last executing test programs: 3.646721268s ago: executing program 1 (id=2): mkdir(&(0x7f0000000380)='./file0\x00', 0x41) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f0000000380)={'#! ', '', [], 0xa, "5b09895c55"}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') read$FUSE(r0, &(0x7f0000001d40)={0x2020, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000180)) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x100, 0x4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000580)={0x90, 0x0, r2, {0x4, 0x3, 0x1a, 0x9, 0x401, 0x4e47, {0x4, 0x3, 0x4, 0x86a, 0xfffffffffffffff8, 0x7f, 0x5, 0x1, 0x7ff, 0x4000, 0x1, r3, r4, 0xffff99aa, 0xf}}}, 0x90) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0012}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.476059028s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) unshare(0x24060400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, "00000000eabb000003a8a40000000000004000e5ffffffffffffff000000000010000000000000000000000000000008000000000000000080010000000048004000"}, 0xd8) sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r2) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x80000001fe, 0x4) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x4e22, 0x400, 0x2, 0x0, 0x0, 0x32, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0xffffffffffffffff, 0x73, 0x8}, {0x3, 0x0, 0x40000000000000, 0x9}, 0x2e61, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@private2, 0x0, 0x2, 0x0, 0x0, 0xf606}}, 0xe8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x208801, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000080)={0x5, 0x1}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) 3.434312222s ago: executing program 1 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x4, 0x20000000, 0x3ff, 0x100}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) r5 = epoll_create(0x3) epoll_pwait2(r5, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0xa386]}, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff6000/0x9000)=nil, 0x9000) r6 = socket(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xa68}, @IFLA_OPERSTATE={0x5, 0x10, 0xa}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x40000000) ioctl$SNDCTL_SYNTH_ID(r9, 0xc08c5114, &(0x7f0000000180)={"edead7dd032456375cbf4de579561cbfe244638123924f47ecda91e7b932", 0x10001, 0x0, 0x401, 0x9, 0x5, 0x0, 0x4, 0x7, [0x80, 0x8, 0xfff, 0x1, 0x7fff, 0x8001, 0xffffffff, 0x9, 0x7, 0xfffffffd, 0x9, 0xf, 0x4, 0x9, 0x2, 0x4, 0x1, 0x7, 0x10000]}) 3.192736316s ago: executing program 0 (id=7): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0xacfa3d7bdd4f98b6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x101000) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20004088) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="000000ebf220aa142b0211b0010203010902120001000000000904be000015bcbe000000"], 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) 3.129044344s ago: executing program 4 (id=5): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0x0, 0x66c, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) r1 = epoll_create(0xde5) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x801, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@remote}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) shutdown(r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000000000008000", "882295394fc6d0b5aa39eb14eac2d9a2", "cabd27f3", "393bedfa875e7d07"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000001}) r4 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x7079, 0x0, 0x4, 0x28b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 3.041367878s ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, "00000000eabb000003a8a40000000000004000e5ffffffffffffff000000000010000000000000000000000000000008000000000000000080010000000048004000"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r0) 2.958474411s ago: executing program 1 (id=8): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x1, "000000fc"}, @global=@item_012={0x1, 0x1, 0x0, 'O'}]}}, 0x0}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d40)="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", 0x21f}], 0x1}}], 0x1, 0x604c8d0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.806664637s ago: executing program 2 (id=9): socket$inet6_sctp(0xa, 0x801, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2.578177947s ago: executing program 3 (id=4): syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) 2.522676437s ago: executing program 2 (id=10): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) unshare(0x24060400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, "00000000eabb000003a8a40000000000004000e5ffffffffffffff000000000010000000000000000000000000000008000000000000000080010000000048004000"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r2) connect$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x80000001fe, 0x4) r3 = socket$inet6(0xa, 0x3, 0x84) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x208801, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000080)={0x5, 0x1}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) 2.482032351s ago: executing program 4 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000800"/20, @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00', 0x2}, 0x20) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37, 0x3f}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) 2.399685834s ago: executing program 3 (id=12): keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$set_reqkey_keyring(0xe, 0x4) r0 = request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f00000004c0)='$%\xf9\xe4\x16\x19\x87\x19\xe2|>$\x93\xbc\"\x8c\xb7\xf4;&\x06,\xa6\xe5A?1%K\xe5', 0x0) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="87080f09a6b288ccd0b2470f36cb944f3627644fc149c5b1efc8c035146038973403d9b21bebd93ca1e61ac794b9fec3eb4667159952ab11918ff3f78eef6dd1662a715621b17471ed1cb72cac9c663020f4b02b89c25c4e229c4c6478b1daace0e96bbcff85e75c0641e2195cf0c04d8c2af88d4789fa337a7bdd998957f3b7ea891bea7495fa93c0b37b63df013f0a0aaaaf4294586cc34655bbe35e8302602e43d337f7c848dbdf2e35f9b40de6b09091443437c7e475ac9fa9b802d5a11092f91730d991c3286ce15e8ddd48a536a72958a5a0ed0e40d079f23c", 0xdc, r1) r2 = msgget$private(0x0, 0x3a9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000001140)={&(0x7f0000000c40)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x40000) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x41000, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x5) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x28) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x2c, 0xf4, 0x0, [], [{{0x9, 0x5, 0x88}}]}}]}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) msgctl$IPC_SET(r2, 0x1, &(0x7f00000000c0)={{0x2, 0xee00, 0x0, 0x0, r7, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x8}) msgrcv(r2, &(0x7f0000000000)={0x0, ""/118}, 0x7e, 0x0, 0x1000) syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}]}, {[{}]}}}]}}]}}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) 2.340548334s ago: executing program 2 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) vmsplice(r4, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 733.789403ms ago: executing program 2 (id=14): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc21\xc4|\xfd/\x92)x\x12=[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xedF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94oI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\a\xc7\xb0-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xc0\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x90\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000feff70109a000000000000000001ff0000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000014000100000000000000000002180000", @ANYRES32=r4, @ANYBLOB="0800040000ffffff08000200ac1414"], 0x28}}, 0x0) r6 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x0, 0x10a5, 0x3, &(0x7f0000000040)={[0xcb]}, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400000109021b000124a80080090400000103000000090563", @ANYRES32=r5], 0x0) 11.929986ms ago: executing program 0 (id=16): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xb68}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x800) syz_open_dev$dri(&(0x7f0000000040), 0xbea, 0x123880) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "000000009b993e68", "75df9868592b9fd3ccfffffffffffff7", ')\x00\x000', "00000011000a00"}, 0x28) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) r11 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r11, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x2}}, 0x10) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2c) 0s ago: executing program 1 (id=17): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000040)={0x5, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1, 0xfffff801}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) syz_emit_ethernet(0x3e, &(0x7f0000001440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x7, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000100)=0xb, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 57.806873][ T5818] cgroup: Unknown subsys name 'net' [ 57.937054][ T5818] cgroup: Unknown subsys name 'cpuset' [ 57.945672][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.222445][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.387938][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.396366][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.414062][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.422155][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.436206][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.445390][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.447755][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.460396][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.464028][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.469195][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.477230][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.482639][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.489664][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.495563][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.504220][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.510572][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.518129][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.531620][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.532707][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.539694][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.547960][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.556461][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.562075][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.567405][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.584627][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.592055][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.592282][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.607396][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.624054][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.631526][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.095948][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 