last executing test programs: 3.626898815s ago: executing program 1 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000480)="905c81f21598c0c1b806513346970cc9eb937a2b8220beb4fab418881e54cdcde42f046e30d3724e1427fa62955f9f2e67ab959e58b555165c3bad6bce2b2c00b8d357a7f6c9fac03e623232c61dcc9f41a6", 0x52}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.617274936s ago: executing program 1 (id=180): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000c45, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x10000, 0x3, 0x101, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.603230407s ago: executing program 2 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x7, 0x3, 0x8, 0x6, 0x2, 0x2, 0x80, 0x8, 0x7, 0x15, 0x1d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.549385922s ago: executing program 4 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.434187612s ago: executing program 2 (id=183): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2.399551226s ago: executing program 1 (id=184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc5}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.292953345s ago: executing program 4 (id=185): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x16, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000a40)=ANY=[], 0x56d) syz_usb_connect(0x0, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002598f110210494008e280102030109024000010000000009046d00000202"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 2.132714839s ago: executing program 1 (id=186): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="8995b3c271bab84f6e841cd28301f2e02519276836", 0x15, 0x4c041, 0x0, 0x0) 2.075955555s ago: executing program 2 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xcd6f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.01757055s ago: executing program 0 (id=189): socket$unix(0x1, 0x1, 0x0) lremovexattr(0x0, &(0x7f0000000100)=@known='system.posix_acl_access\x00') r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0xfffffff1, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 1.726224356s ago: executing program 4 (id=190): syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x14c00, &(0x7f0000000040)=ANY=[], 0x1, 0x6fd, &(0x7f0000001b40)="$eJzs3c1rHOcZAPBnVitppYIjJ/5oSyBLAmmpqC1ZKK16qVtK0SGUND30vNhyLLyWg6QUJZRKbvoH9JBTT+lBN9NDSaFHQ3tuCJRcdQwUcslJN5WZnVntake7K2VlKcnvJ2bmnXk/5p1nvnZ2ERPAN9bybFQPDg62l2df30rn93YXmmO7C5N5djMiJiKiElFtTSJZiyz3dj7Ed9KFefnkuPV8sLr05qdf7H3WmqvmQ1a+0q9eiYneRTv5EPWIGMunvcaPafGjo6vvau9Od3vHNdJH0t7CNGCvFIGLv5y8KRilgx477bwn/83G/aqf5LwFLqikdd/sMRMxHRG1iNZdP786VJ5t70Zv57w7AAAAACc1NahA7+P6c/uxH1tx6ay6BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9H+fv/k3yoFOl6JMX7/yfyZZGnv5I+mWxNn553RwAAAAAAAABgBF7aj/3YikvF/EGS/eb/csdv/N+Kd2IjVmI9bsRWNGIzNmM95iNipqOhia3G5ub6fFYz4kqfmrfi45Kat47v4+3+m/DPX59mwwEAAAAAAADg4qoNyH8w3rvsj7F8+Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcBEnEWGuSDVeK9ExUqhFRi4iJtNxOxMdF+sJ5f7JsaVK28OmZdwYAAABGq9Y9m9SGqPPcduzHVlwq5g+S7Jn/Wva8XIt3Yi02YzU2oxkrcTd/hk6f+it7uwvNvd2Fh+nQ2+7PPj9R17MWo/XdQ/mav52VmIp7sZotuRF3IomDTKXo/HZr+nBvNynp1+O0T8lPc316M9aRvpuOrn+Upf/c/S1C9USbeEqVY3NmstzxdkTmHh/WuFzsmfI9NHDvVPuuaT4q7W9+rvRfU3nMH/df+/SRUqXf3JyLo5G4FZX2HrrWPxIR3/vHk9/eb649uH9vY/bibFKp7YEljkZioSMS179GkRhsLovE1fb8cvwyfhOz8fnkG7Eeq/G7aMRmrNSL/EZ+PKfjmf6R+mS6c+6NQT1Jz8l6+/pV1qd6dPUp6vGLLNWIlyOJmbgUq5HEo4jxlXgt+7sV8+2rweEevjrEWV8Z4krbofb9bNIOU0wdX/ZvwzU5KmlcL3fEteOam50Hl7uWHEbp+dIoFfe64e9HHarfzRNpC+9H6Rfd5+RoJOY7IvHCccdLK6R/PUjHG821B+v3G28Pub5X82lxdJZcSA6+zPacXrqHn49avnGXs3Hau/ToSPNeaPe6O14T+S8uLZWevKvteq0z9VfxKO5G55n6o1iMxVjKSl/LSo/33LHSvOvtlrqv4Wle+kmr2v5hp/Pz1qNotj4PAXCxTf9gemLqf1P/mfpw6k9T96der/188seTL07E+L/Hf1KdG3u18mLy9/gw/nD4/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzexrvvPWg0myvr5YlKeVbSv1ajWbyRr1+ZrkSSvyonXxJ9CidDNdg/Ubw/6cu205Won6rB4m2NgwvXR9fVnkSyk++w9pLaoGOj0cze8rQ91F5OegKeVj51n4v3S51RNEaUqI+uweKA7Vdm4FlZvFmtK2ssIsoKD7hwjI3qCgScl5ubD9++ufHuez9cfdh4a+WtlbXxxcWluaXF1xZu3lttrsy1xh0VnsnLb4Fn4fCm37m0EvHS4Lp9XtQKAAAAAAAAAAAAnKGj/9FxFv8L8eS8NxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4SluejerTSGJ+7sZcOr+3u9BMhyJ9WLIaEZWISH4fkfwr4na0hpjpaC45bj0frC69+ekXe58dtlUtylcido6tN5ydfIh6RIzl01G1d2dwexOHycmS7KQdmTRgrxSBg/P2/wAAAP//YBTwuQ==") r0 = fanotify_init(0x40, 0x80000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRES16, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9", @ANYRESHEX, @ANYRES64], 0x1, 0x1e6, &(0x7f0000001340)="$eJzslc9qU0EUxn9z76RJahZdu7XYbrTtLYhLd/YBfABDeq3FxD+9AZtQMLpx40J8iYJP4ULQvQsRwU1dKOii4qoikZl7ZpzQ2LRKkMJ8EM53vjPf/MudmZvFvaIK/NzfaTGHhaLBe6XQwIIqtYOZMn6TOBR80mW+IvpziR8lFr3+mycl7d9qttv5VtGbQJSCSW1GyGFJH3uwMeT1o1FF8Xf9TJ9003JnD5eejijVcW3Ey39fxTTI9waEyucjXZWxe3gkqTDtVYBXfjQm/03vnpV/59g2qdjrjG7L8Unjj19LnZMd738jyYlcBXJ9FVcfJny1ydv9nZYh1+UWM9p6+XNHwrYxycugzVkNA1ApQ9+PtrclLABL3c7dpaLXv7DZaW7kG/ntLFu9tPzqjBzR4QPYbOfLKphGYojGw3yH9aBu8g+/6wMCqGBqBrOgnNdZ3OW8eC4w1iEJvGEfBjVe+PGroqV0uMZ5asD9gSlnlLs1b3oAbpilraFI0TZZ0cE84YCEmi1cbN1pr1+RorXtokmcbY+KTzJJzED56mW//McS5yWuSdyVuCfRvV3uTdK2hy+SLQ5ghu1mt7tlH6/tWfOMeS2zmmVzfuRERnWvoXIzqRIRERERERERcUrwKwAA//9hY0WI") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x2) r3 = dup(r2) getdents64(r3, 0x0, 0x0) 1.660339971s ago: executing program 4 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.207945782s ago: executing program 3 (id=192): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 915.755639ms ago: executing program 1 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}}, 0x0) 905.815149ms ago: executing program 4 (id=194): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2a00cda2, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fallocate(r2, 0x1, 0x80, 0x650) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001280)="b227", 0x2}], 0x1) close(r0) 859.632983ms ago: executing program 0 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfffa}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x169e}, @TCA_PIE_TARGET={0x8, 0x1, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 826.119476ms ago: executing program 3 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 789.30312ms ago: executing program 4 (id=197): syz_io_uring_submit(0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000000)='./file\x00', 0x220c880, &(0x7f0000000f40)=ANY=[], 0x41, 0x5f16, &(0x7f0000001f80)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0xb) 785.72308ms ago: executing program 2 (id=198): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) ftruncate(r1, 0x800799c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e33, 0xffffffff, @mcast2, 0x5}, 0x1c) sendfile(r2, r1, 0x0, 0xfeff) syz_emit_ethernet(0x32, &(0x7f0000000180)={@random="013b010100", @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x1, 0x24, 0x66, 0x0, 0x7f, 0x21, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x8, 0x0, 0x0, 0xa, 0x4, "409b7e", 0x10, "1af04a"}}}}}}, 0x0) 701.642928ms ago: executing program 0 (id=199): r0 = openat(0xffffffffffffff9c, 0x0, 0x28042, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0xc, 0x1f, 0x4, "753212e605dc9e58"}]}}}}}}}}, 0x0) 621.351275ms ago: executing program 1 (id=200): unshare(0x2c020400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) pipe2(&(0x7f0000000100), 0x84000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) 585.584758ms ago: executing program 0 (id=201): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) close(0xffffffffffffffff) 571.327299ms ago: executing program 2 (id=202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 456.370849ms ago: executing program 3 (id=203): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 358.216368ms ago: executing program 3 (id=204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x44}}, 0x20004080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0x1d}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 299.178463ms ago: executing program 0 (id=205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fda={0x66646185, 0x7, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x34}}}], 0x0, 0x0, 0x0}) 139.661468ms ago: executing program 3 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) r0 = fanotify_init(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x121, 0x1038, r1, 0x0) capset(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 104.321781ms ago: executing program 0 (id=207): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 57.498295ms ago: executing program 2 (id=208): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x20040051) 0s ago: executing program 3 (id=209): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 