last executing test programs: 1m2.979032858s ago: executing program 3 (id=118): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3f7c6dacd1aa77a72b6ee", 0x2b}, {&(0x7f0000000500)='m', 0x1}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7c", 0x38}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68217d236df5328d80026c6fb0c31a9631b2886ff395811916849b48b48b46b9", 0x53}, {&(0x7f0000000880)="e3d83bcbe8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a7723604505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe3065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885bb00ff342c743e5", 0xa5}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e9fb245e9d154", 0x48}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000a80)="b8abe36d84fd768a4bd7b9d11de7877e6419c82198b039c5d66c45976367f77fef990a936b3c3e09114d3f7b29cca8bf1ca2c8d2931c58cfe2e22ac9dcc785c013aee2a5f7b101d8916e68d031290b8f27e3a901e426b95a1c60c3e28be32feb3d3861074c73f015b791", 0x6a}, {&(0x7f0000000e00)="8313f098996e847a9ffe21e6cb99aa245bec34a1b4a2673fed64b9a0aa1403e92b54f13b13dad63689c2260fa263ccbc2b52bbd7371c6a4cd19f5c830008a1813f5171be33b349bd3d24c057665a7a738203bf9ef591cbb1aa122494da7428414b55ffff1f4393b71e6c4bad08a2a3de688eaadeba94d92c434105cdaed896a7f1d96cf038627c6b1e3c3f743b2f376dec4e7369d9e68ea6d35574dfb27a0672bbc0a71d6250b3bab94a121e631dc0487b7e39a3f6f1af796805a711e3c56c821b0082b62396ad162a0436302cde1a93cc6763568a58dbc9906123ab", 0xdc}, {&(0x7f0000000f00)="fb70d87dd0eb0f7b0d19aa7908cc0957644f491ab631d8aaba157666c52539a0200cb3e6a4cd58c8b8f202e409a4cc78225192d71b59964abc3caaa8ffefab8a18d5668303316ad7e857ca735ad976f074295aaafea982aaba43776b9c453b01ae3cdde7cc236b56a09d068dccb86440af01ee04a03c29dab193de8559ac900ac8325a770e5014b28891dfbd01f340968cc48244b03d4eef2baeaf3b8394d29e617d83a3e26faaae52a55f2cf8a027db1c62b2085881b9936e31b9c2f9097d43b4b0df842ca8a8f69a1c787c2ea573134122cecab27393e8e05b35b03dc54d0a8680b4895192bc28b563433bef575a5f0530c06ab029d018b8", 0xf9}, {&(0x7f0000001000)="3c35c7242ea6f2d2746ae4d7b7fe59675feab5d32f12db9128b459947883a3f650c19d273feccdae347f52705bf3da4dd20abd9d07178ca280af61c405f7fc14324920f545ca10ae7ae32c2967150b8c8b2ab887519d957a32e5d76289e92f5ce1c3aaa71980b9818ea8ab66d1749d94cc5f28c6e5de271a202e2bb7c991b2bd1e606840c4c2f2879d0fc1a379b0b5c450f357b566b466fc2bb1b7539fec4b806816f72ac2e0b6bd588a148479edd5bedde7608fcab4395b", 0xb8}, {&(0x7f0000000700)}, {&(0x7f00000009c0)="e32c", 0x2}, {&(0x7f00000010c0)="1a6dd4703b0cca77d192f211285483f0c5b86f7e7abe7359a1ac400c57a3cdb55e9721cde9f6064b074da7e2b8df692c73152a9343e56ce86bf66810eac7ee0251de9db1a313a63c36f51feff56b6c35117d1a5bac5bf88aab0c72381ad9f1288fefbaf8f47967134ec296c2596d82e5a2bd2571a5262fcbd9609aec3197773fb8089942c6175d77ee0a2d2d401064b4c2ac2e6639d3bef5bac839b73b5c23b3f8291a66654260e4", 0xa8}, {&(0x7f0000001180)="3828eb1b0ef6639b70b26652657c47da63b906ff48d398c5cce779f6e3aacc76bc62ead98a91569a0de134597ddf2459b5b4fc7d6f8acc386a2d96899fab6a5fa659de066c541c8bb567da34cfc8f159720319e80fcba79c057e46557a94857fce9c", 0x62}], 0x8, &(0x7f0000001280)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x3c, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x7f}, @enc_lim={0x4, 0x1, 0x7f}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x8a91}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x2, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0xb8}}, {{&(0x7f0000000cc0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000001380)="6c8861486f8373d387a677086657477603614ee42e1c9c8a438bf77c7079734a6c972f155769c36a620735925ab47fa3d11dab76f3133098a2f13052c6d3bb431abed6d968202ab3fac6125bfac411cfef05d7ae585695ac6d77a3075f603b457b483dfcdaa7e0a80583e01e55", 0x6d}], 0x1, &(0x7f0000001400)=[@rthdr={{0x58, 0x29, 0x39, {0x32, 0x8, 0x1, 0x4e, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1e}, @private0, @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3c}}}}, @hopopts={{0x58, 0x29, 0x36, {0x16, 0x7, '\x00', [@ra={0x5, 0x2, 0xffff}, @ra={0x5, 0x2, 0x9}, @ra, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x6, [0x3, 0x5, 0x4, 0x0, 0x3]}}]}}}], 0xd8}}], 0x3, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda2681", 0x28}, {&(0x7f0000000ac0)}], 0x5, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m1.721982492s ago: executing program 3 (id=129): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) r3 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB='1,'], 0x31) 1m1.38772677s ago: executing program 3 (id=131): bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x1c, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000040)) 1m0.849775156s ago: executing program 3 (id=136): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/191) 1m0.22559102s ago: executing program 3 (id=140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 59.875784665s ago: executing program 3 (id=143): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 44.853119598s ago: executing program 32 (id=143): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 8.690143442s ago: executing program 4 (id=648): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x3, 0x240, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 8.283072439s ago: executing program 4 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000003600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000e7ffffff850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8.007763156s ago: executing program 4 (id=654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xfa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.889860388s ago: executing program 4 (id=658): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124"], 0x200) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.539680223s ago: executing program 4 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 7.06787128s ago: executing program 4 (id=665): open(0x0, 0x103bc2, 0x1c0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x491, 0x0, 0x3}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000056a000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000516000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x4, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x10000) syz_io_uring_setup(0x4a85, 0x0, &(0x7f0000000240), &(0x7f0000000140)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3.447484217s ago: executing program 5 (id=692): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.429556454s ago: executing program 1 (id=693): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x4, 0x0, 0x7, 0xc4, 0x1, 0xff, 0x6, 0xc, 0x8, 0x9}, {0x8, 0xaef2, 0xa, 0xc, 0xc, 0x1, 0x8, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x100000, 0x7, 0xc, 0xf, 0x3, 0x4, 0x0, 0xfb, 0x72, 0x15, 0x1, 0x3, 0x2}], 0x9}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x8, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x167a, 0x2, 0xfff, 0xe, 0x4, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x202380}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.393280898s ago: executing program 2 (id=694): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffbe, 0x1004, 0x80cf, 0x84e, 0x5, "0c631be01fbcd2b7cb366b000000fbf6433500", 0x1004, 0xffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 3.14758045s ago: executing program 1 (id=696): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xa, 0xfff2}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124"], 0x200) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.929081376s ago: executing program 5 (id=698): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x103000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2.739926546s ago: executing program 2 (id=699): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ftruncate(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fallocate(r1, 0x20000, 0x0, 0x9) 2.627720269s ago: executing program 0 (id=700): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2.37357207s ago: executing program 5 (id=701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000d}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 2.332525123s ago: executing program 1 (id=702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000800)={@val={0xa, 0xf8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="527bcee565f4", @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'x&%', 0x18, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x1, 0x6, 0x2, 0x2, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fff, 0x3, 0x4, 0x4e20, 0x4e20}}}}}}}}}, 0x52) 2.123786031s ago: executing program 2 (id=703): fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010026bd7000fbdbdf2507000000", @ANYRES32=r0, @ANYBLOB="000002000a0002"], 0x28}}, 0x20000800) 1.922178199s ago: executing program 5 (id=704): socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 1.886411984s ago: executing program 1 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0x80, 0xf6, 0x1000, 0x5}, {0x9, 0x1, 0xc69, 0x7, 0x0, 0x6}, 0x0, 0x2, 0xdb3}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000400) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0x7ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48d4}, 0x4048080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.727276299s ago: executing program 2 (id=706): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x4, 0x0, 0x7, 0xc4, 0x1, 0xff, 0x6, 0xc, 0x8, 0x9}, {0x8, 0xaef2, 0xa, 0xc, 0xc, 0x1, 0x8, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x100000, 0x7, 0xc, 0xf, 0x3, 0x4, 0x0, 0xfb, 0x72, 0x15, 0x1, 0x3, 0x2}], 0x9}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x8, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x167a, 0x2, 0xfff, 0xe, 0x4, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x202380}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.642816466s ago: executing program 0 (id=707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.258795366s ago: executing program 0 (id=708): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.167704052s ago: executing program 2 (id=709): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffbe, 0x1004, 0x80cf, 0x84e, 0x5, "0c631be01fbcd2b7cb366b000000fbf6433500", 0x1004, 0xffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 1.167355282s ago: executing program 5 (id=710): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_NH_ID={0x4, 0x1e, 0x1ff}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 926.575745ms ago: executing program 0 (id=711): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124"], 0x200) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 686.584817ms ago: executing program 1 (id=712): unshare(0x26020480) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 423.744757ms ago: executing