last executing test programs: 6.149083991s ago: executing program 4 (id=16): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003c3a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000000000000000000000000000000000000000020000000ffffe000000117c17f070000000000880000"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x40000029) r5 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f00000000c0)="791cc5909359f56bab7b1ac0ca86ffcb9f03ecc67f05f08d7b34cbc422", 0x1d, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000a0000008000048013000100"], 0x94}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x111) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@rand_addr=0x64010101, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x20, 0x4}, {0x0, 0x28c, 0x4}, {0x2000000000000007, 0x20000, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x3, 0x3, 0xb5, 0x0, 0x7fffffd}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)='\b', 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0xfffe) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x7, 0x7, {{0x7, 0x4, 0x0, 0x20, 0x1c, 0x67, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @local, {[@generic={0x86, 0x7, "2c3c5f1cb2"}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r10) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000007c0)={0x14, r11, 0x31, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050326bd240400b930520000c8dfa9c90000", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x24044080) 5.667932232s ago: executing program 4 (id=20): r0 = socket(0x9, 0x3, 0xfffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x7}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x2}) ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='hsr0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xd, 0xa, @local}, 0x1c, 0x0}, 0x24048b88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff3}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44000) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001001bb866effc1fe894cda19b873f388e00000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572000000480002800800024000000084080003400000000708000580040001006d657461000000001400028008000140000000090800024000000010820900010073797a30000000000900020073797a"], 0xb0}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000130001"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) 4.839570463s ago: executing program 4 (id=24): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000506010400e8ffffff0080ef145a08000900030073797a320000000005000100070000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040095}, 0x40040) 4.451736172s ago: executing program 4 (id=27): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.255942937s ago: executing program 4 (id=33): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f00000063c0)='./file0\x00', &(0x7f0000006400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006480)={0x0, 0x0, 0x0}, &(0x7f00000064c0)=0xc) write$FUSE_STATX(r2, &(0x7f0000006500)={0x130, 0x0, 0x0, {0xfffffffffffffff9, 0x8, 0x0, '\x00', {0x1108, 0x7, 0x7, 0x1, r3, r4, 0x8000, '\x00', 0x9, 0x8, 0x7fffffffffffffff, 0xdd91, {0xffffffff7fffffff, 0x2}, {0x938f, 0x6}, {0x3, 0xffffffc0}, {0x0, 0xf}, 0x3, 0x4, 0xd99, 0xff}}}, 0x130) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000080)=""/102, 0x66}], 0x2}, 0x3ffffe}, {{0x0, 0x0, 0x0}, 0xc}], 0x4, 0x20000, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x40, 0x21, 0x8f, {0x8f, 0x18, "b3a9f4913a0dd313858aa889b686519f14491bf52a431b6cf4144e9c1007ef829d8c75917250cb20242f58fa6a6b9c5cdc4ad23f9510038a64ed06f04fc29d2b4876576623c1fc5787a5262452d10ff9f4b2eb23dc967a5cdd8eedf8cdd721c83f1dfbc79c51a1b106fbc0ab9e0064c2c6c9a336e0331c00b6d3352e1c12f7433f2c9d8fc58843c32d0a4f8d40"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}}, &(0x7f0000000900)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0xa, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0xc0, 0x5, 0x5, "a43adbe83b"}, &(0x7f00000008c0)}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000240)={0x0, 0x13, 0x3, "bd9908"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000240)={0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000001c0)={0x0, 0x9}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6], 0x20) syz_usb_control_io(r0, 0x0, 0x0) 3.213743342s ago: executing program 1 (id=36): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) request_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)='logon\x00', r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x62, 0x63, 0x30, 0x66, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x65, 0x38, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x31, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x32, 0x30, 0x30, 0x30, 0x53, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x33, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x63, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabb0400eeff00112233445566778899aabbccddeeff00112233445566318599aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x6, 0x30, 0x30, 0x5d, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x39, 0x30, 0x62, 0x30, 0x62, 0x66]}, &(0x7f0000000100)={0x0, "0011223300112233445566778899aabbccddeeff00112233445566778899aa00000000ff00000000005566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3.108039365s ago: executing program 1 (id=37): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xb0000018}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x11c53682, 0x3a, '/', 0x3a, '\\', 0x3a, './file0'}, 0x29) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2f, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.089506135s ago: executing program 3 (id=38): socket$kcm(0x11, 0x200000000000002, 0x300) socket(0x400000000010, 0x3, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) 2.979517398s ago: executing program 0 (id=40): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 2.90001986s ago: executing program 3 (id=41): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 2.88029013s ago: executing program 3 (id=42): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) memfd_create(0x0, 0x2) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000023c0)=[{0x6, 0x25, 0xd, 0x7}, {0x9, 0x4b, 0x9, 0x3}, {0x0, 0x7, 0x3, 0x7}, {0x4, 0x5, 0x6, 0x6}, {0x868, 0x6, 0x96, 0x2}]}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x1) 2.788459562s ago: executing program 2 (id=43): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='logon\x00', 0x0, &(0x7f0000000500), 0x0, r0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) listen(r2, 0x9) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1a81, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.788244812s ago: executing program 3 (id=44): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.635953676s ago: executing program 3 (id=45): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0xbffffffd, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x9, 0x567a5030, 0xb5f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23820080, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2.592024287s ago: executing program 2 (id=46): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x4000000) 1.777260087s ago: executing program 0 (id=47): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x73}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0xfffffffffff7fffd, 0x0, 0x10000, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74bc}, 0x0, 0x1a0b0}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.690993899s ago: executing program 2 (id=48): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000640000004300000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8, 0x0, 0x0}}, 0x10) 1.612179181s ago: executing program 2 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 1.592199951s ago: executing program 0 (id=50): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 1.579754362s ago: executing program 1 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) 1.518371823s ago: executing program 0 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.335577517s ago: executing program 0 (id=53): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x3}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x4, 0x5, 0x100, 0x2, 0x17, 0x9, 0x2}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.327493168s ago: executing program 0 (id=54): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) fcntl$setstatus(r4, 0x4, 0x4000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x421a, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x1000000, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"}) 1.287405769s ago: executing program 2 (id=55): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.278443129s ago: executing program 1 (id=56): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='logon\x00', 0x0, &(0x7f0000000500), 0x0, r0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x14, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) listen(r2, 0x9) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1a81, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.170174652s ago: executing program 2 (id=57): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1.063663894s ago: executing program 1 (id=58): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0), 0x0, 0x4000000) 391.71636ms ago: executing program 4 (id=59): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0x6, 0x4, 0x7, 0x80000000, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 8.04239ms ago: executing program 1 (id=60): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x4008080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) socket(0x1, 0x5, 0xf06b) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1, 0x4}, {0x7c, 0x0, 0x0, 0x7981}, {0x6}]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001ac0)={0x0, "8992ce189dead139dca307202c6a5e7f"}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0x10, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x0, 0x0, 0xb, 0x0, 0x7, 0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x4}, {0x4, 0x10000, 0x3, 0x0, 0xff, 0x4, 0x6, 0xe, 0xc, 0x3c}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x0, 0x80}, {0xdddd1000, 0xeeee8000, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x9, 0x1, 0x83, 0x5, 0x26, 0x5}, {0x4000, 0x4e4}, {0x41000, 0xbf}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0x9, 0xd801, 0x0, [0x3, 0x0, 0x1, 0xeeef]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000004010201010000000000000000000000040608074000040000080005400000010006000740000000000800054000000002"], 0x34}, 0x1, 0x0, 0x0, 0x400c001}, 0xc04) 0s ago: executing program 3 (id=61): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xb0000018}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x11c53682, 0x3a, '/', 0x3a, '\\', 0x3a, './file0'}, 0x29) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2f, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 51.213539][ T4175] cgroup: Unknown subsys name 'net' [ 51.359246][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.632951][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.954595][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 54.000448][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 54.044495][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 54.129535][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.140083][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.147672][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.156033][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.193388][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.200549][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.208779][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.221028][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 54.234926][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.242025][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.250306][ T4188] device bridge_slave_0 entered promiscuous mode [ 54.280561][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.287966][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.296303][ T4199] device bridge_slave_0 entered promiscuous mode [ 54.303422][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.310648][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.318464][ T4188] device bridge_slave_1 entered promiscuous mode [ 54.337494][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.351989][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.359211][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.367245][ T4199] device bridge_slave_1 entered promiscuous mode [ 54.390554][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.416513][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.439312][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.449989][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.475227][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.502817][ T4191] team0: Port device team_slave_0 added [ 54.524762][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.531903][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.540370][ T4187] device bridge_slave_0 entered promiscuous mode [ 54.549128][ T4191] team0: Port device team_slave_1 added [ 54.570127][ T4199] team0: Port device team_slave_0 added [ 54.578352][ T4188] team0: Port device team_slave_0 added [ 54.585272][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.592364][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.600270][ T4187] device bridge_slave_1 entered promiscuous mode [ 54.613378][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.620494][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.628829][ T4189] device bridge_slave_0 entered promiscuous mode [ 