last executing test programs: 18.694923529s ago: executing program 4 (id=587): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x1e, &(0x7f0000000040)=0x6) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r4) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x55) keyctl$unlink(0x9, r5, r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)=0xb) syz_open_dev$ttys(0xc, 0x2, 0x0) 14.859665991s ago: executing program 0 (id=594): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x80002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/udplite\x00') read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x4d) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback, 0x6}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='0', 0x1) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='dummy_udc.0', 0xb) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010004b0426bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="40380000442c0400240600800b000100627269646765000014000280084001040000000005001700010274e6f972224579b33679470000886e2710aebb46136098e7ca9d6521c610c85f900a31de4139c1c8515dbefd66f29a014e606741839a1f395792733000676e1a6a8507d288056f760a75eb8cc2c2f55660581d0a2b2719d5e6661159340568ef2d41c2c84068e7e742437102e692840a"], 0x44}}, 0x24) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000180)) close(r2) listen(r2, 0x8) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x197, &(0x7f0000000200)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.798162033s ago: executing program 3 (id=595): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 14.056203921s ago: executing program 3 (id=596): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 11.881939413s ago: executing program 3 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace(0x4206, 0x0) tkill(0x0, 0x12) ptrace(0x4208, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x800000000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020}, 0x2020) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = gettid() r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x11, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x300, 0xc0000000, 0x1, 0x400, 0xe, 0x800005, 0x3, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x6c18, 0x4007a, 0x3, 0x20000003, 0x89, 0x12, 0x7f, 0xfffff801, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) 11.818616295s ago: executing program 0 (id=600): socket$netlink(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x305, 0x0, 0x0, 0x0, 0xffe8, 0x0, 0x6, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 11.642806659s ago: executing program 0 (id=602): signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) pipe2(&(0x7f0000000440), 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) sendmsg$inet6(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)}, 0x4048043) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) shutdown(r4, 0x1) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.624551478s ago: executing program 0 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000001980)={r0, 0x58, &(0x7f0000000600)}, 0x10) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getneightbl={0x8, 0x42, 0x10, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x10) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1b, @pix={0x100002, 0x0, 0x30314247, 0x0, 0x0, 0xffffffff, 0x6, 0x1, 0x3, 0x0, 0x0, 0x1}}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bind$netlink(r2, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0x16, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x4011) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 8.307528669s ago: executing program 0 (id=608): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000b}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 8.251191131s ago: executing program 4 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r3, 0x0, 0x0) connect(r3, 0x0, 0x0) sendto(r3, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 7.207318216s ago: executing program 2 (id=610): r0 = syz_open_dev$media(&(0x7f0000000040), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000005c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r6, &(0x7f0000000640)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 7.185808646s ago: executing program 1 (id=611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0xe4, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x125, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) ioctl$VT_DISALLOCATE(r1, 0x5608) 7.180589247s ago: executing program 4 (id=612): syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x305, 0x0, 0x0, 0x0, 0xffe8, 0x0, 0x6, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7.05903403s ago: executing program 2 (id=613): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r4, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) pipe2$9p(0x0, 0x80800) dup(0xffffffffffffffff) 7.05846841s ago: executing program 4 (id=614): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000640)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000680)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000700)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000740)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000780)=0x4, 0x4) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000800)={0xa, 0x4e20, 0x5e, @mcast2, 0x4}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000840)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000880)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f00000008c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r10, &(0x7f0000000900)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000940)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) 5.618488404s ago: executing program 4 (id=615): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5.617291864s ago: executing program 1 (id=625): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x2, 0x1, 0xfff7fffd, 0x2, 0x0, 0x0, 0x7}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) 3.236820232s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) 3.234196542s ago: executing program 2 (id=617): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000040)={0x3, 0xf98, 0x80, 0x0, 0xd}) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x5c, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x5c}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@remote, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_getparam(r1, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x95a) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 2.159519107s ago: executing program 3 (id=618): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee00) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) io_uring_setup(0x42df, &(0x7f0000000000)={0x0, 0x3a2b, 0x2, 0x2, 0x13}) 2.158376988s ago: executing program 1 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) 1.905471284s ago: executing program 2 (id=619): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.819620926s ago: executing program 2 (id=620): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x98, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x4805) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x20, 0x3e, 0x1, 0x70bd26, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 1.088398584s ago: executing program 3 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f40)={0x14, r4, 0x1, 0x2070bd2c, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x4008145}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 985.913226ms ago: executing program 1 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r3, 0x0, 0x0) connect(r3, 0x0, 0x0) sendto(r3, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 16.06532ms ago: executing program 1 (id=623): r0 = syz_open_dev$media(&(0x7f0000000040), 0x1058, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000005c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r6, &(0x7f0000000640)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 15.77174ms ago: executing program 2 (id=624): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESHEX], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xa) fchdir(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r5, 0x2007ffb) close(r5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) openat(r5, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 15.39929ms ago: executing program 3 (id=626): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2da, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x4}, {0x10, 0x0, 0x8}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000140)) r6 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r0, r7, 0x0, 0x1000000201002) 15.26346ms ago: executing program 4 (id=627): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) sendmsg$key(r3, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001040)={0x2, 0x13, 0x8, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x10) r4 = dup(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) r6 = timerfd_create(0x0, 0x0) read(r6, 0x0, 0x0) 0s ago: executing program 0 (id=628): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x2, 0x1, 0xfff7fffd, 0x2, 0x0, 0x0, 0x7}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 35.072182][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.088267][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. syzkaller login: [ 53.341526][ T4173] cgroup: Unknown subsys name 'net' [ 53.487505][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.754918][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.891451][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 55.897160][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 55.904833][ T4186] rdma_rxe: failed to add rxe_eth0 [ 55.907033][ T4198] rdma_rxe: rxe_register_device failed with error -23 [ 55.921460][ T4185] rdma_rxe: rxe_register_device failed with error -23 [ 55.928472][ T4185] rdma_rxe: failed to add rxe_eth0 [ 55.933518][ T4190] rdma_rxe: failed to add rxe_eth0 [ 55.942666][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 55.952652][ T4198] rdma_rxe: failed to add rxe_eth0 [ 55.981548][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.031578][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.189024][ T4187] infiniband rxe0: set active [ 56.199716][ T4187] infiniband rxe0: added rxe_eth0 [ 56.210627][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.277988][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 56.284042][ T4187] RDS/IB: rxe0: added [ 56.293867][ T4187] smc: adding ib device rxe0 with port count 1 [ 56.300185][ T4187] smc: ib device rxe0 port 1 has pnetid [ 56.327803][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 56.354234][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 56.354573][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.379136][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 56.405554][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.551419][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.558831][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.567695][ T4190] device bridge_slave_0 entered promiscuous mode [ 56.581482][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.620771][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.642550][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.650569][ T4190] device bridge_slave_1 entered promiscuous mode [ 56.670072][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.689119][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.701871][ T4185] device bridge_slave_0 entered promiscuous mode [ 56.732519][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.748289][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.760371][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.768662][ T4185] device bridge_slave_1 entered promiscuous mode [ 56.777668][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 56.794456][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.803795][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.810953][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.819532][ T4198] device bridge_slave_0 entered promiscuous mode [ 56.840292][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.861004][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.878659][ T4186] device bridge_slave_0 entered promiscuous mode [ 56.917249][ T4190] team0: Port device team_slave_0 added [ 56.929096][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.938986][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.947478][ T4198] device bridge_slave_1 entered promiscuous mode [ 56.954809][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.961967][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.974710][ T4186] device bridge_slave_1 entered promiscuous mode [ 56.988213][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.010250][ T4190] team0: Port device team_slave_1 added [ 