program 0 (id=713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 394.599802ms ago: executing program 2 (id=714): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 96.905806ms ago: executing program 0 (id=715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x4, 0x4e, 0x4, '\x00', 0x7fffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 3.833431ms ago: executing program 5 (id=716): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 0s ago: executing program 1 (id=717): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. syzkaller login: [ 51.923240][ T4253] cgroup: Unknown subsys name 'net' [ 52.058791][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.289483][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.806570][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.806570][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.807577][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.829376][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.836873][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.844829][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.852663][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.861511][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.863679][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.869299][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.876111][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.884154][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.898694][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.898789][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.906861][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.913200][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.920384][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.928371][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.935924][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.941271][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.948471][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.954883][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.962154][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.969527][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.976031][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.983114][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.989965][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.997171][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.040006][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.049141][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.405702][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 55.430586][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 55.536896][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 55.601981][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 55.618265][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 55.627482][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.635566][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.643748][ T4279] device bridge_slave_0 entered promiscuous mode [ 55.664294][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.671401][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.681352][ T4267] device bridge_slave_0 entered promiscuous mode [ 55.692420][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.700120][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.708504][ T4279] device bridge_slave_1 entered promiscuous mode [ 55.746789][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.753996][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.761667][ T4267] device bridge_slave_1 entered promiscuous mode [ 55.777821][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.809058][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.828018][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.835713][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.843618][ T4268] device bridge_slave_0 entered promiscuous mode [ 55.882082][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.889653][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.899962][ T4268] device bridge_slave_1 entered promiscuous mode [ 55.908513][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.924857][ T4279] team0: Port device team_slave_0 added [ 55.942147][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.950255][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.958146][ T4269] device bridge_slave_0 entered promiscuous mode [ 55.967926][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.985118][ T4279] team0: Port device team_slave_1 added [ 56.010056][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.017485][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.025909][ T4269] device bridge_slave_1 entered promiscuous mode [ 56.045659][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.057017][ T4267] team0: Port device team_slave_0 added [ 56.075854][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.082836][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.109122][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.123736][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.130843][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.139076][ T4277] device bridge_slave_0 entered promiscuous mode [ 56.148463][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.161473][ T4267] team0: Port device team_slave_1 added [ 56.173755][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.180745][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.206936][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.218561][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.225995][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.233774][ T4277] device bridge_slave_1 entered promiscuous mode [ 56.253724][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.287081][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.298451][ T4268] team0: Port device team_slave_0 added [ 56.315019][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.321995][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.350979][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.370232][ T4268] team0: Port device team_slave_1 added [ 56.378286][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.398387][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.405688][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.431823][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.471334][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.482509][ T4269] team0: Port device team_slave_0 added [ 56.504759][ T4279] device hsr_slave_0 entered promiscuous mode [ 56.511534][ T4279] device hsr_slave_1 entered promiscuous mode [ 56.532667][ T4277] team0: Port device team_slave_0 added [ 56.538938][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.546029][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.572053][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.584913][ T4269] team0: Port device team_slave_1 added [ 56.604631][ T4277] team0: Port device team_slave_1 added [ 56.615041][ T4267] device hsr_slave_0 entered promiscuous mode [ 56.621838][ T4267] device hsr_slave_1 entered promiscuous mode [ 56.628534][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.636567][ T4267] Cannot create hsr debugfs directory [ 56.642470][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.652295][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.678453][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.731631][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.738979][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.765440][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.783421][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.790617][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.816614][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.861964][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.869392][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.895467][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.908175][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.915933][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.942173][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.956695][ T4268] device hsr_slave_0 entered promiscuous mode [ 56.963312][ T4268] device hsr_slave_1 entered promiscuous mode [ 56.970538][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.978183][ T4268] Cannot create hsr debugfs directory [ 57.022867][ T4269] device hsr_slave_0 entered promiscuous mode [ 57.029930][ T4269] device hsr_slave_1 entered promiscuous mode [ 57.036846][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.044643][ T4269] Cannot create hsr debugfs directory [ 57.054300][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 57.134302][ T4277] device hsr_slave_0 entered promiscuous mode [ 57.140933][ T4277] device hsr_slave_1 entered promiscuous mode [ 57.147384][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 57.147398][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 57.147574][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 57.153732][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 57.172757][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.180864][ T4277] Cannot create hsr debugfs directory [ 57.409403][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.421200][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.438038][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.451880][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.496438][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.524941][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.547160][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.569748][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.580094][ T4268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.615056][ T4268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.646169][ T4268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.663266][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.673428][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.683425][ T4268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.707851][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.715936][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.726651][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.758471][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.768316][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.815631][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.840061][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.870132][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.884330][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.893353][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.904922][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.913764][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.920931][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.933184][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.941670][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.950020][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.961435][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.970181][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.979727][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.986857][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.003609][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.012625][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.044587][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.053703][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.062618][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.073019][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.080197][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.092166][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.101199][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.110012][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.118496][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.125608][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.133467][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.142188][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.151498][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.160415][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.169296][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.178734][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.188041][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.196585][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.206587][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.215354][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.230650][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.243480][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.260368][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.280360][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.289152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.320117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.328625][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.343288][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.371896][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.382683][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.424768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.441393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.450563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.461275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.470004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.510588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.527574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.541923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.552329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.563254][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.570396][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.579606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.589693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.598418][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.605581][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.616771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.625695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.634360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.642597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.651139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.667374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.679138][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.689023][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.705576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.715010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.724824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.733183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.742495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.780746][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.797509][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.818882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.831438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.843343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.858360][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.865571][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.878966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.888013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.898162][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.905312][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.912989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.922345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.930911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.939819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.947578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.955484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.965049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.973354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.981605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.015480][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.038078][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.069082][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.088906][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.114551][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.134575][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 59.141802][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.150568][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.162019][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.173906][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.187783][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.207245][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.214833][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 59.214849][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 59.220838][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 59.226869][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 59.247769][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.264926][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.273220][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.312179][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.326575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.334459][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.347407][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.406226][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.414578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.435365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.449942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.488764][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.516263][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.544076][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.551204][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.575801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.598093][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.607113][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.614617][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.623295][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.651099][ T4267] device veth0_vlan entered promiscuous mode [ 59.678875][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.690166][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.705340][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.719620][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.727204][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.739624][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.748393][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.783933][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.804800][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.819589][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.834201][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.847349][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.861446][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.892386][ T4267] device veth1_vlan entered promiscuous mode [ 59.915254][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.923417][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.934213][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.942635][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.951954][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.959778][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.977797][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.989658][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.010357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.019277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.041997][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.074951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.095551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.106183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.158677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.169325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.179349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.188821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.198453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.208188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.230351][ T4267] device veth0_macvtap entered promiscuous mode [ 60.241670][ T4267] device veth1_macvtap entered promiscuous mode [ 60.254993][ T4277] device veth0_vlan entered promiscuous mode [ 60.269013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.278189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.286912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.295925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.317993][ T4279] device veth0_vlan entered promiscuous mode [ 60.331973][ T4277] device veth1_vlan