62.105852][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 62.168587][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 62.178541][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 62.237331][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 62.365997][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.373213][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.382342][ T5848] bridge_slave_0: entered allmulticast mode [ 62.389284][ T5848] bridge_slave_0: entered promiscuous mode [ 62.425397][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.432530][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.439843][ T5849] bridge_slave_0: entered allmulticast mode [ 62.446647][ T5849] bridge_slave_0: entered promiscuous mode [ 62.453733][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.460946][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.468217][ T5849] bridge_slave_1: entered allmulticast mode [ 62.475293][ T5849] bridge_slave_1: entered promiscuous mode [ 62.482547][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.489822][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.497063][ T5848] bridge_slave_1: entered allmulticast mode [ 62.503560][ T5848] bridge_slave_1: entered promiscuous mode [ 62.565369][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.572550][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.580089][ T5846] bridge_slave_0: entered allmulticast mode [ 62.587128][ T5846] bridge_slave_0: entered promiscuous mode [ 62.604899][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.616973][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.646345][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.653487][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.660992][ T5846] bridge_slave_1: entered allmulticast mode [ 62.667904][ T5846] bridge_slave_1: entered promiscuous mode [ 62.684424][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.695106][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.712949][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.720263][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.727875][ T5851] bridge_slave_0: entered allmulticast mode [ 62.734847][ T5851] bridge_slave_0: entered promiscuous mode [ 62.741901][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.749356][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.756614][ T5851] bridge_slave_1: entered allmulticast mode [ 62.763420][ T5851] bridge_slave_1: entered promiscuous mode [ 62.817759][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.826041][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.834369][ T5852] bridge_slave_0: entered allmulticast mode [ 62.840906][ T5852] bridge_slave_0: entered promiscuous mode [ 62.850297][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.861794][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.881842][ T5848] team0: Port device team_slave_0 added [ 62.890357][ T5848] team0: Port device team_slave_1 added [ 62.902875][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.910160][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.917586][ T5852] bridge_slave_1: entered allmulticast mode [ 62.924311][ T5852] bridge_slave_1: entered promiscuous mode [ 62.941104][ T5849] team0: Port device team_slave_0 added [ 62.948400][ T5849] team0: Port device team_slave_1 added [ 62.971907][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.019407][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.026404][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.052565][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.067028][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.077985][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.089423][ T5846] team0: Port device team_slave_0 added [ 63.097340][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.116112][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.123082][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.149972][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.170913][ T5846] team0: Port device team_slave_1 added [ 63.200596][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.208146][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.235057][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.267253][ T5852] team0: Port device team_slave_0 added [ 63.273570][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.280948][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.308543][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.321095][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.328169][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.354304][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.373175][ T5851] team0: Port device team_slave_0 added [ 63.381172][ T5852] team0: Port device team_slave_1 added [ 63.396157][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.403114][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.429837][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.457480][ T5851] team0: Port device team_slave_1 added [ 63.481862][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.489124][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.515517][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.559623][ T5849] hsr_slave_0: entered promiscuous mode [ 63.566093][ T5849] hsr_slave_1: entered promiscuous mode [ 63.583448][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.590433][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.605234][ T5831] Bluetooth: hci2: command tx timeout [ 63.616661][ T5843] Bluetooth: hci3: command tx timeout [ 63.623013][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.640944][ T5848] hsr_slave_0: entered promiscuous mode [ 63.648257][ T5848] hsr_slave_1: entered promiscuous mode [ 63.654888][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.662697][ T5848] Cannot create hsr debugfs directory [ 63.678428][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.685492][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.689417][ T5843] Bluetooth: hci0: command tx timeout [ 63.711498][ T5831] Bluetooth: hci1: command tx timeout [ 63.711887][ T5831] Bluetooth: hci4: command tx timeout [ 63.723460][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.773806][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.781134][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.807745][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.821286][ T5846] hsr_slave_0: entered promiscuous mode [ 63.827730][ T5846] hsr_slave_1: entered promiscuous mode [ 63.833808][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.841806][ T5846] Cannot create hsr debugfs directory [ 63.942238][ T5852] hsr_slave_0: entered promiscuous mode [ 63.948626][ T5852] hsr_slave_1: entered promiscuous mode [ 63.954869][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.962432][ T5852] Cannot create hsr debugfs directory [ 63.993769][ T5851] hsr_slave_0: entered promiscuous mode [ 64.000009][ T5851] hsr_slave_1: entered promiscuous mode [ 64.006771][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.014386][ T5851] Cannot create hsr debugfs directory [ 64.275916][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.288390][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.298629][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.315448][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.359822][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.369570][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.397464][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.415616][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.432264][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.445126][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.456115][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.467333][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.539702][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.549695][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.566383][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.587367][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.653064][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.692339][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.701373][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.720863][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.740645][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.772475][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.805991][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.820994][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.828324][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.869075][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.879526][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.886845][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.907640][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.936552][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.943658][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.967197][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.974357][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.007418][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.032067][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.039180][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.050174][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.057281][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.138633][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.180293][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.216398][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.236940][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.252088][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.259248][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.277591][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.298084][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.305201][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.340149][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.363490][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.370665][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.381131][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.388378][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.413495][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.440857][ T5849] veth0_vlan: entered promiscuous mode [ 65.493246][ T5849] veth1_vlan: entered promiscuous mode [ 65.517496][ T5852] veth0_vlan: entered promiscuous mode [ 65.531248][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.559501][ T5852] veth1_vlan: entered promiscuous mode [ 65.572293][ T5846] veth0_vlan: entered promiscuous mode [ 65.619377][ T5849] veth0_macvtap: entered promiscuous mode [ 65.629896][ T5849] veth1_macvtap: entered promiscuous mode [ 65.640065][ T5846] veth1_vlan: entered promiscuous mode [ 65.670993][ T5852] veth0_macvtap: entered promiscuous mode [ 65.685340][ T5831] Bluetooth: hci3: command tx timeout [ 65.685352][ T5843] Bluetooth: hci2: command tx timeout [ 65.697474][ T5852] veth1_macvtap: entered promiscuous mode [ 65.737473][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.750933][ T5848] veth0_vlan: entered promiscuous mode [ 65.762147][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.769213][ T5831] Bluetooth: hci0: command tx timeout [ 65.769253][ T5831] Bluetooth: hci1: command tx timeout [ 65.775746][ T5831] Bluetooth: hci4: command tx timeout [ 65.795193][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.806705][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.815992][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.825193][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.833941][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.847265][ T5848] veth1_vlan: entered promiscuous mode [ 65.869633][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.880556][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.892433][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.913109][ T5846] veth0_macvtap: entered promiscuous mode [ 65.928445][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.939304][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.950732][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.968413][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.977854][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.987187][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.996551][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.018740][ T5846] veth1_macvtap: entered promiscuous mode [ 66.071981][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.088385][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.098491][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.109245][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.121240][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.173198][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.173239][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.196031][ T5848] veth0_macvtap: entered promiscuous mode [ 66.203618][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.215504][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.225829][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.236383][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.247705][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.256441][ T5851] veth0_vlan: entered promiscuous mode [ 66.272492][ T5848] veth1_macvtap: entered promiscuous mode [ 66.283841][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.293028][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.302663][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.311619][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.358727][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.371381][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.381776][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.392394][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.402954][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.423637][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.435158][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.442820][ T5851] veth1_vlan: entered promiscuous mode [ 66.450898][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.460150][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.499598][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.510486][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.520787][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.533600][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.543507][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.554385][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.565820][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.595853][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.604682][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.605776][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.620889][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.630854][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.640385][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.661243][ T5851] veth0_macvtap: entered promiscuous mode [ 66.698669][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.708027][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.730560][ T5851] veth1_macvtap: entered promiscuous mode [ 66.731897][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.745966][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.762079][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.771976][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.783085][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.794439][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.805159][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.815178][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.825714][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.836680][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.852783][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.862451][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.865594][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.880958][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.891285][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.902074][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.912008][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.922461][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.932410][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.943644][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.956294][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.026368][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.035503][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.045094][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.051100][ T29] audit: type=1326 audit(1737268917.404:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0785d29 code=0x7ffc0000 [ 67.053798][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.099664][ T29] audit: type=1326 audit(1737268917.434:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0785d29 code=0x7ffc0000 [ 67.162761][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.167070][ T29] audit: type=1326 audit(1737268917.434:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effe0785d29 code=0x7ffc0000 [ 67.196593][ T29] audit: type=1326 audit(1737268917.434:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0785d29 code=0x7ffc0000 [ 67.204012][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.257212][ T29] audit: type=1326 audit(1737268917.434:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0785d29 code=0x7ffc0000 [ 67.280723][ T29] audit: type=1326 audit(1737268917.434:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effe0785d29 code=0x7ffc0000 [ 67.313049][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.322468][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.351809][ T29] audit: type=1326 audit(1737268917.434:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0785d29 code=0x7ffc0000 [ 67.382405][ T29] audit: type=1326 audit(1737268917.444:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe0785d29 code=0x7ffc0000 [ 67.461481][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.487562][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.651976][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.662245][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.764321][ T5831] Bluetooth: hci2: command tx timeout [ 67.774653][ T5831] Bluetooth: hci3: command tx timeout [ 67.780506][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.805355][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.844029][ T5831] Bluetooth: hci4: command tx timeout [ 67.844891][ T5843] Bluetooth: hci1: command tx timeout [ 67.850225][ T5831] Bluetooth: hci0: command tx timeout [ 67.861606][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.893546][ T5912] batadv0: entered promiscuous mode [ 67.912767][ T5912] macvtap1: entered promiscuous mode [ 67.930712][ T5912] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 67.954160][ T5885] usb 1-1: device descriptor read/64, error -71 [ 68.034160][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.197287][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.250276][ T5900] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 68.254315][ T5885] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.304809][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.327738][ T5900] usb 2-1: config 0 descriptor?? [ 68.414507][ T5885] usb 1-1: device descriptor read/64, error -71 [ 68.544268][ T5885] usb usb1-port1: attempt power cycle [ 68.804522][ T5883] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.849300][ T5900] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 68.884961][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.925743][ T5885] usb 1-1: device descriptor read/8, error -71 [ 68.964128][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 68.971484][ T5883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 68.987390][ T5883] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 68.998148][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.015031][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.015552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.025376][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.049026][ T5883] usb 5-1: SerialNumber: syz [ 69.086520][ T5919] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 69.104111][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.184130][ T5885] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 69.213069][ T5885] usb 1-1: device descriptor read/8, error -71 [ 69.316353][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 69.345885][ T5885] usb usb1-port1: unable to enumerate USB device [ 69.348905][ T9] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 69.360179][ T5883] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 69.383196][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.399709][ T5883] usb 5-1: USB disconnect, device number 2 [ 69.449369][ T9] usb 4-1: Product: syz [ 69.453590][ T9] usb 4-1: Manufacturer: syz [ 69.494249][ T9] usb 4-1: SerialNumber: syz [ 69.536407][ T9] usb 4-1: config 0 descriptor?? [ 69.584270][ T9] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 69.844037][ T5831] Bluetooth: hci3: command tx timeout [ 69.844227][ T5843] Bluetooth: hci2: command tx timeout [ 69.875610][ T5900] usb 2-1: USB disconnect, device number 2 [ 69.925155][ T5843] Bluetooth: hci1: command tx timeout [ 69.930651][ T5843] Bluetooth: hci4: command tx timeout [ 69.931913][ T5831] Bluetooth: hci0: command tx timeout [ 70.075176][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.101236][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.294038][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.444150][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.545337][ T5885] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 70.565452][ T5885] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 70.586753][ T5885] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 70.702473][ T5885] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 70.715259][ T5883] usb 3-1: config 0 has no interfaces? [ 70.727759][ T5940] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.741304][ T5885] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 70.791676][ T5885] usb 5-1: Manufacturer: syz [ 70.865869][ T5883] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 70.917556][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.957373][ T5883] usb 3-1: Product: syz [ 70.967862][ T5883] usb 3-1: Manufacturer: syz [ 70.986144][ T5883] usb 3-1: SerialNumber: syz [ 71.004758][ T5883] usb 3-1: config 0 descriptor?? [ 71.009307][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.091893][ T5885] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 71.108920][ T5885] usb 5-1: USB disconnect, device number 3 [ 71.164173][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 71.178972][ T9] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 71.234272][ T9] usb 2-1: config 0 has no interface number 0 [ 71.262128][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 71.273761][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.313231][ T9] usb 2-1: Product: syz [ 71.326100][ T9] usb 2-1: Manufacturer: syz [ 71.343596][ T9] usb 2-1: SerialNumber: syz [ 71.361797][ T9] usb 2-1: config 0 descriptor?? [ 71.473925][ C1] [ 71.476299][ C1] ============================= [ 71.481143][ C1] [ BUG: Invalid wait context ] [ 71.486007][ C1] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 71.493121][ C1] ----------------------------- [ 71.497982][ C1] syz.2.14/5935 is trying to lock: [ 71.503079][ C1] ffff88813fffc298 (&zone->lock){-.-.}-{3:3}, at: get_page_from_freelist+0xb3d/0x37a0 [ 71.512648][ C1] other info that might help us debug this: [ 71.518541][ C1] context-{2:2} [ 71.521984][ C1] 2 locks held by syz.2.14/5935: [ 71.526909][ C1] #0: ffff888143f5a670 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 71.536656][ C1] #1: ffff8880b8744958 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x7d3/0x37a0 [ 71.546572][ C1] stack backtrace: [ 71.550294][ C1] CPU: 1 UID: 0 PID: 5935 Comm: syz.2.14 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 71.560792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 71.571032][ C1] Call Trace: [ 71.574305][ C1] [ 71.577137][ C1] dump_stack_lvl+0x241/0x360 [ 71.581809][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.587027][ C1] ? __pfx__printk+0x10/0x10 [ 71.591620][ C1] __lock_acquire+0x15a8/0x2100 [ 71.596480][ C1] lock_acquire+0x1ed/0x550 [ 71.600978][ C1] ? get_page_from_freelist+0xb3d/0x37a0 [ 71.606612][ C1] ? __pfx_validate_chain+0x10/0x10 [ 71.611811][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 71.616831][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 71.622801][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.629123][ C1] ? validate_chain+0x11e/0x5920 [ 71.634054][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 71.639335][ C1] ? get_page_from_freelist+0xb3d/0x37a0 [ 71.644964][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 71.650855][ C1] get_page_from_freelist+0xb3d/0x37a0 [ 71.656402][ C1] __alloc_pages_noprof+0x292/0x710 [ 71.661591][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 71.667306][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 71.673445][ C1] ? __kernel_text_address+0xd/0x40 [ 71.678646][ C1] ? unwind_get_return_address+0x4d/0x90 [ 71.684278][ C1] alloc_pages_mpol_noprof+0x3e1/0x780 [ 71.689749][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 71.695729][ C1] ? stack_trace_save+0x118/0x1d0 [ 71.700753][ C1] ? alloc_pages_noprof+0x43/0x170 [ 71.705860][ C1] stack_depot_save_flags+0x72d/0x940 [ 71.711225][ C1] kasan_save_stack+0x4f/0x60 [ 71.715893][ C1] ? kasan_save_stack+0x3f/0x60 [ 71.720740][ C1] ? __kasan_record_aux_stack+0xac/0xc0 [ 71.726278][ C1] ? task_work_add+0xd9/0x490 [ 71.730954][ C1] ? run_posix_cpu_timers+0x6ac/0x810 [ 71.736675][ C1] ? tick_nohz_handler+0x37c/0x500 [ 71.741782][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 71.747145][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 71.752250][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 71.758397][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 71.764204][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.770357][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 71.776253][ C1] ? __rmqueue_pcplist+0x21fd/0x2a90 [ 71.781564][ C1] ? get_page_from_freelist+0x886/0x37a0 [ 71.787207][ C1] ? __alloc_pages_noprof+0x292/0x710 [ 71.792577][ C1] ? alloc_pages_mpol_noprof+0x3e1/0x780 [ 71.798214][ C1] ? stack_depot_save_flags+0x72d/0x940 [ 71.803758][ C1] ? kasan_save_track+0x51/0x80 [ 71.808605][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 71.813452][ C1] ? __kmalloc_cache_noprof+0x243/0x390 [ 71.819000][ C1] ? relay_open+0x10e/0x890 [ 71.823506][ C1] ? do_blk_trace_setup+0x573/0x9b0 [ 71.828694][ C1] ? blk_trace_ioctl+0x359/0x9a0 [ 71.833619][ C1] ? blkdev_ioctl+0x40c/0x6a0 [ 71.838284][ C1] ? __se_sys_ioctl+0xf5/0x170 [ 71.843036][ C1] ? do_syscall_64+0xf3/0x230 [ 71.847711][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.853791][ C1] ? __phys_addr+0xba/0x170 [ 71.858291][ C1] __kasan_record_aux_stack+0xac/0xc0 [ 71.863659][ C1] task_work_add+0xd9/0x490 [ 71.868157][ C1] ? __pfx_task_work_add+0x10/0x10 [ 71.873262][ C1] run_posix_cpu_timers+0x6ac/0x810 [ 71.878456][ C1] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 71.884175][ C1] ? sched_balance_trigger+0x1a3/0x890 [ 71.889623][ C1] tick_nohz_handler+0x37c/0x500 [ 71.894551][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 71.899999][ C1] __hrtimer_run_queues+0x551/0xd30 [ 71.905196][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 71.910907][ C1] ? sched_clock+0x4a/0x70 [ 71.915317][ C1] ? read_tsc+0x9/0x20 [ 71.919373][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 71.925450][ C1] hrtimer_interrupt+0x403/0xa40 [ 71.930392][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 71.936364][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 71.942002][ C1] [ 71.944920][ C1] [ 71.947839][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.953823][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 71.960319][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 fe 0f 3a f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 b6 a1 f5 65 8b 05 b4 f8 37 74 85 c0 74 43 48 c7 04 24 0e 36 [ 71.979914][ C1] RSP: 0018:ffffc900046ff140 EFLAGS: 00000206 [ 71.985976][ C1] RAX: 1d7416b855242300 RBX: 1ffff920008dfe2c RCX: ffffffff817b387a [ 71.993938][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: 0000000000000001 [ 72.001896][ C1] RBP: ffffc900046ff1d8 R08: ffffffff942ab887 R09: 1ffffffff2855710 [ 72.009866][ C1] R10: dffffc0000000000 R11: fffffbfff2855711 R12: dffffc0000000000 [ 72.017836][ C1] R13: 1ffff920008dfe28 R14: ffffc900046ff160 R15: 0000000000000246 [ 72.025806][ C1] ? mark_lock+0x9a/0x360 [ 72.030131][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 72.036463][ C1] __rmqueue_pcplist+0x21fd/0x2a90 [ 72.041576][ C1] get_page_from_freelist+0x886/0x37a0 [ 72.047028][ C1] ? __pfx___might_resched+0x10/0x10 [ 72.052306][ C1] __alloc_pages_noprof+0x292/0x710 [ 72.057581][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 72.063284][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 72.068481][ C1] ? kernel_text_address+0xa7/0xe0 [ 72.073587][ C1] ? arch_stack_walk+0xfd/0x150 [ 72.078442][ C1] alloc_pages_mpol_noprof+0x3e1/0x780 [ 72.083910][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 72.089891][ C1] ? stack_trace_save+0x118/0x1d0 [ 72.094913][ C1] ? look_up_lock_class+0x77/0x170 [ 72.100019][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 72.105383][ C1] ? register_lock_class+0x102/0x980 [ 72.110681][ C1] ? alloc_pages_noprof+0xef/0x170 [ 72.115789][ C1] stack_depot_save_flags+0x72d/0x940 [ 72.121153][ C1] ? mark_lock+0x9a/0x360 [ 72.125478][ C1] kasan_save_track+0x51/0x80 [ 72.130143][ C1] ? kasan_save_track+0x3f/0x80 [ 72.134982][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 72.139737][ C1] ? __kmalloc_cache_noprof+0x243/0x390 [ 72.145275][ C1] ? relay_open+0x10e/0x890 [ 72.149774][ C1] ? do_blk_trace_setup+0x573/0x9b0 [ 72.154959][ C1] ? blk_trace_ioctl+0x359/0x9a0 [ 72.159882][ C1] ? blkdev_ioctl+0x40c/0x6a0 [ 72.164552][ C1] ? __se_sys_ioctl+0xf5/0x170 [ 72.169314][ C1] ? do_syscall_64+0xf3/0x230 [ 72.173983][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.180068][ C1] __kasan_kmalloc+0x98/0xb0 [ 72.184654][ C1] __kmalloc_cache_noprof+0x243/0x390 [ 72.190021][ C1] ? relay_open+0x10e/0x890 [ 72.194520][ C1] relay_open+0x10e/0x890 [ 72.198843][ C1] do_blk_trace_setup+0x573/0x9b0 [ 72.203865][ C1] blk_trace_ioctl+0x359/0x9a0 [ 72.208624][ C1] ? tomoyo_path_number_perm+0x6f9/0x860 [ 72.214255][ C1] ? tomoyo_path_number_perm+0x206/0x860 [ 72.219900][ C1] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 72.225209][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.231216][ C1] ? file_to_blk_mode+0xcc/0x140 [ 72.236167][ C1] blkdev_ioctl+0x40c/0x6a0 [ 72.240670][ C1] ? __pfx_blkdev_ioctl+0x10/0x10 [ 72.245689][ C1] ? __pfx_blkdev_ioctl+0x10/0x10 [ 72.250712][ C1] __se_sys_ioctl+0xf5/0x170 [ 72.255299][ C1] do_syscall_64+0xf3/0x230 [ 72.259801][ C1] ? clear_bhb_loop+0x35/0x90 [ 72.264469][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.270362][ C1] RIP: 0033:0x7fb396d85d29 [ 72.274781][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.294388][ C1] RSP: 002b:00007fb397c11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.302803][ C1] RAX: ffffffffffffffda RBX: 00007fb396f76160 RCX: 00007fb396d85d29 [ 72.310777][ C1] RDX: 0000000020000380 RSI: 00000000c0481273 RDI: 0000000000000009 [ 72.318759][ C1] RBP: 00007fb396e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 72.326728][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.334694][ C1] R13: 0000000000000000 R14: 00007fb396f76160 R15: 00007fb39709fa28 [ 72.342665][ C1] [ 72.345822][ C1] vkms_vblank_simulate: vblank timer overrun [ 72.425559][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.431902][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.433216][ T5883] usb 4-1: USB disconnect, device number 2 [ 72.512087][ T5935] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14'. [ 72.544255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 72.552995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 72.563889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 72.572682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.737467][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.346739][ T9] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 73.353991][ T9] usb 2-1: No streaming interface found for terminal 6. [ 73.361093][ T9] usb 2-1: Failed to create links for entity 5 [ 73.370083][ T9] usb 2-1: Failed to register entities (-22). [ 73.380168][ T9] usb 2-1: USB disconnect, device number 3 [ 74.663788][ T9] usb 3-1: USB disconnect, device number 2 [ 76.733321][ T25] cfg80211: failed to load regulatory.db