57.037518][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.053088][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.098146][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.121057][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.144319][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.165217][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.172176][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.199344][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.230552][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.242612][ T2301] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.257178][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.264638][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.290820][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.303677][ T4185] team0: Port device team_slave_0 added [ 57.333039][ T4198] team0: Port device team_slave_0 added [ 57.342889][ T4198] team0: Port device team_slave_1 added [ 57.349925][ T4185] team0: Port device team_slave_1 added [ 57.377942][ T4187] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.389082][ T4190] device hsr_slave_0 entered promiscuous mode [ 57.396521][ T4190] device hsr_slave_1 entered promiscuous mode [ 57.410188][ T4186] team0: Port device team_slave_0 added [ 57.416994][ T3851] infiniband rxe0: set active [ 57.423475][ T4186] team0: Port device team_slave_1 added [ 57.441904][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.477981][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.492709][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.519649][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.548098][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.555896][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.586379][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.600109][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.607532][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.635729][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.651681][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.659398][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.689800][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.704879][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.712144][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.739050][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.751274][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.759588][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.788128][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.846612][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 57.849445][ T4198] device hsr_slave_0 entered promiscuous mode [ 57.859855][ T4198] device hsr_slave_1 entered promiscuous mode [ 57.860061][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 57.872336][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 57.872990][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.887055][ T4198] Cannot create hsr debugfs directory [ 57.908167][ T4186] device hsr_slave_0 entered promiscuous mode [ 57.915107][ T4186] device hsr_slave_1 entered promiscuous mode [ 57.922106][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.922907][ T2301] Bluetooth: hci4: command 0x0409 tx timeout [ 57.929944][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 57.940315][ T4186] Cannot create hsr debugfs directory [ 58.001023][ T4185] device hsr_slave_0 entered promiscuous mode [ 58.008901][ T4185] device hsr_slave_1 entered promiscuous mode [ 58.015838][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.023870][ T4185] Cannot create hsr debugfs directory [ 58.246921][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 58.324221][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.348455][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.355990][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.364287][ T4187] device bridge_slave_0 entered promiscuous mode [ 58.373154][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.380855][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.388889][ T4187] device bridge_slave_1 entered promiscuous mode [ 58.395976][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.413949][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.433802][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.445429][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.458637][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.476226][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.491787][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.511224][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.523168][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.536239][ T4187] team0: Port device team_slave_0 added [ 58.550841][ T4187] team0: Port device team_slave_1 added [ 58.579474][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.586705][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.614244][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.639626][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.646818][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.676042][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.708106][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.743135][ T4187] device hsr_slave_0 entered promiscuous mode [ 58.750852][ T4187] device hsr_slave_1 entered promiscuous mode [ 58.759227][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.767083][ T4187] Cannot create hsr debugfs directory [ 58.780411][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.811772][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.821516][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.888518][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.909767][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.921675][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.956866][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.003682][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.018158][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.082165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.094141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.102029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.110875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.124533][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.132905][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.157036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.167228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.176762][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.184039][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.194126][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.225042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.233146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.241857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.252077][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.259336][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.267659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.277572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.286844][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.293978][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.303463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.313171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.322098][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.329561][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.337901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.350065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.360644][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.372697][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.379742][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.395655][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.405547][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.422002][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.442266][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.459430][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.467714][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.476306][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.485694][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.495770][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.505021][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.532622][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.541984][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.554144][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.564211][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.574162][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.584998][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.595093][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.605508][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.615223][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.624484][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.634004][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.643092][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.651686][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.664994][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.679344][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.692155][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.702207][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.718144][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.727363][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.750662][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.795562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.806227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.820359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.829740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.846645][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.855010][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.884878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.901483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.910959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.922518][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 59.926718][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.935732][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.948586][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 59.951372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.955315][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 59.970112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.002811][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 60.012733][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 60.019706][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.029236][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.038154][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.045604][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.054068][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.063186][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.071706][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.078948][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.088093][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.096918][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.106751][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.116943][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.126484][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.135682][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.144714][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.153509][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.162127][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.170814][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.179960][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.201950][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.212874][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.229963][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.248475][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.260492][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.279391][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.289273][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.299976][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.315108][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.324884][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.335786][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.344779][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.354019][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.364306][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.373070][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.381898][