54.638250][ T4199] team0: Port device team_slave_1 added [ 54.652026][ T4188] team0: Port device team_slave_1 added [ 54.670393][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.677629][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.703927][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.715528][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.722620][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.730934][ T4189] device bridge_slave_1 entered promiscuous mode [ 54.755715][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.762672][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.788615][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.800515][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.807530][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.833468][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.855626][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.862588][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.888849][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.902206][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.911849][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.919002][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.945061][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.969411][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.979064][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.986165][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.012171][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.024539][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.057695][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.080184][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.087417][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.123442][ T4187] team0: Port device team_slave_0 added [ 55.134347][ T4188] device hsr_slave_0 entered promiscuous mode [ 55.141212][ T4188] device hsr_slave_1 entered promiscuous mode [ 55.148168][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.156393][ T4188] Cannot create hsr debugfs directory [ 55.175173][ T4189] team0: Port device team_slave_0 added [ 55.182507][ T4187] team0: Port device team_slave_1 added [ 55.206094][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.213058][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.239193][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.251837][ T4189] team0: Port device team_slave_1 added [ 55.283039][ T4199] device hsr_slave_0 entered promiscuous mode [ 55.290305][ T4199] device hsr_slave_1 entered promiscuous mode [ 55.297031][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.304791][ T4199] Cannot create hsr debugfs directory [ 55.310721][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.317882][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.344136][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.379443][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.386794][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.412881][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.428478][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.435521][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.461718][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.517289][ T4187] device hsr_slave_0 entered promiscuous mode [ 55.524057][ T4187] device hsr_slave_1 entered promiscuous mode [ 55.530624][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.538761][ T4187] Cannot create hsr debugfs directory [ 55.611010][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.620456][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.627095][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.637545][ T4189] Cannot create hsr debugfs directory [ 55.675084][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 55.681671][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 55.683948][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 55.754044][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 55.754284][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 55.868963][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.879727][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.889911][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.903900][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.937277][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.959624][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.968640][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.978064][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.033664][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.046722][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.057899][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.067288][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.140069][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.154459][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.166175][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.183045][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.202918][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.212454][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.225172][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.232027][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.265590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.275277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.284174][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.291408][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.300338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.317709][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.353489][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.362126][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.371738][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.378842][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.391300][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.406607][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.416086][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.431399][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.444311][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.452732][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.461882][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.470969][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.479764][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.489201][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.513637][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.525403][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.538511][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.550722][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.560504][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.570672][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.580611][ T617] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.588111][ T617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.596671][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.605765][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.614241][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.622532][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.631409][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.640389][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.649184][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.657984][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.669879][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.679301][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.688614][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.695736][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.713816][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.725786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.753728][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.776052][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.784651][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.792792][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.803403][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.812690][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.821987][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.833408][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.875804][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.885691][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.895544][ T617] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.902602][ T617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.910617][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.919543][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.928000][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.935076][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.942943][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.951837][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.961087][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.969974][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.980103][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.988657][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.997959][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.007303][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.015783][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.037332][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.055135][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.062982][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.071103][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.081137][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.094080][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.101540][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.121157][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.141287][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.152203][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.161737][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.176659][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.190606][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.202622][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.216184][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.225690][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.240300][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.260054][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.295861][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.304510][ T617] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.311587][ T617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.345126][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.361797][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.371079][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.381032][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.389965][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.397083][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.419152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.436810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.454153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.471196][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.494429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.503701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.512897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.523294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.532365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.542181][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.549269][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.558052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.566873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.579082][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.605695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.613720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.622004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.631871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.640651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.649333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.657991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.667634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.682792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.692417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.700979][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.708084][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.716740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.725587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.733031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.747558][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.756093][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 57.762616][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 57.764840][ T2302] Bluetooth: hci1: command 0x041b tx timeout [ 57.773737][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.794687][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.803422][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.812550][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.822184][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.831094][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.835038][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 57.841627][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.850490][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 