entered promiscuous mode [ 60.348057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.360871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.371397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.386926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.396216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.405100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.413245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.422963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.431176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.441417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.449506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.467722][ T4279] device veth1_vlan entered promiscuous mode [ 60.485219][ T4268] device veth0_vlan entered promiscuous mode [ 60.505800][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.533131][ T4268] device veth1_vlan entered promiscuous mode [ 60.541952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.551222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.560044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.569202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.577858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.587788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.596817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.606598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.617450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.625789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.635301][ T4279] device veth0_macvtap entered promiscuous mode [ 60.646245][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.666100][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.678601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.687681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.696955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.709911][ T4279] device veth1_macvtap entered promiscuous mode [ 60.719739][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.730040][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.745177][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.754370][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.769727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.780300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.804474][ T4277] device veth0_macvtap entered promiscuous mode [ 60.821410][ T4277] device veth1_macvtap entered promiscuous mode [ 60.830431][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.842369][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.855476][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.893054][ T4268] device veth0_macvtap entered promiscuous mode [ 60.913059][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.921769][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.930415][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.939954][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.950807][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.959962][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.969311][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.978516][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.987995][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.000112][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.010849][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.023011][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.037268][ T4268] device veth1_macvtap entered promiscuous mode [ 61.052817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.062693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.079556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.093896][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.102630][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.112575][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.122218][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.152249][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.172328][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.182840][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.197619][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.209373][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.216787][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 61.232422][ T4269] device veth0_vlan entered promiscuous mode [ 61.251561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.261735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.274959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.283152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.292221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.299817][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 61.303738][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 61.306241][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 61.312163][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 61.325457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.334639][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.346851][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.357195][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.367821][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.378486][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.389136][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.401871][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.429786][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.441611][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.451600][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.463355][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.475645][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.483058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.491697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.502062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.511841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.525517][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.537647][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.549041][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.560444][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.570658][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.581607][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.594123][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.604931][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.614130][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.622963][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.632001][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.651866][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.660828][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.672503][ T4269] device veth1_vlan entered promiscuous mode [ 61.684765][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.696192][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.705119][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.719985][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.736070][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.748831][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.784697][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.818633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.828163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.850607][ T4269] device veth0_macvtap entered promiscuous mode [ 61.871347][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.899985][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.907151][ T4269] device veth1_macvtap entered promiscuous mode [ 61.939246][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.946032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.956651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.967029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.969169][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.002722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.021690][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.040060][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.051826][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.063553][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.073397][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.088118][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.098624][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.110767][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.122839][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.136460][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.152746][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.164247][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.168472][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.182346][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.193375][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.203832][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.214747][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.225614][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.241744][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.254717][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.262135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.271986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.282179][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.290610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.301755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.319294][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.321675][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.336065][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.349308][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.358554][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.367742][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.401227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.449224][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.481314][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.508238][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.522180][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.522580][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.523262][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.595721][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.595740][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.596880][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.638449][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.638470][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.638983][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.770420][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.770441][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.770697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.772421][ T4354] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.829129][ T4354] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.101398][ T4366] loop4: detected capacity change from 0 to 16 [ 63.128800][ T4366] erofs: (device loop4): mounted with root inode @ nid 36. [ 63.170007][ T4366] syz.4.6: attempt to access beyond end of device [ 63.170007][ T4366] loop4: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 63.231471][ T4366] syz.4.6: attempt to access beyond end of device [ 63.231471][ T4366] loop4: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 63.288299][ T4367] syz.4.6: attempt to access beyond end of device [ 63.288299][ T4367] loop4: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 63.304910][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 63.362667][ T4367] syz.4.6: attempt to access beyond end of device [ 63.362667][ T4367] loop4: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 63.378845][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 63.384780][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 63.384918][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 63.390829][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 63.446592][ T26] audit: type=1326 audit(1772480336.774:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c479c799 code=0x7ffc0000 [ 63.497881][ T26] audit: type=1326 audit(1772480336.804:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c479c799 code=0x7ffc0000 [ 63.603714][ T26] audit: type=1326 audit(1772480336.804:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c479c799 code=0x7ffc0000 [ 63.675904][ T26] audit: type=1326 audit(1772480336.814:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4c479e007 code=0x7ffc0000 [ 63.764753][ T26] audit: type=1326 audit(1772480336.814:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c479c799 code=0x7ffc0000 [ 63.841773][ T26] audit: type=1326 audit(1772480336.814:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c479c799 code=0x7ffc0000 [ 63.939127][ T26] audit: type=1326 audit(1772480336.804:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c479c799 code=0x7ffc0000 [ 64.018643][ T26] audit: type=1326 audit(1772480336.844:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c479c799 code=0x7ffc0000 [ 64.049577][ T48] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 64.113895][ T26] audit: type=1326 audit(1772480336.844:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c479c799 code=0x7ffc0000 [ 64.264334][ T26] audit: type=1326 audit(1772480336.844:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe4c479c799 code=0x7ffc0000 [ 64.792598][ T48] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 64.910865][ T4419] device syzkaller0 entered promiscuous mode [ 65.341768][ T4429] loop1: detected capacity change from 0 to 128 [ 65.720409][ T4437] loop2: detected capacity change from 0 to 7 [ 65.752798][ T4437] Dev loop2: unable to read RDB block 7 [ 65.781836][ T4439] Disabled LAPIC found during irq injection [ 65.793891][ T4437] loop2: AHDI p1 p2 p3 [ 65.799639][ T4437] loop2: partition table partially beyond EOD, truncated [ 65.811888][ T4437] loop2: p1 start 1601398130 is beyond EOD, truncated [ 65.825195][ T4437] loop2: p2 start 1702059890 is beyond EOD, truncated [ 66.148867][ T48] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 66.272227][ T4454] device syzkaller0 entered promiscuous mode [ 66.896014][ T4475] netlink: 'syz.2.44': attribute type 12 has an invalid length. [ 67.889158][ T4502] Disabled LAPIC found during irq injection [ 68.372223][ T48] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 68.604073][ T4524] device syzkaller0 entered promiscuous mode [ 69.942096][ T4557] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 69.974506][ T4557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.75'. [ 70.558639][ T4570] tipc: Started in network mode [ 70.593680][ T4570] tipc: Node identity 9aae48bee7d5, cluster identity 4711 [ 70.664976][ T4570] tipc: Enabled bearer , priority 0 [ 70.700374][ T4573] device syzkaller0 entered promiscuous mode [ 70.715631][ T48] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 70.822472][ T4569] tipc: Resetting bearer [ 70.898659][ T4583] netlink: 112 bytes leftover after parsing attributes in process `syz.3.82'. [ 70.988502][ T4583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 71.019173][ T4569] tipc: Disabling bearer [ 71.073888][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 71.311727][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.318439][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.546533][ T4633] tipc: Started in network mode [ 72.551472][ T4633] tipc: Node identity aa5e2e037c59, cluster identity 4711 [ 72.612782][ T4633] tipc: Enabled bearer , priority 0 [ 72.669973][ T4635] device syzkaller0 entered promiscuous mode [ 72.711999][ T4633] tipc: Resetting bearer [ 72.747420][ T4631] tipc: Resetting bearer [ 72.816023][ T4631] tipc: Disabling bearer [ 73.373961][ T4650] loop2: detected capacity change from 0 to 7 [ 73.397861][ T4650] Dev loop2: unable to read RDB block 7 [ 73.423664][ T4650] loop2: AHDI p1 p2 p3 [ 73.434423][ T4650] loop2: partition table partially beyond EOD, truncated [ 73.455314][ T4650] loop2: p1 start 1601398130 is beyond EOD, truncated [ 73.473281][ T4650] loop2: p2 start 1702059890 is beyond EOD, truncated [ 74.150053][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 74.150068][ T26] audit: type=1326 audit(1772480347.474:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.248463][ T26] audit: type=1326 audit(1772480347.474:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.332784][ T26] audit: type=1326 audit(1772480347.474:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.422501][ T26] audit: type=1326 audit(1772480347.474:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.496973][ T26] audit: type=1326 audit(1772480347.474:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.562251][ T26] audit: type=1326 audit(1772480347.474:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.600563][ T4678] device syzkaller0 entered promiscuous mode [ 74.634620][ T26] audit: type=1326 audit(1772480347.474:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.713653][ T26] audit: type=1326 audit(1772480347.474:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.779097][ T26] audit: type=1326 audit(1772480347.474:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.843583][ T26] audit: type=1326 audit(1772480347.474:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9b9c799 code=0x7ffc0000 [ 74.862260][ T4687] loop1: detected capacity change from 0 to 16 [ 74.929694][ T4687] erofs: (device loop1): mounted with root inode @ nid 36. [ 75.006178][ T4687] syz.1.114: attempt to access beyond end of device [ 75.006178][ T4687] loop1: rw=0, sector=36, nr_sectors = 1 limit=16 [ 75.050791][ T4687] syz.1.114: attempt to access beyond end of device [ 75.050791][ T4687] loop1: rw=0, sector=36, nr_sectors = 1 limit=16 [ 76.320582][ T4727] loop0: detected capacity change from 0 to 1764 [ 76.416228][ T41] cfg80211: failed to load regulatory.db [ 77.151763][ T4742] xt_hashlimit: size too large, truncated to 1048576 [ 78.388396][ T4769] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 79.329437][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 79.794874][ T4805] device syzkaller0 entered promiscuous mode [ 81.125338][ T4829] loop1: detected capacity change from 0 to 256 [ 81.371880][ T4836] device syzkaller0 entered promiscuous mode [ 81.604305][ T4845] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 82.022874][ T48] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 82.853887][ T4877] device syzkaller0 entered promiscuous mode [ 83.388137][ T4895] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.413163][ T4904] loop1: detected capacity change from 0 to 256 [ 83.679323][ T48] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 83.789804][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 84.446194][ T4928] Illegal XDP return value 4294967294 on prog (id 8) dev syz_tun, expect packet loss! [ 84.886010][ T4941] loop1: detected capacity change from 0 to 128 [ 84.981013][ T4941] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 85.020934][ T4941] FAT-fs (loop1): Filesystem has been set read-only [ 85.043991][ T4941] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 85.228989][ T4953] overlayfs: failed to resolve './bus': -2 [ 85.756343][ T48] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 86.078703][ T4976] Zero length message leads to an empty skb [ 86.109746][ T4976] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 86.682854][ T4991] overlayfs: failed to resolve './bus': -2 [ 86.908036][ T5001] loop4: detected capacity change from 0 to 512 [ 86.949369][ T5001] ======================================================= [ 86.949369][ T5001] WARNING: The mand mount option has been deprecated and [ 86.949369][ T5001] and is ignored by this kernel. Remove the mand [ 86.949369][ T5001] option from the mount to silence this warning. [ 86.949369][ T5001] ======================================================= [ 88.018531][ T5021] loop1: detected capacity change from 0 to 256 [ 88.045069][ T5022] loop0: detected capacity change from 0 to 128 [ 88.391710][ T48] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 88.651787][ T48] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 88.886038][ T5052] loop0: detected capacity change from 0 to 512 [ 89.898487][ T5077] 8021q: VLANs not supported on sit0 [ 90.155937][ T5087] qfq: no options [ 90.160146][ T5087] netlink: 'syz.4.263': attribute type 1 has an invalid length. [ 90.673980][ T5108] loop1: detected capacity change from 0 to 256 [ 90.958192][ T5118] device syzkaller0 entered promiscuous mode [ 91.746380][ T5145] loop4: detected capacity change from 0 to 128 [ 91.814008][ T5146] loop0: detected capacity change from 0 to 256 [ 91.917087][ T5148] loop2: detected capacity change from 0 to 7 [ 91.943181][ T4471] Dev loop2: unable to read RDB block 7 [ 91.965657][ T4471] loop2: AHDI p1 p2 p3 [ 91.981087][ T4471] loop2: partition table partially beyond EOD, truncated [ 92.005773][ T4471] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.052815][ T4471] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.053809][ T5150] device