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.390854][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.410565][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.427298][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.439031][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.449454][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.460234][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.474795][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.510263][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.528382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.539543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.550722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.564900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.579726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.589928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.599183][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.606699][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.616648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.649441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.664092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.673477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.685134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.694423][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.701598][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.710011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.761647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.771111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.780605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.792269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.801504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.811393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.819093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.826997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.835255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.843160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.851227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.859991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.869611][ T4198] device veth0_vlan entered promiscuous mode [ 60.885966][ T4190] device veth0_vlan entered promiscuous mode [ 60.895668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.904838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.914051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.922945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.931629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.941165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.956086][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.972185][ T4190] device veth1_vlan entered promiscuous mode [ 60.986328][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.000722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.009631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.017980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.028237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.039287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.048592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.081505][ T4190] device veth0_macvtap entered promiscuous mode [ 61.091354][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.100132][ T4198] device veth1_vlan entered promiscuous mode [ 61.109437][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.117930][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.127376][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.139649][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.167543][ T4190] device veth1_macvtap entered promiscuous mode [ 61.181505][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.191214][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.201046][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.210910][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.247356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.263484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.275366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.284999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.296043][ T4198] device veth0_macvtap entered promiscuous mode [ 61.309007][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.325049][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.335671][ T4198] device veth1_macvtap entered promiscuous mode [ 61.361271][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.375301][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.387986][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.396392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.406887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.416338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.425673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.434767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.445193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.455452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.465210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.474705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.485139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.497526][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.507811][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.516863][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.527668][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.541455][ T4185] device veth0_vlan entered promiscuous mode [ 61.558356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.566580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.580586][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.594091][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.606557][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.617911][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.627275][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.636557][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.645550][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.661885][ T4185] device veth1_vlan entered promiscuous mode [ 61.678719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.689687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.702126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.710055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.723878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.732242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.755012][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.764795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.774135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.784918][ T4186] device veth0_vlan entered promiscuous mode [ 61.840120][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.867003][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.883593][ T4185] device veth0_macvtap entered promiscuous mode [ 61.893166][ T4186] device veth1_vlan entered promiscuous mode [ 61.902014][ T4185] device veth1_macvtap entered promiscuous mode [ 61.973400][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.986999][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.987070][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.999215][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.016133][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 62.022735][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 62.029110][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 62.035929][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.048146][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.059391][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.081135][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.090344][ T1323] Bluetooth: hci4: command 0x040f tx timeout [ 62.099695][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.108087][ T1323] Bluetooth: hci3: command 0x040f tx timeout [ 62.117249][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.129690][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.137975][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.146865][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.155766][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.168059][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.176973][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.188248][ T1504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.197305][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.208640][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.213331][ T1504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.220662][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.237609][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.249957][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.278289][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.289329][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.298311][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.307676][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.317295][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.327089][ T4186] device veth0_macvtap entered promiscuous mode [ 62.340608][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.349628][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.358625][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.367413][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.397931][ T4186] device veth1_macvtap entered promiscuous mode [ 62.425610][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.426853][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.443193][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.443417][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.451036][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.460295][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.475338][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.484257][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.493350][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.501679][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.509758][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.519171][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.540851][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.551927][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.562155][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.577508][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.596779][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.607865][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.619495][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.627698][ T4187] device veth0_vlan entered promiscuous mode [ 62.643534][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.653079][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.664448][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.676622][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.687097][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.697715][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.708791][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.719684][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.733847][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.744568][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.753749][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.763943][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.773211][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.802188][ T4187] device veth1_vlan entered promiscuous mode [ 62.831995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.851388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.946651][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.968799][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.974267][ T4303] loop0: detected capacity change from 0 to 32768 [ 63.004732][ T4187] device veth0_macvtap entered promiscuous mode [ 63.451649][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.460322][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.476858][ T4187] device veth1_macvtap entered promiscuous mode [ 63.496587][ T1504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.513073][ T1504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.516098][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.538988][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.547747][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.569758][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.585943][ T4303] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 