last executing test programs: 8.41279781s ago: executing program 2 (id=65): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.161890877s ago: executing program 2 (id=68): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000240)) 7.918859315s ago: executing program 2 (id=73): memfd_create(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047457, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000002c0)="95bf", 0x2}], 0x1, 0x0, 0x0) 6.927348386s ago: executing program 2 (id=78): socket(0x10, 0x2, 0x0) socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 6.346225694s ago: executing program 3 (id=84): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0x1, 0xee6, &(0x7f0000002d40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBzj+p6c2IqEfEpfeg/KFRTBo19EAUiOkBUQlRpIhTxYGKC6VSilQkUKUq6qntqVVvPVSoFypVqRTUQxspcRX7zXr32cOux/asvfv7SZ/fvnmz833jjTYz49m3ARhYtaWfR45MZyG8+9mVY6+ezD65s+yR5hr7ln5msdcIIdRb+lmyvc/jgls3Lp1Yq83CoaWfeT88d7353PEQwkLYF66FRvhodv7LD997dv/Hb4zd9/bFs69t0e43pfsBAAD96Oqf5v/2xD//+NTUzat758Joc3l+fN6I/fF43H8gHijnx8u10N7PWqLVSLLeUIxast5Qst5wkme4IF892U69YL2RDvmGWpattZ8AAACwE+XntY2Q1Wba+rXazMzyef8dn0+OZDPnzsyfvtCjQgEAAIDS/nN56aZbIYQQQgghhBBC9HEsTvb6CgQAAAAwaNL5wlZZ2NyZuppba3SX//oztbWfD5ug6n//8u+s/B+87h0HAIDy+vVoMt+v/Dg6n8cgnUdwKHneOo//mxcDhpLtdqtoXsGdMt9gUZ3p73W7Kqp/va9jrxTVn86HuV0V1Z/O07ldFdU/WnEdZRXVP1ZxHWUV1b+r4jrKKqp/d8V1lFVU/3jFdZRVVP9ExXWUVVT/XRXXUVZR/XsqrqOsovp3ym21RfU3Kq6jrKL6pyquo6yi+u+uuI6yiuq/p+I6yiqq/96K6+iVh2Ob/x72JuOt58/pOd1OOccDAACAQfc/8/8JIYQQQgghRC9j5fbT3tci+jgu9/TqAwAAALAd5J8LyD/1vhjl40Mdxodbx8dWVsjH6x2eP9JhfLTDOAAAABDCb988/cA72crn/Dc4H15z3qhd4ZPbocQ8Rul8hOvNv9F5zzaaf6fMWwYAAMBgyb537faTx95/eerm1b1zLWe/t+P5bj4P6HC8NvBp7Of3BUwk/Sw/h55rz1MrWC+9PnBX0fae3+COAgAAwADLz98bIavNtJx3N0KtNjOzcj4+HerZ6TPzpw7Efv79LH+YrI/eWX6w4roBAACA7q2c7699/p9/j+90GMlmzp2ZP31huT/RXF6vtV4XmFxZnrVeF2gkyw8VLD8c+/n3d/5gctfS8pkTP5w/udk7DwAAAAPiwisXz74wP3/qRx544IEHzQe9fmcCAAA22xdfXKn/+PDE75Y//78y/13++f99sd+Ic/v9Oa6Q3yeQfw5g1ef1j7fnmSxa73z7eo1kvaEYo0ndYy3bCUvzDbY/b6ooX6N9OyMF+caTfBNJvnSeguFk/TzfnmR5Oj9hvt5ksjydh3E4yZEl+R8NAAAAUGz25ZfOz1545eLTZ1564cVTL546d/jQ0e8ePXrg4HcOzi7d1z/benc/AAAAsBOt3PTb/XP+vpUFAQAAAAAAAAAAAAAAAAAAwACq4uvEer2PAAAAMOj+fTmEsCCEEKVjcbT3NQghhBBCCCE6xOJi+k3zAAAAAFvr1o1LJ1rbVRayTc3X3Fpjubkd8+btxNN/nboT+WrXn2m/XrJ7U6th0FX971/+nZX/g9c3N/9Y/qDr979a+wbmyuV9fPaX0635HxzuMn+6/8+Xy78/yf946C7/4vtJ/uPl8j+R5N/dZf5V+3++XP4nY/7p2N//WLf521//0djm+7Gry/zfTvb/ZOg2f7L/jS4TJp6K+QFgENV6XcAWyY8S8uPo8djP9zcebob07of1Hv/Xku0Mb7jy9u3mx0H3x35+vDSR5M2tt/7xZHt3lawztVPuKimqf7Nex61WVH+94jrKKqp/pOI6yiqqf7TiOsoqqn+s4jrKKqq/2/PQXiuqf6dcVy6qf7ziOsoqqn+i4jrKKqp/vf+P90pR/XsqrqOsovonK66jrKL6S15Wq1xR/VMV11FWUf13V1xHWUX131NxHWUV1X9vxXX0ykOxLTofzs8/J+NY3m8k/dE1fpf9em0BAAAAdpp/mf9PCCGEEO2x/GeB3tchhPjKWFxsHtRvwvb+u7is9/slRBJz26CGPomWdw0G0NZ+mhmA7cr7/2Dz+g82r/9g8/rzVfJ7+LOknxvqMD7cYbzeYXwkGU//vY52GL8n2e5ifl0zurfD+Nc6jO/pMH5/h/HpDuMPdBh/sMP4Qx3GAQAAGAz3xdb5IQAAAPSvV3/16Vu/efz4jambV/fOhZFV884fiP3R+Lf1N2M/nfc+V49/8/9J7P8itr+P7T+S9d1/AgAAAFsv/54Yf/8HAACA/pV/T6nzfwAAAOhfU7F1/g8AAAD96+7YOv8HAACAPpaNrb04tvl1gUdj2+28fgDA9vf12D4c272xfSS234htfhzwWGy/WVF9AMDm+fn3f3r0nWxlvv/DyfituDxvV1lYvlKQ1dpn8t8V292x/VaX9aTfB9Bt/tyeLvNsVf7JDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpHbennkSPTWQjvfnbl2M9G3vrLnWWPNNfYt/Qzi71GCKHefF4+utL/dVzx1o1LJ1rb27HNwqGQhay5PDx3vZlpPISwEPaFa6ERPpqd//LD957d//EbY/e9ffHsa1v4K2jbPwAAAOhH/w8AAP//kQsoAA==") pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000010c0)="aa", 0x1}], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0186e87, &(0x7f0000000080)={@id={0x20000000, 0x0, @auto="9e9767122800a73e1baeff79da3b89f5"}}) 6.284617933s ago: executing program 1 (id=86): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x380, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}, @TCA_U32_CLASSID={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "17a84e246226dc8310387a1224cf94da"}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @multicast}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa}]}}, @filter_kind_options=@f_route={{0xa}, {0x26c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x198, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0xb8, 0x0, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xc0, 0x6, [@m_nat={0x90, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x3d, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea4833cb4d10d78455e"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x380}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.061585562s ago: executing program 0 (id=88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000552000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4048aecb, &(0x7f0000000040)=ANY=[]) 6.043882497s ago: executing program 1 (id=89): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 5.884777392s ago: executing program 2 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc040aed5, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) 5.855319294s ago: executing program 1 (id=91): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x6, 0x1) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup3(r3, r2, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 5.819271594s ago: executing program 4 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x20000}, 0x20) 5.758039778s ago: executing program 3 (id=93): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 4.740931392s ago: executing program 4 (id=94): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000c00)=""/124, 0x7c}], 0x1}}], 0x1, 0x60000160, 0x0) 4.686175801s ago: executing program 0 (id=95): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_int(r0, &(0x7f0000000180), 0x12) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004100)='net/rt_cache\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004140), 0x2, 0x0) sendfile(r5, r4, &(0x7f0000005c80)=0x7b, 0xffffffff) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@gettaction={0x1c, 0x32, 0x6620c249b5bcdf6f, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}]}, 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000073011b0000000000950000000000000076ff7f00006979303ff4bbaa27dd333c42db8467cd3785dc824b0300cba156d1d01a0709fbbca33300"/88], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.416761081s ago: executing program 2 (id=96): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000090000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0xc0884113, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.607999439s ago: executing program 0 (id=97): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x18, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r0, 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{}, {}]}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@loopback, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000000000000003"], 0x1c) 3.582583742s ago: executing program 1 (id=98): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x389240, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$FS_IOC_RESVSP(r2, 0x40044591, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000100)="a9be04a5a33a69cb9626c0f0024fe4e722df229f1ae8d4db", 0x18}], 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x0, 0x0, 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x300}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="de", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) creat(0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000003040)=[{&(0x7f0000033a80)=""/102384, 0x18ff0}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/27, 0x1b}, {&(0x7f0000001e00)=""/6, 0x6}], 