syzkaller0 entered promiscuous mode [ 92.092548][ T5148] Dev loop2: unable to read RDB block 7 [ 92.103736][ T5148] loop2: AHDI p1 p2 p3 [ 92.112756][ T5148] loop2: partition table partially beyond EOD, truncated [ 92.159818][ T5148] loop2: p1 start 1601398130 is beyond EOD, truncated [ 92.173451][ T5148] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.433312][ T5163] xt_hashlimit: size too large, truncated to 1048576 [ 93.412498][ T48] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 94.100209][ T4274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.125613][ T4274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.138590][ T4274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.147260][ T4274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.164219][ T4274] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.171673][ T4274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.686639][ T5200] chnl_net:caif_netlink_parms(): no params data found [ 94.946880][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.971005][ T5200] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.989730][ T5200] device bridge_slave_0 entered promiscuous mode [ 95.012953][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.030971][ T5200] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.049635][ T5200] device bridge_slave_1 entered promiscuous mode [ 95.158731][ T5200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.196603][ T5200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.292281][ T5200] team0: Port device team_slave_0 added [ 95.326305][ T5200] team0: Port device team_slave_1 added [ 95.372272][ T5200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.385934][ T5200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.426616][ T5200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.427257][ T5237] loop2: detected capacity change from 0 to 7 [ 95.461754][ T5200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.473759][ T5200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.500835][ T5237] Dev loop2: unable to read RDB block 7 [ 95.519963][ T5237] loop2: AHDI p1 p2 p3 [ 95.534241][ T5237] loop2: partition table partially beyond EOD, truncated [ 95.540848][ T5200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.553348][ T5237] loop2: p1 start 1601398130 is beyond EOD, truncated [ 95.562485][ T5237] loop2: p2 start 1702059890 is beyond EOD, truncated [ 95.721864][ T5200] device hsr_slave_0 entered promiscuous mode [ 95.767889][ T5200] device hsr_slave_1 entered promiscuous mode [ 95.803885][ T5200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.811499][ T5200] Cannot create hsr debugfs directory [ 96.226641][ T5200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.253949][ T4274] Bluetooth: hci5: command 0x0409 tx timeout [ 96.287452][ T5200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.364584][ T5200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.396406][ T5200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.592606][ T5200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.608437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.624645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.652289][ T5200] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.676529][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.699637][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.720160][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.727351][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.754600][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.780773][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.808008][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.830951][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.838139][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.875333][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.929704][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.952309][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.994419][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.021477][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.072574][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.105425][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.147982][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.189136][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.207798][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.232887][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.252001][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.576404][ T5299] loop0: detected capacity change from 0 to 136 [ 97.756992][ T5291] device syzkaller0 entered promiscuous mode [ 98.150419][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.173944][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.216014][ T5200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.335769][ T4274] Bluetooth: hci5: command 0x041b tx timeout [ 99.124964][ T5337] device syzkaller0 entered promiscuous mode [ 99.221831][ T4274] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 99.452789][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.494611][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.549730][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.579412][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.651082][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.664377][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.686647][ T5200] device veth0_vlan entered promiscuous mode [ 99.727788][ T5200] device veth1_vlan entered promiscuous mode [ 99.839079][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.861946][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.924476][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.951656][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.999048][ T5200] device veth0_macvtap entered promiscuous mode [ 100.028779][ T5200] device veth1_macvtap entered promiscuous mode [ 100.076277][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.102201][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.119644][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.132209][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.152063][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.178158][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.190476][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.207346][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.219538][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.237210][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.266905][ T5200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.282640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.300801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.346739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.377634][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.404949][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.424019][ T4274] Bluetooth: hci5: command 0x040f tx timeout [ 100.473221][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.489484][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.501557][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.511567][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.526064][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.537230][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.550730][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.561500][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.572967][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.587664][ T5200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.598085][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 100.616774][ T5367] device gretap0 entered promiscuous mode [ 100.625816][ T5367] device macvtap1 entered promiscuous mode [ 100.670545][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.683438][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.747699][ T5200] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.761559][ T5200] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.800986][ T5200] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.825500][ T5200] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.039994][ T5375] device syzkaller0 entered promiscuous mode [ 101.169379][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.202486][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.267616][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.521910][ T5400] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 101.521910][ T5400] The task syz.0.366 (5400) triggered the difference, watch for misbehavior. [ 101.589456][ T5402] loop4: detected capacity change from 0 to 128 [ 102.496930][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 102.632162][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 102.632175][ T26] audit: type=1326 audit(1772480375.954:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.4.373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86daf9c799 code=0x0 [ 105.055915][ T4593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.064005][ T5400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.366'. [ 105.078843][ T4593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.155306][ T5469] device syzkaller0 entered promiscuous mode [ 105.193774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.040172][ T5495] loop5: detected capacity change from 0 to 1764 [ 108.400306][ T5509] loop5: detected capacity change from 0 to 128 [ 108.733040][ T5513] capability: warning: `syz.2.402' uses 32-bit capabilities (legacy support in use) [ 108.881133][ T5527] Disabled LAPIC found during irq injection [ 109.187331][ T5541] loop5: detected capacity change from 0 to 16 [ 109.322583][ T5544] loop2: detected capacity change from 0 to 7 [ 109.330219][ T5541] erofs: (device loop5): mounted with root inode @ nid 36. [ 109.399356][ T5544] Dev loop2: unable to read RDB block 7 [ 109.408778][ T5544] loop2: AHDI p1 p2 p3 [ 109.412996][ T5544] loop2: partition table partially beyond EOD, truncated [ 109.496839][ T5544] loop2: p1 start 1601398130 is beyond EOD, truncated [ 109.519205][ T5544] loop2: p2 start 1702059890 is beyond EOD, truncated [ 109.571995][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 110.209668][ T5565] Disabled LAPIC found during irq injection [ 110.862484][ T5581] loop0: detected capacity change from 0 to 128 [ 111.032057][ T5583] syz.0.428: attempt to access beyond end of device [ 111.032057][ T5583] loop0: rw=3, sector=217, nr_sectors = 7 limit=128 [ 111.123661][ T5583] syz.0.428: attempt to access beyond end of