63.607789][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.618186][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.642907][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.671004][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.689559][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.711006][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.722160][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.739136][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.751056][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.761545][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.772986][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.787307][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.819611][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.841001][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.851654][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.864167][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.874449][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.885363][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.895544][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.906590][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.934121][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.968842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.980527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.001133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.031787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.050991][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.071336][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.083365][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 64.088206][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.102511][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.125633][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 64.131139][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.171663][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 64.171680][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.180618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.214566][ T4319] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.244919][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 64.251808][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 64.418834][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.335827][ T1504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.365687][ T1504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.442408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.452456][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.462382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.472487][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.482521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.732420][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 66.742404][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 66.752403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 66.762396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 66.772394][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.284376][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.318706][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.332658][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.370752][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.402643][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.558846][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.579501][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.621591][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.955978][ T4363] netlink: 112 bytes leftover after parsing attributes in process `syz.4.16'. [ 68.327002][ T4372] comedi comedi1: pc212e: I/O port conflict (0x1010164,32) [ 68.368146][ T4373] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 68.380383][ T4373] netlink: 84 bytes leftover after parsing attributes in process `syz.2.19'. [ 68.398227][ T4373] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 69.122164][ T4381] loop4: detected capacity change from 0 to 512 [ 69.174097][ T4381] ======================================================= [ 69.174097][ T4381] WARNING: The mand mount option has been deprecated and [ 69.174097][ T4381] and is ignored by this kernel. Remove the mand [ 69.174097][ T4381] option from the mount to silence this warning. [ 69.174097][ T4381] ======================================================= [ 69.442015][ T4267] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.460024][ T4388] FAULT_INJECTION: forcing a failure. [ 69.460024][ T4388] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.474532][ T4388] CPU: 0 PID: 4388 Comm: syz.0.22 Not tainted syzkaller #0 [ 69.482102][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.492800][ T4388] Call Trace: [ 69.496954][ T4388] [ 69.500235][ T4388] dump_stack_lvl+0x188/0x250 [ 69.504944][ T4388] ? show_regs_print_info+0x20/0x20 [ 69.510169][ T4388] ? load_image+0x410/0x410 [ 69.514831][ T4388] should_fail+0x383/0x4b0 [ 69.519279][ T4388] prepare_alloc_pages+0x1e3/0x5b0 [ 69.525202][ T4388] __alloc_pages+0x11b/0x480 [ 69.530111][ T4388] ? zone_statistics+0x170/0x170 [ 69.536124][ T4388] ? rcu_lock_acquire+0x30/0x30 [ 69.541276][ T4388] ? alloc_pages+0x452/0x560 [ 69.546513][ T4388] __get_free_pages+0x8/0x30 [ 69.551388][ T4388] __tlb_remove_page_size+0x1f2/0x3f0 [ 69.556801][ T4388] unmap_page_range+0xfcf/0x2410 [ 69.562658][ T4388] unmap_vmas+0x131/0x250 [ 69.567124][ T4388] ? unmap_page_range+0x2410/0x2410 [ 69.572520][ T4388] ? __mutex_lock_common+0x435/0x2400 [ 69.578346][ T4388] ? exit_mm_release+0x16/0x30 [ 69.583383][ T4388] exit_mmap+0x3b9/0x640 [ 69.587736][ T4388] ? vm_brk+0x20/0x20 [ 69.591750][ T4388] ? uprobe_clear_state+0x2f6/0x460 [ 69.596973][ T4388] __mmput+0x115/0x390 [ 69.601183][ T4388] exit_mm+0x632/0x7b0 [ 69.605372][ T4388] ? perf_pmu_migrate_context+0xb70/0xb70 [ 69.611487][ T4388] ? do_exit+0x2110/0x2110 [ 69.616393][ T4388] ? __ia32_sys_timer_delete+0x40/0x40 [ 69.622847][ T4388] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 69.628906][ T4388] ? tty_audit_exit+0x149/0x1f0 [ 69.634359][ T4388] do_exit+0x5b8/0x2110 [ 69.639160][ T4388] ? put_task_struct+0x80/0x80 [ 69.644543][ T4388] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 69.651752][ T4388] ? _raw_spin_lock_irq+0xb7/0xf0 [ 69.653804][ T4394] netlink: 'syz.1.24': attribute type 14 has an invalid length. [ 69.657217][ T4388] do_group_exit+0x12c/0x2f0 [ 69.667664][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 69.672715][ T4388] ? lockdep_hardirqs_on+0x94/0x140 [ 69.672750][ T4388] get_signal+0x7eb/0x12e0 [ 69.672778][ T4388] arch_do_signal_or_restart+0xe6/0x12a0 [ 69.672800][ T4388] ? __lock_acquire+0x7d40/0x7d40 [ 69.682103][ T4394] bond0: option xmit_hash_policy: invalid value (103) [ 69.687587][ T4388] ? futex_exit_release+0x1c0/0x1c0 [ 69.687620][ T4388] ? get_sigframe_size+0x10/0x10 [ 69.687637][ T4388] ? __context_tracking_exit+0x4c/0x80 [ 69.687658][ T4388] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 69.687679][ T4388] ? exit_to_user_mode_loop+0x3b/0x130 [ 69.687696][ T4388] exit_to_user_mode_loop+0x9e/0x130 [ 69.687710][ T4388] exit_to_user_mode_prepare+0xee/0x180 [ 69.687725][ T4388] syscall_exit_to_user_mode+0x16/0x40 [ 69.687737][ T4388] do_syscall_64+0x58/0xa0 [ 69.687753][ T4388] ? clear_bhb_loop+0x30/0x80 [ 69.687772][ T4388] ? clear_bhb_loop+0x30/0x80 [ 69.687790][ T4388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.687826][ T4388] RIP: 0033:0x7f41c4f44559 [ 69.687847][ T4388] Code: Unable to access opcode bytes at RIP 0x7f41c4f4452f. [ 69.687855][ T4388] RSP: 002b:00007f41c315a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.687873][ T4388] RAX: fffffffffffffe00 RBX: 00007f41c51cc188 RCX: 00007f41c4f44559 [ 69.687885][ T4388] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f41c51cc188 [ 69.687895][ T4388] RBP: 00007f41c51cc180 R08: 0000000000000000 R09: 0000000000000000 [ 69.687905][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.687915][ T4388] R13: 00007f41c51cc218 R14: 00007ffd254cf1d0 R15: 00007ffd254cf2b8 [ 69.687937][ T4388] [ 70.296780][ T4407] loop2: detected capacity change from 0 to 16 [ 70.979019][ T4407] erofs: (device loop2): mounted with root inode @ nid 36. [ 71.208517][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.216862][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.117144][ T4421] device syzkaller0 entered promiscuous mode [ 73.136495][ T4438] ip_tables: iptables: counters copy to user failed while replacing table [ 73.261740][ T4435] device syzkaller0 entered promiscuous mode [ 73.482323][ T4450] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.025348][ T4447] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.236617][ T4461] loop2: detected capacity change from 0 to 128 [ 74.370375][ T4461] FAT-fs (loop2): Unrecognized mount option "uni_xlat" or missing value [ 75.073070][ T25] audit: type=1800 audit(1792047969.996:2): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.41" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 75.327821][ T4481] capability: warning: `syz.3.42' uses deprecated v2 capabilities in a way that may be insecure [ 75.396911][ T4478] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 75.443608][ T4478] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 75.848005][ T4507] tipc: Started in network mode [ 75.861622][ T4507] tipc: Node identity e655d9f0b013, cluster identity 4711 [ 76.903368][ T4507] tipc: Enabled bearer , priority 0 [ 76.932354][ C1] sched: RT throttling activated [ 76.949571][ T4512] device syzkaller0 entered promiscuous mode [ 76.992045][ T4507] tipc: Resetting bearer [ 77.505695][ T4520] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4521] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4520] [ 78.224278][ T4267] tipc: Node number set to 1447483888 [ 78.283655][ T4506] tipc: Resetting bearer [ 78.320698][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 79.844090][ T4506] tipc: Disabling bearer [ 81.445902][ T1107] cfg80211: failed to load regulatory.db [ 83.399598][ T4537] device syzkaller0 entered promiscuous mode [ 84.436917][ T4554] sg_write: data in/out 12/136 bytes for SCSI command 0x0-- guessing data in; [ 84.436917][ T4554] program syz.4.59 not setting count and/or reply_len properly [ 85.308817][ T4569] netlink: 'syz.4.62': attribute type 11 has an invalid length. [ 87.540103][ T4587] tipc: Enabled bearer , priority 0 [ 87.690998][ T4587] tipc: Resetting bearer [ 89.012582][ T4586] tipc: Disabling bearer [ 89.103931][ T4598] loop4: detected capacity change from 0 to 4096 [ 89.243498][ T4598] EXT4-fs (loop4): Test dummy encryption mode enabled [ 89.844169][ T4598] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nombcache,,errors=continue. Quota mode: writeback. [ 89.965051][ T4608] loop3: detected capacity change from 0 to 1024 [ 90.171805][ T4608] EXT4-fs (loop3): Ignoring removed nobh option [ 90.232711][ T4608] EXT4-fs (loop3): Ignoring removed nobh option [ 90.798301][ T4608] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,quota,errors=remount-ro,user_xattr,barrier=0x0000000000000008,nombcache,barrier,nobh,. Quota mode: writeback. [ 90.942974][ T4608] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 91.225684][ T4636] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 91.262648][ T4636] Zero length message leads to an empty skb [ 91.282759][ T4598] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 92.390386][ T4644] md/raid:md0: device ram1 operational as raid disk 1 [ 92.475793][ T4644] md/raid:md0: couldn't allocate thread. [ 93.412801][ T4656] kernel profiling enabled (shift: 23) [ 95.622698][ T4644] md: pers->run() failed ... [ 96.005255][ T25] audit: type=1326 audit(1792048246.953:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4672 comm="syz.1.88" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb63886d559 code=0x0 [ 96.711257][ T4680] device syzkaller0 entered promiscuous mode [ 96.911017][ T4262] Process accounting resumed [ 97.916955][ T4701] program syz.1.