last executing test programs: 15.769032528s ago: executing program 2 (id=227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) 14.781425516s ago: executing program 2 (id=231): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010", @ANYBLOB], 0x3c}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x747}], 0x1, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(r6, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 11.238411127s ago: executing program 2 (id=241): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0xc, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) 10.569167943s ago: executing program 2 (id=243): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40000) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x95, 0x2001) mmap(&(0x7f00001b6000/0x1000)=nil, 0x1000, 0x7, 0x20010, 0xffffffffffffffff, 0xbe58000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r6, &(0x7f0000000180)=""/187, 0xbb, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 9.48852272s ago: executing program 3 (id=245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) close_range(r2, 0xffffffffffffffff, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xfffffffdffffffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 9.405083908s ago: executing program 1 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) 8.659586982s ago: executing program 1 (id=247): sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000227bd7000fbdbdf252100000044002d8005000100f900000005000100090000000800020002000000080003000700000005000100bf0000000800030004000000080002000300000008000200020000000c00060003000000000000000c0006"], 0xc0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044881) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x8, 0x7f}}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.459475352s ago: executing program 3 (id=248): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000e4ffffff000000dfd47d19a5", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x17d}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000100)="84aef1e85b57b35d0f80609e0fc0c8aa9cfe250d", &(0x7f0000000340)=""/252}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRESDEC], 0x48) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd4d76e016b67000fedb75b91fc8000018749574252a4ca9a7"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) 8.297216308s ago: executing program 1 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 7.56885243s ago: executing program 3 (id=251): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010", @ANYBLOB], 0x3c}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x747}], 0x1, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(r6, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 7.453242101s ago: executing program 1 (id=252): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)) 7.248400922s ago: executing program 4 (id=253): r0 = fanotify_init(0x0, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x39, 0x1a, r4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 6.186887697s ago: executing program 3 (id=254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @echo={0x8, 0x0, 0x0, 0x2}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)=[@exit_looper, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x18) 6.15734784s ago: executing program 4 (id=255): r0 = syz_open_dev$dri(&(0x7f0000000580), 0x10000000007fc, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0x10, 0xffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 5.877188448s ago: executing program 2 (id=256): r0 = fanotify_init(0x0, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x39, 0x1a, r4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) 5.114120263s ago: executing program 4 (id=258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) close_range(r2, 0xffffffffffffffff, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xfffffffdffffffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.919782863s ago: executing program 0 (id=259): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgsnd(r0, 0x0, 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) 4.865024848s ago: executing program 2 (id=260): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000100)='%pB \x00'}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() write$evdev(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 4.818494142s ago: executing program 0 (id=261): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000e4ffffff000000dfd47d19a5", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x17d}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000100)="84aef1e85b57b35d0f80609e0fc0c8aa9cfe250d", &(0x7f0000000340)=""/252}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRESDEC], 0x48) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd4d76e016b67000fedb75b91fc8000018749574252a4ca9a7"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) 4.504264594s ago: executing program 0 (id=262): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 3.724405861s ago: executing program 4 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) close_range(r2, 0xffffffffffffffff, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xfffffffdffffffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3.6370807s ago: executing program 0 (id=264): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010", @ANYBLOB], 0x3c}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x747}], 0x1, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(r6, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 3.299881673s ago: executing program 1 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.12392587s ago: executing program 3 (id=266): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x95, 0x2001) mmap(&(0x7f00001b6000/0x1000)=nil, 0x1000, 0x7, 0x20010, 0xffffffffffffffff, 0xbe58000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r5, &(0x7f0000000180)=""/187, 0xbb, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 3.017282221s ago: executing program 0 (id=267): fanotify_init(0x0, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) 2.037545488s ago: executing program 0 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) munlockall() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 2.010472091s ago: executing program 1 (id=269): r0 = syz_open_dev$dri(&(0x7f0000000580), 0x10000000007fc, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0x10, 0xffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 1.903700471s ago: executing program 4 (id=270): fanotify_init(0x0, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) 925.234289ms ago: executing program 3 (id=271): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1, 0x5}) sendmsg$nl_route_sched(r0, 0x0, 0x50) 0s ago: executing program 4 (id=272): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000e4ffffff000000dfd47d19a5", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x17d}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000100)="84aef1e85b57b35d0f80609e0fc0c8aa9cfe250d", &(0x7f0000000340)=""/252}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRESDEC], 0x48) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd4d76e016b67000fedb75b91fc8000018749574252a4ca9a7"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. syzkaller login: [ 73.468413][ T4174] cgroup: Unknown subsys name 'net' [ 73.599909][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.141481][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.204709][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 77.286759][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 77.335044][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 77.391816][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.400212][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.408904][ T4194] device bridge_slave_0 entered promiscuous mode [ 77.421700][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.429254][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.437302][ T4194] device bridge_slave_1 entered promiscuous mode [ 