50.116257][ T4172] cgroup: Unknown subsys name 'net' [ 50.246217][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.450693][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.101273][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.163664][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.203547][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.254360][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.329199][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.336920][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.345508][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.354004][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 53.378556][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.385673][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.393562][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.402047][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.409118][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.417135][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.434956][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.442218][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.449874][ T4186] device bridge_slave_0 entered promiscuous mode [ 53.469967][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.477119][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.485272][ T4185] device bridge_slave_0 entered promiscuous mode [ 53.492700][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.499763][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.508070][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.532116][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.539198][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.546989][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.559990][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.567097][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.575130][ T4185] device bridge_slave_1 entered promiscuous mode [ 53.606357][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.625988][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.639819][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.650580][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.662246][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.673528][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.684990][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.709087][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.754098][ T4184] team0: Port device team_slave_0 added [ 53.770582][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.778340][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.787192][ T4188] device bridge_slave_0 entered promiscuous mode [ 53.796479][ T4187] team0: Port device team_slave_0 added [ 53.804290][ T4187] team0: Port device team_slave_1 added [ 53.812390][ T4185] team0: Port device team_slave_0 added [ 53.819191][ T4184] team0: Port device team_slave_1 added [ 53.828110][ T4186] team0: Port device team_slave_0 added [ 53.834283][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.841552][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.849165][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.869499][ T4185] team0: Port device team_slave_1 added [ 53.882581][ T4186] team0: Port device team_slave_1 added [ 53.898439][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.905536][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.931785][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.959932][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.967032][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.993266][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.009453][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.016720][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.042810][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.064820][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.072190][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.098455][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.109864][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.117106][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.143302][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.156260][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.167240][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.177370][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.184431][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.210476][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.222709][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.229656][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.255682][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.272214][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.279164][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.305677][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.343045][ T4188] team0: Port device team_slave_0 added [ 54.384617][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.391593][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.401851][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.408568][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.415079][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.423276][ T4184] Cannot create hsr debugfs directory [ 54.430181][ T4188] team0: Port device team_slave_1 added [ 54.470079][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.477449][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.503593][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.517962][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.525072][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.531940][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.539484][ T4185] Cannot create hsr debugfs directory [ 54.571998][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.578964][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.605063][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.632310][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.639024][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.645769][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.653374][ T4186] Cannot create hsr debugfs directory [ 54.737908][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.745676][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.752846][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.760507][ T4188] Cannot create hsr debugfs directory [ 54.892345][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 54.898956][ T26] Bluetooth: hci4: command 0x0409 tx timeout [ 54.905703][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 54.912078][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 54.931599][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 54.987841][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.008271][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.017328][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.030274][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.070454][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.079155][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.094729][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.103635][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.150186][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.169867][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.189166][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.211500][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.286330][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.319190][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.327917][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.340088][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.365365][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.392501][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.408466][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.420313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.429725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.438040][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.447557][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.465515][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.474589][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.488614][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.497567][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.507844][