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.968440][ T4701] tipc: Started in network mode [ 97.979819][ T4701] tipc: Node identity ac14140f, cluster identity 4711 [ 98.001837][ T4701] tipc: New replicast peer: 255.255.255.255 [ 98.017192][ T4704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 98.029577][ T4701] tipc: Enabled bearer , priority 10 [ 98.053958][ T4707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 98.076215][ T4704] tipc: Started in network mode [ 98.081346][ T4704] tipc: Node identity ac141441, cluster identity 4711 [ 98.109971][ T4704] tipc: Enabled bearer , priority 10 [ 99.935575][ T21] tipc: Node number set to 2886997057 [ 99.941203][ T21] tipc: Node number set to 2886997007 [ 100.972758][ T4727] loop2: detected capacity change from 0 to 164 [ 101.786508][ T4744] netlink: 276 bytes leftover after parsing attributes in process `syz.4.108'. [ 101.867290][ T4744] tipc: Enabling of bearer rejected, failed to enable media [ 101.955254][ T4753] device syzkaller0 entered promiscuous mode [ 102.129686][ T4757] CacheFiles: Failed to register: -95 [ 102.249839][ T4763] device syzkaller0 entered promiscuous mode [ 102.432668][ T4264] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.900889][ T4773] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.117841][ T4783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.121'. [ 105.181522][ T4785] device syzkaller0 entered promiscuous mode [ 105.192568][ T4264] usb 4-1: unable to read config index 0 descriptor/all [ 105.200526][ T4787] loop3: detected capacity change from 0 to 512 [ 105.209409][ T4783] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 105.231373][ T4264] usb 4-1: can't read configurations, error -71 [ 105.333838][ T4787] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.350330][ T4787] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.368333][ T4793] device syzkaller0 entered promiscuous mode [ 105.546035][ T4804] netlink: 'syz.4.129': attribute type 2 has an invalid length. [ 105.696812][ T4263] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.826459][ T4816] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 105.826459][ T4816] program syz.3.131 not setting count and/or reply_len properly [ 107.308659][ T4820] md: could not open device unknown-block(1,0). [ 107.362932][ T4263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.430677][ T4263] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 108.597268][ T4839] tipc: Enabled bearer , priority 0 [ 108.652986][ T4841] device syzkaller0 entered promiscuous mode [ 108.853554][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.118257][ T4263] usb 3-1: can't set config #1, error -71 [ 110.142601][ T4263] usb 3-1: USB disconnect, device number 2 [ 110.153704][ T4846] tipc: Resetting bearer [ 110.220586][ T4837] tipc: Resetting bearer [ 110.260998][ T4837] tipc: Disabling bearer [ 110.328942][ T4864] device syzkaller0 entered promiscuous mode [ 110.376333][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.396617][ T4864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.577481][ T4887] loop2: detected capacity change from 0 to 16 [ 110.636571][ T4887] erofs: (device loop2): mounted with root inode @ nid 36. [ 110.690792][ T4890] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.950661][ T4890] syz.1.146 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 111.013216][ T4890] CPU: 1 PID: 4890 Comm: syz.1.146 Not tainted syzkaller #0 [ 111.020627][ T4890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.030880][ T4890] Call Trace: [ 111.034384][ T4890] [ 111.037365][ T4890] dump_stack_lvl+0x188/0x250 [ 111.042233][ T4890] ? show_regs_print_info+0x20/0x20 [ 111.047801][ T4890] ? load_image+0x410/0x410 [ 111.052435][ T4890] ? __mutex_lock_common+0x435/0x2400 [ 111.057919][ T4890] dump_header+0xd9/0x780 [ 111.062648][ T4890] out_of_memory+0xe27/0x1190 [ 111.067441][ T4890] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 111.073364][ T4890] ? mutex_lock_io_nested+0x60/0x60 [ 111.078615][ T4890] ? unregister_oom_notifier+0x20/0x20 [ 111.084119][ T4890] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 111.089686][ T4890] ? mem_cgroup_oom_trylock+0x210/0x210 [ 111.095257][ T4890] ? do_raw_spin_unlock+0x11d/0x230 [ 111.100588][ T4890] try_charge_memcg+0x1075/0x15b0 [ 111.105734][ T4890] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 111.111554][ T4890] ? rcu_lock_acquire+0x30/0x30 [ 111.116446][ T4890] obj_cgroup_charge_pages+0x87/0x190 [ 111.121833][ T4890] ? __memcg_kmem_charge_page+0x380/0x380 [ 111.127671][ T4890] ? rcu_lock_acquire+0x30/0x30 [ 111.132758][ T4890] obj_cgroup_charge+0x19f/0x320 [ 111.137804][ T4890] ? idr_get_free+0x8a0/0xa10 [ 111.142498][ T4890] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 111.147628][ T4890] pcpu_alloc+0x21a/0x16d0 [ 111.152086][ T4890] ? do_raw_spin_unlock+0x11d/0x230 [ 111.157330][ T4890] mem_cgroup_css_alloc+0x182/0x1620 [ 111.162640][ T4890] cgroup_apply_control_enable+0x3cc/0xb00 [ 111.168496][ T4890] cgroup_mkdir+0xcbd/0xeb0 [ 111.173398][ T4890] ? css_task_iter_end+0x280/0x280 [ 111.178873][ T4890] ? do_raw_spin_unlock+0x11d/0x230 [ 111.185009][ T4890] ? kernfs_iop_permission+0x22d/0x310 [ 111.190524][ T4890] ? css_task_iter_end+0x280/0x280 [ 111.196264][ T4890] kernfs_iop_mkdir+0x23d/0x3d0 [ 111.201761][ T4890] vfs_mkdir+0x386/0x570 [ 111.206032][ T4890] do_mkdirat+0x1dd/0x5c0 [ 111.210384][ T4890] ? vfs_mkdir+0x570/0x570 [ 111.214832][ T4890] __x64_sys_mkdirat+0x85/0x90 [ 111.220050][ T4890] do_syscall_64+0x4c/0xa0 [ 111.224631][ T4890] ? clear_bhb_loop+0x30/0x80 [ 111.229322][ T4890] ? clear_bhb_loop+0x30/0x80 [ 111.234095][ T4890] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.239997][ T4890] RIP: 0033:0x7fb63886d559 [ 111.244509][ T4890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.264687][ T4890] RSP: 002b:00007fb636ac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 111.274512][ T4890] RAX: ffffffffffffffda RBX: 00007fb638af4fa0 RCX: 00007fb63886d559 [ 111.282505][ T4890] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 111.290582][ T4890] RBP: 00007fb6389048b0 R08: 0000000000000000 R09: 0000000000000000 [ 111.298565][ T4890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.306544][ T4890] R13: 00007fb638af5038 R14: 00007fb638af4fa0 R15: 00007ffce20526e8 [ 111.314546][ T4890] [ 111.893046][ T4890] memory: usage 0kB, limit 0kB, failcnt 19 [ 111.898986][ T4890] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 111.906579][ T4890] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 111.913471][ T4890] Memory cgroup stats for /syz1/test: [ 111.914292][ T4890] anon 0 [ 111.914292][ T4890] file 0 [ 111.914292][ T4890] kernel_stack 0 [ 111.914292][ T4890] pagetables 0 [ 111.914292][ T4890] percpu 0 [ 111.914292][ T4890] sock 0 [ 111.914292][ T4890] shmem 0 [ 111.914292][ T4890] file_mapped 0 [ 111.914292][ T4890] file_dirty 0 [ 111.914292][ T4890] file_writeback 0 [ 111.914292][ T4890] swapcached 0 [ 111.914292][ T4890] anon_thp 0 [ 111.914292][ T4890] file_thp 0 [ 111.914292][ T4890] shmem_thp 0 [ 111.914292][ T4890] inactive_anon 0 [ 111.914292][ T4890] active_anon 0 [ 111.914292][ T4890] inactive_file 0 [ 111.914292][ T4890] active_file 0 [ 111.914292][ T4890] unevictable 0 [ 111.914292][ T4890] slab_reclaimable 0 [ 111.914292][ T4890] slab_unreclaimable 0 [ 111.914292][ T4890] slab 0 [ 111.914292][ T4890] workingset_refault_anon 0 [ 111.914292][ T4890] workingset_refault_file 0 [ 111.914292][ T4890] workingset_activate_anon 0 [ 111.914292][ T4890] workingset_activate_file 0 [ 112.015167][ T4890] Out of memory and no killable processes... [ 112.954720][ T4900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.148'. [ 113.114994][ T4900] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 113.280471][ T4906] device syzkaller0 entered promiscuous mode [ 113.432610][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.883283][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.938647][ T1107] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 114.150276][ T4197] Bluetooth: Wrong link type (-22) [ 115.634607][ T4931] device syzkaller0 entered promiscuous mode [ 116.580111][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.442726][ T1107] usb 4-1: can't set config #1, error -71 [ 117.492939][ T1107] usb 4-1: USB disconnect, device number 4 [ 119.296699][ T4953] device syzkaller0 entered promiscuous mode [ 119.316378][ T25] audit: type=1800 audit(1792048270.293:4): pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.163" name="/" dev="fuse" ino=1 res=0 errno=0 [ 120.997153][ T4974] loop4: detected capacity change from 0 to 16 [ 121.114222][ T4974] erofs: (device loop4): mounted with root inode @ nid 36. [ 121.901185][ T4981] device syzkaller0 entered promiscuous mode [ 122.744397][ T4993] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.439179][ T5001] device syzkaller0 entered promiscuous mode [ 123.580863][ T5007] md: could not open device unknown-block(1,0). [ 124.194741][ T25] audit: type=1800 audit(1792048275.150:5): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.181" name="idProduct" dev="configfs" ino=34658 res=0 errno=0 [ 124.564538][ T25] audit: type=1800 audit(1792048275.443:6): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.181" name="serialnumber" dev="configfs" ino=34664 res=0 errno=0 [ 124.683210][ T25] audit: type=1800 audit(1792048275.642:7): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.181" name="UDC" dev="configfs" ino=34667 res=0 errno=0 [ 124.687811][ T5020] Need at least one configuration in g1. [ 124.885914][ T5020] udc dummy_udc.0: failed to start g1: -22 [ 124.910971][ T5019] kvm [5011]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x100000080 [ 125.112848][ T5030] device syzkaller0 entered promiscuous mode [ 127.030883][ T5059] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.067451][ T5057] device syzkaller0 entered promiscuous mode [ 127.136065][ T5059] syz.4.192 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 127.147009][ T5059] CPU: 0 PID: 5059 Comm: syz.4.192 Not tainted syzkaller #0 [ 127.154328][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.164394][ T5059] Call Trace: [ 127.167697][ T5059] [ 127.170636][ T5059] dump_stack_lvl+0x188/0x250 [ 127.175431][ T5059] ? show_regs_print_info+0x20/0x20 [ 127.180647][ T5059] ? load_image+0x410/0x410 [ 127.185177][ T5059] ? __mutex_lock_common+0x435/0x2400 [ 127.190573][ T5059] dump_header+0xd9/0x780 [ 127.195015][ T5059] out_of_memory+0xe27/0x1190 [ 127.200142][ T5059] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 127.206089][ T5059] ? mutex_lock_io_nested+0x60/0x60 [ 127.211324][ T5059] ? unregister_oom_notifier+0x20/0x20 [ 127.216897][ T5059] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 127.222463][ T5059] ? mem_cgroup_oom_trylock+0x210/0x210 [ 127.228036][ T5059] ? do_raw_spin_unlock+0x11d/0x230 [ 127.233263][ T5059] try_charge_memcg+0x1075/0x15b0 [ 127.238336][ T5059] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 127.244165][ T5059] ? rcu_lock_acquire+0x30/0x30 [ 127.249068][ T5059] obj_cgroup_charge_pages+0x87/0x190 [ 127.254458][ T5059] ? __memcg_kmem_charge_page+0x380/0x380 [ 127.260201][ T5059] ? rcu_lock_acquire+0x30/0x30 [ 127.265073][ T5059] obj_cgroup_charge+0x19f/0x320 [ 127.270064][ T5059] ? idr_get_free+0x8a0/0xa10 [ 127.274851][ T5059] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 127.279997][ T5059] pcpu_alloc+0x21a/0x16d0 [ 127.284440][ T5059] ? do_raw_spin_unlock+0x11d/0x230 [ 127.289661][ T5059] mem_cgroup_css_alloc+0x182/0x1620 [ 127.294980][ T5059] cgroup_apply_control_enable+0x3cc/0xb00 [ 127.300923][ T5059] cgroup_mkdir+0xcbd/0xeb0 [ 127.305462][ T5059] ? css_task_iter_end+0x280/0x280 [ 127.310606][ T5059] ? do_raw_spin_unlock+0x11d/0x230 [ 127.315863][ T5059] ? kernfs_iop_permission+0x22d/0x310 [ 127.321344][ T5059] ? css_task_iter_end+0x280/0x280 [ 127.326494][ T5059] kernfs_iop_mkdir+0x23d/0x3d0 [ 127.331397][ T5059] vfs_mkdir+0x386/0x570 [ 127.335707][ T5059] do_mkdirat+0x1dd/0x5c0 [ 127.340097][ T5059] ? vfs_mkdir+0x570/0x570 [ 127.344911][ T5059] __x64_sys_mkdirat+0x85/0x90 [ 127.349807][ T5059] do_syscall_64+0x4c/0xa0 [ 127.354281][ T5059] ? clear_bhb_loop+0x30/0x80 [ 127.358980][ T5059] ? clear_bhb_loop+0x30/0x80 [ 127.363765][ T5059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.369725][ T5059] RIP: 0033:0x7fa2f343e559 [ 127.374157][ T5059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.393870][ T5059] RSP: 002b:00007fa2f1696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 127.402304][ T5059] RAX: ffffffffffffffda RBX: 00007fa2f36c5fa0 RCX: 00007fa2f343e559 [ 127.410302][ T5059] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 127.418290][ T5059] RBP: 00007fa2f34d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 127.427083][ T5059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.435162][ T5059] R13: 00007fa2f36c6038 R14: 00007fa2f36c5fa0 R15: 00007ffd5a273988 [ 127.443179][ T5059] [ 127.480377][ T5059] memory: usage 0kB, limit 0kB, failcnt 19 [ 127.486274][ T5059] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 127.505292][ T5065] loop2: detected capacity change from 0 to 128 [ 127.664214][ T5059] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 127.672277][ T5059] Memory cgroup stats for /syz4/test: [ 127.673182][ T5059] anon 0 [ 127.673182][ T5059] file 0 [ 127.673182][ T5059] kernel_stack 0 [ 127.673182][ T5059] pagetables 0 [ 127.673182][ T5059] percpu 0 [ 127.673182][ T5059] sock 0 [ 127.673182][ T5059] shmem 0 [ 127.673182][ T5059] file_mapped 0 [ 127.673182][ T5059] file_dirty 0 [ 127.673182][ T5059] file_writeback 0 [ 127.673182][ T5059] swapcached 0 [ 127.673182][ T5059] anon_thp 0 [ 127.673182][ T5059] file_thp 0 [ 127.673182][ T5059] shmem_thp 0 [ 127.673182][ T5059] inactive_anon 0 [ 127.673182][ T5059] active_anon 0 [ 127.673182][ T5059] inactive_file 