57.854267][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.869388][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.877975][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.889114][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.904508][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.912922][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.922683][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.931284][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.947565][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.956604][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.972561][ T4199] device veth0_vlan entered promiscuous mode [ 57.986850][ T4188] device veth0_vlan entered promiscuous mode [ 58.009585][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.026180][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.050250][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.058827][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.067707][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.077627][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.086448][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.095316][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.104740][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.112846][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.121308][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.129314][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.137249][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.145144][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.159341][ T4188] device veth1_vlan entered promiscuous mode [ 58.192280][ T4191] device veth0_vlan entered promiscuous mode [ 58.210836][ T4191] device veth1_vlan entered promiscuous mode [ 58.229775][ T4199] device veth1_vlan entered promiscuous mode [ 58.280238][ T4191] device veth0_macvtap entered promiscuous mode [ 58.300610][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.311168][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.320765][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.329466][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.337527][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.356705][ T4191] device veth1_macvtap entered promiscuous mode [ 58.368667][ T4199] device veth0_macvtap entered promiscuous mode [ 58.381553][ T4188] device veth0_macvtap entered promiscuous mode [ 58.398646][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.408951][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.417848][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.426967][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.436055][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.448494][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.462407][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.470582][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.480592][ T4199] device veth1_macvtap entered promiscuous mode [ 58.495930][ T4188] device veth1_macvtap entered promiscuous mode [ 58.518052][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.526113][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.534613][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.542552][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.550320][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.558989][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.568097][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.576796][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.586428][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.597973][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.627130][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.639976][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.650996][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.664116][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.671493][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.681077][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.689600][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.698190][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.707217][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.716624][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.725467][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.733176][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.747052][ T4187] device veth0_vlan entered promiscuous mode [ 58.756196][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.766239][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.775156][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.784986][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.800528][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.811406][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.821548][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.832285][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.843514][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.855894][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.866784][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.878482][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.891558][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.902315][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.912743][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.923649][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.936520][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.946054][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.955936][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.965217][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.973631][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.982295][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.990786][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.002554][ T4187] device veth1_vlan entered promiscuous mode [ 59.011773][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.020523][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.029500][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.039229][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.051930][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.061567][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.070619][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.079616][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.125980][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.134285][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.142192][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.151273][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.205953][ T4187] device veth0_macvtap entered promiscuous mode [ 