0x4, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x1b, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0012007a7439d4f7eb27be923e0e0f"], 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000300)=@llc={0x1a, 0x303, 0x25, 0x9, 0x3f, 0x1, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001e40)="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", 0x14e}], 0x1, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0xc15}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}, {{&(0x7f0000000540)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000680)="a93ed971d57744944d7b611d479fabd9f99ddc371864c515b720e0e8a8f00e1a9e0055c19d707200947cdd3db593cd26fee8dac4f94cd72012c05cbea056ad6cfe8cd7c92f65", 0x46}, {&(0x7f0000000700)="5536b1fdf6662d6d955dd5d278aac49ab433e5fca45ed013ff93cda0b92dd3a15ae51045da2bb36087e5f562cc2bf033ff21162d5905347c4e1055ee5b1efe20bd93c61eaa3865f6ca87ddcfd8932d7ae83585f1e809df6a41b3322b04b0ef9324c22305472ec2f60e6e573967cab0df818a56320547da16ea55ead457541c48f6d3b73aa73aeabfee317ea4ecfbc9d655dd5e123538d3c03fcd6f626b73cef46b9bbbfb71b97c752eb79bf80b9e6b64d1967b0e4569cd3120aaced75eaeb1221fa65ef8641738250b9dc3a11aaa24a60bbe", 0xd2}, {&(0x7f0000000800)="b36ba4f7b6bd7b0080c5302b4714e27689b307b561d2fd5af46504d98fda5e9c68f8892339c490988762c6f951e9911bbb30f144d24eb1b4ad0c9b821858377c73c83b2d1263d7df4c4d9d128054daa5bbff5c0858bf8aa5017c85317fdb04348e8d29f0f78e4dee27202a93d03e8ce30d4579dba0f8285a843444323d2fd1a346752e71ca41ab10777bdc0d7a8dda67e2ea92a0e4e4", 0x96}, {0x0}, {&(0x7f0000000b00)="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", 0x800}, {0x0}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="53a5ec3840d148a46f87064de93d7880c011d19428139ec40f5e824fa243ed5960e2cd2a4df5cf589e82d645168eac8fa47c485c4c9f6b8e6f2bb02e19604daa1167d114b6babc6ff2e9d5ca0404c05bf4a167e913d1a60cddb7ed0c05c8883e1dca4ef8f6d53fb0fa8758b723aab534c2ce8151a1878faf1a8ba165ea2ea352244960a30df7267634149239769dae5f9372bb4bad1bc9a64a1280d7dc3d036824f33865dbb4a94c458df29cf7f05a1fd599bf4f504bfc63bf76d9dd02eb494f3afe9907d3984dff2c", 0xc9}], 0x8, &(0x7f0000001d00)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4d176d64}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7df7}}], 0xa8}}], 0x2, 0x8c90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="2238239555624c55088ba212ebfbe9a25099f484c8fa088e4dd9b941f1736df8413b23337d83e692e33409327ab4cec21c6bdf56ca6eb818a382f9648a2e8b3117b0bc36ac3674b4ac37839d36fa15b89aa829369b3af9f045b5ad2055c4cc83bb542c4593b555dd26a6e4b2be09bb016884e413aae08a324dced1b6305d0047ba5605eedd4222a5b0671635e5ce135624366453e736", 0x96}], 0x1}, 0x0) 3.522229174s ago: executing program 4 (id=99): r0 = io_uring_setup(0x144c, &(0x7f0000000100)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000240)=@name, 0x10, 0x0}, 0x0) close(r0) 3.430156857s ago: executing program 3 (id=100): unshare(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000001000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) 3.373120086s ago: executing program 0 (id=101): socket(0x10, 0x2, 0x0) socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 2.747538767s ago: executing program 3 (id=102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x24, &(0x7f0000000080), 0x4) 2.638183482s ago: executing program 3 (id=103): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x78}, 0x1, 0x600000000000000}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES16], 0xfe, 0x159, &(0x7f0000000780)="$eJzs27Hq01AUB+BTW9uqS2dxCLg4FfUJFKkgBhSlg04K1aWVgl2iUx/FFxSkU7crNdJqaYeKacK/37fkwI+Ec4bk5gby7s6n6WS++Dh/uYp+qxWdR5HFuhWDuBbtKC0DALhK1inFj5RS6i3jxrdIKdXdEQBQtX9c/3uVNwYAVMb+HwAuj/UfAC7P6zdvnz/O89GrLOtHfF8W42JcHsv86bN8dD/7ZbA7a1UU4/Y2f1Dm2d/59bj5O394MO/GvbtlvsmevMj38lsxqX58AAAAuAjDbOvg/n44PJaX1R/fB/b275243TnbGADACRZfvk7fz2YfPiuaWGxewhrQxpmK+D/XiUFEE8Y5qehGI9rYFXU/mYCq7W76ujsBAAAAAAAAAAAAAACOOcfvRHXPCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPt+BgAA///R702o") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 2.618558239s ago: executing program 1 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3, 0x6, 0x4920e7af812c3f03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x28, 0x107, 0x0, 0x0, {0x7}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xb2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r9}, 0x10, &(0x7f0000000080)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) r10 = socket$inet_dccp(0x2, 0x6, 0x0) dup3(r10, r6, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 2.592025645s ago: executing program 4 (id=105): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r1}, 0x8) 2.467538384s ago: executing program 4 (id=106): r0 = syz_open_dev$sndpcmc(&(0x7f0000001180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f00000011c0)) 1.458716524s ago: executing program 1 (id=107): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8a, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 1.393586565s ago: executing program 0 (id=108): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_int(r0, &(0x7f0000000180), 0x12) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004100)='net/rt_cache\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004140), 0x2, 0x0) sendfile(r5, r4, &(0x7f0000005c80)=0x7b, 0xffffffff) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@gettaction={0x1c, 0x32, 0x6620c249b5bcdf6f, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}]}, 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000073011b0000000000950000000000000076ff7f00006979303ff4bbaa27dd333c42db8467cd3785dc824b0300cba156d1d01a0709fbbca33300"/88], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.328931479s ago: executing program 3 (id=109): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, 0x4, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000400)='./file0/../file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='map=off,hide,map=off,session=0x000000,unhide,iocharset=maciceland,overriderockperm,iocharset=cp869,hide,map=normal\x00map=off,overriderockperm,,', @ANYRES32], 0xff, 0x9d0, &(0x7f00000017c0)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000003800)={0x2020}, 0x2020) syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100801700) 1.092367378s ago: executing program 4 (id=110): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 0s ago: executing program 0 (id=111): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000050700be00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800600020030000000140007000001"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 66.818594][ T5216] cgroup: Unknown subsys name 'net' [ 66.952826][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.656348][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.130723][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.139652][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.147473][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.155845][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.163809][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.171250][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.179439][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.192771][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.209446][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.217853][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.234923][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.242875][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.272909][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.281465][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.289321][ T4617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.289751][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.297736][ T4617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.311767][ T4617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.316488][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.327420][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.332529][ T4617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.335361][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.342313][ T4617] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.356373][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.448715][ T4617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.458699][ T4617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.467024][ T4617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.476042][ T4617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.484275][ T4617] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.492728][ T4617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.677310][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.684025][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.938327][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 72.012116][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 72.067104][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 72.294721][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.303731][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.311188][ T5226] bridge_slave_0: entered allmulticast mode [ 72.326548][ T5226] bridge_slave_0: entered promiscuous mode [ 72.340629][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.348149][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.355398][ T5234] bridge_slave_0: entered allmulticast mode [ 72.362681][ T5234] bridge_slave_0: entered promiscuous mode [ 72.374903][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 72.385679][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.393037][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.400175][ T5226] bridge_slave_1: entered allmulticast mode [ 72.407388][ T5226] bridge_slave_1: entered promiscuous mode [ 72.426919][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.434245][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.441403][ T5234] bridge_slave_1: entered allmulticast mode [ 72.449154][ T5234] bridge_slave_1: entered promiscuous mode [ 72.504954][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 72.538343][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.561103][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.571628][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.579168][ T5230] bridge_slave_0: entered allmulticast mode [ 72.587045][ T5230] bridge_slave_0: entered promiscuous mode [ 72.614001][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.638742][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.648166][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.656252][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.663611][ T5230] bridge_slave_1: entered allmulticast mode [ 72.670755][ T5230] bridge_slave_1: entered promiscuous mode [ 72.704939][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.778044][ T5234] team0: Port device team_slave_0 added [ 72.786558][ T5234] team0: Port device team_slave_1 added [ 72.808032][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.820606][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.855804][ T5226] team0: Port device team_slave_0 added [ 72.916008][ T5226] team0: Port device team_slave_1 added [ 72.923572][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.930535][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.956533][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.995353][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.003560][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.010756][ T5241] bridge_slave_0: entered allmulticast mode [ 73.018468][ T5241] bridge_slave_0: entered promiscuous mode [ 73.049570][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.056996][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.083276][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.104166][ T5230] team0: Port device team_slave_0 added [ 73.124146][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.131363][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.138684][ T5241] bridge_slave_1: entered allmulticast mode [ 73.146295][ T5241] bridge_slave_1: entered promiscuous mode [ 73.166224][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.173615][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.199819][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.213291][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.220255][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.246209][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.269941][ T5230] team0: Port device team_slave_1 added [ 73.276224][ T5229] Bluetooth: hci0: command tx timeout [ 73.283017][ T5229] Bluetooth: hci1: command tx timeout [ 73.353548][ T5229] Bluetooth: hci2: command tx timeout [ 73.373529][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.380749][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.388376][ T5236] bridge_slave_0: entered allmulticast mode [ 73.395592][ T5236] bridge_slave_0: entered promiscuous mode [ 73.404024][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.411216][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.418514][ T5236] bridge_slave_1: entered allmulticast mode [ 73.426301][ T5236] bridge_slave_1: entered promiscuous mode [ 73.432412][ T5229] Bluetooth: hci3: command tx timeout [ 73.439950][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.452880][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.477600][ T5226] hsr_slave_0: entered promiscuous mode [ 73.484905][ T5226] hsr_slave_1: entered promiscuous mode [ 73.494053][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.501012][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.527629][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.591610][ T5234] hsr_slave_0: entered promiscuous mode [ 73.592620][ T5229] Bluetooth: hci4: command tx timeout [ 73.604577][ T5234] hsr_slave_1: entered promiscuous mode [ 73.610917][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.619367][ T5234] Cannot create hsr debugfs directory [ 73.640486][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.647587][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.674278][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.694072][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.706716][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.718959][ T5241] team0: Port device team_slave_0 added [ 73.729020][ T5241] team0: Port device team_slave_1 added [ 73.854911][ T5236] team0: Port device team_slave_0 added [ 73.867874][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.875013][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.902003][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.963469][ T5236] team0: Port device team_slave_1 added [ 73.970039][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.977719][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.004306][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.026057][ T5230] hsr_slave_0: entered promiscuous mode [ 74.033907][ T5230] hsr_slave_1: entered promiscuous mode [ 74.040116][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.047736][ T5230] Cannot create hsr debugfs directory [ 