77.466702][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 77.479920][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 77.525506][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.572191][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.601024][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.608259][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.616736][ T4186] device bridge_slave_0 entered promiscuous mode [ 77.624404][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.631504][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.640062][ T4187] device bridge_slave_0 entered promiscuous mode [ 77.667148][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.674384][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.682641][ T4186] device bridge_slave_1 entered promiscuous mode [ 77.690438][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.697736][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.705766][ T4187] device bridge_slave_1 entered promiscuous mode [ 77.726309][ T4194] team0: Port device team_slave_0 added [ 77.763912][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.774611][ T4194] team0: Port device team_slave_1 added [ 77.782046][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.826094][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.833362][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.841216][ T4184] device bridge_slave_0 entered promiscuous mode [ 77.860024][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.886903][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.894299][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.902148][ T4184] device bridge_slave_1 entered promiscuous mode [ 77.922449][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.932494][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.939761][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.965970][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.980857][ T4187] team0: Port device team_slave_0 added [ 77.995257][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.002349][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.010958][ T4185] device bridge_slave_0 entered promiscuous mode [ 78.027877][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.035171][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.061381][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.073796][ T4187] team0: Port device team_slave_1 added [ 78.093020][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.100271][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.108851][ T4185] device bridge_slave_1 entered promiscuous mode [ 78.128355][ T4186] team0: Port device team_slave_0 added [ 78.146017][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.169123][ T4186] team0: Port device team_slave_1 added [ 78.186848][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.211946][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.219184][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.245558][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.275178][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.292601][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.300030][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.326461][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.364309][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.374509][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.381482][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.407962][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.421133][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.428548][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.455120][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.469369][ T4194] device hsr_slave_0 entered promiscuous mode [ 78.476787][ T4194] device hsr_slave_1 entered promiscuous mode [ 78.486004][ T4184] team0: Port device team_slave_0 added [ 78.513077][ T4184] team0: Port device team_slave_1 added [ 78.538752][ T4185] team0: Port device team_slave_0 added [ 78.569010][ T4185] team0: Port device team_slave_1 added [ 78.586596][ T4187] device hsr_slave_0 entered promiscuous mode [ 78.593808][ T4187] device hsr_slave_1 entered promiscuous mode [ 78.600397][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.608313][ T4187] Cannot create hsr debugfs directory [ 78.618812][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.625914][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.652212][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.680571][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.687616][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.714097][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.735641][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.742639][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.769380][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.789338][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.796728][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.823913][ T2304] Bluetooth: hci4: command 0x0409 tx timeout [ 78.823913][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 78.824971][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.870357][ T4186] device hsr_slave_0 entered promiscuous mode [ 78.877558][ T4186] device hsr_slave_1 entered promiscuous mode [ 78.884624][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.892203][ T4186] Cannot create hsr debugfs directory [ 78.903147][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 78.913320][ T2304] Bluetooth: hci2: command 0x0409 tx timeout [ 78.919906][ T2304] Bluetooth: hci0: command 0x0409 tx timeout [ 78.998150][ T4184] device hsr_slave_0 entered promiscuous mode [ 79.005096][ T4184] device hsr_slave_1 entered promiscuous mode [ 79.011619][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.019392][ T4184] Cannot create hsr debugfs directory [ 79.082464][ T4185] device hsr_slave_0 entered promiscuous mode [ 79.089492][ T4185] device hsr_slave_1 entered promiscuous mode [ 79.096579][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.104399][ T4185] Cannot create hsr debugfs directory [ 79.367397][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.393324][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.403370][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.413763][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.443640][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.459065][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.475660][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.491339][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.578634][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.604187][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.614663][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.627047][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.638353][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.653390][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.685144][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.695750][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.710727][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.749973][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.761155][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.775422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.785745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.804346][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.820407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.831847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.841317][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.848821][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.859473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.891265][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.913763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.925411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.934997][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.942088][