59.252012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.261753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.271750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.282178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.291347][ T4187] device veth1_macvtap entered promiscuous mode [ 59.314193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.322900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.331639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.339474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.347345][ T4189] device veth0_vlan entered promiscuous mode [ 59.380383][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.389275][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.398009][ T4189] device veth1_vlan entered promiscuous mode [ 59.421108][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.429138][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.438685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.447377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.455150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.463339][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.474152][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.484248][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.496040][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.506191][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.517364][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.528580][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.551670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.560018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.569639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.586829][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.598095][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.609662][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.620327][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.630388][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.640960][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.651964][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.676728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.686072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.698656][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.708339][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.718176][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.727646][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.746397][ T4189] device veth0_macvtap entered promiscuous mode [ 59.757533][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.766086][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.785549][ T617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.789399][ T4189] device veth1_macvtap entered promiscuous mode [ 59.793408][ T617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.818446][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.828841][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.837228][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 59.841644][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.843803][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 59.857358][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 59.871871][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.887425][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.897627][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.908307][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.918845][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 59.919322][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.925093][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 59.942425][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.952492][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.963191][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.974900][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.000623][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.012282][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.024335][ T617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.033283][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.044324][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.057734][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.058425][ T617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.068508][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.086523][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.097223][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.107291][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.117976][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.129189][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.151660][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.162879][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.172192][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.181159][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.192448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.200484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.210237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.245377][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.253646][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.275141][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.298574][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.306756][ T617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.334588][ T617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.338245][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.374219][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.386581][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.422359][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.437271][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.442599][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.456831][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.507454][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.526757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.538362][ T4230] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.584503][ T617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.592347][ T617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.610410][ T4230] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.617514][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.411529][ T4276] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.420787][ T4276] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.429589][ T4276] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.439261][ T4276] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.914685][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 61.924135][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 61.947247][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 61.994499][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 