74.138514][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.145605][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.171881][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.224540][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.231518][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.263957][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.343035][ T5241] hsr_slave_0: entered promiscuous mode [ 74.349493][ T5241] hsr_slave_1: entered promiscuous mode [ 74.356424][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.364629][ T5241] Cannot create hsr debugfs directory [ 74.458003][ T5236] hsr_slave_0: entered promiscuous mode [ 74.464890][ T5236] hsr_slave_1: entered promiscuous mode [ 74.471125][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.479462][ T5236] Cannot create hsr debugfs directory [ 74.629379][ T5234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.655905][ T5234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.690682][ T5234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.730073][ T5234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.847879][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.876204][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.897369][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.911360][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.961053][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.993988][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.032460][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.046194][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.134198][ T5236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.145613][ T5236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.157579][ T5236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.186415][ T5241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.202613][ T5236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.236553][ T5241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.248775][ T5241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.260598][ T5241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.308189][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.352535][ T5229] Bluetooth: hci1: command tx timeout [ 75.352595][ T4617] Bluetooth: hci0: command tx timeout [ 75.406817][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.432546][ T4617] Bluetooth: hci2: command tx timeout [ 75.453900][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.461271][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.507161][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.512791][ T4617] Bluetooth: hci3: command tx timeout [ 75.514382][ T5237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.580647][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.660395][ T5234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.682094][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.688790][ T4617] Bluetooth: hci4: command tx timeout [ 75.735268][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.751153][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.771785][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.812117][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.819326][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.859639][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.866872][ T5237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.903783][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.924235][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.931583][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.971780][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.979003][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.006763][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.043288][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.069108][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.076447][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.109327][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.116517][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.127271][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.134454][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.171389][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.178562][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.219360][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.281587][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.377406][ T5241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.402349][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.602038][ T5234] veth0_vlan: entered promiscuous mode [ 76.649117][ T5234] veth1_vlan: entered promiscuous mode [ 76.687896][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.830661][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.875633][ T5234] veth0_macvtap: entered promiscuous mode [ 76.925711][ T5234] veth1_macvtap: entered promiscuous mode [ 76.944452][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.971126][ T5230] veth0_vlan: entered promiscuous mode [ 77.011215][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.027017][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.059240][ T5230] veth1_vlan: entered promiscuous mode [ 77.083846][ T5234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.094410][ T5234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.104498][ T5234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.114046][ T5234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.149758][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.180863][ T5226] veth0_vlan: entered promiscuous mode [ 77.226755][ T5241] veth0_vlan: entered promiscuous mode [ 77.251657][ T5226] veth1_vlan: entered promiscuous mode [ 77.321606][ T5230] veth0_macvtap: entered promiscuous mode [ 77.347317][ T5241] veth1_vlan: entered promiscuous mode [ 77.385541][ T5230] veth1_macvtap: entered promiscuous mode [ 77.434743][ T4617] Bluetooth: hci0: command tx timeout [ 77.442969][ T4617] Bluetooth: hci1: command tx timeout [ 77.480141][ T5226] veth0_macvtap: entered promiscuous mode [ 77.480439][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.498703][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.515999][ T4617] Bluetooth: hci2: command tx timeout [ 77.537617][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.550799][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.570299][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.592629][ T4617] Bluetooth: hci3: command tx timeout [ 77.605570][ T5226] veth1_macvtap: entered promiscuous mode [ 77.627581][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.639106][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.650762][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.669881][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.679071][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.690655][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.700106][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.731077][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.740306][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.749592][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.761229][ T4617] Bluetooth: hci4: command tx timeout [ 77.767266][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.778893][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.789714][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.801810][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.824215][ T5241] veth0_macvtap: entered promiscuous mode [ 77.867430][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.878822][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.889160][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.899778][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.913260][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.970085][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.981844][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.991791][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.001812][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.017219][ T5241] veth1_macvtap: entered promiscuous mode [ 78.080785][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.106715][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.171499][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.187365][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.198853][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.216911][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.231790][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.251844][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.265295][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.307052][ T5236] veth0_vlan: entered promiscuous mode [ 78.334058][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.353166][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.369083][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.380905][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.398973][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.411367][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.425588][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.480169][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.490086][ T5236] veth1_vlan: entered promiscuous mode [ 78.504050][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.565906][ T5241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.576503][ T5241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.585679][ T5241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.594788][ T5241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.825465][ T5236] veth0_macvtap: entered promiscuous mode [ 78.839629][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.857758][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.886301][ T5236] veth1_macvtap: entered promiscuous mode [ 78.948324][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.992317][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.035365][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.055635][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.073906][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.086337][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.109970][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.121743][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.142568][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.167368][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.181149][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.212089][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.237977][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.245022][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.249636][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.269270][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.280248][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.299814][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.310480][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.321032][ C1] eth0: bad gso: type: 1, size: 1408 [ 79.334687][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.345509][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.359520][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.360534][ T5331] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.400127][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.420901][ T5236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.427697][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.440368][ T5236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.450986][ T5236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.461031][ T5236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.522700][ T4617] Bluetooth: hci1: command tx timeout [ 79.528265][ T4617] Bluetooth: hci0: command tx timeout [ 79.567734][ T5333] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.593581][ T4617] Bluetooth: hci2: command tx timeout [ 79.673303][ T4617] Bluetooth: hci3: command tx timeout [ 79.828836][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.853394][ T4617] Bluetooth: hci4: command tx timeout [ 79.879578][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.150154][ T5343] loop2: detected capacity change from 0 to 16 [ 80.185759][ T5343] erofs: (device loop2): mounted with root inode @ nid 36. [ 80.948932][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.980080][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.353617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 83.423300][ T5404] QAT: Device 0 not found [ 83.435729][ T5403] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.894717][ T5411] kvm: emulating exchange as write [ 84.048439][ T5274] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.112742][ T5423] ======================================================= [ 84.112742][ T5423] WARNING: The mand mount option has been deprecated and [ 84.112742][ T5423] and is ignored by this kernel. Remove the mand [ 84.112742][ T5423] option from the mount to silence this warning. [ 84.112742][ T5423] ======================================================= [ 84.289285][ T5274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.314531][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 84.369976][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.394710][ T5274] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 84.423691][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.495680][ T5274] usb 4-1: config 0 descriptor?? [ 84.557872][ T5274] gspca_main: spca561-2.14.0 probing abcd:cdee [ 84.694041][ T5429] loop0: detected capacity change from 0 to 4096 [ 84.766924][ T5274] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 84.813068][ T5274] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 84.852270][ T5274] usb 4-1: MIDIStreaming interface descriptor not found [ 84.892346][ T5436] QAT: Device 0 not found [ 84.912158][ T5438] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.069554][ T5274] usb 4-1: USB disconnect, device number 2 [ 85.149681][ T5429] NILFS (loop0): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 85.162437][ T5429] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 85.239581][ T5429] Remounting filesystem read-only [ 85.576806][ T5448] udevd[5448]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.767235][ T5473] QAT: Device 0 not found [ 86.781376][ T5477] openvswitch: netlink: Missing key (keys=40, expected=100) [ 86.816053][ T5478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.71'. [ 86.871853][ C1] eth0: bad gso: type: 1, size: 1408 [ 86.882525][ C1] eth0: bad gso: type: 1, size: 1408 [ 87.057119][ T8] cfg80211: failed to load regulatory.db [ 87.356104][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 88.315691][ T4617] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 88.324756][ T4617] Bluetooth: hci2: Injecting HCI hardware error event [ 88.336445][ T4617] Bluetooth: hci2: hardware error 0x00 [ 88.574022][ T5514] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.602003][ T5513] loop3: detected capacity change from 0 to 4096 [ 88.663103][ T5517] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.768715][ T5513] NILFS (loop3): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 88.798914][ T5513] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 88.859884][ T5513] Remounting filesystem read-only [ 90.235871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.747581][ T5547] tc_dump_action: action bad kind [ 90.822463][ T4617] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 91.212617][ T29] audit: type=1326 audit(1721917610.767:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.306531][ T29] audit: type=1326 audit(1721917610.767:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.350125][ T5314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.390700][ T29] audit: type=1326 audit(1721917610.767:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.432500][ T29] audit: type=1326 audit(1721917610.767:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.458360][ T29] audit: type=1326 audit(1721917610.767:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.504859][ T29] audit: type=1326 audit(1721917610.767:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.557922][ T29] audit: type=1326 audit(1721917610.767:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.590936][ T5314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.612731][ T5314] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.622638][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.632864][ T29] audit: type=1326 audit(1721917610.767:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.672269][ T5314] usb 3-1: Product: syz [ 91.681009][ T5314] usb 3-1: Manufacturer: syz [ 91.695930][ T5314] usb 3-1: SerialNumber: syz [ 91.727825][ T5314] hub 3-1:1.0: bad descriptor, ignoring hub [ 91.736905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.745326][ T29] audit: type=1326 audit(1721917610.767:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.780868][ T5314] hub 3-1:1.0: probe with driver hub failed with error -5 [ 91.831721][ T29] audit: type=1326 audit(1721917610.767:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9fd75f19 code=0x7fc00000 [ 91.839272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.862424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.212495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.380056][ T5575] loop3: detected capacity change from 0 to 128 [ 92.652694][ T5579] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 93.307789][ T5314] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 93.314478][ T5314] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 93.340344][ T5314] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 94.370916][ T5588] loop3: detected capacity change from 0 to 1764 [ 94.616289][ T5593] tc_dump_action: action bad kind [ 94.768804][ T5274] usb 3-1: USB disconnect, device number 2 [ 94.804707][ T5274] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 94.833607][ C1] ================================================================== [ 94.841795][ C1] BUG: KASAN: slab-use-after-free in bq_xmit_all+0x134/0x11d0 [ 94.849301][ C1] Read of size 8 at addr ffff888022842650 by task syz.4.110/5592 [ 94.857042][ C1] [ 94.859387][ C1] CPU: 1 UID: 0 PID: 5592 Comm: syz.4.110 Not tainted 6.10.0-next-20240725-syzkaller #0 [ 94.869135][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 94.879232][ C1] Call Trace: [ 94.882533][ C1] [ 94.885399][ C1] dump_stack_lvl+0x241/0x360 [ 94.890121][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.895363][ C1] ? __pfx__printk+0x10/0x10 [ 94.899990][ C1] ? _printk+0xd5/0x120 [ 94.904187][ C1] ? __virt_addr_valid+0x183/0x530 [ 94.909303][ C1] ? __virt_addr_valid+0x183/0x530 [ 94.914413][ C1] print_report+0x169/0x550 [ 94.918920][ C1] ? __virt_addr_valid+0x183/0x530 [ 94.924025][ C1] ? __virt_addr_valid+0x183/0x530 [ 94.929155][ C1] ? __virt_addr_valid+0x45f/0x530 [ 94.934275][ C1] ? __phys_addr+0xba/0x170 [ 94.938773][ C1] ? bq_xmit_all+0x134/0x11d0 [ 94.943452][ C1] kasan_report+0x143/0x180 [ 94.947974][ C1] ? bq_xmit_all+0x134/0x11d0 [ 94.952654][ C1] bq_xmit_all+0x134/0x11d0 [ 94.957181][ C1] ? virtnet_poll+0x2f35/0x3870 [ 94.962045][ C1] ? validate_chain+0x11e/0x5920 [ 94.966984][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 94.972015][ C1] ? validate_chain+0x11e/0x5920 [ 94.977037][ C1] ? __pfx_bq_xmit_all+0x10/0x10 [ 94.981989][ C1] ? mark_lock+0x9a/0x360 [ 94.986326][ C1] __dev_flush+0x81/0x160 [ 94.990657][ C1] xdp_do_check_flushed+0x129/0x240 [ 94.995866][ C1] __napi_poll+0xe4/0x490 [ 95.000200][ C1] net_rx_action+0x89b/0x1240 [ 95.004890][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 95.010004][ C1] ? sched_clock+0x4a/0x70 [ 95.014431][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.020765][ C1] handle_softirqs+0x2c4/0x970 [ 95.025537][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 95.030305][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 95.035609][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 95.040811][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 95.045407][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 95.050618][ C1] irq_exit_rcu+0x9/0x30 [ 95.054863][ C1] common_interrupt+0xaa/0xd0 [ 95.059537][ C1] [ 95.062465][ C1] [ 95.065392][ C1] asm_common_interrupt+0x26/0x40 [ 95.070428][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 95.076508][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d ec 97 95 0c 48 89 de 5b e9 33 d2 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 40 d7 03 00 65 8b 15 10 0c [ 95.096114][ C1] RSP: 0018:ffffc900048f6ec0 EFLAGS: 00000293 [ 95.102182][ C1] RAX: ffffffff90934e1c RBX: ffffffff90934e20 RCX: ffff8880217c0000 [ 95.110163][ C1] RDX: ffff8880217c0000 RSI: ffffffff8bb95ee8 RDI: ffffffff8bb95e2b [ 95.118137][ C1] RBP: ffffffff8bb95e2b R08: ffffffff81410c60 R09: ffffc900048f7090 [ 95.126108][ C1] R10: 0000000000000003 R11: ffffffff817f7030 R12: ffffffff90934e38 [ 95.134164][ C1] R13: ffffffff90934e24 R14: ffffffff8bb95ee8 R15: ffffffff90934e20 [ 95.142148][ C1] ? syscall_exit_to_user_mode+0xc8/0x370 [ 95.147879][ C1] ? syscall_exit_to_user_mode+0xb/0x370 [ 95.153517][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 95.159682][ C1] ? unwind_next_frame+0x510/0x2a00 [ 95.164905][ C1] ? syscall_exit_to_user_mode+0xc8/0x370 [ 95.170628][ C1] ? syscall_exit_to_user_mode+0xb/0x370 [ 95.176268][ C1] unwind_next_frame+0x531/0x2a00 [ 95.181299][ C1] ? syscall_exit_to_user_mode+0xc8/0x370 [ 95.187033][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 95.192769][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 95.198508][ C1] ? __kernel_text_address+0xd/0x40 [ 95.203706][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 95.209431][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 95.215592][ C1] arch_stack_walk+0x151/0x1b0 [ 95.220378][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 95.226123][ C1] stack_trace_save+0x118/0x1d0 [ 95.230989][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 95.236396][ C1] save_stack+0xfb/0x1f0 [ 95.240648][ C1] ? __pfx_save_stack+0x10/0x10 [ 95.245508][ C1] ? free_unref_folios+0x103a/0x1b00 [ 95.250798][ C1] ? folios_put_refs+0x76e/0x860 [ 95.255740][ C1] ? free_pages_and_swap_cache+0x2ea/0x690 [ 95.261551][ C1] ? tlb_flush_mmu+0x3a3/0x680 [ 95.266319][ C1] ? tlb_finish_mmu+0xd4/0x200 [ 95.271084][ C1] ? exit_mmap+0x44f/0xc80 [ 95.275533][ C1] ? __mmput+0x115/0x390 [ 