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.515140][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.526302][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.553166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.561986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.572248][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.580824][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.590414][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.599175][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.606244][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.616551][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.636545][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.645617][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.655141][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.665178][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.674254][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.696197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.705983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.714591][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.721685][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.729969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.757593][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.766201][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.775438][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.784967][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.793416][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.800438][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.808208][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.818492][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.830091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.849341][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.860573][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.871571][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.896845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.905312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.913499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.923413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.932098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.945789][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.962866][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.977538][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.986512][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.996274][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.004963][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.014110][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.023231][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.032101][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.039153][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.047570][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.056678][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.068662][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.075791][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.085952][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.094930][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.103762][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.112532][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.120731][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.129102][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.137395][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.146639][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.163342][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.175362][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.209110][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.219619][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.231925][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.239018][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.247013][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.255914][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.265074][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.274858][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.281947][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.290535][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.299496][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.308476][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.317715][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.332352][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.365579][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.376467][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.389189][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.401332][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.409218][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.422957][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.432817][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.442301][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.451392][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.459872][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.470263][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.479492][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.488260][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.497088][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.505711][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.514742][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.523474][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.530519][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.538536][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.547588][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.555967][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.564847][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.573490][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.580527][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.588369][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.596469][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.612047][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.622682][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.638696][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.655808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.665959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.679046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.740553][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.751376][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.760752][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.771767][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.780619][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.790466][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.805160][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.813222][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.820827][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.829016][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.841590][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.849547][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.860373][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.873600][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.886913][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.924649][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.952102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.960613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.971435][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 56.984762][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 57.004006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.013224][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 57.013477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.019329][ T4259] Bluetooth: hci4: command 0x041b tx timeout [ 57.029784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.039196][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 57.049166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.075461][ T4185] device veth0_vlan entered promiscuous mode [ 