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.950480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.960796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.984574][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.001637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.010649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.021873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.031800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.040751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.051276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.059911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.068030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.079165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.090968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.100354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.110149][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.120283][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.136906][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.147589][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.166077][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.189490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.198487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.208643][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.215796][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.247907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.272031][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.289548][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.302278][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.309638][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.332485][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.355545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.415993][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.452268][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.471468][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.481943][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.493935][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.502159][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.516518][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.526303][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.535167][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.542457][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.550649][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.562185][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.584960][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.593969][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.603908][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.614272][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.623012][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.630102][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.639780][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.648997][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.656869][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.664513][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.677316][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.686189][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.700802][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.721185][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.729590][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.743905][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.752545][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.778228][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.788836][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.802924][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.811970][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.821931][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.831957][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.842498][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.851183][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.859760][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.892969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.901563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.910757][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 80.913376][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 80.920401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.933663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.946111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.955156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.967323][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.984777][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 80.993162][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 80.994123][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.999569][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 81.016970][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.036143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.044962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.056196][ T4194] device veth0_vlan entered promiscuous mode [ 81.085935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.098371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.110757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.128252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.140920][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.148098][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.157538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.167554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.176692][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.183836][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.192717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.203571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.211504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.219918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.229319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.242005][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.264697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.276846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.285835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.296933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.307054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.316486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.328362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.372707][ T4194] device veth1_vlan entered promiscuous mode [ 81.387573][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.404279][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.412333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.421835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.430793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.438915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.446660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.455454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.469781][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.477137][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.489076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.498140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.507140][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.514282][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.522244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.551395][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.569755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.578082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.588246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.599241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.608442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.620040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.633424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.658512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.668438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.680924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.688833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.700691][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.710661][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.738171][ T4194] device veth0_macvtap entered promiscuous mode [ 81.760024][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.771076][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.796156][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.818353][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.827358][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.837616][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.847237][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.855840][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.865600][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.873902][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.882876][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.894172][ T4194] device veth1_macvtap entered promiscuous mode [ 81.914077][ T4184] device veth0_vlan entered promiscuous mode [ 81.960200][ T4184] device veth1_vlan entered promiscuous mode [ 81.976064][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.990823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.001395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.011187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.027641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.041401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.057395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.090643][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.129591][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.143119][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.152137][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.164408][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.172006][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.181226][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.190025][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.199320][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.207890][ T1310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.218395][ T4186] device veth0_vlan entered promiscuous mode [ 82.229041][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.249284][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.258716][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.270107][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.278938][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.294714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.304086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.315450][ T4184] device veth0_macvtap entered promiscuous mode [ 82.351250][ T4186] device veth1_vlan entered promiscuous mode [ 82.367264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.376685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.385469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.395798][ T4184] device veth1_macvtap entered promiscuous mode [ 82.424874][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.458927][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.477490][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.493651][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.536709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.555262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.564592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.574118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.583061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.591923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.605463][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.617010][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.628385][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.661397][ T4186] device veth0_macvtap entered promiscuous mode [ 82.671698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.688919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.698918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.714769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.729026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.738778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.747684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.759375][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.768347][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.779518][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.789044][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.807420][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.815328][ T4186] device veth1_macvtap entered promiscuous mode [ 82.816180][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.838337][ T4185] device veth0_vlan entered promiscuous mode [ 82.879536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.888574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.911456][ T4185] device veth1_vlan entered promiscuous mode [ 82.936508][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.947958][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.958218][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.969093][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.981296][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.989529][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 82.996518][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 83.018714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.032313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.041014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.050673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.062231][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.073683][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 83.080001][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.080012][ T4249] Bluetooth: hci0: command 0x040f tx timeout [ 83.090480][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.096358][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 83.113420][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.125289][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.145832][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.156133][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.177944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.187990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.202302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.222255][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.241638][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.250928][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.260058][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.278836][ T4185] device veth0_macvtap entered promiscuous mode [ 83.304583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.314273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.324932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.346105][ T4185] device veth1_macvtap entered promiscuous mode [ 