0 [ 127.673182][ T5059] active_file 0 [ 127.673182][ T5059] unevictable 0 [ 127.673182][ T5059] slab_reclaimable 0 [ 127.673182][ T5059] slab_unreclaimable 0 [ 127.673182][ T5059] slab 0 [ 127.673182][ T5059] workingset_refault_anon 0 [ 127.673182][ T5059] workingset_refault_file 0 [ 127.673182][ T5059] workingset_activate_anon 0 [ 127.673182][ T5059] workingset_activate_file 0 [ 127.969819][ T5059] Out of memory and no killable processes... [ 128.341569][ T5074] device syzkaller0 entered promiscuous mode [ 128.375112][ T5074] 0: reclassify loop, rule prio 0, protocol 800 [ 130.408307][ T5091] device syzkaller0 entered promiscuous mode [ 131.422293][ T5106] tmpfs: Unknown parameter '' [ 133.031805][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.038310][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242848][ T5106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.207'. [ 135.721187][ T5133] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.794930][ T5133] syz.0.212 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 135.986766][ T5133] CPU: 0 PID: 5133 Comm: syz.0.212 Not tainted syzkaller #0 [ 135.994110][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.004200][ T5133] Call Trace: [ 136.007493][ T5133] [ 136.010424][ T5133] dump_stack_lvl+0x188/0x250 [ 136.015111][ T5133] ? show_regs_print_info+0x20/0x20 [ 136.020314][ T5133] ? load_image+0x410/0x410 [ 136.024831][ T5133] ? __mutex_lock_common+0x435/0x2400 [ 136.030214][ T5133] dump_header+0xd9/0x780 [ 136.034550][ T5133] out_of_memory+0xe27/0x1190 [ 136.039269][ T5133] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 136.044909][ T5133] ? mutex_lock_io_nested+0x60/0x60 [ 136.050130][ T5133] ? unregister_oom_notifier+0x20/0x20 [ 136.055608][ T5133] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 136.061158][ T5133] ? mem_cgroup_oom_trylock+0x210/0x210 [ 136.066816][ T5133] ? do_raw_spin_unlock+0x11d/0x230 [ 136.072019][ T5133] try_charge_memcg+0x1075/0x15b0 [ 136.077067][ T5133] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 136.082878][ T5133] ? rcu_lock_acquire+0x30/0x30 [ 136.087806][ T5133] obj_cgroup_charge_pages+0x87/0x190 [ 136.093187][ T5133] ? __memcg_kmem_charge_page+0x380/0x380 [ 136.098914][ T5133] ? rcu_lock_acquire+0x30/0x30 [ 136.103861][ T5133] obj_cgroup_charge+0x19f/0x320 [ 136.108799][ T5133] ? idr_get_free+0x8a0/0xa10 [ 136.113487][ T5133] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 136.118633][ T5133] pcpu_alloc+0x21a/0x16d0 [ 136.123145][ T5133] ? do_raw_spin_unlock+0x11d/0x230 [ 136.128556][ T5133] mem_cgroup_css_alloc+0x182/0x1620 [ 136.133874][ T5133] cgroup_apply_control_enable+0x3cc/0xb00 [ 136.139718][ T5133] cgroup_mkdir+0xcbd/0xeb0 [ 136.144263][ T5133] ? css_task_iter_end+0x280/0x280 [ 136.149393][ T5133] ? do_raw_spin_unlock+0x11d/0x230 [ 136.154603][ T5133] ? kernfs_iop_permission+0x22d/0x310 [ 136.160068][ T5133] ? css_task_iter_end+0x280/0x280 [ 136.165187][ T5133] kernfs_iop_mkdir+0x23d/0x3d0 [ 136.170083][ T5133] vfs_mkdir+0x386/0x570 [ 136.174353][ T5133] do_mkdirat+0x1dd/0x5c0 [ 136.178696][ T5133] ? vfs_mkdir+0x570/0x570 [ 136.183130][ T5133] __x64_sys_mkdirat+0x85/0x90 [ 136.187903][ T5133] do_syscall_64+0x4c/0xa0 [ 136.192326][ T5133] ? clear_bhb_loop+0x30/0x80 [ 136.197006][ T5133] ? clear_bhb_loop+0x30/0x80 [ 136.201687][ T5133] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.208061][ T5133] RIP: 0033:0x7f41c4f44559 [ 136.213118][ T5133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.232749][ T5133] RSP: 002b:00007f41c319c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 136.241172][ T5133] RAX: ffffffffffffffda RBX: 00007f41c51cbfa0 RCX: 00007f41c4f44559 [ 136.249145][ T5133] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 136.257099][ T5133] RBP: 00007f41c4fdb8b0 R08: 0000000000000000 R09: 0000000000000000 [ 136.265243][ T5133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.273380][ T5133] R13: 00007f41c51cc038 R14: 00007f41c51cbfa0 R15: 00007ffd254cf2b8 [ 136.281362][ T5133] [ 136.289907][ T5133] memory: usage 0kB, limit 0kB, failcnt 19 [ 136.309553][ T5133] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 136.363388][ T5133] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 136.376176][ T5133] Memory cgroup stats for /syz0/test: [ 136.376495][ T5133] anon 0 [ 136.376495][ T5133] file 0 [ 136.376495][ T5133] kernel_stack 0 [ 136.376495][ T5133] pagetables 0 [ 136.376495][ T5133] percpu 0 [ 136.376495][ T5133] sock 0 [ 136.376495][ T5133] shmem 0 [ 136.376495][ T5133] file_mapped 0 [ 136.376495][ T5133] file_dirty 0 [ 136.376495][ T5133] file_writeback 0 [ 136.376495][ T5133] swapcached 0 [ 136.376495][ T5133] anon_thp 0 [ 136.376495][ T5133] file_thp 0 [ 136.376495][ T5133] shmem_thp 0 [ 136.376495][ T5133] inactive_anon 0 [ 136.376495][ T5133] active_anon 0 [ 136.376495][ T5133] inactive_file 0 [ 136.376495][ T5133] active_file 0 [ 136.376495][ T5133] unevictable 0 [ 136.376495][ T5133] slab_reclaimable 0 [ 136.376495][ T5133] slab_unreclaimable 0 [ 136.376495][ T5133] slab 0 [ 136.376495][ T5133] workingset_refault_anon 0 [ 136.376495][ T5133] workingset_refault_file 0 [ 136.376495][ T5133] workingset_activate_anon 0 [ 136.376495][ T5133] workingset_activate_file 0 [ 136.471747][ T5145] syz.1.217 uses obsolete (PF_INET,SOCK_PACKET) [ 136.505282][ T5140] loop3: detected capacity change from 0 to 32768 [ 136.516907][ T5133] Out of memory and no killable processes... [ 136.667298][ T5140] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.216 (5140) [ 136.716508][ T5140] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 136.727192][ T5140] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 136.737362][ T5140] BTRFS info (device loop3): use zstd compression, level 3 [ 136.744590][ T5140] BTRFS info (device loop3): force clearing of disk cache [ 136.751817][ T5140] BTRFS info (device loop3): enabling disk space caching [ 136.758976][ T5140] BTRFS info (device loop3): disk space caching is enabled [ 136.766188][ T5140] BTRFS info (device loop3): has skinny extents [ 137.319464][ T5140] BTRFS info (device loop3): enabling ssd optimizations [ 137.336464][ T5140] BTRFS info (device loop3): clearing free space tree [ 137.343961][ T5140] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.354367][ T5140] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.489719][ T5248] netlink: 2 bytes leftover after parsing attributes in process `syz.2.229'. [ 148.483483][ T5276] loop4: detected capacity change from 0 to 4096 [ 148.576348][ T5276] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 148.840362][ T5276] ntfs3: loop4: ntfs_evict_inode r=a failed, -22. [ 148.889887][ T5276] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 148.940362][ T5276] ntfs3: loop4: Failed to load $Secure. [ 149.163997][ T5324] loop2: detected capacity change from 0 to 128 [ 149.234544][ T5324] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.265329][ T5325] loop4: detected capacity change from 0 to 512 [ 149.294655][ T5324] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.869703][ T5334] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 151.397895][ T5349] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 151.442928][ T5347] device syzkaller0 entered promiscuous mode [ 151.728809][ T5360] Unsupported ieee802154 address type: 0 [ 152.249435][ T5358] loop2: detected capacity change from 0 to 4096 [ 152.617648][ T5358] ntfs3: loop2: failed to replay log file. Can't mount rw! [ 153.793932][ T5378] device syzkaller0 entered promiscuous mode [ 154.601196][ T5390] device syzkaller0 entered promiscuous mode [ 156.022234][ T5428] gadgetfs: bound to dummy_udc driver [ 163.263872][ T5495] block device autoloading is deprecated and will be removed. [ 164.733872][ T5502] binder_alloc: 5500: binder_alloc_buf, no vma [ 164.950599][ T5514] loop2: detected capacity change from 0 to 4096 [ 165.016419][ T5514] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 166.246089][ T5534] loop2: detected capacity change from 0 to 256 [ 166.292721][ T5534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 166.467923][ T4263] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.905174][ T4263] usb 4-1: Using ep0 maxpacket: 32 [ 167.320453][ T5548] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 167.489364][ T4263] usb 4-1: config 0 has no interfaces? [ 167.534742][ T5545] kvm: pic: single mode not supported [ 167.669707][ T5565] binder_alloc: 5564: binder_alloc_buf, no vma [ 167.777396][ T4263] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 167.799573][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.826341][ T4263] usb 4-1: Product: syz [ 167.840072][ T4263] usb 4-1: Manufacturer: syz [ 167.855977][ T4263] usb 4-1: SerialNumber: syz [ 168.519545][ T4263] usb 4-1: config 0 descriptor?? [ 168.774750][ T4263] usb 4-1: can't set config #0, error -71 [ 168.802178][ T4263] usb 4-1: USB disconnect, device number 5 [ 169.672552][ T5591] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 169.729583][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 169.809590][ T5592] sctp: [Deprecated]: syz.1.302 (pid 5592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.809590][ T5592] Use struct sctp_sack_info instead [ 169.834670][ T5592] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 169.934735][ T25] audit: type=1804 audit(1792048318.330:8): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.304" name="/newroot/56/file1" dev="fuse" ino=1 res=1 errno=0 [ 170.083427][ T5603] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 170.192278][ T5592] team0: Port device dummy0 added [ 170.500854][ T5592] syz.1.302 (5592) used greatest stack depth: 20624 bytes left [ 170.582523][ T5615] loop3: detected capacity change from 0 to 512 [ 170.601010][ T5615] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 170.601010][ T5615] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 170.601010][ T5615] [ 170.643835][ T5618] Bluetooth: hci0: unsupported parameter 255 [ 170.650414][ T5618] Bluetooth: hci0: unsupported parameter 255 [ 170.662002][ T5615] EXT4-fs (loop3): Mount option "dax=inode" incompatible with ext2 [ 170.704750][ T5612] loop4: detected capacity change from 0 to 256 [ 172.041821][ T4197] Bluetooth: Wrong link type (-22) [ 173.085167][ T5615] loop3: detected capacity change from 0 to 2048 [ 174.134299][ T5644] FAULT_INJECTION: forcing a failure. [ 174.134299][ T5644] name failslab, interval 1, probability 5, space 0, times 1000 [ 174.149401][ T5644] CPU: 1 PID: 5644 Comm: syz.3.314 Not tainted syzkaller #0 [ 174.156723][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.166788][ T5644] Call Trace: [ 174.170075][ T5644] [ 174.173016][ T5644] dump_stack_lvl+0x188/0x250 [ 174.177708][ T5644] ? show_regs_print_info+0x20/0x20 [ 174.182911][ T5644] ? load_image+0x410/0x410 [ 174.187426][ T5644] ? prandom_u32+0x217/0x250 [ 174.192030][ T5644] should_fail+0x383/0x4b0 [ 174.196461][ T5644] should_failslab+0x5/0x20 [ 174.200985][ T5644] slab_pre_alloc_hook+0x51/0xc0 [ 174.206289][ T5644] ? __kernfs_new_node+0xe3/0x6b0 [ 174.211324][ T5644] kmem_cache_alloc+0x3d/0x280 [ 174.216101][ T5644] __kernfs_new_node+0xe3/0x6b0 [ 174.220974][ T5644] ? kernfs_new_node+0x250/0x250 [ 174.225937][ T5644] ? make_kgid+0x1c4/0x650 [ 174.230382][ T5644] ? from_kuid_munged+0x6e0/0x6e0 [ 174.235422][ T5644] kernfs_new_node+0x148/0x250 [ 174.240210][ T5644] kernfs_create_dir_ns+0x40/0x120 [ 174.245364][ T5644] sysfs_create_dir_ns+0x12c/0x290 [ 174.250498][ T5644] ? sysfs_warn_dup+0xa0/0xa0 [ 174.255281][ T5644] ? do_raw_spin_unlock+0x11d/0x230 [ 174.260515][ T5644] kobject_add_internal+0x5ba/0xcd0 [ 174.265741][ T5644] kobject_add+0x160/0x230 [ 174.270182][ T5644] ? kobject_init+0x1c0/0x1c0 [ 174.274868][ T5644] ? get_device_parent+0x288/0x3e0 [ 174.280165][ T5644] device_add+0x470/0x1050 [ 174.284592][ T5644] netdev_register_kobject+0x184/0x320 [ 174.290068][ T5644] register_netdevice+0x10e8/0x1720 [ 174.295276][ T5644] ? netif_stacked_transfer_operstate+0x200/0x200 [ 174.301697][ T5644] ? lockdep_rtnl_is_held+0x22/0x30 [ 174.306904][ T5644] ipip6_tunnel_create+0x1af/0x660 [ 174.312010][ T5644] ipip6_newlink+0x179/0x5d0 [ 174.316599][ T5644] ? ipip6_validate+0xd0/0xd0 [ 174.321355][ T5644] ? xdp_rxq_info_reg+0xe0/0x2e0 [ 174.326289][ T5644] ? validate_linkmsg+0x3db/0x4c0 [ 174.331310][ T5644] ? rtnl_create_link+0x85f/0xa90 [ 174.336325][ T5644] ? ipip6_validate+0xd0/0xd0 [ 174.340991][ T5644] rtnl_newlink+0x139e/0x1920 [ 174.345679][ T5644] ? rtnl_setlink+0x500/0x500 [ 174.350375][ T5644] ? mark_lock+0x94/0x320 [ 174.354804][ T5644] ? __lock_acquire+0x13b3/0x7d40 [ 174.359895][ T5644] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 174.365213][ T5644] ? rtnl_setlink+0x500/0x500 [ 174.369888][ T5644] rtnetlink_rcv_msg+0x7f1/0xf10 [ 174.374826][ T5644] ? lock_chain_count+0x20/0x20 [ 174.379669][ T5644] ? rtnetlink_bind+0x80/0x80 [ 174.384344][ T5644] ? __local_bh_enable_ip+0x136/0x1c0 [ 174.389938][ T5644] ? lockdep_hardirqs_on+0x94/0x140 [ 174.395152][ T5644] ? __local_bh_enable_ip+0x136/0x1c0 [ 174.400630][ T5644] ? _local_bh_enable+0xa0/0xa0 [ 174.405483][ T5644] ? __dev_queue_xmit+0x1b64/0x2e50 [ 174.410689][ T5644] ? dev_queue_xmit+0x20/0x20 [ 174.415353][ T5644] ? memcpy+0x3c/0x60 [ 174.419327][ T5644] ? __copy_skb_header+0x3ba/0x4f0 [ 174.424434][ T5644] netlink_rcv_skb+0x1e9/0x430 [ 174.429217][ T5644] ? rtnetlink_bind+0x80/0x80 [ 174.433908][ T5644] ? netlink_ack+0xb10/0xb10 [ 174.438515][ T5644] netlink_unicast+0x78f/0x940 [ 174.444301][ T5644] netlink_sendmsg+0x8ba/0xbe0 [ 174.449106][ T5644] ? netlink_getsockopt+0x570/0x570 [ 174.454306][ T5644] ? aa_sock_msg_perm+0x94/0x150 [ 174.459246][ T5644] ? apparmor_socket_sendmsg+0x88/0x230 [ 174.464789][ T5644] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 174.470070][ T5644] ? security_socket_sendmsg+0x7c/0xa0 [ 174.475675][ T5644] ? netlink_getsockopt+0x570/0x570 [ 174.480978][ T5644] ____sys_sendmsg+0x5be/0x8f0 [ 174.485764][ T5644] ? __sys_sendmsg_sock+0x30/0x30 [ 174.490806][ T5644] ? import_iovec+0x6f/0xa0 [ 174.495323][ T5644] ___sys_sendmsg+0x236/0x2e0 [ 174.500015][ T5644] ? __sys_sendmsg+0x290/0x290 [ 174.504912][ T5644] __se_sys_sendmsg+0x1b7/0x2a0 [ 174.509858][ T5644] ? __x64_sys_sendmsg+0x80/0x80 [ 174.514802][ T5644] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 174.520803][ T5644] ? lockdep_hardirqs_on+0x94/0x140 [ 174.525999][ T5644] do_syscall_64+0x4c/0xa0 [ 174.531114][ T5644] ? clear_bhb_loop+0x30/0x80 [ 174.535798][ T5644] ? clear_bhb_loop+0x30/0x80 [ 174.540642][ T5644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.546541][ T5644] RIP: 0033:0x7f3987e80559 [ 174.550965][ T5644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.570650][ T5644] RSP: 002b:00007f39860d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.579144][ T5644] RAX: ffffffffffffffda RBX: 00007f3988107fa0 RCX: 00007f3987e80559 [ 174.587105][ T5644] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000007 [ 174.595590][ T5644] RBP: 00007f3987f178b0 R08: 0000000000000000 R09: 0000000000000000 [ 174.603547][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.611505][ T5644] R13: 00007f3988108038 R14: 00007f3988107fa0 R15: 00007fff8fc29a38 [ 174.619484][ T5644] [ 174.670902][ T5644] kobject_add_internal failed for sit1 (error: -12 parent: net) [ 174.690109][ T5652] Bluetooth: hci0: unsupported parameter 255 [ 174.703142][ T5652] Bluetooth: hci0: unsupported parameter 255 [ 175.069431][ T5656] autofs4:pid:5656:autofs_fill_super: called with bogus options [ 175.687414][ T5666] loop2: detected capacity change from 0 to 256 [ 175.796833][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 180.175276][ T5698] loop2: detected capacity change from 0 to 128 [ 180.325028][ T5702] Bluetooth: hci0: unsupported parameter 255 [ 180.334199][ T5702] Bluetooth: hci0: unsupported parameter 255 [ 181.071465][ T5698] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.115143][ T5698] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.170878][ T5698] syz.2.327 (pid 5698) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 181.238974][ T5722] device syzkaller0 entered promiscuous mode [ 181.283953][ T5722] simple: /de_1 [ 181.869440][ T5724] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 185.682673][ T2301] Bluetooth: hci0: command 0x0406 tx timeout [ 185.718234][ T2301] Bluetooth: hci1: command 0x0406 tx timeout [ 185.754759][ T2301] Bluetooth: hci2: command 0x0406 tx timeout [ 185.783268][ T2301] Bluetooth: hci3: command 0x0406 tx timeout [ 185.812687][ T2301] Bluetooth: hci4: command 0x0406 tx timeout [ 185.950121][ T5750] device syzkaller0 entered promiscuous mode [ 185.992536][ T5755] Bluetooth: hci0: unsupported parameter 255 [ 186.000219][ T5755] Bluetooth: hci0: unsupported parameter 255 [ 186.058560][ T5752] ODEBUG: Out of memory. ODEBUG disabled [ 186.285879][ T5761] device syzkaller0 entered promiscuous mode [ 186.889936][ T5763] comedi comedi1: Minor 4 specified more than once! [ 188.060257][ T5784] netlink: 52 bytes leftover after parsing attributes in process `syz.2.352'. [ 189.653399][ T5797] netlink: 'syz.1.366': attribute type 21 has an invalid length. [ 189.661208][ T5797] netlink: 128 bytes leftover after parsing attributes in process `syz.1.366'. [ 189.670563][ T5797] netlink: 'syz.1.366': attribute type 4 has an invalid length. [ 189.678213][ T5797] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 189.685906][ T5797] netlink: 3 bytes leftover after parsing attributes in process `syz.1.366'. [ 189.697966][ T5797] netlink: 'syz.1.366': attribute type 21 has an invalid length. [ 189.705753][ T5797] netlink: 128 bytes leftover after parsing attributes in process `syz.1.366'. [ 189.714768][ T5797] netlink: 'syz.1.366': attribute type 4 has an invalid length. [ 189.722413][ T5797] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 189.730089][ T5797] netlink: 3 bytes leftover after parsing attributes in process `syz.1.366'. [ 190.009464][ T5801] TCP: TCP_TX_DELAY enabled [ 193.266811][ T4270] Process accounting resumed [ 194.128634][ T5861] tc action pedit offset must be on 32 bit boundaries [ 196.721156][ T5891] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 196.721156][ T5891] program syz.4.378 not setting count and/or reply_len properly [ 199.297928][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.307885][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.324381][ T5197] Process accounting resumed [ 201.017352][ T5918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'. [ 201.027002][ T5918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'. [ 201.036979][ T5918] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 205.363444][ T5948] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5948] [ 205.567551][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 205.619482][ C0] hrtimer: interrupt took 720503 ns [ 205.649030][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 206.701619][ T5969] loop3: detected capacity change from 0 to 512 [ 207.871374][ T5969] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 207.887324][ T5969] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.511587][ T4270] Process accounting resumed [ 211.300844][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.334644][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.464487][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.605331][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.533837][ T6031] overlayfs: failed to clone upperpath [ 213.548928][ T6048] binder_alloc: 6047: binder_alloc_buf, no vma [ 214.652265][ T6060] xt_hashlimit: size too large, truncated to 1048576 [ 214.711253][ T6053] device syzkaller0 entered promiscuous mode [ 216.027260][ T6053] 0: reclassify loop, rule prio 0, protocol 700 [ 216.586034][ T6080] device syzkaller0 entered promiscuous mode [ 217.199970][ T6098] tipc: Enabling of bearer rejected, failed to enable media [ 217.227983][ T6100] binder_alloc: 6087: binder_alloc_buf, no vma [ 219.696755][ T6121] loop4: detected capacity change from 0 to 16 [ 220.034199][ T6121] erofs: (device loop4): mounted with root inode @ nid 36. [ 221.511912][ T6153] CIFS: Witness protocol support is experimental [ 221.518458][ T6153] CIFS mount error: No usable UNC path provided in device string! [ 221.518458][ T6153] [ 221.528775][ T6153] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 222.833698][ T6166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.986776][ T25] audit: type=1326 audit(1792048370.097:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 226.086989][ T6198] device syzkaller0 entered promiscuous mode [ 226.140621][ T6200] ip_tables: iptables: counters copy to user failed while replacing table [ 226.408772][ T25] audit: type=1326 audit(1792048370.097:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 227.343920][ T6206] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6206] [ 229.531755][ T25] audit: type=1326 audit(1792048370.097:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f41c4f04d8e code=0x7ffc0000 [ 230.472055][ T25] audit: type=1326 audit(1792048370.097:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 230.537418][ T25] audit: type=1326 audit(1792048370.097:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 230.588089][ T25] audit: type=1326 audit(1792048370.097:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 230.694078][ T5192] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 230.707055][ T25] audit: type=1326 audit(1792048370.097:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 231.667237][ T25] audit: type=1326 audit(1792048370.097:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 231.695278][ T25] audit: type=1326 audit(1792048370.097:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 231.798607][ T25] audit: type=1326 audit(1792048370.097:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 231.835036][ T25] audit: type=1326 audit(1792048370.097:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 231.839118][ T5192] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.114509][ T25] audit: type=1326 audit(1792048370.124:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 232.277804][ T25] audit: type=1326 audit(1792048370.124:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 232.296938][ T5192] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 232.314674][ T5192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.427635][ T25] audit: type=1326 audit(1792048370.124:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 232.440341][ T5192] usb 4-1: config 0 descriptor?? [ 232.461304][ T25] audit: type=1326 audit(1792048370.124:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 232.562036][ T25] audit: type=1326 audit(1792048370.124:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 232.603231][ T25] audit: type=1326 audit(1792048370.124:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.460" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c4f44559 code=0x7ffc0000 [ 232.697492][ T5192] pwc: Askey VC010 type 2 USB webcam detected. [ 232.754767][ T6257] device syzkaller0 entered promiscuous mode [ 232.846689][ T5192] pwc: send_video_command error -71 [ 232.852275][ T5192] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 232.876066][ T5192] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 232.887362][ T5192] usb 4-1: USB disconnect, device number 6 [ 233.496608][ T6269] netlink: 256 bytes leftover after parsing attributes in process `syz.1.476'. [ 233.505607][ T6269] netlink: 64 bytes leftover after parsing attributes in process `syz.1.476'. [ 233.516126][ T6265] No such timeout policy "syz1" [ 237.921591][ T4173] af_packet: tpacket_rcv: packet too big, clamped from 7106 to 3966. macoff=82 [ 238.498398][ T6319] tipc: Started in network mode [ 238.503633][ T6319] tipc: Node identity 4, cluster identity 4711 [ 238.509881][ T6319] tipc: Node number set to 4 [ 242.950403][ T6381] virtio-fs: tag not found [ 242.985847][ T6377] device syzkaller0 entered promiscuous mode [ 243.662625][ T6379] loop3: detected capacity change from 0 to 164 [ 246.365101][ T6427] ip_tables: iptables: counters copy to user failed while replacing table [ 247.570446][ T6423] loop3: detected capacity change from 0 to 128 [ 249.568875][ T6423] EXT4-fs: failed to create workqueue [ 249.574610][ T6423] EXT4-fs (loop3): mount failed [ 250.743424][ T6475] netlink: 'syz.1.523': attribute type 21 has an invalid length. [ 250.751757][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 250.760820][ T6475] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 254.576224][ T6529] device syzkaller0 entered promiscuous mode [ 255.001841][ T6537] binder: BINDER_SET_CONTEXT_MGR already set [ 255.051398][ T6537] binder: 6536:6537 ioctl 4018620d 200000000240 returned -16 [ 255.087197][ T6540] binder: 6536:6540 ioctl c0306201 2000000004c0 returned -22 [ 258.908472][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 259.042258][ T6587] rxe_eth0 speed is unknown, defaulting to 1000 [ 261.434658][ T6604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.507819][ T4264] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 261.973366][ T4264] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 263.185228][ T4264] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.392416][ T4264] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 263.418733][ T4264] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 263.431312][ T4264] usb 2-1: Manufacturer: syz [ 264.702921][ T4264] usb 2-1: SerialNumber: syz [ 264.724918][ T4264] usb 2-1: can't set config #36, error -71 [ 264.742199][ T4264] usb 2-1: USB disconnect, device number 2 [ 265.775486][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.781994][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.421311][ T6660] loop4: detected capacity