device [ 111.123661][ T5583] loop0: rw=2051, sector=224, nr_sectors = 817 limit=128 [ 111.495686][ T5593] device syzkaller0 entered promiscuous mode [ 111.521419][ T11] kworker/u4:1: attempt to access beyond end of device [ 111.521419][ T11] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 111.801623][ T48] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 112.196774][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.439'. [ 112.293718][ T5615] IPv6: NLM_F_REPLACE set, but no existing node found! [ 112.556770][ T5623] loop2: detected capacity change from 0 to 7 [ 112.564851][ T4345] Dev loop2: unable to read RDB block 7 [ 112.570053][ T5621] device syzkaller0 entered promiscuous mode [ 112.573542][ T4345] loop2: AHDI p1 p2 p3 [ 112.595462][ T4345] loop2: partition table partially beyond EOD, truncated [ 112.631029][ T4345] loop2: p1 start 1601398130 is beyond EOD, truncated [ 112.649115][ T4345] loop2: p2 start 1702059890 is beyond EOD, truncated [ 112.710938][ T5623] Dev loop2: unable to read RDB block 7 [ 112.757244][ T5623] loop2: AHDI p1 p2 p3 [ 112.792387][ T5623] loop2: partition table partially beyond EOD, truncated [ 112.918820][ T5623] loop2: p1 start 1601398130 is beyond EOD, truncated [ 112.971291][ T5623] loop2: p2 start 1702059890 is beyond EOD, truncated [ 113.020058][ T5628] loop5: detected capacity change from 0 to 256 [ 113.229186][ T5632] loop4: detected capacity change from 0 to 128 [ 113.421071][ T48] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 113.985641][ T5664] device syzkaller0 entered promiscuous mode [ 114.067261][ T5666] loop1: detected capacity change from 0 to 256 [ 114.330921][ T5670] loop2: detected capacity change from 0 to 7 [ 114.351751][ T4345] Dev loop2: unable to read RDB block 7 [ 114.383387][ T4345] loop2: AHDI p1 p2 p3 [ 114.393112][ T4345] loop2: partition table partially beyond EOD, truncated [ 114.426530][ T4345] loop2: p1 start 1601398130 is beyond EOD, truncated [ 114.433444][ T4345] loop2: p2 start 1702059890 is beyond EOD, truncated [ 114.443436][ T5670] Dev loop2: unable to read RDB block 7 [ 114.473860][ T5670] loop2: AHDI p1 p2 p3 [ 114.478431][ T5670] loop2: partition table partially beyond EOD, truncated [ 114.493343][ T5670] loop2: p1 start 1601398130 is beyond EOD, truncated [ 114.516749][ T5670] loop2: p2 start 1702059890 is beyond EOD, truncated [ 114.971657][ T5699] loop2: detected capacity change from 0 to 256 [ 115.104800][ T5702] device syzkaller0 entered promiscuous mode [ 115.385724][ T5711] device syzkaller0 entered promiscuous mode [ 115.403044][ T5713] device syzkaller0 entered promiscuous mode [ 115.927307][ T48] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 116.214702][ T5738] device syzkaller0 entered promiscuous mode [ 116.444911][ T5748] loop2: detected capacity change from 0 to 7 [ 116.485980][ T5748] Dev loop2: unable to read RDB block 7 [ 116.491684][ T5748] loop2: AHDI p1 p2 p3 [ 116.498691][ T5748] loop2: partition table partially beyond EOD, truncated [ 116.507961][ T5748] loop2: p1 start 1601398130 is beyond EOD, truncated [ 116.520356][ T5748] loop2: p2 start 1702059890 is beyond EOD, truncated [ 117.294866][ T5773] tipc: Enabling of bearer rejected, failed to enable media [ 117.690166][ T5785] device syzkaller0 entered promiscuous mode [ 117.890086][ T5797] loop0: detected capacity change from 0 to 256 [ 117.899420][ T5798] loop5: detected capacity change from 0 to 128 [ 118.355264][ T48] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 118.872522][ T5833] loop5: detected capacity change from 0 to 128 [ 118.878256][ T5834] loop1: detected capacity change from 0 to 256 [ 119.423924][ T5847] loop2: detected capacity change from 0 to 7 [ 119.437598][ T5847] Dev loop2: unable to read RDB block 7 [ 119.463512][ T5848] tipc: Started in network mode [ 119.473740][ T5847] loop2: AHDI p1 p2 p3 [ 119.476694][ T5848] tipc: Node identity 7aa2bbbcb8a4, cluster identity 4711 [ 119.478943][ T5847] loop2: partition table partially beyond EOD, [ 119.493032][ T5848] tipc: Enabled bearer , priority 0 [ 119.501656][ T48] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 119.510608][ T5847] truncated [ 119.527729][ T5847] loop2: p1 start 1601398130 is beyond EOD, truncated [ 119.535211][ T5855] device syzkaller0 entered promiscuous mode [ 119.541260][ T5847] loop2: p2 start 1702059890 is beyond EOD, truncated [ 119.608765][ T5848] tipc: Resetting bearer [ 119.648986][ T5846] tipc: Resetting bearer [ 119.681640][ T5846] tipc: Disabling bearer [ 120.017811][ T48] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 120.096119][ T5870] loop1: detected capacity change from 0 to 256 [ 120.732019][ T5887] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 120.772216][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 120.808178][ T5887] bond1: (slave bridge1): making interface the new active one [ 120.818697][ T5887] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 120.845498][ T5887] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 121.486472][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 122.028845][ T5933] device syzkaller0 entered promiscuous mode [ 122.552201][ T48] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 123.275131][ T5968] tipc: Started in network mode [ 123.330856][ T5968] tipc: Node identity 0e5546c9ff8d, cluster identity 4711 [ 123.338760][ T5968] tipc: Enabled bearer , priority 0 [ 123.355992][ T5972] device syzkaller0 entered promiscuous mode [ 123.374066][ T5970] device syzkaller0 entered promiscuous mode [ 123.392191][ T5968] tipc: Resetting bearer [ 123.436323][ T5967] tipc: Resetting bearer [ 123.460376][ T5967] tipc: Disabling bearer [ 123.883033][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 124.170368][ T5998] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 124.450815][ T6001] bond1: (slave bridge1): making interface the new active one [ 124.482459][ T6001] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 125.529121][ T48] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 125.966328][ T48] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 126.214649][ T6075] device syzkaller0 entered promiscuous mode [ 126.920804][ T6094] loop2: detected capacity change from 0 to 7 [ 126.940843][ T4345] Dev loop2: unable to read RDB block 7 [ 126.953809][ T4345] loop2: AHDI p1 p2 p3 [ 126.972362][ T4345] loop2: partition table partially beyond EOD, truncated [ 127.000423][ T4345] loop2: p1 start 1601398130 is beyond EOD, truncated [ 127.022171][ T4345] loop2: p2 start 1702059890 is beyond EOD, truncated [ 127.051190][ T6094] Dev loop2: unable to read RDB block 7 [ 127.077028][ T6094] loop2: AHDI p1 p2 p3 [ 127.105093][ T6094] loop2: partition table partially beyond EOD, truncated [ 127.139590][ T6094] loop2: p1 start 1601398130 is beyond EOD, truncated [ 127.191072][ T6094] loop2: p2 start 1702059890 is beyond EOD, truncated [ 127.266729][ T6106] device syzkaller0 entered promiscuous mode [ 127.290768][ T6104] device syzkaller0 entered promiscuous mode [ 127.319724][ T6108] capability: warning: `syz.2.618' uses deprecated v2 capabilities in a way that may be insecure [ 127.655283][ T6117] device syzkaller0 entered promiscuous mode [ 128.027100][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 128.288091][ T6141] tipc: Enabled bearer , priority 0 [ 128.459890][ T6141] device syzkaller0 entered promiscuous mode [ 128.505172][ T6147] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 128.559429][ T6141] tipc: Resetting bearer [ 128.632554][ T6140] tipc: Resetting bearer [ 128.680125][ T6140] tipc: Disabling bearer [ 128.942246][ T6161] loop4: detected capacity change from 0 to 764 [ 129.467177][ T48] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 129.632976][ T6189] loop4: detected capacity change from 0 to 128 [ 129.698275][ T6191] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 129.728124][ T6191] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 130.379044][ T6207] loop0: detected capacity change from 0 to 256 [ 130.397765][ T48] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 130.756368][ T6222] device syzkaller0 entered promiscuous mode [ 130.780447][ T6224] loop2: detected capacity change from 0 to 7 [ 130.844892][ T4471] Dev loop2: unable to read RDB block 7 [ 130.850513][ T4471] loop2: AHDI p1 p2 p3 [ 130.860300][ T4471] loop2: partition table partially beyond EOD, truncated [ 130.878542][ T6227] overlayfs: missing 'lowerdir' [ 130.879983][ T4471] loop2: p1 start 1601398130 is beyond EOD, truncated [ 130.911073][ T4471] loop2: p2 start 1702059890 is beyond EOD, truncated [ 130.937749][ T6224] Dev loop2: unable to read RDB block 7 [ 130.951350][ T6224] loop2: AHDI p1 p2 p3 [ 130.964081][ T6224] loop2: partition table partially beyond EOD, truncated [ 130.980929][ T6224] loop2: p1 start 1601398130 is beyond EOD, truncated [ 131.013998][ T6224] loop2: p2 start 1702059890 is beyond EOD, truncated [ 131.251643][ T6237] fuse: Bad value for 'fd' [ 131.538318][ T48] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 132.656596][ T6267] device syzkaller0 entered promiscuous mode [ 132.729959][ T6269] loop2: detected capacity change from 0 to 7 [ 132.747141][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753573][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.793113][ T4345] Dev loop2: unable to read RDB block 7 [ 132.801789][ T4345] loop2: AHDI p1 p2 p3 [ 132.821229][ T4345] loop2: partition table partially beyond EOD, truncated [ 132.889796][ T4345] loop2: p1 start 1601398130 is beyond EOD, truncated [ 132.942641][ T4345] loop2: p2 start 1702059890 is beyond EOD, truncated [ 132.952209][ T6274] fuse: Bad value for 'fd' [ 132.969619][ T6269] Dev loop2: unable to read RDB block 7 [ 133.003596][ T6269] loop2: AHDI p1 p2 p3 [ 133.019970][ T6269] loop2: partition table partially beyond EOD, truncated [ 133.086897][ T6269] loop2: p1 start 1601398130 is beyond EOD, truncated [ 133.172753][ T6269] loop2: p2 start 1702059890 is beyond EOD, truncated [ 133.289498][ T6282] loop0: detected capacity change from 0 to 256 [ 133.748812][ T6290] tipc: Started in network mode [ 133.803357][ T6290] tipc: Node identity 7244d144900b, cluster identity 4711 [ 133.849370][ T6290] tipc: Enabled bearer , priority 0 [ 133.901425][ T6293] device syzkaller0 entered promiscuous mode [ 134.004911][ T6290] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 134.107594][ T6293] tipc: Resetting bearer [ 134.175645][ T6287] tipc: Resetting bearer [ 134.335041][ T6287] tipc: Disabling bearer [ 134.776825][ T6307] fuse: Bad value for 'fd' [ 135.175479][ T48] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 