83.373342][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.384822][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.404120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.412334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.421611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.498079][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.511337][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.525070][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.536468][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.555899][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.567222][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.579948][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.665026][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.697892][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.743328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.751902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.763261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.772075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.781592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.791069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.799337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.980783][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.141862][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.275932][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.407129][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.429829][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.447489][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.459856][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.507873][ T4187] device veth0_vlan entered promiscuous mode [ 84.520484][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.529285][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.540216][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.541143][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.556102][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.569983][ T4303] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.575297][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.598027][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.606377][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.622318][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.631980][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.646686][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657098][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.719885][ T4187] device veth1_vlan entered promiscuous mode [ 84.784179][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.860607][ T4187] device veth0_macvtap entered promiscuous mode [ 84.917318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.932351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.983178][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.991353][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.000957][ T4187] device veth1_macvtap entered promiscuous mode [ 85.064499][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 85.104628][ T4316] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 85.111461][ T4316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.120102][ T4316] vhci_hcd vhci_hcd.0: Device attached [ 85.142282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.172417][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 85.182818][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.225022][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 85.258003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.393747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.430215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 85.448571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 85.473270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 85.483276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 85.493102][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.502470][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.511821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 85.521188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 85.541440][ T4315] Bluetooth: hci3: command 0x0419 tx timeout [ 85.616103][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 85.738581][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 86.053579][ T1108] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 86.101659][ T4320] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 86.135005][ T4317] vhci_hcd: connection closed [ 86.138569][ T4318] vhci_hcd: stop threads [ 86.278335][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.348733][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.363877][ T4318] vhci_hcd: release socket [ 86.375572][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.383350][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f1fdc00: rx timeout, send abort [ 86.393497][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805f1fdc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 86.492940][ T4318] vhci_hcd: disconnect device [ 86.502088][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.512543][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.523253][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.533194][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.544047][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.554823][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.565536][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.577457][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.593789][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.632528][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.642884][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.676861][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.715636][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.751433][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.787485][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.828902][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.870073][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.948259][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.995850][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.018304][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.118835][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.133806][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.174944][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.227334][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.693699][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.714289][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.991254][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.010137][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.052000][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.069626][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.079603][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.093407][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.136653][ T4242] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.553042][ T4242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.567940][ T4242] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.578291][ T4242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.592589][ T4242] usb 1-1: config 0 descriptor?? [ 89.156149][ T4242] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 89.176405][ T4242] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 89.983599][ T4349] udc-core: couldn't find an available UDC or it's busy [ 89.991534][ T4349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.162044][ T4401] process 'syz.3.26' launched '/dev/fd/6' with NULL argv: empty string added [ 91.087803][ T4242] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 91.233051][ T1108] vhci_hcd: vhci_device speed not set [ 91.326314][ T23] usb 1-1: USB disconnect, device number 2 [ 93.335637][ T4454] netlink: 'syz.0.38': attribute type 2 has an invalid length. [ 93.391178][ T4438] fido_id[4438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 93.412881][ T4452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.37'. [ 93.471022][ T4454] netlink: 'syz.0.38': attribute type 3 has an invalid length. [ 93.482900][ T4454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38'. [ 93.542724][ T4452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.37'. [ 95.352218][ T21] cfg80211: failed to load regulatory.db [ 95.388818][ T4488] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 98.161947][ T4510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.52'. [ 98.183410][ T4510] netlink: 48 bytes leftover after parsing attributes in process `syz.1.52'. [ 98.618257][ T4518] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 