change from 0 to 4096 [ 266.913994][ T6660] ntfs3: loop4: failed to replay log file. Can't mount rw! [ 266.952660][ T6661] process 'syz.1.565' launched './file0' with NULL argv: empty string added [ 266.960381][ T6665] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 269.806376][ T4262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 270.227331][ T4262] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.265325][ T4262] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 270.493003][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 270.493012][ T25] audit: type=1800 audit(1792048411.188:29): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.567" name="c_chmask" dev="configfs" ino=65984 res=0 errno=0 [ 270.540831][ T6688] loop4: detected capacity change from 0 to 1764 [ 270.549270][ T25] audit: type=1800 audit(1792048411.188:30): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.567" name="UDC" dev="configfs" ino=65985 res=0 errno=0 [ 270.628357][ T4262] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 270.714829][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 271.009647][ C0] Unknown status report in ack skb [ 271.017815][ T6694] capability: warning: `syz.4.573' uses 32-bit capabilities (legacy support in use) [ 271.289054][ T4262] usb 1-1: Product: syz [ 271.293260][ T4262] usb 1-1: Manufacturer: syz [ 271.483785][ T4262] usb 1-1: can't set config #1, error -71 [ 271.507912][ T4262] usb 1-1: USB disconnect, device number 2 [ 271.723105][ T6702] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 273.475157][ T6714] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 273.989135][ T6714] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 276.654581][ T6721] nvme nvme0: rdma connection establishment failed (-512) [ 279.585035][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.584'. [ 279.607026][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.584'. [ 279.916096][ T6760] atomic_op ffff888061f71198 conn xmit_atomic 0000000000000000 [ 280.016879][ T6776] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 281.369735][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 282.643766][ T25] audit: type=1800 audit(1792048422.405:31): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.594" name="c_chmask" dev="configfs" ino=66123 res=0 errno=0 [ 282.731771][ T25] audit: type=1800 audit(1792048422.461:32): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.594" name="UDC" dev="configfs" ino=66126 res=0 errno=0 [ 282.752504][ T6787] Config c/1 of g1 needs at least one function. [ 282.758847][ T6787] udc dummy_udc.0: failed to start g1: -22 [ 282.844426][ T6792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.594'. [ 285.325264][ T6813] rxe_eth0 speed is unknown, defaulting to 1000 [ 294.729773][ T6891] netlink: del zone limit has 4 unknown bytes [ 296.663792][ C1] ------------[ cut here ]------------ [ 296.669354][ C1] WARNING: CPU: 1 PID: 6908 at net/mac80211/tx.c:4877 __ieee80211_beacon_get+0x178a/0x1ff0 [ 296.679476][ C1] Modules linked in: [ 296.683421][ C1] CPU: 1 PID: 6908 Comm: syz.4.627 Not tainted syzkaller #0 [ 296.690755][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.700859][ C1] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 296.707216][ C1] Code: 24 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 82 de 24 f8 0f 0b e9 16 ef ff ff e8 76 de 24 f8 <0f> 0b e9 7c f2 ff ff e8 ca d1 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 296.726891][ C1] RSP: 0018:ffffc90000dd08c0 EFLAGS: 00010246 [ 296.733012][ C1] RAX: ffffffff895444ea RBX: ffff888022f55800 RCX: ffff888052745940 [ 296.741005][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.749044][ C1] RBP: ffffc90000dd0af8 R08: ffff888052745940 R09: 0000000000000003 [ 296.757068][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 296.765070][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba128 [ 296.773097][ C1] FS: 00007fa2f16756c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 296.782308][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.788951][ C1] CR2: 00007fa2f1233000 CR3: 000000001f9b8000 CR4: 00000000003526e0 [ 296.797124][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 296.805151][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 296.813174][ C1] Call Trace: [ 296.816472][ C1] [ 296.819369][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 296.825361][ C1] ? mark_lock+0x94/0x320 [ 296.829716][ C1] ? verify_lock_unused+0x140/0x140 [ 296.834961][ C1] ? __lock_acquire+0x13b3/0x7d40 [ 296.840018][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 296.845529][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 296.851098][ C1] __iterate_interfaces+0x225/0x4c0 [ 296.856460][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 296.862752][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 296.869028][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 296.876124][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 296.881349][ C1] ? hw_scan_work+0xef0/0xef0 [ 296.886086][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 296.891326][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 296.896506][ C1] hrtimer_run_softirq+0x176/0x240 [ 296.901637][ C1] handle_softirqs+0x336/0x830 [ 296.906455][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 296.911353][ C1] ? do_softirq+0x210/0x210 [ 296.915867][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 296.921051][ C1] __irq_exit_rcu+0x13b/0x230 [ 296.925855][ C1] ? irq_exit_rcu+0x20/0x20 [ 296.930440][ C1] irq_exit_rcu+0x5/0x20 [ 296.934701][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 296.940394][ C1] [ 296.943333][ C1] [ 296.946381][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.952427][ C1] RIP: 0010:lock_acquire+0x209/0x400 [ 296.957731][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 296.977406][ C1] RSP: 0018:ffffc9000358fb40 EFLAGS: 00000206 [ 296.983527][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 42f7b480b3d0c700 [ 296.991692][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4c00 [ 296.999730][ C1] RBP: ffffc9000358fc58 R08: dffffc0000000000 R09: 1ffffffff2202a1e [ 297.007756][ C1] R10: dffffc0000000000 R11: fffffbfff2202a1f R12: 1ffff920006b1f74 [ 297.015772][ C1] R13: ffff888025348f28 R14: 0000000000000246 R15: dffffc0000000000 [ 297.023784][ C1] ? __might_sleep+0xf0/0xf0 [ 297.028431][ C1] ? read_lock_is_recursive+0x10/0x10 [ 297.033831][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 297.038939][ C1] __might_fault+0xb3/0x110 [ 297.043463][ C1] ? __might_fault+0x90/0x110 [ 297.048278][ C1] do_recvmmsg+0x389/0x7f0 [ 297.052721][ C1] ? __sys_recvmmsg+0x290/0x290 [ 297.057762][ C1] ? __context_tracking_exit+0x4c/0x80 [ 297.064217][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 297.069310][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 297.074399][ C1] ? do_recvmmsg+0x7f0/0x7f0 [ 297.079024][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.084270][ C1] do_syscall_64+0x4c/0xa0 [ 297.088706][ C1] ? clear_bhb_loop+0x30/0x80 [ 297.093428][ C1] ? clear_bhb_loop+0x30/0x80 [ 297.098111][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.104044][ C1] RIP: 0033:0x7fa2f343e559 [ 297.108590][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.128241][ C1] RSP: 002b:00007fa2f1675028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 297.136706][ C1] RAX: ffffffffffffffda RBX: 00007fa2f36c6090 RCX: 00007fa2f343e559 [ 297.144714][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 297.152700][ C1] RBP: 00007fa2f34d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 297.160716][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 297.168728][ C1] R13: 00007fa2f36c6128 R14: 00007fa2f36c6090 R15: 00007ffd5a273988 [ 297.176764][ C1] [ 297.179806][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 297.187085][ C1] CPU: 1 PID: 6908 Comm: syz.4.627 Not tainted syzkaller #0 [ 297.194376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.204445][ C1] Call Trace: [ 297.207728][ C1] [ 297.210569][ C1] dump_stack_lvl+0x188/0x250 [ 297.215263][ C1] ? show_regs_print_info+0x20/0x20 [ 297.220480][ C1] ? load_image+0x410/0x410 [ 297.225000][ C1] panic+0x2f8/0x850 [ 297.228903][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 297.233414][ C1] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 297.239137][ C1] __warn+0x248/0x2b0 [ 297.243124][ C1] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 297.248846][ C1] report_bug+0x1b9/0x2e0 [ 297.253186][ C1] handle_bug+0x3a/0x70 [ 297.257342][ C1] exc_invalid_op+0x16/0x40 [ 297.261857][ C1] asm_exc_invalid_op+0x16/0x20 [ 297.266716][ C1] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 297.273045][ C1] Code: 24 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 82 de 24 f8 0f 0b e9 16 ef ff ff e8 76 de 24 f8 <0f> 0b e9 7c f2 ff ff e8 ca d1 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 297.292651][ C1] RSP: 0018:ffffc90000dd08c0 EFLAGS: 00010246 [ 297.298726][ C1] RAX: ffffffff895444ea RBX: ffff888022f55800 RCX: ffff888052745940 [ 297.306702][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.314675][ C1] RBP: ffffc90000dd0af8 R08: ffff888052745940 R09: 0000000000000003 [ 297.322645][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 297.330612][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba128 [ 297.338586][ C1] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 297.344331][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 297.350325][ C1] ? mark_lock+0x94/0x320 [ 297.354675][ C1] ? verify_lock_unused+0x140/0x140 [ 297.359900][ C1] ? __lock_acquire+0x13b3/0x7d40 [ 297.365031][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 297.370496][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 297.376049][ C1] __iterate_interfaces+0x225/0x4c0 [ 297.381256][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 297.387602][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 297.393852][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 297.400917][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 297.406125][ C1] ? hw_scan_work+0xef0/0xef0 [ 297.410807][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 297.416031][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 297.421169][ C1] hrtimer_run_softirq+0x176/0x240 [ 297.426308][ C1] handle_softirqs+0x336/0x830 [ 297.431095][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 297.435971][ C1] ? do_softirq+0x210/0x210 [ 297.440490][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 297.445627][ C1] __irq_exit_rcu+0x13b/0x230 [ 297.450322][ C1] ? irq_exit_rcu+0x20/0x20 [ 297.454849][ C1] irq_exit_rcu+0x5/0x20 [ 297.459197][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 297.464853][ C1] [ 297.467791][ C1] [ 297.470815][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 297.476892][ C1] RIP: 0010:lock_acquire+0x209/0x400 [ 297.482370][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 297.502152][ C1] RSP: 0018:ffffc9000358fb40 EFLAGS: 00000206 [ 297.508235][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 42f7b480b3d0c700 [ 297.516208][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4c00 [ 297.524183][ C1] RBP: ffffc9000358fc58 R08: dffffc0000000000 R09: 1ffffffff2202a1e [ 297.532183][ C1] R10: dffffc0000000000 R11: fffffbfff2202a1f R12: 1ffff920006b1f74 [ 297.540155][ C1] R13: ffff888025348f28 R14: 0000000000000246 R15: dffffc0000000000 [ 297.548152][ C1] ? __might_sleep+0xf0/0xf0 [ 297.552796][ C1] ? read_lock_is_recursive+0x10/0x10 [ 297.558185][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 297.563245][ C1] __might_fault+0xb3/0x110 [ 297.567753][ C1] ? __might_fault+0x90/0x110 [ 297.572443][ C1] do_recvmmsg+0x389/0x7f0 [ 297.576875][ C1] ? __sys_recvmmsg+0x290/0x290 [ 297.581742][ C1] ? __context_tracking_exit+0x4c/0x80 [ 297.587204][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 297.592245][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 297.597276][ C1] ? do_recvmmsg+0x7f0/0x7f0 [ 297.601871][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.607077][ C1] do_syscall_64+0x4c/0xa0 [ 297.611495][ C1] ? clear_bhb_loop+0x30/0x80 [ 297.616262][ C1] ? clear_bhb_loop+0x30/0x80 [ 297.620956][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.626856][ C1] RIP: 0033:0x7fa2f343e559 [ 297.631273][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.651003][ C1] RSP: 002b:00007fa2f1675028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 297.659521][ C1] RAX: ffffffffffffffda RBX: 00007fa2f36c6090 RCX: 00007fa2f343e559 [ 297.667946][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 297.675935][ C1] RBP: 00007fa2f34d58b0 R08: 0000000000000000 R09: 0000000000000000 [ 297.683919][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 297.691903][ C1] R13: 00007fa2f36c6128 R14: 00007fa2f36c6090 R15: 00007ffd5a273988 [ 297.699896][ C1] [ 297.703207][ C1] Kernel Offset: disabled [ 297.707958][ C1] Rebooting in 86400 seconds..