57.101368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.110377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.120738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.136810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.146683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.155495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.164737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.173072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.180755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.188613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.197982][ T4184] device veth0_vlan entered promiscuous mode [ 57.215000][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.235662][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.248894][ T4184] device veth1_vlan entered promiscuous mode [ 57.262078][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.274307][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.291192][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.303007][ T4185] device veth1_vlan entered promiscuous mode [ 57.363382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.379837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.392334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.400550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.411294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.420017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.427880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.458577][ T4184] device veth0_macvtap entered promiscuous mode [ 57.466694][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.481047][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.489844][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.503911][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.516249][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.528293][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.540583][ T4185] device veth0_macvtap entered promiscuous mode [ 57.553854][ T4184] device veth1_macvtap entered promiscuous mode [ 57.571606][ T4186] device veth0_vlan entered promiscuous mode [ 57.579802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.588539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.596903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.606847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.641695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.649473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.657727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.667227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.677210][ T4185] device veth1_macvtap entered promiscuous mode [ 57.686118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.694554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.703201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.719715][ T4186] device veth1_vlan entered promiscuous mode [ 57.728585][ T4187] device veth0_vlan entered promiscuous mode [ 57.742210][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.749773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.758824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.766905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.775646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.787049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.810309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.819279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.844137][ T4187] device veth1_vlan entered promiscuous mode [ 57.853239][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.861339][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.873608][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.885261][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.903011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.911718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.919709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.929954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.939326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.949246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.958265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.967152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.976045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.984208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.998703][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.009869][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.023156][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.033258][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.042506][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.052274][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.061321][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.072618][ T4188] device veth0_vlan entered promiscuous mode [ 58.079524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.088173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.098077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.107003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.116964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.128356][ T4186] device veth0_macvtap entered promiscuous mode [ 58.137876][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.147027][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.156136][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.165388][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.196039][ T4186] device veth1_macvtap entered promiscuous mode [ 58.208842][ T4188] device veth1_vlan entered promiscuous mode [ 58.239357][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.250601][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.262426][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.272968][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.283988][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.298686][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.309592][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.320097][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.330767][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.342962][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.367660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.378462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.387655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.396080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.404711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.414737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.425020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.434268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.450149][ T4187] device veth0_macvtap entered promiscuous mode [ 58.462077][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.470803][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.479619][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.490439][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.528708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.537961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.547063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.558302][ T4187] device veth1_macvtap entered promiscuous mode [ 58.606503][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.617969][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.632287][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.643241][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.654590][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.665374][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.675457][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.686129][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.698452][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.719701][ T4188] device veth0_macvtap entered promiscuous mode [ 58.720030][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.732990][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.735840][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.745380][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.758425][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.767188][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.776335][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.784994][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.793631][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.801657][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.824892][ T4188] device veth1_macvtap entered promiscuous mode [ 