0: left promiscuous mode [ 144.969625][ T49] hsr_slave_1: left promiscuous mode [ 145.005507][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.023367][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.058009][ T49] bridge_slave_1: left allmulticast mode [ 145.066526][ T49] bridge_slave_1: left promiscuous mode [ 145.084729][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.137599][ T49] bridge_slave_0: left allmulticast mode [ 145.143428][ T49] bridge_slave_0: left promiscuous mode [ 145.150704][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.196728][ T49] veth1_macvtap: left promiscuous mode [ 145.204987][ T49] veth0_macvtap: left promiscuous mode [ 145.227394][ T49] veth1_vlan: left promiscuous mode [ 145.249023][ T49] veth0_vlan: left promiscuous mode [ 146.385400][ T5780] Bluetooth: hci1: command tx timeout [ 147.714488][ T49] team0 (unregistering): Port device team_slave_1 removed [ 147.830285][ T49] team0 (unregistering): Port device team_slave_0 removed [ 147.930027][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.157469][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.956912][ T49] bond0 (unregistering): Released all slaves [ 149.157074][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.314024][ T6362] team0: Port device team_slave_0 added [ 149.346969][ T6362] team0: Port device team_slave_1 added [ 150.541810][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.568176][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.658347][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.688547][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.704089][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.751951][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.850650][ T6362] hsr_slave_0: entered promiscuous mode [ 150.857569][ T6362] hsr_slave_1: entered promiscuous mode [ 150.864733][ T6362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.878014][ T6362] Cannot create hsr debugfs directory [ 151.317046][ T6362] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.346006][ T6362] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.375726][ T6362] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.391984][ T6362] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.591081][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.650282][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.682837][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.690076][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.700216][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.707311][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.097542][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.528010][ T6362] veth0_vlan: entered promiscuous mode [ 152.572562][ T6362] veth1_vlan: entered promiscuous mode [ 152.640770][ T6362] veth0_macvtap: entered promiscuous mode [ 152.662387][ T6362] veth1_macvtap: entered promiscuous mode [ 152.699937][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.718756][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.733132][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.743688][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.758128][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.775275][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.797346][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.824298][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.840784][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.854288][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.867260][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.880885][ T6362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.894809][ T6362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.906472][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.926778][ T6362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.937568][ T6362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.949449][ T6362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.958520][ T6362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.049044][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.056946][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.098171][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.106135][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.239589][ T6563] loop4: detected capacity change from 0 to 8 [ 155.252549][ T6563] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 160.737808][ T6622] tipc: Enabled bearer , priority 0 [ 160.749383][ T6622] syzkaller0: entered promiscuous mode [ 160.755178][ T6622] syzkaller0: entered allmulticast mode [ 160.864523][ T6622] tipc: Resetting bearer [ 160.908633][ T6620] tipc: Resetting bearer [ 160.980615][ T6620] tipc: Disabling bearer [ 162.395939][ T6635] syzkaller0: entered promiscuous mode [ 162.438440][ T6635] syzkaller0: entered allmulticast mode [ 168.434932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 168.702187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 170.326973][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 170.348968][ T5765] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 170.526796][ T6703] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 170.554068][ T5765] usb 5-1: Using ep0 maxpacket: 16 [ 170.578981][ T6703] bond2: entered promiscuous mode [ 170.584841][ T6703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.603535][ T5765] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.623749][ T5765] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 170.643057][ T5765] usb 5-1: can't read configurations, error -71 [ 170.674253][ T6703] veth5: entered allmulticast mode [ 170.684798][ T6703] bond2: (slave veth5): making interface the new active one [ 170.699135][ T6703] veth5: entered promiscuous mode [ 170.706968][ T6703] bond2: (slave veth5): Enslaving as an active interface with an up link [ 170.731507][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.742771][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.752917][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.764079][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.774133][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.785834][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.795753][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.806422][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.819782][ T6707] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 170.832443][ T6707] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 172.913898][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.135967][ T27] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 173.192460][ T27] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 173.291613][ T27] usb 5-1: config 220 has no interface number 2 [ 173.333660][ T27] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 173.357285][ T27] usb 5-1: config 220 interface 0 has no altsetting 0 [ 173.365362][ T27] usb 5-1: config 220 interface 76 has no altsetting 0 [ 173.706905][ T27] usb 5-1: config 220 interface 1 has no altsetting 0 [ 173.760119][ T27] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 173.769326][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.903166][ T27] usb 5-1: Product: syz [ 173.923504][ T27] usb 5-1: Manufacturer: syz [ 173.966992][ T27] usb 5-1: SerialNumber: syz [ 174.380825][ T27] usb 5-1: selecting invalid altsetting 0 [ 175.128159][ T27] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 175.135033][ T27] usb 5-1: No valid video chain found. [ 175.166553][ T27] usb 5-1: selecting invalid altsetting 0 [ 175.190527][ T27] usbtest: probe of 5-1:220.1 failed with error -22 [ 175.216237][ T27] usb 5-1: USB disconnect, device number 4 [ 176.992894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 187.880600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.389277][ C0] ------------[ cut here ]------------ [ 188.395182][ C0] WARNING: CPU: 0 PID: 6852 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1141/0x1520 [ 188.405322][ C0] Modules linked in: [ 188.409271][ C0] CPU: 0 PID: 6852 Comm: syz.4.227 Not tainted syzkaller #0 [ 188.416639][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 188.426751][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 188.433127][ C0] Code: f7 4c 89 ef e8 70 d3 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb f1 7c f7 0f 0b e9 61 f8 ff ff e8 bf f1 7c f7 <0f> 0b e9 85 fb ff ff e8 b3 f1 7c f7 48 c7 c7 00 ae 65 8e 4c 89 e6 [ 188.452820][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 188.459045][ C0] RAX: ffffffff8a09f3b1 RBX: dffffc0000000000 RCX: ffff888024a59e00 [ 188.467120][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.475163][ C0] RBP: 0000000000000000 R08: ffff888024a59e00 R09: 0000000000000003 [ 188.483216][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c196440 [ 188.491259][ C0] R13: ffff88805c51a424 R14: ffff88805c196930 R15: ffff88805c51a400 [ 188.499288][ C0] FS: 00007ff9428016c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 188.508281][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.514981][ C0] CR2: 000020000009e030 CR3: 0000000023a00000 CR4: 00000000003506f0 [ 188.523011][ C0] Call Trace: [ 188.526351][ C0] [ 188.529231][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 188.534842][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 188.540371][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 188.547211][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 188.552799][ C0] __iterate_interfaces+0x225/0x4c0 [ 188.558062][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 188.564346][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 188.571698][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 188.577999][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 188.585065][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 188.590409][ C0] ? hw_scan_work+0xf10/0xf10 [ 188.595119][ C0] __hrtimer_run_queues+0x525/0xc10 [ 188.600402][ C0] ? hrtimer_interrupt+0x980/0x980 [ 188.605544][ C0] ? read_tsc+0x9/0x20 [ 188.609687][ C0] hrtimer_run_softirq+0x177/0x290 [ 188.614843][ C0] handle_softirqs+0x27d/0x820 [ 188.619664][ C0] ? read_tsc+0x9/0x20 [ 188.623769][ C0] ? ktime_get+0x24b/0x280 [ 188.628339][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 188.633153][ C0] ? do_softirq+0x1a0/0x1a0 [ 188.637730][ C0] __irq_exit_rcu+0xd3/0x190 [ 188.642351][ C0] ? irq_exit_rcu+0x20/0x20 [ 188.646927][ C0] irq_exit_rcu+0x9/0x20 [ 188.651213][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 188.656909][ C0] [ 188.659868][ C0] [ 188.662834][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.668883][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 188.674204][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 188.693876][ C0] RSP: 0018:ffffc90004bf7500 EFLAGS: 00000206 [ 188.700064][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: bf4c3964cd530e00 [ 188.708239][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 188.716262][ C0] RBP: ffffc90004bf7608 R08: dffffc0000000000 R09: 1ffffffff223cea0 [ 188.724327][ C0] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: 1ffff9200097eeac [ 188.732385][ C0] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 188.740470][ C0] ? schedule_timeout+0xc1/0x2d0 [ 188.745598][ C0] ? console_conditional_schedule+0x40/0x40 [ 188.751621][ C0] ? read_lock_is_recursive+0x20/0x20 [ 188.757169][ C0] sk_filter_trim_cap+0x1ab/0x8e0 [ 188.762303][ C0] ? sk_filter_trim_cap+0x18a/0x8e0 [ 188.767611][ C0] ? unix_wait_for_peer+0x23c/0x2f0 [ 188.773039][ C0] ? unix_find_other+0x8e0/0x8e0 [ 188.778085][ C0] ? sk_filter_trim_cap+0x18a/0x8e0 [ 188.783445][ C0] ? copy_bpf_fprog_from_user+0x2c0/0x2c0 [ 188.789257][ C0] ? __rwlock_init+0x150/0x150 [ 188.794078][ C0] ? signal_pending+0x5e/0xa0 [ 188.798858][ C0] unix_dgram_sendmsg+0x948/0x16e0 [ 188.804255][ C0] ? unix_dgram_poll+0x680/0x680 [ 188.809279][ C0] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 188.815741][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 188.821355][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 188.826786][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 188.832321][ C0] ? unix_dgram_poll+0x680/0x680 [ 188.837304][ C0] ____sys_sendmsg+0x61b/0x980 [ 188.842153][ C0] ? __asan_memset+0x22/0x40 [ 188.846786][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 188.851880][ C0] ? __import_iovec+0x3fa/0x850 [ 188.856803][ C0] ? import_iovec+0x73/0xa0 [ 188.861376][ C0] ___sys_sendmsg+0x2a6/0x360 [ 188.866107][ C0] ? __sys_sendmsg+0x2b0/0x2b0 [ 188.871000][ C0] ? __might_fault+0xc6/0x120 [ 188.875709][ C0] ? __might_fault+0xaa/0x120 [ 188.880452][ C0] __sys_sendmmsg+0x2ca/0x510 [ 188.885177][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 188.890284][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 188.896231][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 188.902294][ C0] ? lock_chain_count+0x20/0x20 [ 188.907196][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 188.912135][ C0] do_syscall_64+0x55/0xb0 [ 188.916614][ C0] ? clear_bhb_loop+0x40/0x90 [ 188.921366][ C0] ? clear_bhb_loop+0x40/0x90 [ 188.926089][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.932061][ C0] RIP: 0033:0x7ff94199de99 [ 188.936513][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.952271][ T49] ------------[ cut here ]------------ [ 188.956237][ C0] RSP: 002b:00007ff942801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 188.961991][ T49] WARNING: CPU: 1 PID: 49 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 188.970421][ C0] RAX: ffffffffffffffda RBX: 00007ff941c25fa0 RCX: 00007ff94199de99 [ 188.970439][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 188.970451][ C0] RBP: 00007ff941a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 188.970463][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.970474][ C0] R13: 00007ff941c26038 R14: 00007ff941c25fa0 R15: 00007fff3e9fab48 [ 188.970507][ C0] [ 188.970518][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 188.970528][ C0] CPU: 0 PID: 6852 Comm: syz.4.227 Not tainted syzkaller #0 [ 188.970545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 188.970554][ C0] Call Trace: [ 188.970562][ C0] [ 188.970568][ C0] dump_stack_lvl+0x18c/0x250 [ 188.970601][ C0] ? show_regs_print_info+0x20/0x20 [ 188.970626][ C0] ? load_image+0x420/0x420 [ 188.970663][ C0] panic+0x2ca/0x720 [ 188.970689][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 188.970718][ C0] __warn+0x2e0/0x470 [ 188.970733][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 188.970756][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 188.970775][ C0] report_bug+0x2be/0x4f0 [ 188.970791][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 188.970809][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 188.970826][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 188.970849][ C0] handle_bug+0xcf/0x120 [ 188.970864][ C0] exc_invalid_op+0x1a/0x50 [ 188.970882][ C0] asm_exc_invalid_op+0x1a/0x20 [ 188.970906][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 188.970929][ C0] Code: f7 4c 89 ef e8 70 d3 ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb f1 7c f7 0f 0b e9 61 f8 ff ff e8 bf f1 7c f7 <0f> 0b e9 85 fb ff ff e8 b3 f1 7c f7 48 c7 c7 00 ae 65 8e 4c 89 e6 [ 188.970945][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 188.970961][ C0] RAX: ffffffff8a09f3b1 RBX: dffffc0000000000 RCX: ffff888024a59e00 [ 188.970982][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.970993][ C0] RBP: 0000000000000000 R08: ffff888024a59e00 R09: 0000000000000003 [ 188.971003][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c196440 [ 188.971014][ C0] R13: ffff88805c51a424 R14: ffff88805c196930 R15: ffff88805c51a400 [ 188.971034][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 188.971061][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 188.971080][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 188.971111][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 188.971135][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 188.971165][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 188.971192][ C0] __iterate_interfaces+0x225/0x4c0 [ 188.971216][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 188.971234][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 188.971259][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 188.971277][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 188.971304][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 188.971320][ C0] ? hw_scan_work+0xf10/0xf10 [ 188.971338][ C0] __hrtimer_run_queues+0x525/0xc10 [ 188.971376][ C0] ? hrtimer_interrupt+0x980/0x980 [ 188.971392][ C0] ? read_tsc+0x9/0x20 [ 188.971419][ C0] hrtimer_run_softirq+0x177/0x290 [ 188.971442][ C0] handle_softirqs+0x27d/0x820 [ 188.971458][ C0] ? read_tsc+0x9/0x20 [ 188.971473][ C0] ? ktime_get+0x24b/0x280 [ 188.971495][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 188.971515][ C0] ? do_softirq+0x1a0/0x1a0 [ 188.971542][ C0] __irq_exit_rcu+0xd3/0x190 [ 188.971558][ C0] ? irq_exit_rcu+0x20/0x20 [ 188.971584][ C0] irq_exit_rcu+0x9/0x20 [ 188.971599][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 188.971618][ C0] [ 188.971624][ C0] [ 188.971630][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.971653][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 188.971672][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 188.971684][ C0] RSP: 0018:ffffc90004bf7500 EFLAGS: 00000206 [ 188.971698][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: bf4c3964cd530e00 [ 188.971708][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 188.971719][ C0] RBP: ffffc90004bf7608 R08: dffffc0000000000 R09: 1ffffffff223cea0 [ 188.971731][ C0] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: 1ffff9200097eeac [ 188.971742][ C0] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 188.971774][ C0] ? schedule_timeout+0xc1/0x2d0 [ 188.971795][ C0] ? console_conditional_schedule+0x40/0x40 [ 188.971816][ C0] ? read_lock_is_recursive+0x20/0x20 [ 188.971847][ C0] sk_filter_trim_cap+0x1ab/0x8e0 [ 188.971866][ C0] ? sk_filter_trim_cap+0x18a/0x8e0 [ 188.971884][ C0] ? unix_wait_for_peer+0x23c/0x2f0 [ 188.971903][ C0] ? unix_find_other+0x8e0/0x8e0 [ 188.971925][ C0] ? sk_filter_trim_cap+0x18a/0x8e0 [ 188.971942][ C0] ? copy_bpf_fprog_from_user+0x2c0/0x2c0 [ 188.971961][ C0] ? __rwlock_init+0x150/0x150 [ 188.971986][ C0] ? signal_pending+0x5e/0xa0 [ 188.972018][ C0] unix_dgram_sendmsg+0x948/0x16e0 [ 188.972055][ C0] ? unix_dgram_poll+0x680/0x680 [ 188.972069][ C0] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 188.972097][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 188.972116][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 188.972136][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 188.972157][ C0] ? unix_dgram_poll+0x680/0x680 [ 188.972175][ C0] ____sys_sendmsg+0x61b/0x980 [ 188.972205][ C0] ? __asan_memset+0x22/0x40 [ 188.972227][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 188.972248][ C0] ? __import_iovec+0x3fa/0x850 [ 188.972277][ C0] ? import_iovec+0x73/0xa0 [ 188.972301][ C0] ___sys_sendmsg+0x2a6/0x360 [ 188.972330][ C0] ? __sys_sendmsg+0x2b0/0x2b0 [ 188.972395][ C0] ? __might_fault+0xc6/0x120 [ 188.972411][ C0] ? __might_fault+0xaa/0x120 [ 188.972430][ C0] __sys_sendmmsg+0x2ca/0x510 [ 188.972459][ C0] ? __ia32_sys_sendmsg+0x90/0x90 [ 188.972490][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 188.972522][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 188.972544][ C0] ? lock_chain_count+0x20/0x20 [ 188.972570][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 188.972596][ C0] do_syscall_64+0x55/0xb0 [ 188.972617][ C0] ? clear_bhb_loop+0x40/0x90 [ 188.972631][ C0] ? clear_bhb_loop+0x40/0x90 [ 188.972648][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.972670][ C0] RIP: 0033:0x7ff94199de99 [ 188.972685][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.972697][ C0] RSP: 002b:00007ff942801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 188.972714][ C0] RAX: ffffffffffffffda RBX: 00007ff941c25fa0 RCX: 00007ff94199de99 [ 188.972726][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 188.972736][ C0] RBP: 00007ff941a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 188.972746][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.972756][ C0] R13: 00007ff941c26038 R14: 00007ff941c25fa0 R15: 00007fff3e9fab48 [ 188.972783][ C0] [ 188.981957][ C0] Kernel Offset: disabled