95.279865][ C1] ? exit_mm+0x220/0x310 [ 95.284124][ C1] ? do_exit+0x9b2/0x27f0 [ 95.288468][ C1] ? do_group_exit+0x207/0x2c0 [ 95.293252][ C1] ? get_signal+0x16a1/0x1740 [ 95.298024][ C1] ? arch_do_signal_or_restart+0x96/0x830 [ 95.303754][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 95.309489][ C1] ? page_ext_get+0x20/0x2a0 [ 95.314087][ C1] __reset_page_owner+0x76/0x430 [ 95.319048][ C1] ? page_ext_get+0x1d6/0x2a0 [ 95.323755][ C1] free_unref_folios+0x103a/0x1b00 [ 95.328879][ C1] folios_put_refs+0x76e/0x860 [ 95.333657][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 95.338945][ C1] ? free_swap_cache+0xb3/0x880 [ 95.343807][ C1] free_pages_and_swap_cache+0x2ea/0x690 [ 95.349477][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 95.355660][ C1] ? tlb_table_flush+0x143/0x410 [ 95.360610][ C1] tlb_flush_mmu+0x3a3/0x680 [ 95.365229][ C1] ? __pfx_down_write+0x10/0x10 [ 95.370088][ C1] tlb_finish_mmu+0xd4/0x200 [ 95.374690][ C1] exit_mmap+0x44f/0xc80 [ 95.378937][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 95.383701][ C1] ? __asan_memset+0x23/0x50 [ 95.388313][ C1] ? uprobe_clear_state+0x277/0x290 [ 95.393602][ C1] ? mm_update_next_owner+0xa4/0x810 [ 95.398886][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 95.404088][ C1] __mmput+0x115/0x390 [ 95.408214][ C1] exit_mm+0x220/0x310 [ 95.412299][ C1] ? __pfx_exit_mm+0x10/0x10 [ 95.416892][ C1] ? taskstats_exit+0x326/0xa60 [ 95.421752][ C1] do_exit+0x9b2/0x27f0 [ 95.425915][ C1] ? __pfx_do_exit+0x10/0x10 [ 95.430526][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 95.435918][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.441916][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.448250][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 95.453370][ C1] do_group_exit+0x207/0x2c0 [ 95.457958][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 95.463168][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 95.468374][ C1] get_signal+0x16a1/0x1740 [ 95.472892][ C1] ? __pfx_get_signal+0x10/0x10 [ 95.477764][ C1] arch_do_signal_or_restart+0x96/0x830 [ 95.483335][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 95.489495][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.495509][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 95.501278][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 95.506870][ C1] do_syscall_64+0x100/0x230 [ 95.511483][ C1] ? clear_bhb_loop+0x35/0x90 [ 95.516177][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.522074][ C1] RIP: 0033:0x7f8055f75f19 [ 95.526513][ C1] Code: Unable to access opcode bytes at 0x7f8055f75eef. [ 95.533546][ C1] RSP: 002b:00007f8056c650f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.541979][ C1] RAX: fffffffffffffe00 RBX: 00007f8056105f68 RCX: 00007f8055f75f19 [ 95.550047][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8056105f68 [ 95.558020][ C1] RBP: 00007f8056105f60 R08: 00007f8056c656c0 R09: 00007f8056c656c0 [ 95.566010][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8056105f6c [ 95.573982][ C1] R13: 000000000000000b R14: 00007ffc480c38a0 R15: 00007ffc480c3988 [ 95.581968][ C1] [ 95.584990][ C1] [ 95.587314][ C1] Allocated by task 5586: [ 95.591643][ C1] kasan_save_track+0x3f/0x80 [ 95.596341][ C1] __kasan_slab_alloc+0x66/0x80 [ 95.601197][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 95.606661][ C1] vm_area_alloc+0x24/0x1d0 [ 95.611173][ C1] mmap_region+0xc3d/0x2090 [ 95.615677][ C1] do_mmap+0x8f9/0x1010 [ 95.619837][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 95.624432][ C1] ksys_mmap_pgoff+0x4f1/0x720 [ 95.629200][ C1] do_syscall_64+0xf3/0x230 [ 95.633718][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.639616][ C1] [ 95.641936][ C1] Freed by task 5586: [ 95.645916][ C1] kasan_save_track+0x3f/0x80 [ 95.650594][ C1] kasan_save_free_info+0x40/0x50 [ 95.655626][ C1] poison_slab_object+0xe0/0x150 [ 95.660568][ C1] __kasan_slab_free+0x37/0x60 [ 95.665332][ C1] kmem_cache_free+0x145/0x350 [ 95.670100][ C1] exit_mmap+0x645/0xc80 [ 95.674349][ C1] __mmput+0x115/0x390 [ 95.678425][ C1] exit_mm+0x220/0x310 [ 95.682491][ C1] do_exit+0x9b2/0x27f0 [ 95.686643][ C1] do_group_exit+0x207/0x2c0 [ 95.691249][ C1] __x64_sys_exit_group+0x3f/0x40 [ 95.696299][ C1] x64_sys_call+0x26c3/0x26d0 [ 95.700997][ C1] do_syscall_64+0xf3/0x230 [ 95.705515][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.711414][ C1] [ 95.713761][ C1] The buggy address belongs to the object at ffff8880228425d0 [ 95.713761][ C1] which belongs to the cache vm_area_struct of size 184 [ 95.728084][ C1] The buggy address is located 128 bytes inside of [ 95.728084][ C1] freed 184-byte region [ffff8880228425d0, ffff888022842688) [ 95.741883][ C1] [ 95.744220][ C1] The buggy address belongs to the physical page: [ 95.750635][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22842 [ 95.759397][ C1] memcg:ffff888012069701 [ 95.763636][ C1] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 95.771178][ C1] page_type: 0xfdffffff(slab) [ 95.775853][ C1] raw: 00fff00000000000 ffff8880166fdb40 0000000000000000 0000000000000001 [ 95.784437][ C1] raw: 0000000000000000 0000000000100010 00000001fdffffff ffff888012069701 [ 95.793012][ C1] page dumped because: kasan: bad access detected [ 95.799433][ C1] page_owner tracks the page as allocated [ 95.805140][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5196, tgid 5196 (dhcpcd-run-hook), ts 59866595128, free_ts 59860152954 [ 95.824671][ C1] post_alloc_hook+0x1f3/0x230 [ 95.829442][ C1] get_page_from_freelist+0x2e4c/0x2f10 [ 95.834989][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 95.840189][ C1] alloc_slab_page+0x5f/0x120 [ 95.844866][ C1] allocate_slab+0x5a/0x2f0 [ 95.849366][ C1] ___slab_alloc+0xcd1/0x14b0 [ 95.854051][ C1] __slab_alloc+0x58/0xa0 [ 95.858384][ C1] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 95.863850][ C1] vm_area_dup+0x27/0x290 [ 95.868195][ C1] copy_mm+0xc7b/0x1f30 [ 95.872353][ C1] copy_process+0x186b/0x3d90 [ 95.877051][ C1] kernel_clone+0x226/0x8f0 [ 95.881561][ C1] __x64_sys_clone+0x258/0x2a0 [ 95.886329][ C1] do_syscall_64+0xf3/0x230 [ 95.890841][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.896745][ C1] page last free pid 5201 tgid 5201 stack trace: [ 95.903066][ C1] free_unref_folios+0x103a/0x1b00 [ 95.908174][ C1] folios_put_refs+0x76e/0x860 [ 95.912937][ C1] free_pages_and_swap_cache+0x2ea/0x690 [ 95.918575][ C1] tlb_flush_mmu+0x3a3/0x680 [ 95.923168][ C1] tlb_finish_mmu+0xd4/0x200 [ 95.927760][ C1] exit_mmap+0x44f/0xc80 [ 95.932011][ C1] __mmput+0x115/0x390 [ 95.936084][ C1] exit_mm+0x220/0x310 [ 95.940151][ C1] do_exit+0x9b2/0x27f0 [ 95.944307][ C1] do_group_exit+0x207/0x2c0 [ 95.948897][ C1] __x64_sys_exit_group+0x3f/0x40 [ 95.953919][ C1] x64_sys_call+0x26c3/0x26d0 [ 95.958600][ C1] do_syscall_64+0xf3/0x230 [ 95.963119][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.969012][ C1] [ 95.971344][ C1] Memory state around the buggy address: [ 95.976984][ C1] ffff888022842500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.985068][ C1] ffff888022842580: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 95.993122][ C1] >ffff888022842600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.001171][ C1] ^ [ 96.007835][ C1] ffff888022842680: fb fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 [ 96.015906][ C1] ffff888022842700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.023968][ C1] ================================================================== [ 96.032204][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.039437][ C1] CPU: 1 UID: 