98.698943][ T4518] netlink: 'syz.1.56': attribute type 3 has an invalid length. [ 98.800670][ T4518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.56'. [ 102.826203][ T26] audit: type=1326 audit(1760668698.251:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 102.969929][ T26] audit: type=1326 audit(1760668698.281:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 103.103256][ T26] audit: type=1326 audit(1760668698.291:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 103.205799][ T26] audit: type=1326 audit(1760668698.291:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 103.340739][ T4564] tipc: Started in network mode [ 103.413191][ T4564] tipc: Node identity 4, cluster identity 4711 [ 103.419414][ T4564] tipc: Node number set to 4 [ 104.187883][ T26] audit: type=1326 audit(1760668698.301:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 104.220422][ T26] audit: type=1326 audit(1760668698.321:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 104.453741][ T4549] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 105.597479][ T26] audit: type=1326 audit(1760668698.321:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 105.678508][ T26] audit: type=1326 audit(1760668698.331:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 105.837425][ T26] audit: type=1326 audit(1760668698.331:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 105.911210][ T26] audit: type=1326 audit(1760668698.331:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcf25e21ec9 code=0x7ffc0000 [ 105.967670][ T4249] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.095709][ T4595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 106.244407][ T4249] usb 4-1: Using ep0 maxpacket: 32 [ 106.785286][ T4607] netlink: 'syz.2.84': attribute type 2 has an invalid length. [ 106.809650][ T4607] netlink: 'syz.2.84': attribute type 3 has an invalid length. [ 106.829664][ T4607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.84'. [ 106.903370][ T4249] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 106.924768][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.961612][ T4249] usb 4-1: Product: syz [ 106.968469][ T4249] usb 4-1: Manufacturer: syz [ 106.980226][ T4249] usb 4-1: SerialNumber: syz [ 107.019485][ T4249] usb 4-1: config 0 descriptor?? [ 107.325323][ T23] usb 4-1: USB disconnect, device number 2 [ 121.013514][ T4757] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[4757] [ 124.954305][ T4822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.299093][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 125.331794][ T4829] device netdevsim0 entered promiscuous mode [ 125.389371][ T4829] syz.0.152 (4829) used greatest stack depth: 21120 bytes left [ 125.885454][ T4848] team0: No ports can be present during mode change [ 126.996388][ T4315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.964637][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.144332][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.270077][ T4315] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 128.279462][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.430217][ T4315] usb 3-1: config 0 descriptor?? [ 128.927794][ T4879] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 129.188634][ T4315] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 129.201146][ T4315] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 129.221306][ T4315] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 129.261543][ T4315] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 129.279256][ T4315] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 129.292614][ T4315] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 129.314098][ T4315] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 129.436231][ T4315] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 129.583053][ T4315] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 129.793150][ T4315] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 129.835253][ T4315] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 129.910379][ T4315] usb 3-1: USB disconnect, device number 2 [ 130.080808][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 130.080824][ T26] audit: type=1326 audit(1760668725.501:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb18ca1ec9 code=0x7ffc0000 [ 130.145393][ T4899] fido_id[4899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 130.191952][ T26] audit: type=1326 audit(1760668725.501:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb18ca1ec9 code=0x7ffc0000 [ 130.275156][ T26] audit: type=1326 audit(1760668725.561:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbb18ca1ec9 code=0x7ffc0000 [ 130.423730][ T4907] Zero length message leads to an empty skb [ 131.077852][ T26] audit: type=1326 audit(1760668725.561:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb18ca1f03 code=0x7ffc0000 [ 131.272095][ T26] audit: type=1326 audit(1760668725.571:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb18ca1f03 code=0x7ffc0000 [ 131.310038][ T26] audit: type=1326 audit(1760668725.571:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb18ca1ec9 code=0x7ffc0000 [ 131.378611][ T26] audit: type=1326 audit(1760668725.571:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb18ca1ec9 code=0x7ffc0000 [ 132.326699][ T26] audit: type=1326 audit(1760668725.601:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb18ca1ec9 code=0x7ffc0000 [ 132.422964][ T26] audit: type=1326 audit(1760668725.601:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb18ca1ec9 code=0x7ffc0000 [ 132.530560][ T26] audit: type=1326 audit(1760668725.601:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.4.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb18ca1ec9 code=0x7ffc0000 [ 134.937982][ T4929] syz.2.185 (4929): drop_caches: 2 [ 135.929794][ T4964] netlink: 'syz.2.197': attribute type 2 has an invalid length. [ 135.971592][ T4964] netlink: 'syz.2.197': attribute type 3 has an invalid length. [ 136.125602][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 136.725582][ T4964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.197'. [ 137.247205][ T4315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.336203][ T4257] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.393234][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 138.733275][ T4315] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 138.943232][ T4315] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.963494][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.971563][ T4315] usb 4-1: Product: syz [ 138.996327][ T4315] usb 4-1: Manufacturer: syz [ 139.011740][ T4315] usb 4-1: SerialNumber: syz [ 139.054256][ T4315] usb 4-1: config 0 descriptor?? [ 139.083072][ T4257] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 139.133292][ T1108] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 139.153078][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.207783][ T4257] usb 2-1: Product: syz [ 139.227738][ T4257] usb 2-1: Manufacturer: syz [ 139.233836][ T4257] usb 2-1: SerialNumber: syz [ 139.298289][ T4257] usb 2-1: config 0 descriptor?? [ 139.409633][ T4249] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 139.464716][ T4999] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 139.472531][ T4999] netlink: 'syz.4.209': attribute type 3 has an invalid length. [ 139.480519][ T4999] netlink: 132 bytes leftover after parsing attributes in process `syz.4.209'. [ 139.573062][ T4257] usb 2-1: ignoring: probably an ADSL modem [ 139.723071][ T1108] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.732666][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.740777][ T1108] usb 3-1: Product: syz [ 139.745259][ T1108] usb 3-1: Manufacturer: syz [ 139.749884][ T1108] usb 3-1: SerialNumber: syz [ 139.757877][ T1108] usb 3-1: config 0 descriptor?? [ 139.803377][ T4249] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.816265][ T4249] usb 1-1: config 0 has no interface number 0 [ 139.822467][ T4249] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 