136.625106][ T6339] tipc: Enabling of bearer rejected, failed to enable media [ 136.719615][ T6342] netlink: 'syz.5.704': attribute type 11 has an invalid length. [ 137.469120][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 138.283034][ T81] ================================================================== [ 138.298335][ T81] BUG: KASAN: slab-out-of-bounds in drop_buffers+0x65/0x6a0 [ 138.305646][ T81] Read of size 4 at addr ffff8880285329e0 by task kswapd0/81 [ 138.313005][ T81] [ 138.315335][ T81] CPU: 1 PID: 81 Comm: kswapd0 Not tainted syzkaller #0 [ 138.322256][ T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.332311][ T81] Call Trace: [ 138.335584][ T81] [ 138.338504][ T81] dump_stack_lvl+0x188/0x24e [ 138.343262][ T81] ? __lock_acquire+0x7d10/0x7d10 [ 138.348276][ T81] ? show_regs_print_info+0x12/0x12 [ 138.353466][ T81] ? load_image+0x400/0x400 [ 138.357963][ T81] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 138.363410][ T81] ? __virt_addr_valid+0x188/0x540 [ 138.368517][ T81] ? __virt_addr_valid+0x465/0x540 [ 138.373623][ T81] ? drop_buffers+0x65/0x6a0 [ 138.378206][ T81] print_report+0xa8/0x210 [ 138.382610][ T81] kasan_report+0x10b/0x140 [ 138.387104][ T81] ? drop_buffers+0x65/0x6a0 [ 138.391684][ T81] kasan_check_range+0x235/0x290 [ 138.396619][ T81] drop_buffers+0x65/0x6a0 [ 138.401024][ T81] ? ret_from_fork+0x1f/0x30 [ 138.405612][ T81] try_to_free_buffers+0x205/0x520 [ 138.410733][ T81] shrink_folio_list+0x2127/0x7aa0 [ 138.415852][ T81] ? reclaim_clean_pages_from_list+0xb30/0xb30 [ 138.422004][ T81] ? isolate_folios+0x568a/0x6330 [ 138.427034][ T81] ? mark_lock+0x94/0x320 [ 138.431361][ T81] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 138.437342][ T81] ? lock_chain_count+0x20/0x20 [ 138.442189][ T81] ? reset_ctrl_pos+0x72b/0x7b0 [ 138.447027][ T81] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.452216][ T81] ? lockdep_hardirqs_on+0x94/0x140 [ 138.457398][ T81] evict_folios+0xa80/0x22a0 [ 138.461977][ T81] ? verify_lock_unused+0x140/0x140 [ 138.467180][ T81] ? folio_inc_gen+0x400/0x400 [ 138.471958][ T81] ? __lock_acquire+0x7d10/0x7d10 [ 138.477083][ T81] ? should_run_aging+0x486/0x550 [ 138.482318][ T81] shrink_lruvec+0xc90/0x3d50 [ 138.487796][ T81] ? mem_cgroup_shrink_node+0x710/0x710 [ 138.493794][ T81] ? __lock_acquire+0x7d10/0x7d10 [ 138.500660][ T81] ? __might_sleep+0xd0/0xd0 [ 138.505535][ T81] ? percpu_ref_put+0x19/0x180 [ 138.510311][ T81] ? mem_cgroup_calculate_protection+0x4c/0x3f0 [ 138.516552][ T81] ? mem_cgroup_iter+0x37/0x4a0 [ 138.521400][ T81] ? shrink_node+0x680/0x28d0 [ 138.526078][ T81] ? kswapd+0x1c3e/0x3360 [ 138.530401][ T81] ? kswapd+0xa4f/0x3360 [ 138.534640][ T81] ? kswapd+0x1761/0x3360 [ 138.538965][ T81] ? kswapd_run+0x160/0x160 [ 138.543551][ T81] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 138.549521][ T81] ? wake_bit_function+0x200/0x200 [ 138.554626][ T81] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 138.560510][ T81] ? __kthread_parkme+0x162/0x1c0 [ 138.565527][ T81] ? kthread+0x29d/0x330 [ 138.569752][ T81] ? kswapd_run+0x160/0x160 [ 138.574512][ T81] ? kthread_blkcg+0xd0/0xd0 [ 138.579089][ T81] ? ret_from_fork+0x1f/0x30 [ 138.583673][ T81] [ 138.586682][ T81] [ 138.589008][ T81] Allocated by task 4366: [ 138.593319][ T81] kasan_set_track+0x4b/0x70 [ 138.597902][ T81] __kasan_kmalloc+0x8e/0xa0 [ 138.602486][ T81] __kmalloc+0xb0/0x240 [ 138.606731][ T81] iomap_page_create+0x14a/0x600 [ 138.611655][ T81] iomap_readpage_iter+0x240/0x8f0 [ 138.616754][ T81] iomap_read_folio+0x332/0x8c0 [ 138.621587][ T81] filemap_read_folio+0x16b/0x770 [ 138.626601][ T81] do_read_cache_folio+0x2a0/0x760 [ 138.631707][ T81] erofs_bread+0x18e/0x670 [ 138.636113][ T81] erofs_namei+0x29c/0xf50 [ 138.640535][ T81] erofs_lookup+0x14b/0x390 [ 138.645028][ T81] path_openat+0xfce/0x2ee0 [ 138.649520][ T81] do_filp_open+0x1f1/0x430 [ 138.654006][ T81] do_sys_openat2+0x150/0x4b0 [ 138.658671][ T81] __x64_sys_openat+0x135/0x160 [ 138.663510][ T81] do_syscall_64+0x4c/0xa0 [ 138.667914][ T81] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.673798][ T81] [ 138.676122][ T81] The buggy address belongs to the object at ffff888028532980 [ 138.676122][ T81] which belongs to the cache kmalloc-96 of size 96 [ 138.689994][ T81] The buggy address is located 0 bytes to the right of [ 138.689994][ T81] 96-byte region [ffff888028532980, ffff8880285329e0) [ 138.703519][ T81] [ 138.705829][ T81] The buggy address belongs to the physical page: [ 138.712225][ T81] page:ffffea0000a14c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888028532800 pfn:0x28532 [ 138.723679][ T81] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 138.731228][ T81] raw: 00fff00000000200 ffffea0000b9cf08 ffffea0001522588 ffff888017441780 [ 138.739794][ T81] raw: ffff888028532800 000000000020001a 00000001ffffffff 0000000000000000 [ 138.748357][ T81] page dumped because: kasan: bad access detected [ 138.754793][ T81] page_owner tracks the page as allocated [ 138.760491][ T81] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4344, tgid 4344 (kworker/0:4), ts 63033756891, free_ts 57289064668 [ 138.778624][ T81] post_alloc_hook+0x173/0x1a0 [ 138.783381][ T81] get_page_from_freelist+0x1a1e/0x1ab0 [ 138.788921][ T81] __alloc_pages+0x1ec/0x4f0 [ 138.793503][ T81] alloc_slab_page+0x5d/0x160 [ 138.798253][ T81] new_slab+0x87/0x2c0 [ 138.802305][ T81] ___slab_alloc+0xbc6/0x1240 [ 138.806966][ T81] __kmem_cache_alloc_node+0x1a0/0x260 [ 138.812411][ T81] kmalloc_trace+0x26/0xe0 [ 138.816816][ T81] nsim_fib_event_work+0x12a9/0x3450 [ 138.822090][ T81] process_one_work+0x8a2/0x1160 [ 138.827014][ T81] worker_thread+0xd27/0x1270 [ 138.831677][ T81] kthread+0x29d/0x330 [ 138.835727][ T81] ret_from_fork+0x1f/0x30 [ 138.840144][ T81] page last free stack trace: [ 138.844807][ T81] free_unref_page_prepare+0x8b4/0x9a0 [ 138.850263][ T81] free_unref_page+0x2e/0x3f0 [ 138.854932][ T81] __unfreeze_partials+0x1a5/0x200 [ 138.860032][ T81] put_cpu_partial+0x17c/0x250 [ 138.864784][ T81] qlist_free_all+0x76/0xe0 [ 138.869274][ T81] kasan_quarantine_reduce+0x144/0x160 [ 138.874717][ T81] __kasan_slab_alloc+0x1e/0x80 [ 138.879557][ T81] slab_post_alloc_hook+0x4b/0x480 [ 138.884652][ T81] __kmem_cache_alloc_node+0x140/0x260 [ 138.890097][ T81] kmalloc_trace+0x26/0xe0 [ 138.894504][ T81] kset_create_and_add+0x56/0x160 [ 138.899511][ T81] netdev_register_kobject+0x1ae/0x320 [ 138.904959][ T81] register_netdevice+0x12dc/0x1b00 [ 138.910153][ T81] register_vlan_dev+0x393/0x810 [ 138.915080][ T81] vlan_newlink+0x442/0x590 [ 138.919569][ T81] rtnl_newlink+0x1542/0x2080 [ 138.924234][ T81] [ 138.926545][ T81] Memory state around the buggy address: [ 138.932161][ T81] ffff888028532880: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 138.940205][ T81] ffff888028532900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 138.948248][ T81] >ffff888028532980: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 138.956295][ T81] ^ [ 138.963472][ T81] ffff888028532a00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 138.971550][ T81] ffff888028532a80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 138.979689][ T81] ================================================================== [ 139.077007][ T6373] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 139.161579][ T6380] loop5: detected capacity change from 0 to 512 [ 139.462206][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.714'. [ 139.629491][ T6383] bond1: (slave bridge1): making interface the new active one [ 139.740266][ T6383] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 139.809161][ T6384] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 140.482442][ T81] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 140.489683][ T81] CPU: 1 PID: 81 Comm: kswapd0 Not tainted syzkaller #0 [ 140.496642][ T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.506798][ T81] Call Trace: [ 140.510079][ T81] [ 140.513009][ T81] dump_stack_lvl+0x188/0x24e [ 140.517699][ T81] ? memcpy+0x3c/0x60 [ 140.521670][ T81] ? show_regs_print_info+0x12/0x12 [ 140.526858][ T81] ? load_image+0x400/0x400 [ 140.531363][ T81] panic+0x2e5/0x730 [ 140.535817][ T81] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 140.542347][ T81] ? bpf_jit_dump+0xd0/0xd0 [ 140.547019][ T81] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 140.553187][ T81] ? _raw_spin_unlock+0x40/0x40 [ 140.558302][ T81] check_panic_on_warn+0x80/0xa0 [ 140.563437][ T81] ? drop_buffers+0x65/0x6a0 [ 140.568040][ T81] end_report+0x66/0x110 [ 140.572281][ T81] kasan_report+0x118/0x140 [ 140.576778][ T81] ? drop_buffers+0x65/0x6a0 [ 140.581363][ T81] kasan_check_range+0x235/0x290 [ 140.586291][ T81] drop_buffers+0x65/0x6a0 [ 140.590714][ T81] ? ret_from_fork+0x1f/0x30 [ 140.595309][ T81] try_to_free_buffers+0x205/0x520 [ 140.600434][ T81] shrink_folio_list+0x2127/0x7aa0 [ 140.605559][ T81] ? reclaim_clean_pages_from_list+0xb30/0xb30 [ 140.611700][ T81] ? isolate_folios+0x568a/0x6330 [ 140.616723][ T81] ? mark_lock+0x94/0x320 [ 140.621048][ T81] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 140.627018][ T81] ? lock_chain_count+0x20/0x20 [ 140.631856][ T81] ? reset_ctrl_pos+0x72b/0x7b0 [ 140.636780][ T81] ? _raw_spin_unlock_irq+0x1f/0x40 [ 140.641964][ T81] ? lockdep_hardirqs_on+0x94/0x140 [ 140.647149][ T81] evict_folios+0xa80/0x22a0 [ 140.651731][ T81] ? verify_lock_unused+0x140/0x140 [ 140.656928][ T81] ? folio_inc_gen+0x400/0x400 [ 140.661681][ T81] ? __lock_acquire+0x7d10/0x7d10 [ 140.666695][ T81] ? should_run_aging+0x486/0x550 [ 140.671713][ T81] shrink_lruvec+0xc90/0x3d50 [ 140.676384][ T81] ? mem_cgroup_shrink_node+0x710/0x710 [ 140.681933][ T81] ? __lock_acquire+0x7d10/0x7d10 [ 140.686948][ T81] ? __might_sleep+0xd0/0xd0 [ 140.691521][ T81] ? percpu_ref_put+0x19/0x180 [ 140.696281][ T81] ? mem_cgroup_calculate_protection+0x4c/0x3f0 [ 140.702514][ T81] ? mem_cgroup_iter+0x37/0x4a0 [ 140.707362][ T81] ? shrink_node+0x680/0x28d0 [ 140.712039][ T81] ? kswapd+0x1c3e/0x3360 [ 140.716454][ T81] ? kswapd+0xa4f/0x3360 [ 140.720691][ T81] ? kswapd+0x1761/0x3360 [ 140.725012][ T81] ? kswapd_run+0x160/0x160 [ 140.729513][ T81] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.735394][ T81] ? wake_bit_function+0x200/0x200 [ 140.740500][ T81] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.746377][ T81] ? __kthread_parkme+0x162/0x1c0 [ 140.751394][ T81] ? kthread+0x29d/0x330 [ 140.755619][ T81] ? kswapd_run+0x160/0x160 [ 140.760108][ T81] ? kthread_blkcg+0xd0/0xd0 [ 140.764682][ T81] ? ret_from_fork+0x1f/0x30 [ 140.769263][ T81] [ 140.772633][ T81] Kernel Offset: disabled [ 140.776953][ T81] Rebooting in 86400 seconds..