58.841877][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.852826][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.863448][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.874087][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.884055][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.894777][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.906188][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.938335][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.949483][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.960020][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.970651][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.982145][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.992862][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.003407][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.014211][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.025650][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.036069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.044566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.051878][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 59.054018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.059025][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 59.072707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.073185][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 59.082161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.087637][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 59.101560][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 59.102097][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.117509][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.126342][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.136235][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.156935][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.158236][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.176463][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.181323][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.187372][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.204711][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.216658][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.227399][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.237242][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.248065][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.259920][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.270828][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.278791][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.294834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.303705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.312941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.322494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.332166][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.340869][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.349942][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.359663][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.372905][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.380733][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.440164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.474692][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.488962][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.558009][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.645472][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.681346][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.709940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.722491][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.736421][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.750252][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.759875][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.784796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.796299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.808801][ T4306] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 59.850981][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.864817][ T4308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 59.884624][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.922479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.322622][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 60.617438][ T4322] block device autoloading is deprecated and will be removed. [ 60.661998][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9'. [ 60.876398][ T4331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.927068][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 61.131537][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 61.139038][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 61.159276][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 61.177431][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 61.191992][ T4342] loop5: detected capacity change from 0 to 7 [ 61.200279][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 61.229852][ T4342] Dev loop5: unable to read RDB block 7 [ 61.268224][ T4342] loop5: unable to read partition table [ 61.294151][ T4342] loop5: partition table beyond EOD, truncated [ 61.307326][ T4342] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 61.326266][ T4344] binder: 4343:4344 ioctl c0306201 200000000180 returned -14 [ 61.529359][ T4350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.101882][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.182291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.251323][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.331304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.810533][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079377800: rx timeout, send abort [ 62.820843][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079377800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 64.245608][ T4411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 64.373930][ T4418] loop2: detected capacity change from 0 to 8 [ 64.394928][ T4412] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3270001075 (26160008600 ns) > initial count (18152699576 ns). Using initial count to start timer. [ 64.422492][ T4418] squashfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 64.444768][ T4423] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.533467][ T4420] loop3: detected capacity change from 0 to 164 [ 64.650052][ T4420] rock: directory entry would overflow storage [ 64.675896][ T4420] rock: sig=0x5053, size=7, remaining=4 [ 64.693788][ T4420] isofs_fill_super: root inode is not a directory. Corrupted media? [ 65.164792][ T4434] loop4: detected capacity change from 0 to 1024 [ 65.266036][ T4434] hfsplus: invalid length 32517 has been corrected to 255 [ 65.414225][ T4432] loop0: detected capacity change from 0 to 32768 [ 65.611498][ T4298] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.851743][ T4298] usb 3-1: Using ep0 maxpacket: 8 [ 65.971398][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.997540][ T4298] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.027816][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.072390][ T4298] usb 3-1: config 0 descriptor?? [ 66.157570][ T4442] loop4: detected capacity change from 0 to 2048 [ 66.323532][ T4445] input: syz1 as /devices/virtual/input/input5 [ 66.346204][ T4298] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 66.375148][ T4442] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.503935][ T4442] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.48: corrupted inode contents [ 66.593170][ T4442] EXT4-fs error (device loop4): ext4_try_add_inline_entry:1371: inode #12: comm syz.4.48: mark_inode_dirty error [ 66.655283][ T4442] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.48: corrupted inode contents [ 66.716848][ T4442] EXT4-fs error (device loop4): ext4_mkdir:3097: inode #12: comm syz.4.48: mark_inode_dirty error [ 66.791177][ T4442] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #12: comm syz.4.48: corrupted inode contents [ 67.143906][ T4457] netlink: 72 bytes leftover after parsing attributes in process `syz.0.52'. [ 67.210240][ T4236] usb 3-1: USB disconnect, device number 2 [ 67.268420][ T4461] loop3: detected capacity change from 0 to 2048 [ 67.391086][ T4467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.468563][ T25] audit: type=1800 audit(1771361284.045:2): pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.53" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 67.837824][ T4459] loop4: detected capacity change from 0 to 32768 [ 67.871185][ T4299] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 67.919624][ T4459] XFS (loop4): Mounting V5 Filesystem [ 67.959358][ T25] audit: type=1800 audit(1771361284.535:3): pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.53" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 68.052997][ T4459] XFS (loop4): Ending clean mount [ 68.156222][ T4299] usb 3-1: Using ep0 maxpacket: 32 [ 68.169998][ T4454] loop1: detected capacity change from 0 to 32768 [ 68.311326][ T4299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.335645][ T4299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.355537][ T4299] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.367785][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.399751][ T4187] XFS (loop4): Unmounting Filesystem [ 68.409540][ T4299] usb 3-1: config 0 descriptor?? [ 68.463108][ T4299] hub 3-1:0.0: USB hub found [ 68.619643][ T4486] loop0: detected capacity change from 0 to 512 [ 68.681955][ T4299] hub 3-1:0.0: 1 port detected [ 68.799833][ T4486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.806673][ T4491] loop4: detected capacity change from 0 to 2048 [ 68.842289][ T4486] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.881165][ T4492] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.363144][ T4299] hub 3-1:0.0: activate --> -90 [ 69.742334][ T4513] overlayfs: failed to clone upperpath [ 69.764250][ T4495] loop3: detected capacity change from 0 to 32768 [ 69.782658][ T4194] usb 3-1: USB disconnect, device number 3 [ 69.826028][ T4495] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.61 (4495) [ 70.030525][ T4495] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 70.058512][ T4495] BTRFS info (device loop3): setting nodatacow, compression disabled [ 70.081070][ T4495] BTRFS info (device loop3): turning on flush-on-commit [ 70.088066][ T4495] BTRFS info (device loop3): using free space tree [ 70.111010][ T4495] BTRFS info (device loop3): has skinny extents [ 70.141265][ T4299] usb 3-1-port1: config error [ 70.333139][ T4539] overlayfs: failed to clone upperpath [ 70.341063][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.370712][ T4495] BTRFS info (device loop3): enabling ssd optimizations [ 70.375589][ T4544] device syzkaller0 entered promiscuous mode [ 70.591097][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 70.613771][ T4553] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 70.706238][ T4553] ftl_cs: FTL header not found. [ 70.711965][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.749266][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.787669][ T1111] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 70.830680][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.867680][ T1111] usb 1-1: config 0 descriptor?? [ 71.304312][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.310856][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.430604][ T1111] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 71.673692][ T4577] loop1: detected capacity change from 0 to 32768 [ 71.717516][ T4577] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.87 (4577) [ 71.790398][ T4596] loop0: detected capacity change from 0 to 512 [ 71.841167][ T4577] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 71.849923][ T4577] BTRFS info (device loop1): using free space tree [ 71.860313][ T4577] BTRFS info (device loop1): has skinny extents [ 71.866777][ T4596] ======================================================= [ 71.866777][ T4596] WARNING: The mand mount option has been deprecated and [ 71.866777][ T4596] and is ignored by this kernel. Remove the mand [ 71.866777][ T4596] option from the mount to silence this warning. [ 71.866777][ T4596] ======================================================= [ 71.870192][ T4596] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 72.061140][ T4596] EXT4-fs (loop0): 1 orphan inode deleted [ 72.084689][ T4596] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,sysvgroups,delalloc,quota,. Quota mode: writeback. [ 72.111217][ T4596] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.265071][ T4577] BTRFS info (device loop1): enabling ssd optimizations [ 72.841407][ T4520] usb 1-1: string descriptor 0 read error: -2 [ 72.960693][ T4630] loop1: detected capacity change from 0 to 512 [ 73.042426][ T4630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.084622][ T4630] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 73.190270][ T4636] option changes via remount are deprecated (pid=4634 comm=syz.2.94) [ 73.196281][ T4637] loop3: detected capacity change from 0 to 1024 [ 73.593573][ T4641] loop2: detected capacity change from 0 to 32768 [ 73.611701][ T4650] loop0: detected capacity change from 0 to 512 [ 73.661377][ T4648] loop1: detected capacity change from 0 to 4096 [ 73.690206][ T4650] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.708515][ T4194] usb 1-1: USB disconnect, device number 2 [ 73.717214][ T4650] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.859107][ T4641] JBD2: Ignoring recovery information on journal [ 73.881615][ T4657] EXT4-fs error (device loop0): __ext4_new_inode:1286: comm syz.0.98: failed to insert inode 16: doubly allocated? [ 74.243416][ T4656] loop3: detected capacity change from 0 to 1024 [ 74.316339][ T4641] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 74.343887][ T4656] EXT4-fs (loop3): Ignoring removed bh option [ 74.350304][ T4656] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.464284][ T4665] loop0: detected capacity change from 0 to 128 [ 74.507814][ T4656] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 74.520002][ T4184] ocfs2: Unmounting device (7,2) on (node local) [ 74.561667][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,nolazytime,,errors=continue. Quota mode: none. [ 74.635031][ T4665] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.876393][ T4665] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.102: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 74.907957][ T4665] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem [ 74.943170][ T4672] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 18: comm syz.0.102: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 75.187135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.201345][ T4264] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.253036][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.392172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.441205][ T4264] usb 2-1: Using ep0 maxpacket: 32 [ 75.561956][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.570375][ T4690] netlink: 'syz.0.109': attribute type 4 has an invalid length. [ 75.574884][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.591712][ T4264] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 75.591801][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.616276][ T4264] usb 2-1: config 0 descriptor?? [ 75.693986][ T4694] netlink: 'syz.0.109': attribute type 4 has an invalid length. [ 75.747675][ T4696] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 75.872767][ T4705] loop0: detected capacity change from 0 to 1024 [ 75.918157][ T4698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 75.979642][ T4705] hfsplus: request for non-existent node 16777216 in B*Tree [ 76.001252][ T4705] hfsplus: request for non-existent node 16777216 in B*Tree [ 76.023376][ T4707] fuse: Bad value for 'fd' [ 76.029858][ T4705] hfsplus: request for non-existent node 16777216 in B*Tree [ 76.049772][ T4705] hfsplus: request for non-existent node 16777216 in B*Tree [ 76.079745][ T4710] loop3: detected capacity change from 0 to 512 [ 76.089863][ T4264] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 76.101074][ T1111] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 76.110723][ T4709] hfsplus: request for non-existent node 16777216 in B*Tree [ 76.119538][ T4264] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 76.131683][ T4709] hfsplus: request for non-existent node 16777216 in B*Tree [ 76.141946][ T4264] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 76.243063][ T144] hfsplus: request for non-existent node 16777216 in B*Tree [ 76.250525][ T144] hfsplus: request for non-existent node 16777216 in B*Tree [ 76.291361][ T4264] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 76.342123][ T4715] netlink: 'syz.4.117': attribute type 21 has an invalid length. [ 76.350006][ T4715] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.359563][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 