139.832985][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.844848][ T4257] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 139.855454][ T4249] usb 1-1: config 0 descriptor?? [ 139.861461][ T4257] usb 2-1: USB disconnect, device number 2 [ 139.895276][ T4249] usb 1-1: selecting invalid altsetting 1 [ 139.903193][ T4249] dvb_ttusb_budget: ttusb_init_controller: error [ 139.909687][ T4249] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 139.958974][ T4249] DVB: Unable to find symbol cx22700_attach() [ 139.985632][ T4249] DVB: Unable to find symbol tda10046_attach() [ 139.991977][ T4249] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 140.015088][ T1108] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.100592][ T4256] usb 1-1: USB disconnect, device number 3 [ 140.465578][ T4249] usb 4-1: USB disconnect, device number 3 [ 141.065197][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.071902][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.453096][ T1108] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 142.469027][ T1108] usb 3-1: USB disconnect, device number 3 [ 142.737525][ T5043] netlink: 'syz.0.222': attribute type 2 has an invalid length. [ 142.746603][ T5043] netlink: 'syz.0.222': attribute type 3 has an invalid length. [ 142.756387][ T5043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.222'. [ 145.643841][ T5074] capability: warning: `syz.1.232' uses deprecated v2 capabilities in a way that may be insecure [ 145.709950][ T5074] program syz.1.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.826824][ T5081] netlink: 'syz.4.233': attribute type 2 has an invalid length. [ 145.872922][ T5081] netlink: 'syz.4.233': attribute type 3 has an invalid length. [ 145.880803][ T5081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.233'. [ 150.478366][ T5116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.288954][ T5128] netlink: 'syz.3.248': attribute type 2 has an invalid length. [ 151.349553][ T5128] netlink: 'syz.3.248': attribute type 3 has an invalid length. [ 151.421146][ T5128] netlink: 132 bytes leftover after parsing attributes in process `syz.3.248'. [ 153.449242][ T4256] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 154.803331][ T4256] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 154.841006][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.888599][ T4256] usb 2-1: config 0 descriptor?? [ 154.935540][ T5175] netlink: 'syz.0.261': attribute type 2 has an invalid length. [ 154.947801][ T5175] netlink: 'syz.0.261': attribute type 3 has an invalid length. [ 154.956326][ T5175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.261'. [ 155.176074][ T4256] kaweth 2-1:0.0: Firmware present in device. [ 155.373075][ T4256] kaweth 2-1:0.0: Statistics collection: 0 [ 155.379167][ T4256] kaweth 2-1:0.0: Multicast filter limit: 0 [ 155.512907][ T4256] kaweth 2-1:0.0: MTU: 0 [ 155.517366][ T4256] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 155.813654][ T4256] kaweth 2-1:0.0: Error setting SOFS wait [ 155.823278][ T4256] kaweth: probe of 2-1:0.0 failed with error -5 [ 155.895188][ T4256] usb 2-1: USB disconnect, device number 3 [ 158.550119][ T5195] sched: RT throttling activated [ 159.720336][ C1] ------------[ cut here ]------------ [ 159.725956][ C1] WARNING: CPU: 1 PID: 5208 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x172c/0x1f80 [ 159.736067][ C1] Modules linked in: [ 159.740003][ C1] CPU: 1 PID: 5208 Comm: syz.3.271 Not tainted syzkaller #0 [ 159.747662][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.757829][ C1] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 159.764273][ C1] Code: f8 0f 0b e9 f1 fa ff ff e8 81 83 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 70 83 3a f8 0f 0b e9 3c ef ff ff e8 64 83 3a f8 <0f> 0b e9 b8 f2 ff ff e8 88 e7 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 159.784097][ C1] RSP: 0018:ffffc90000dd08c0 EFLAGS: 00010246 [ 159.790239][ C1] RAX: ffffffff893d46ec RBX: ffff88806016cc80 RCX: ffff8880205fd940 [ 159.798312][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.806360][ C1] RBP: ffffc90000dd0ae8 R08: ffff8880205fd940 R09: 0000000000000003 [ 159.814431][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888022230a00 [ 159.818550][ T5213] netlink: 'syz.4.272': attribute type 2 has an invalid length. [ 159.822443][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba128 [ 159.822479][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 159.822498][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.822512][ C1] CR2: 000000110c42699f CR3: 000000005222b000 CR4: 00000000003506e0 [ 159.822531][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.822544][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.822558][ C1] Call Trace: [ 159.822574][ C1] [ 159.822598][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 159.822632][ C1] ? verify_lock_unused+0x140/0x140 [ 159.822695][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 159.822726][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 159.822796][ C1] __iterate_interfaces+0x243/0x500 [ 159.822820][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 159.822847][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 159.822872][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 159.822899][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 159.822925][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 159.822956][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 159.822976][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 159.823004][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 159.823036][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 159.823075][ C1] hrtimer_run_softirq+0x176/0x240 [ 159.823105][ C1] handle_softirqs+0x328/0x820 [ 159.823138][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 159.823165][ C1] ? do_softirq+0x200/0x200 [ 159.823191][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 159.823219][ C1] __irq_exit_rcu+0x12f/0x220 [ 159.823239][ C1] ? irq_exit_rcu+0x20/0x20 [ 159.861766][ T5213] netlink: 'syz.4.272': attribute type 3 has an invalid length. [ 159.862730][ C1] irq_exit_rcu+0x5/0x20 [ 159.896888][ T5213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.272'. [ 159.901985][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 159.902028][ C1] [ 159.902038][ C1] [ 160.032518][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 160.038625][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 160.044798][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 90 cd f1 0b 48 89 de 5b e9 47 9e 43 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d 64 a5 8a 7e 65 8b 15 65 a5 8a 7e 81 e2 00 [ 160.064545][ C1] RSP: 0018:ffffc900042ff558 EFLAGS: 00000202 [ 160.070664][ C1] RAX: ffffffff81abacda RBX: 1ffff9200085ff08 RCX: ffff8880205fd940 [ 160.078773][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 160.086828][ C1] RBP: ffffc900042ff6d0 R08: dffffc0000000000 R09: ffffed10040bfb29 [ 160.094913][ C1] R10: ffffed10040bfb29 R11: 1ffff110040bfb28 R12: 1ffff1100c6f4281 [ 160.102966][ C1] R13: ffffc900042ff840 R14: 0000000000000001 R15: ffffea00019ce140 [ 160.111029][ C1] ? unmap_page_range+0xada/0x2520 [ 160.116233][ C1] unmap_page_range+0xb88/0x2520 [ 160.121234][ C1] ? uprobe_munmap+0x165/0x3f0 [ 160.126103][ C1] unmap_vmas+0x11b/0x230 [ 160.130469][ C1] ? uprobe_clear_state+0x4f/0x460 [ 160.135670][ C1] ? unmap_page_range+0x2520/0x2520 [ 160.141069][ C1] ? __mutex_lock_common+0x431/0x2390 [ 160.146543][ C1] ? exit_mm_release+0x16/0x30 [ 160.151360][ C1] ? memset+0x1e/0x40 [ 160.155427][ C1] exit_mmap+0x38f/0x5f0 [ 160.159757][ C1] ? vm_brk+0x20/0x20 [ 160.163827][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 160.169073][ C1] ? mm_update_next_owner+0x522/0x640 [ 160.174550][ C1] __mmput+0x115/0x3b0 [ 160.178666][ C1] exit_mm+0x567/0x6c0 [ 160.182813][ C1] ? xacct_add_tsk+0x4b0/0x4b0 [ 160.187619][ C1] ? do_exit+0x20a0/0x20a0 [ 160.192114][ C1] ? taskstats_exit+0x439/0xab0 [ 160.197054][ C1] ? tty_audit_exit+0x14e/0x1f0 [ 160.201961][ C1] do_exit+0x5a1/0x20a0 [ 160.206201][ C1] ? put_task_struct+0x80/0x80 [ 160.211040][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 160.217110][ C1] ? lock_chain_count+0x20/0x20 [ 160.222033][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 160.227415][ C1] do_group_exit+0x12e/0x300 [ 160.232061][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 160.237336][ C1] get_signal+0x6ca/0x12c0 [ 160.241850][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 160.247569][ C1] ? get_sigframe_size+0x10/0x10 [ 160.252565][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 160.258121][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 160.263488][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 160.269084][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 160.274670][ C1] do_syscall_64+0x58/0xa0 [ 160.279126][ C1] ? clear_bhb_loop+0x30/0x80 [ 160.283881][ C1] ? clear_bhb_loop+0x30/0x80 [ 160.288595][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.294740][ C1] RIP: 0033:0x7f73634a9ec9 [ 160.299210][ C1] Code: Unable to access opcode bytes at RIP 0x7f73634a9e9f. [ 160.306637][ C1] RSP: 002b:00007f73617110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 160.315167][ C1] RAX: ffffffffffffffda RBX: 00007f7363700fa8 RCX: 00007f73634a9ec9 [ 160.323209][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7363700fa8 [ 160.331263][ C1] RBP: 00007f7363700fa0 R08: 0000000000000000 R09: 0000000000000000 [ 160.339421][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.347574][ C1] R13: 00007f7363701038 R14: 00007fff02e948e0 R15: 00007fff02e949c8 [ 160.355717][ C1] [ 160.358810][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 160.366127][ C1] CPU: 1 PID: 5208 Comm: syz.3.271 Not tainted syzkaller #0 [ 160.373467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.383553][ C1] Call Trace: [ 160.386868][ C1] [ 160.389744][ C1] dump_stack_lvl+0x168/0x230 [ 160.394468][ C1] ? show_regs_print_info+0x20/0x20 [ 160.399837][ C1] ? load_image+0x3b0/0x3b0 [ 160.404401][ C1] panic+0x2c9/0x7f0 [ 160.408341][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 160.412895][ C1] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 160.418676][ C1] __warn+0x248/0x2b0 [ 160.422702][ C1] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 160.428472][ C1] report_bug+0x1b7/0x2e0 [ 160.432861][ C1] handle_bug+0x3a/0x70 [ 160.437084][ C1] exc_invalid_op+0x16/0x40 [ 160.441628][ C1] asm_exc_invalid_op+0x16/0x20 [ 160.446521][ C1] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 160.452894][ C1] Code: f8 0f 0b e9 f1 fa ff ff e8 81 83 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 70 83 3a f8 0f 0b e9 3c ef ff ff e8 64 83 3a f8 <0f> 0b e9 b8 f2 ff ff e8 88 e7 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 160.472707][ C1] RSP: 0018:ffffc90000dd08c0 EFLAGS: 00010246 [ 160.478821][ C1] RAX: ffffffff893d46ec RBX: ffff88806016cc80 RCX: ffff8880205fd940 [ 160.486838][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.494846][ C1] RBP: ffffc90000dd0ae8 R08: ffff8880205fd940 R09: 0000000000000003 [ 160.503025][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888022230a00 [ 160.511035][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba128 [ 160.519242][ C1] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 160.525119][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 160.531161][ C1] ? verify_lock_unused+0x140/0x140 [ 160.536430][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 160.542025][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 160.547544][ C1] __iterate_interfaces+0x243/0x500 [ 160.552773][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 160.559153][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 160.565437][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 160.572497][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 160.577737][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 160.582971][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 160.588976][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 160.595016][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 160.599737][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 160.604888][ C1] hrtimer_run_softirq+0x176/0x240 [ 160.610042][ C1] handle_softirqs+0x328/0x820 [ 160.614930][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 160.619821][ C1] ? do_softirq+0x200/0x200 [ 160.624358][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 160.629589][ C1] __irq_exit_rcu+0x12f/0x220 [ 160.634300][ C1] ? irq_exit_rcu+0x20/0x20 [ 160.638839][ C1] irq_exit_rcu+0x5/0x20 [ 160.643109][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 160.648891][ C1] [ 160.651844][ C1] [ 160.654818][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 160.660839][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 160.666939][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 90 cd f1 0b 48 89 de 5b e9 47 9e 43 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d 64 a5 8a 7e 65 8b 15 65 a5 8a 7e 81 e2 00 [ 160.686839][ C1] RSP: 0018:ffffc900042ff558 EFLAGS: 00000202 [ 160.693040][ C1] RAX: ffffffff81abacda RBX: 1ffff9200085ff08 RCX: ffff8880205fd940 [ 160.701048][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 160.709062][ C1] RBP: ffffc900042ff6d0 R08: dffffc0000000000 R09: ffffed10040bfb29 [ 160.717110][ C1] R10: ffffed10040bfb29 R11: 1ffff110040bfb28 R12: 1ffff1100c6f4281 [ 160.725212][ C1] R13: ffffc900042ff840 R14: 0000000000000001 R15: ffffea00019ce140 [ 160.733328][ C1] ? unmap_page_range+0xada/0x2520 [ 160.738489][ C1] unmap_page_range+0xb88/0x2520 [ 160.743486][ C1] ? uprobe_munmap+0x165/0x3f0 [ 160.748303][ C1] unmap_vmas+0x11b/0x230 [ 160.752663][ C1] ? uprobe_clear_state+0x4f/0x460 [ 160.757810][ C1] ? unmap_page_range+0x2520/0x2520 [ 160.763039][ C1] ? __mutex_lock_common+0x431/0x2390 [ 160.768447][ C1] ? exit_mm_release+0x16/0x30 [ 160.773242][ C1] ? memset+0x1e/0x40 [ 160.777267][ C1] exit_mmap+0x38f/0x5f0 [ 160.781539][ C1] ? vm_brk+0x20/0x20 [ 160.785589][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 160.790816][ C1] ? mm_update_next_owner+0x522/0x640 [ 160.796265][ C1] __mmput+0x115/0x3b0 [ 160.800468][ C1] exit_mm+0x567/0x6c0 [ 160.804583][ C1] ? xacct_add_tsk+0x4b0/0x4b0 [ 160.809407][ C1] ? do_exit+0x20a0/0x20a0 [ 160.813866][ C1] ? taskstats_exit+0x439/0xab0 [ 160.818754][ C1] ? tty_audit_exit+0x14e/0x1f0 [ 160.823834][ C1] do_exit+0x5a1/0x20a0 [ 160.828040][ C1] ? put_task_struct+0x80/0x80 [ 160.832902][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 160.838927][ C1] ? lock_chain_count+0x20/0x20 [ 160.843819][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 160.848879][ C1] do_group_exit+0x12e/0x300 [ 160.853520][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 160.858752][ C1] get_signal+0x6ca/0x12c0 [ 160.863214][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 160.868998][ C1] ? get_sigframe_size+0x10/0x10 [ 160.874041][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 160.879543][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 160.884972][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 160.890688][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 160.896202][ C1] do_syscall_64+0x58/0xa0 [ 160.900655][ C1] ? clear_bhb_loop+0x30/0x80 [ 160.905341][ C1] ? clear_bhb_loop+0x30/0x80 [ 160.910026][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.915932][ C1] RIP: 0033:0x7f73634a9ec9 [ 160.920551][ C1] Code: Unable to access opcode bytes at RIP 0x7f73634a9e9f. [ 160.928108][ C1] RSP: 002b:00007f73617110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 160.936548][ C1] RAX: ffffffffffffffda RBX: 00007f7363700fa8 RCX: 00007f73634a9ec9 [ 160.944549][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7363700fa8 [ 160.952708][ C1] RBP: 00007f7363700fa0 R08: 0000000000000000 R09: 0000000000000000 [ 160.960691][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.968691][ C1] R13: 00007f7363701038 R14: 00007fff02e948e0 R15: 00007fff02e949c8 [ 160.976698][ C1] [ 160.980120][ C1] Kernel Offset: disabled [ 160.984479][ C1] Rebooting in 86400 seconds..