0 PID: 5592 Comm: syz.4.110 Not tainted 6.10.0-next-20240725-syzkaller #0 [ 96.049181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 96.059255][ C1] Call Trace: [ 96.062560][ C1] [ 96.065433][ C1] dump_stack_lvl+0x241/0x360 [ 96.070146][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.075380][ C1] ? __pfx__printk+0x10/0x10 [ 96.080022][ C1] ? vscnprintf+0x5d/0x90 [ 96.084380][ C1] panic+0x349/0x870 [ 96.088308][ C1] ? check_panic_on_warn+0x21/0xb0 [ 96.093449][ C1] ? __pfx_panic+0x10/0x10 [ 96.097900][ C1] ? mark_lock+0x9a/0x360 [ 96.102264][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 96.108188][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 96.114110][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.120469][ C1] ? print_report+0x502/0x550 [ 96.125183][ C1] check_panic_on_warn+0x86/0xb0 [ 96.130149][ C1] ? bq_xmit_all+0x134/0x11d0 [ 96.134858][ C1] end_report+0x77/0x160 [ 96.139128][ C1] kasan_report+0x154/0x180 [ 96.143668][ C1] ? bq_xmit_all+0x134/0x11d0 [ 96.148388][ C1] bq_xmit_all+0x134/0x11d0 [ 96.152918][ C1] ? virtnet_poll+0x2f35/0x3870 [ 96.157813][ C1] ? validate_chain+0x11e/0x5920 [ 96.162777][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 96.167809][ C1] ? validate_chain+0x11e/0x5920 [ 96.172745][ C1] ? __pfx_bq_xmit_all+0x10/0x10 [ 96.177780][ C1] ? mark_lock+0x9a/0x360 [ 96.182120][ C1] __dev_flush+0x81/0x160 [ 96.186464][ C1] xdp_do_check_flushed+0x129/0x240 [ 96.191680][ C1] __napi_poll+0xe4/0x490 [ 96.196024][ C1] net_rx_action+0x89b/0x1240 [ 96.200723][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 96.206115][ C1] ? sched_clock+0x4a/0x70 [ 96.210546][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.216986][ C1] handle_softirqs+0x2c4/0x970 [ 96.221755][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 96.226534][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 96.231838][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 96.237051][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 96.241667][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 96.246901][ C1] irq_exit_rcu+0x9/0x30 [ 96.251158][ C1] common_interrupt+0xaa/0xd0 [ 96.255845][ C1] [ 96.258785][ C1] [ 96.261718][ C1] asm_common_interrupt+0x26/0x40 [ 96.266746][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 96.272825][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d ec 97 95 0c 48 89 de 5b e9 33 d2 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 40 d7 03 00 65 8b 15 10 0c [ 96.292438][ C1] RSP: 0018:ffffc900048f6ec0 EFLAGS: 00000293 [ 96.298510][ C1] RAX: ffffffff90934e1c RBX: ffffffff90934e20 RCX: ffff8880217c0000 [ 96.306490][ C1] RDX: ffff8880217c0000 RSI: ffffffff8bb95ee8 RDI: ffffffff8bb95e2b [ 96.314470][ C1] RBP: ffffffff8bb95e2b R08: ffffffff81410c60 R09: ffffc900048f7090 [ 96.322451][ C1] R10: 0000000000000003 R11: ffffffff817f7030 R12: ffffffff90934e38 [ 96.330426][ C1] R13: ffffffff90934e24 R14: ffffffff8bb95ee8 R15: ffffffff90934e20 [ 96.338403][ C1] ? syscall_exit_to_user_mode+0xc8/0x370 [ 96.344157][ C1] ? syscall_exit_to_user_mode+0xb/0x370 [ 96.349806][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 96.355973][ C1] ? unwind_next_frame+0x510/0x2a00 [ 96.361197][ C1] ? syscall_exit_to_user_mode+0xc8/0x370 [ 96.366920][ C1] ? syscall_exit_to_user_mode+0xb/0x370 [ 96.372564][ C1] unwind_next_frame+0x531/0x2a00 [ 96.377598][ C1] ? syscall_exit_to_user_mode+0xc8/0x370 [ 96.383325][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 96.389052][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 96.394792][ C1] ? __kernel_text_address+0xd/0x40 [ 96.399987][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 96.405714][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 96.411874][ C1] arch_stack_walk+0x151/0x1b0 [ 96.416639][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 96.422364][ C1] stack_trace_save+0x118/0x1d0 [ 96.427223][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 96.432619][ C1] save_stack+0xfb/0x1f0 [ 96.436890][ C1] ? __pfx_save_stack+0x10/0x10 [ 96.441754][ C1] ? free_unref_folios+0x103a/0x1b00 [ 96.447047][ C1] ? folios_put_refs+0x76e/0x860 [ 96.452018][ C1] ? free_pages_and_swap_cache+0x2ea/0x690 [ 96.457853][ C1] ? tlb_flush_mmu+0x3a3/0x680 [ 96.462633][ C1] ? tlb_finish_mmu+0xd4/0x200 [ 96.467406][ C1] ? exit_mmap+0x44f/0xc80 [ 96.471830][ C1] ? __mmput+0x115/0x390 [ 96.476090][ C1] ? exit_mm+0x220/0x310 [ 96.480335][ C1] ? do_exit+0x9b2/0x27f0 [ 96.484670][ C1] ? do_group_exit+0x207/0x2c0 [ 96.489443][ C1] ? get_signal+0x16a1/0x1740 [ 96.494127][ C1] ? arch_do_signal_or_restart+0x96/0x830 [ 96.499859][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 96.505602][ C1] ? page_ext_get+0x20/0x2a0 [ 96.510219][ C1] __reset_page_owner+0x76/0x430 [ 96.515166][ C1] ? page_ext_get+0x1d6/0x2a0 [ 96.519956][ C1] free_unref_folios+0x103a/0x1b00 [ 96.525096][ C1] folios_put_refs+0x76e/0x860 [ 96.529876][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 96.535191][ C1] ? free_swap_cache+0xb3/0x880 [ 96.540151][ C1] free_pages_and_swap_cache+0x2ea/0x690 [ 96.545904][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 96.552107][ C1] ? tlb_table_flush+0x143/0x410 [ 96.557068][ C1] tlb_flush_mmu+0x3a3/0x680 [ 96.561677][ C1] ? __pfx_down_write+0x10/0x10 [ 96.566537][ C1] tlb_finish_mmu+0xd4/0x200 [ 96.571137][ C1] exit_mmap+0x44f/0xc80 [ 96.575394][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 96.580167][ C1] ? __asan_memset+0x23/0x50 [ 96.584782][ C1] ? uprobe_clear_state+0x277/0x290 [ 96.589990][ C1] ? mm_update_next_owner+0xa4/0x810 [ 96.595281][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 96.600495][ C1] __mmput+0x115/0x390 [ 96.604576][ C1] exit_mm+0x220/0x310 [ 96.608653][ C1] ? __pfx_exit_mm+0x10/0x10 [ 96.613256][ C1] ? taskstats_exit+0x326/0xa60 [ 96.618119][ C1] do_exit+0x9b2/0x27f0 [ 96.622280][ C1] ? __pfx_do_exit+0x10/0x10 [ 96.626871][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 96.632254][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.638258][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.644605][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 96.649759][ C1] do_group_exit+0x207/0x2c0 [ 96.654355][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.659566][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 96.664778][ C1] get_signal+0x16a1/0x1740 [ 96.669301][ C1] ? __pfx_get_signal+0x10/0x10 [ 96.674173][ C1] arch_do_signal_or_restart+0x96/0x830 [ 96.679734][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.685902][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.691918][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 96.697659][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 96.703220][ C1] do_syscall_64+0x100/0x230 [ 96.707822][ C1] ? clear_bhb_loop+0x35/0x90 [ 96.712506][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.718407][ C1] RIP: 0033:0x7f8055f75f19 [ 96.722826][ C1] Code: Unable to access opcode bytes at 0x7f8055f75eef. [ 96.729845][ C1] RSP: 002b:00007f8056c650f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.738271][ C1] RAX: fffffffffffffe00 RBX: 00007f8056105f68 RCX: 00007f8055f75f19 [ 96.746246][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8056105f68 [ 96.754237][ C1] RBP: 00007f8056105f60 R08: 00007f8056c656c0 R09: 00007f8056c656c0 [ 96.762226][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8056105f6c [ 96.770210][ C1] R13: 000000000000000b R14: 00007ffc480c38a0 R15: 00007ffc480c3988 [ 96.778287][ C1] [ 96.781640][ C1] Kernel Offset: disabled [ 96.785969][ C1] Rebooting in 86400 seconds..