76.372861][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 76.436215][ T1325] cfg80211: failed to load regulatory.db [ 76.522130][ T1111] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 76.586936][ T1111] usb 3-1: config 0 has no interface number 0 [ 76.650352][ T1111] usb 3-1: config 0 interface 89 has no altsetting 0 [ 76.751506][ T4264] ft260 0003:0403:6030.0002: failed to retrieve status: -32 [ 76.881375][ T1111] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 76.881403][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.881422][ T1111] usb 3-1: Product: syz [ 76.881435][ T1111] usb 3-1: Manufacturer: syz [ 76.881448][ T1111] usb 3-1: SerialNumber: syz [ 76.883715][ T1111] usb 3-1: config 0 descriptor?? [ 76.946073][ T1111] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 76.946131][ T1111] em28xx 3-1:0.89: Video interface 89 found: bulk [ 77.031363][ T4720] tipc: Failed to remove unknown binding: 66,1,1/0:3239026828/3239026830 [ 77.070106][ T4722] fuse: Bad value for 'fd' [ 77.129968][ T4722] process 'syz.4.119' launched './file0' with NULL argv: empty string added [ 77.183080][ T4676] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0000, size 0, write) [ 77.184043][ T1325] usb 2-1: USB disconnect, device number 2 [ 77.293653][ T4730] device syzkaller0 entered promiscuous mode [ 77.306342][ T4730] tipc: Started in network mode [ 77.306375][ T4730] tipc: Node identity dae7c3a5229f, cluster identity 4711 [ 77.308181][ T4730] tipc: Enabled bearer , priority 0 [ 77.344508][ T4729] tipc: Resetting bearer [ 77.385793][ T4729] tipc: Disabling bearer [ 77.539088][ T4734] loop3: detected capacity change from 0 to 512 [ 77.651171][ T1111] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 77.729204][ T4740] input: syz1 as /devices/virtual/input/input6 [ 77.849607][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.156549][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 78.156979][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.791314][ T1111] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 78.846612][ T1111] em28xx 3-1:0.89: board has no eeprom [ 79.011195][ T1111] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 79.638503][ T1111] em28xx 3-1:0.89: analog set to bulk mode. [ 79.649361][ T1111] usb 3-1: USB disconnect, device number 4 [ 79.697766][ T1111] em28xx 3-1:0.89: Disconnecting em28xx [ 79.736953][ T4236] em28xx 3-1:0.89: Registering V4L2 extension [ 79.906160][ T4236] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 79.931451][ T4236] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 80.006532][ T4236] em28xx 3-1:0.89: No AC97 audio processor [ 80.021944][ T4236] usb 3-1: Decoder not found [ 80.026884][ T4236] em28xx 3-1:0.89: failed to create media graph [ 80.033350][ T4236] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 80.045681][ T4236] em28xx 3-1:0.89: Registering snapshot button... [ 80.056526][ T4236] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input7 [ 80.147882][ T4236] em28xx 3-1:0.89: Remote control support is not available for this card. [ 80.177587][ T4776] binder: 4775:4776 unknown command 0 [ 80.183545][ T4776] binder: 4775:4776 ioctl c0306201 200000000080 returned -22 [ 80.232097][ T1111] em28xx 3-1:0.89: Closing input extension [ 80.240437][ T1111] em28xx 3-1:0.89: Deregistering snapshot button [ 80.333748][ T4781] device syzkaller0 entered promiscuous mode [ 80.427338][ T1111] em28xx 3-1:0.89: Freeing device [ 80.442308][ T4788] fuse: Bad value for 'fd' [ 80.497021][ T4787] Zero length message leads to an empty skb [ 81.944582][ T4817] loop3: detected capacity change from 0 to 1024 [ 82.097331][ T4817] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.314434][ T4830] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.208796][ T4851] rtc_cmos 00:00: Alarms can be up to one day in the future [ 83.711164][ T4264] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 83.758086][ T4858] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.887107][ T4863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 84.087899][ T4870] binder: 4868:4870 ioctl c018620c 0 returned -14 [ 84.116579][ T4869] loop0: detected capacity change from 0 to 16 [ 84.178530][ T4869] erofs: (device loop0): mounted with root inode @ nid 36. [ 84.201355][ T4264] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.261417][ T4264] usb 4-1: not running at top speed; connect to a high speed hub [ 84.349231][ T4882] kvm: pic: non byte write [ 84.354018][ T4264] usb 4-1: config 6 has an invalid interface number: 3 but max is 2 [ 84.371045][ T4264] usb 4-1: config 6 has an invalid interface number: 255 but max is 2 [ 84.401380][ T4264] usb 4-1: config 6 has an invalid descriptor of length 255, skipping remainder of the config [ 84.446101][ T4264] usb 4-1: config 6 has no interface number 0 [ 84.463764][ T4264] usb 4-1: config 6 has no interface number 1 [ 84.469909][ T4264] usb 4-1: too many endpoints for config 6 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 84.504210][ T4264] usb 4-1: config 6 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 84.528733][ T4264] usb 4-1: config 6 interface 2 has no altsetting 0 [ 84.538866][ T4264] usb 4-1: config 6 interface 255 has no altsetting 0 [ 84.743857][ T4264] usb 4-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b [ 84.763355][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.777529][ T4264] usb 4-1: Product: syz [ 84.782212][ T4264] usb 4-1: Manufacturer: syz [ 84.787191][ T4264] usb 4-1: SerialNumber: syz [ 85.172048][ T4264] usb 4-1: selecting invalid altsetting 0 [ 85.191060][ T4264] usb 4-1: Could not set interface, error -22 [ 85.285347][ T4264] usb 4-1: USB disconnect, device number 2 [ 85.485787][ T4919] device syzkaller0 entered promiscuous mode [ 86.033830][ T4924] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.042630][ T4924] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.406656][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.429642][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.732923][ T4924] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.742382][ T4924] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.751717][ T4924] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.761021][ T4924] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.874802][ T4957] device geneve2 entered promiscuous mode [ 87.558898][ T4988] binder: BINDER_SET_CONTEXT_MGR already set [ 87.588731][ T4988] binder: 4987:4988 ioctl 4018620d 200000004a80 returned -16 [ 87.833989][ T4997] [ 87.838632][ T4997] ============================= [ 87.849262][ T4997] WARNING: suspicious RCU usage [ 87.859275][ T4997] syzkaller #0 Not tainted [ 87.871909][ T4997] ----------------------------- [ 87.887490][ T4997] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 87.911108][ T4997] [ 87.911108][ T4997] other info that might help us debug this: [ 87.911108][ T4997] [ 87.951066][ T4997] [ 87.951066][ T4997] rcu_scheduler_active = 2, debug_locks = 1 [ 87.989633][ T4997] 1 lock held by syz.3.209/4997: [ 88.004139][ T4997] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 88.020190][ T4997] [ 88.020190][ T4997] stack backtrace: [ 88.030484][ T4997] CPU: 1 PID: 4997 Comm: syz.3.209 Not tainted syzkaller #0 [ 88.037801][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.047876][ T4997] Call Trace: [ 88.051176][ T4997] [ 88.054122][ T4997] dump_stack_lvl+0x188/0x250 [ 88.058814][ T4997] ? load_image+0x400/0x400 [ 88.063329][ T4997] ? show_regs_print_info+0x20/0x20 [ 88.068552][ T4997] ? lockdep_rcu_suspicious+0x110/0x180 [ 88.074117][ T4997] ? local_bh_enable+0x20/0x20 [ 88.078981][ T4997] rhltable_lookup+0x7a9/0x7c0 [ 88.083848][ T4997] ? local_bh_enable+0x20/0x20 [ 88.088627][ T4997] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 88.094638][ T4997] ? release_firmware_map_entry+0x190/0x190 [ 88.100557][ T4997] ? lock_chain_count+0x20/0x20 [ 88.105428][ T4997] ? mr_mfc_find_parent+0x190/0x190 [ 88.110651][ T4997] ? local_bh_enable+0x20/0x20 [ 88.115436][ T4997] ? preempt_schedule+0xbc/0xd0 [ 88.120301][ T4997] ? ipmr_mfc_add+0x212d/0x2d40 [ 88.125165][ T4997] ? preempt_schedule+0xbc/0xd0 [ 88.130040][ T4997] ? schedule_preempt_disabled+0x20/0x20 [ 88.135696][ T4997] ? lock_chain_count+0x20/0x20 [ 88.140568][ T4997] mr_mfc_find_any_parent+0xb6/0x1e0 [ 88.145876][ T4997] ? local_bh_enable+0x20/0x20 [ 88.150665][ T4997] ip_mr_forward+0x24c/0xf90 [ 88.155301][ T4997] ipmr_mfc_add+0x23cc/0x2d40 [ 88.160013][ T4997] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 