62.006395][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 62.033037][ T4308] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16'. [ 62.059583][ T26] audit: type=1326 audit(1787246303.490:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5976e20d9 code=0x0 [ 62.177505][ T4309] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 62.393255][ T4320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.465358][ T4320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 62.502110][ T4327] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.593182][ T4329] netlink: 76 bytes leftover after parsing attributes in process `syz.4.20'. [ 63.552619][ T4341] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.561578][ T4341] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.570440][ T4341] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.579314][ T4341] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.808048][ T4230] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.851108][ T4230] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.198456][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.734737][ T4230] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 64.752911][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.879141][ T4230] usb 5-1: Product: syz [ 64.883341][ T4230] usb 5-1: Manufacturer: syz [ 64.893352][ T4230] usb 5-1: SerialNumber: syz [ 65.250011][ T4377] kvm [4376]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 65.284586][ T4377] kvm [4376]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 65.310228][ T4377] kvm [4376]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 65.345075][ T4377] kvm [4376]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 65.754253][ T1324] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.915909][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 66.005824][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 66.015912][ T1324] usb 4-1: Using ep0 maxpacket: 32 [ 66.144550][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.198767][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 66.236255][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.310365][ T4230] lan78xx: probe of 5-1:1.0 failed with error -32 [ 66.325470][ T1324] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 66.395038][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.404987][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 66.429617][ T1324] usb 4-1: config 0 descriptor?? [ 66.468427][ T4410] Zero length message leads to an empty skb [ 66.593399][ T4417] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 66.606588][ T4415] device syzkaller0 entered promiscuous mode [ 66.761338][ T4229] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.791162][ T4229] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.850401][ T4428] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.859281][ T4428] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.868055][ T4428] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.876858][ T4428] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.972724][ T1324] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 67.582571][ T21] usb 5-1: USB disconnect, device number 2 [ 67.987212][ T4231] usb 4-1: USB disconnect, device number 2 [ 68.117360][ T4445] [ 68.119722][ T4445] ============================= [ 68.157326][ T4445] WARNING: suspicious RCU usage [ 68.175233][ T4445] syzkaller #0 Not tainted [ 68.195313][ T4445] ----------------------------- [ 68.214056][ T4445] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 68.245486][ T4445] [ 68.245486][ T4445] other info that might help us debug this: [ 68.245486][ T4445] [ 68.295468][ T4445] [ 68.295468][ T4445] rcu_scheduler_active = 2, debug_locks = 1 [ 68.340675][ T4445] 1 lock held by syz.4.59/4445: [ 68.350812][ T4445] #0: ffffffff8d44d988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 68.384506][ T4445] [ 68.384506][ T4445] stack backtrace: [ 68.399888][ T4447] kvm [4446]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 68.411006][ T4445] CPU: 1 PID: 4445 Comm: syz.4.59 Not tainted syzkaller #0 [ 68.418232][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.428306][ T4445] Call Trace: [ 68.431585][ T4445] [ 68.434516][ T4445] dump_stack_lvl+0x188/0x250 [ 68.439224][ T4445] ? load_image+0x410/0x410 [ 68.443738][ T4445] ? show_regs_print_info+0x20/0x20 [ 68.448947][ T4445] ? lockdep_rcu_suspicious+0x110/0x180 [ 68.454496][ T4445] ? local_bh_enable+0x20/0x20 [ 68.459261][ T4445] rhltable_lookup+0x787/0x7a0 [ 68.464030][ T4445] ? mark_lock+0x94/0x320 [ 68.468356][ T4445] ? mr_mfc_find_parent+0x190/0x190 [ 68.473565][ T4445] ? local_bh_enable+0x20/0x20 [ 68.478336][ T4445] ? lock_chain_count+0x20/0x20 [ 68.483192][ T4445] mr_mfc_find_any_parent+0xb7/0x1d0 [ 68.488486][ T4445] ? local_bh_enable+0x20/0x20 [ 68.493248][ T4445] ip_mr_forward+0x247/0xf60 [ 68.497842][ T4445] ipmr_mfc_add+0x2273/0x2bd0 [ 68.502569][ T4445] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 68.507504][ T4445] ? __lock_acquire+0x7b50/0x7b50 [ 68.512543][ T4445] ip_mroute_setsockopt+0xecd/0x1230 [ 68.517832][ T4445] ? ipmr_rule_default+0x70/0x70 [ 68.522771][ T4445] ? __might_sleep+0xf0/0xf0 [ 68.527355][ T4445] ip_setsockopt+0x568/0x31e0 [ 68.532037][ T4445] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 68.537403][ T4445] ? aa_sk_perm+0x7dc/0x910 [ 68.541904][ T4445] ? aa_af_perm+0x340/0x340 [ 68.546399][ T4445] ? __fget_files+0x402/0x470 [ 68.551071][ T4445] ? aa_sock_opt_perm+0x74/0x100 [ 68.556007][ T4445] ? sock_common_setsockopt+0x32/0xb0 [ 68.561373][ T4445] ? raw_setsockopt+0xc2/0x170 [ 68.566135][ T4445] ? sock_common_recvmsg+0x1c0/0x1c0 [ 68.571413][ T4445] __sys_setsockopt+0x2bf/0x3d0 [ 68.576260][ T4445] __x64_sys_setsockopt+0xb1/0xc0 [ 68.581285][ T4445] do_syscall_64+0x4c/0xa0 [ 68.585692][ T4445] ? clear_bhb_loop+0x30/0x80 [ 68.590365][ T4445] ? clear_bhb_loop+0x30/0x80 [ 68.595039][ T4445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.600936][ T4445] RIP: 0033:0x7f351ae260d9 [ 68.605347][ T4445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.624945][ T4445] RSP: 002b:00007f351907e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.633356][ T4445] RAX: ffffffffffffffda RBX: 00007f351b0adfa0 RCX: 00007f351ae260d9 [ 68.641317][ T4445] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 68.649279][ T4445] RBP: 00007f351aebd024 R08: 000000000000003c R09: 0000000000000000 [ 68.657272][ T4445] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 68.665240][ T4445] R13: 00007f351b0ae038 R14: 00007f351b0adfa0 R15: 00007ffd148b9b88 [ 68.673217][ T4445] [ 68.692573][ T4445] [ 68.696137][ T4445] ============================= [ 68.710821][ T4447] kvm [4446]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 68.725319][ T4445] WARNING: suspicious RCU usage [ 68.729643][ T4447] kvm [4446]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 68.730270][ T4445] syzkaller #0 Not tainted [ 68.743103][ T4447] kvm [4446]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 68.743375][ T4445] ----------------------------- [ 68.757970][ T4445] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 68.771427][ T4445] [ 68.771427][ T4445] other info that might help us debug this: [ 68.771427][ T4445] [ 68.783132][ T4445] [ 68.783132][ T4445] rcu_scheduler_active = 2, debug_locks = 1 [ 68.805143][ T4445] 1 lock held by syz.4.59/4445: [ 68.810222][ T4445] #0: ffffffff8d44d988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 68.823327][ T4445] [ 68.823327][ T4445] stack backtrace: [ 68.832134][ T4445] CPU: 0 PID: 4445 Comm: syz.4.59 Not tainted syzkaller #0 [ 68.839362][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.849431][ T4445] Call Trace: [ 68.852720][ T4445] [ 68.855668][ T4445] dump_stack_lvl+0x188/0x250 [ 68.860368][ T4445] ? load_image+0x410/0x410 [ 68.864889][ T4445] ? show_regs_print_info+0x20/0x20 [ 68.870076][ T4445] ? lockdep_rcu_suspicious+0x110/0x180 [ 68.875604][ T4445] ? local_bh_enable+0x20/0x20 [ 68.880358][ T4445] rhltable_lookup+0x512/0x7a0 [ 68.885116][ T4445] ? local_bh_enable+0x20/0x20 [ 68.889868][ T4445] ? mr_mfc_find_parent+0x190/0x190 [ 68.895053][ T4445] ? local_bh_enable+0x20/0x20 [ 68.899830][ T4445] ? lock_chain_count+0x20/0x20 [ 68.904678][ T4445] mr_mfc_find_any_parent+0xb7/0x1d0 [ 68.909957][ T4445] ? local_bh_enable+0x20/0x20 [ 68.914712][ T4445] ip_mr_forward+0x247/0xf60 [ 68.919312][ T4445] ipmr_mfc_add+0x2273/0x2bd0 [ 68.923995][ T4445] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 68.928940][ T4445] ? __lock_acquire+0x7b50/0x7b50 [ 68.933963][ T4445] ip_mroute_setsockopt+0xecd/0x1230 [ 68.939257][ T4445] ? ipmr_rule_default+0x70/0x70 [ 68.944202][ T4445] ? __might_sleep+0xf0/0xf0 [ 68.948774][ T4445] ip_setsockopt+0x568/0x31e0 [ 68.953436][ T4445] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 68.958789][ T4445] ? aa_sk_perm+0x7dc/0x910 [ 68.963413][ T4445] ? aa_af_perm+0x340/0x340 [ 68.967904][ T4445] ? __fget_files+0x402/0x470 [ 68.972570][ T4445] ? aa_sock_opt_perm+0x74/0x100 [ 68.977491][ T4445] ? sock_common_setsockopt+0x32/0xb0 [ 68.982866][ T4445] ? raw_setsockopt+0xc2/0x170 [ 68.987614][ T4445] ? sock_common_recvmsg+0x1c0/0x1c0 [ 68.992885][ T4445] __sys_setsockopt+0x2bf/0x3d0 [ 68.997746][ T4445] __x64_sys_setsockopt+0xb1/0xc0 [ 69.002754][ T4445] do_syscall_64+0x4c/0xa0 [ 69.007153][ T4445] ? clear_bhb_loop+0x30/0x80 [ 69.011829][ T4445] ? clear_bhb_loop+0x30/0x80 [ 69.016496][ T4445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.022370][ T4445] RIP: 0033:0x7f351ae260d9 [ 69.026766][ T4445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.046353][ T4445] RSP: 002b:00007f351907e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.054772][ T4445] RAX: ffffffffffffffda RBX: 00007f351b0adfa0 RCX: 00007f351ae260d9 [ 69.062733][ T4445] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 69.070687][ T4445] RBP: 00007f351aebd024 R08: 000000000000003c R09: 0000000000000000 [ 69.078641][ T4445] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 69.086618][ T4445] R13: 00007f351b0ae038 R14: 00007f351b0adfa0 R15: 00007ffd148b9b88 [ 69.094581][ T4445] [ 69.118470][ T26] audit: type=1326 audit(1787246310.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4443 comm="syz.1.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c39cd70d9 code=0x0 [ 69.181884][ T4445] [ 69.184626][ T4445] ============================= [ 69.189620][ T4445] WARNING: suspicious RCU usage [ 69.199011][ T4445] syzkaller #0 Not tainted [ 69.203574][ T4445] ----------------------------- [ 69.210228][ T4445] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 69.219217][ T4445] [ 69.219217][ T4445] other info that might help us debug this: [ 69.219217][ T4445] [ 69.230356][ T4445] [ 69.230356][ T4445] rcu_scheduler_active = 2, debug_locks = 1 [ 69.239149][ T4445] 1 lock held by syz.4.59/4445: [ 69.251014][ T4445] #0: ffffffff8d44d988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 69.261861][ T4445] [ 69.261861][ T4445] stack backtrace: [ 69.268091][ T4445] CPU: 0 PID: 4445 Comm: syz.4.59 Not tainted syzkaller #0 [ 69.275303][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.285361][ T4445] Call Trace: [ 69.288643][ T4445] [ 69.291570][ T4445] dump_stack_lvl+0x188/0x250 [ 69.296258][ T4445] ? load_image+0x410/0x410 [ 69.300766][ T4445] ? show_regs_print_info+0x20/0x20 [ 69.305974][ T4445] ? lockdep_rcu_suspicious+0x110/0x180 [ 69.311526][ T4445] ? local_bh_enable+0x20/0x20 [ 69.316288][ T4445] rhltable_lookup+0x5fc/0x7a0 [ 69.321056][ T4445] ? local_bh_enable+0x20/0x20 [ 69.325815][ T4445] ? mr_mfc_find_parent+0x190/0x190 [ 69.331013][ T4445] ? local_bh_enable+0x20/0x20 [ 69.335775][ T4445] ? lock_chain_count+0x20/0x20 [ 69.340740][ T4445] mr_mfc_find_any_parent+0xb7/0x1d0 [ 69.346036][ T4445] ? local_bh_enable+0x20/0x20 [ 69.350813][ T4445] ip_mr_forward+0x247/0xf60 [ 69.355422][ T4445] ipmr_mfc_add+0x2273/0x2bd0 [ 69.360113][ T4445] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 69.365043][ T4445] ? __lock_acquire+0x7b50/0x7b50 [ 69.370082][ T4445] ip_mroute_setsockopt+0xecd/0x1230 [ 69.375372][ T4445] ? ipmr_rule_default+0x70/0x70 [ 69.380428][ T4445] ? __might_sleep+0xf0/0xf0 [ 69.385028][ T4445] ip_setsockopt+0x568/0x31e0 [ 69.389714][ T4445] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 69.395209][ T4445] ? aa_sk_perm+0x7dc/0x910 [ 69.399733][ T4445] ? aa_af_perm+0x340/0x340 [ 69.404239][ T4445] ? __fget_files+0x402/0x470 [ 69.408919][ T4445] ? aa_sock_opt_perm+0x74/0x100 [ 69.413855][ T4445] ? sock_common_setsockopt+0x32/0xb0 [ 69.419230][ T4445] ? raw_setsockopt+0xc2/0x170 [ 69.423996][ T4445] ? sock_common_recvmsg+0x1c0/0x1c0 [ 69.429281][ T4445] __sys_setsockopt+0x2bf/0x3d0 [ 69.434139][ T4445] __x64_sys_setsockopt+0xb1/0xc0 [ 69.439162][ T4445] do_syscall_64+0x4c/0xa0 [ 69.443577][ T4445] ? clear_bhb_loop+0x30/0x80 [ 69.448252][ T4445] ? clear_bhb_loop+0x30/0x80 [ 69.452927][ T4445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.458901][ T4445] RIP: 0033:0x7f351ae260d9 [ 69.463321][ T4445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.482928][ T4445] RSP: 002b:00007f351907e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.491341][ T4445] RAX: ffffffffffffffda RBX: 00007f351b0adfa0 RCX: 00007f351ae260d9 [ 69.499313][ T4445] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 69.507277][ T4445] RBP: 00007f351aebd024 R08: 000000000000003c R09: 0000000000000000 [ 69.515241][ T4445] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 69.523204][ T4445] R13: 00007f351b0ae038 R14: 00007f351b0adfa0 R15: 00007ffd148b9b88 [ 69.531182][ T4445] [ 71.202041][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.208589][ T1421] ieee802154 phy1 wpan1: encryption failed: -22