88.164974][ T4997] ? __lock_acquire+0x7d10/0x7d10 [ 88.170176][ T4997] ip_mroute_setsockopt+0xeaf/0x1250 [ 88.175502][ T4997] ? ipmr_rule_default+0x70/0x70 [ 88.180483][ T4997] ? __might_sleep+0xf0/0xf0 [ 88.185073][ T4997] ip_setsockopt+0x568/0x3130 [ 88.189857][ T4997] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 88.195235][ T4997] ? aa_sk_perm+0x7dc/0x910 [ 88.199768][ T4997] ? aa_af_perm+0x340/0x340 [ 88.204287][ T4997] ? __fget_files+0x40f/0x480 [ 88.208993][ T4997] ? aa_sock_opt_perm+0x74/0x100 [ 88.213961][ T4997] ? sock_common_setsockopt+0x32/0xb0 [ 88.219355][ T4997] ? raw_setsockopt+0xc5/0x180 [ 88.224139][ T4997] ? sock_common_recvmsg+0x1c0/0x1c0 [ 88.229449][ T4997] __sys_setsockopt+0x2bf/0x3d0 [ 88.234332][ T4997] __x64_sys_setsockopt+0xb1/0xc0 [ 88.239381][ T4997] do_syscall_64+0x4c/0xa0 [ 88.243811][ T4997] ? clear_bhb_loop+0x30/0x80 [ 88.248503][ T4997] ? clear_bhb_loop+0x30/0x80 [ 88.253197][ T4997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.259208][ T4997] RIP: 0033:0x7f0c7cd9b629 [ 88.263644][ T4997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.283349][ T4997] RSP: 002b:00007f0c7aff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.291784][ T4997] RAX: ffffffffffffffda RBX: 00007f0c7d014fa0 RCX: 00007f0c7cd9b629 [ 88.299770][ T4997] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 88.307797][ T4997] RBP: 00007f0c7ce31b39 R08: 000000000000003c R09: 0000000000000000 [ 88.315789][ T4997] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 88.323761][ T4997] R13: 00007f0c7d015038 R14: 00007f0c7d014fa0 R15: 00007ffd5da40488 [ 88.332104][ T4997] [ 88.361120][ T4997] [ 88.363491][ T4997] ============================= [ 88.368344][ T4997] WARNING: suspicious RCU usage [ 88.382841][ T4997] syzkaller #0 Not tainted [ 88.387295][ T4997] ----------------------------- [ 88.400907][ T4997] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 88.410712][ T4997] [ 88.410712][ T4997] other info that might help us debug this: [ 88.410712][ T4997] [ 88.426328][ T4997] [ 88.426328][ T4997] rcu_scheduler_active = 2, debug_locks = 1 [ 88.435875][ T4997] 1 lock held by syz.3.209/4997: [ 88.440840][ T4997] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 88.455867][ T4997] [ 88.455867][ T4997] stack backtrace: [ 88.461895][ T4997] CPU: 0 PID: 4997 Comm: syz.3.209 Not tainted syzkaller #0 [ 88.469194][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.479271][ T4997] Call Trace: [ 88.482560][ T4997] [ 88.485505][ T4997] dump_stack_lvl+0x188/0x250 [ 88.490280][ T4997] ? load_image+0x400/0x400 [ 88.494951][ T4997] ? show_regs_print_info+0x20/0x20 [ 88.500147][ T4997] ? lockdep_rcu_suspicious+0x110/0x180 [ 88.505684][ T4997] ? local_bh_enable+0x20/0x20 [ 88.510572][ T4997] rhltable_lookup+0x52a/0x7c0 [ 88.515338][ T4997] ? local_bh_enable+0x20/0x20 [ 88.520461][ T4997] ? mr_mfc_find_parent+0x190/0x190 [ 88.525648][ T4997] ? local_bh_enable+0x20/0x20 [ 88.530397][ T4997] ? preempt_schedule+0xbc/0xd0 [ 88.535252][ T4997] ? ipmr_mfc_add+0x212d/0x2d40 [ 88.540093][ T4997] ? preempt_schedule+0xbc/0xd0 [ 88.544935][ T4997] ? schedule_preempt_disabled+0x20/0x20 [ 88.550579][ T4997] ? lock_chain_count+0x20/0x20 [ 88.555435][ T4997] mr_mfc_find_any_parent+0xb6/0x1e0 [ 88.560717][ T4997] ? local_bh_enable+0x20/0x20 [ 88.565491][ T4997] ip_mr_forward+0x24c/0xf90 [ 88.570077][ T4997] ipmr_mfc_add+0x23cc/0x2d40 [ 88.574752][ T4997] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 88.579680][ T4997] ? __lock_acquire+0x7d10/0x7d10 [ 88.584750][ T4997] ip_mroute_setsockopt+0xeaf/0x1250 [ 88.590036][ T4997] ? ipmr_rule_default+0x70/0x70 [ 88.594988][ T4997] ? __might_sleep+0xf0/0xf0 [ 88.599564][ T4997] ip_setsockopt+0x568/0x3130 [ 88.604233][ T4997] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 88.609601][ T4997] ? aa_sk_perm+0x7dc/0x910 [ 88.614087][ T4997] ? aa_af_perm+0x340/0x340 [ 88.618583][ T4997] ? __fget_files+0x40f/0x480 [ 88.623269][ T4997] ? aa_sock_opt_perm+0x74/0x100 [ 88.628202][ T4997] ? sock_common_setsockopt+0x32/0xb0 [ 88.633559][ T4997] ? raw_setsockopt+0xc5/0x180 [ 88.638303][ T4997] ? sock_common_recvmsg+0x1c0/0x1c0 [ 88.643575][ T4997] __sys_setsockopt+0x2bf/0x3d0 [ 88.648415][ T4997] __x64_sys_setsockopt+0xb1/0xc0 [ 88.653437][ T4997] do_syscall_64+0x4c/0xa0 [ 88.657867][ T4997] ? clear_bhb_loop+0x30/0x80 [ 88.662556][ T4997] ? clear_bhb_loop+0x30/0x80 [ 88.667249][ T4997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.673157][ T4997] RIP: 0033:0x7f0c7cd9b629 [ 88.677594][ T4997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.697210][ T4997] RSP: 002b:00007f0c7aff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.705614][ T4997] RAX: ffffffffffffffda RBX: 00007f0c7d014fa0 RCX: 00007f0c7cd9b629 [ 88.713582][ T4997] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 88.721546][ T4997] RBP: 00007f0c7ce31b39 R08: 000000000000003c R09: 0000000000000000 [ 88.729524][ T4997] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 88.737485][ T4997] R13: 00007f0c7d015038 R14: 00007f0c7d014fa0 R15: 00007ffd5da40488 [ 88.745450][ T4997] [ 88.752340][ T4997] [ 88.754781][ T4997] ============================= [ 88.759943][ T4997] WARNING: suspicious RCU usage [ 88.764925][ T4997] syzkaller #0 Not tainted [ 88.769345][ T4997] ----------------------------- [ 88.774467][ T4997] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 88.783121][ T4997] [ 88.783121][ T4997] other info that might help us debug this: [ 88.783121][ T4997] [ 88.793472][ T4997] [ 88.793472][ T4997] rcu_scheduler_active = 2, debug_locks = 1 [ 88.805673][ T4997] 1 lock held by syz.3.209/4997: [ 88.811485][ T4997] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 88.821374][ T4997] [ 88.821374][ T4997] stack backtrace: [ 88.827317][ T4997] CPU: 0 PID: 4997 Comm: syz.3.209 Not tainted syzkaller #0 [ 88.834600][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.844731][ T4997] Call Trace: [ 88.848001][ T4997] [ 88.851003][ T4997] dump_stack_lvl+0x188/0x250 [ 88.855669][ T4997] ? load_image+0x400/0x400 [ 88.860170][ T4997] ? show_regs_print_info+0x20/0x20 [ 88.865360][ T4997] ? lockdep_rcu_suspicious+0x110/0x180 [ 88.870891][ T4997] ? local_bh_enable+0x20/0x20 [ 88.875639][ T4997] rhltable_lookup+0x61e/0x7c0 [ 88.880409][ T4997] ? local_bh_enable+0x20/0x20 [ 88.885161][ T4997] ? mr_mfc_find_parent+0x190/0x190 [ 88.890346][ T4997] ? local_bh_enable+0x20/0x20 [ 88.895098][ T4997] ? preempt_schedule+0xbc/0xd0 [ 88.899929][ T4997] ? ipmr_mfc_add+0x212d/0x2d40 [ 88.904774][ T4997] ? preempt_schedule+0xbc/0xd0 [ 88.909607][ T4997] ? schedule_preempt_disabled+0x20/0x20 [ 88.915233][ T4997] ? lock_chain_count+0x20/0x20 [ 88.920073][ T4997] mr_mfc_find_any_parent+0xb6/0x1e0 [ 88.925354][ T4997] ? local_bh_enable+0x20/0x20 [ 88.930106][ T4997] ip_mr_forward+0x24c/0xf90 [ 88.934808][ T4997] ipmr_mfc_add+0x23cc/0x2d40 [ 88.939496][ T4997] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 88.944436][ T4997] ? __lock_acquire+0x7d10/0x7d10 [ 88.949478][ T4997] ip_mroute_setsockopt+0xeaf/0x1250 [ 88.954760][ T4997] ? ipmr_rule_default+0x70/0x70 [ 88.959694][ T4997] ? __might_sleep+0xf0/0xf0 [ 88.964265][ T4997] ip_setsockopt+0x568/0x3130 [ 88.968933][ T4997] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 88.974284][ T4997] ? aa_sk_perm+0x7dc/0x910 [ 88.978771][ T4997] ? aa_af_perm+0x340/0x340 [ 88.983252][ T4997] ? __fget_files+0x40f/0x480 [ 88.987912][ T4997] ? aa_sock_opt_perm+0x74/0x100 [ 88.992833][ T4997] ? sock_common_setsockopt+0x32/0xb0 [ 88.998200][ T4997] ? raw_setsockopt+0xc5/0x180 [ 89.002952][ T4997] ? sock_common_recvmsg+0x1c0/0x1c0 [ 89.008220][ T4997] __sys_setsockopt+0x2bf/0x3d0 [ 89.013055][ T4997] __x64_sys_setsockopt+0xb1/0xc0 [ 89.018062][ T4997] do_syscall_64+0x4c/0xa0 [ 89.022461][ T4997] ? clear_bhb_loop+0x30/0x80 [ 89.027173][ T4997] ? clear_bhb_loop+0x30/0x80 [ 89.031841][ T4997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.037816][ T4997] RIP: 0033:0x7f0c7cd9b629 [ 89.042221][ T4997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.061811][ T4997] RSP: 002b:00007f0c7aff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.070216][ T4997] RAX: ffffffffffffffda RBX: 00007f0c7d014fa0 RCX: 00007f0c7cd9b629 [ 89.078256][ T4997] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 89.086295][ T4997] RBP: 00007f0c7ce31b39 R08: 000000000000003c R09: 0000000000000000 [ 89.094335][ T4997] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 89.102295][ T4997] R13: 00007f0c7d015038 R14: 00007f0c7d014fa0 R15: 00007ffd5da40488 [ 89.110261][ T4997]