last executing test programs: 42.179841826s ago: executing program 1 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') getdents64(r3, 0xffffffffffffffff, 0x43) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.83945042s ago: executing program 4 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') getdents64(r3, 0xffffffffffffffff, 0x43) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.115776107s ago: executing program 3 (id=244): r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a2007"], 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000004d564b0008000007"]) 5.816298937s ago: executing program 3 (id=245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 5.722295294s ago: executing program 2 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x7, 0x4e21, 0x8, 0xa, 0x0, 0xa0, 0x1}, {0x0, 0x4, 0x8, 0x0, 0x8, 0x1, 0x0, 0x5}, {0x0, 0x3cb, 0x7f}, 0x8, 0x6e6bbc}, {{@in=@multicast2, 0x0, 0x33}, 0x4, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0x4, 0x2, 0x1000}}, 0xe8) 5.680456604s ago: executing program 0 (id=246): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x10000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x24000984}, 0x4040000) connect$inet(r0, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000005400038050000080100003400000000244000b802c0001800a0001"], 0x104}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1}}], 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) unshare(0xc040480) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[], 0x0, 0x2b, 0x5, 0x0, 0x5}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000000020300000000000000000001080004200003801400018008000100ac141406000340004b4e5a70faeaab0b000000080008400000e6cd0000000000000000"], 0x44}}, 0x40024) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01957473cdcbcb1d12611db70b980c68a1007ff6204474f3c500000000000000000c", @ANYRES32=r6, @ANYRESHEX=r2], 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="44ae10e11ebcc4e05a83590dfc40b73d353d2330d30ab1c5aba89e4d038d710189d89b4d52262abce85e7c9376ae427f2ff8be0f4c49bc94c3ee9e598d3151c68f9ea905a9d3ab37a190698b512cbd93157f116ec73736fdc976f416113ff6d58b125756f28b78a941181e48eb42d7c759f107d3ed568fcedd7c674ec87da6057ac530bf74e4313546ed0963b6b124717e7f852392a01903b31424237f394733842558e572614ba282eb7042b5a14bfd64e2100928b3c7c2651b645ad3c6952920cecee85abd2b228aeaee8db3303b63e0c012b57391d4bd5b3910b2568b206d71b497f0dc5dd950ac5fbd0c01db963398", @ANYRES16=r8, @ANYBLOB="000228bd7000fbdbdf2555000000"], 0x14}}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000410400"/20, @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00ffffffffffffffff050007001f"], 0x6c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) 5.608190229s ago: executing program 3 (id=247): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000ec0)="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", 0x106}, {&(0x7f0000000940)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336", 0x1c}, {&(0x7f0000000380)="b7e4c84c12f2ec398a7c6a1f6be9de130578cdbffd74752b2f6133071864bac0717147af20e6e13af7b7100d1a6736a8e03334b7cdd90757248589134b71c162fc7e17fbcffa8487caa0469ea6ad8ab919c383554859e254c4046f5a0a494810a015491393eff01813fc6069c86f8995ca", 0x71}, {&(0x7f0000000400)="034415e3adefcb7057afc8876bfa", 0xe}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)="a16e1d8529fcfa40481fd36e62439fb3abc99a9135df7b1c7d3f335c3f3f15faa42ab4f42b3fbc317462742021c86ae87b9c64aa799c584392b5049407c166e457d5fee3edbc0d182f4f94047c7dbccdf1af9727fc8179018a6aabeb71f924325010f33d9f0f283d7ada", 0x6a}, {&(0x7f00000004c0)="354d3cb256f7a3e143fd94526af38bb5bcdb558127e9874d374f8b08e3c1762e5527a3e6b1b96be012f91cc56f6e71860266793471ff9bb35b96a56c25edbf1c0e452df85370de7a678fdac3e0de9014cf1d23aeaa1a9adeacfe8cb2630687eaf34a5295388f57f0f314b8e0ea55805372ba0f534d6144c3f8cbdaac2bcc4e55c7ddc61fcc03b1ae4c638230a6255c534706fa3f16e10b9e1a14c374fdbf78dae23838abcb99c1ca9fadb6fb50ebcf560294efcb3479efc47d4466178ac0cf45014dcf6427b03d2a7fdce59d685ca474952f77bf4845f21cb22b94a460fd2ce9a8f12ab35d187d9725c6f5e85c3b60ff621ed62f5b5a428a", 0xf8}, {&(0x7f00000005c0)="e6c52a9838", 0x5}, {&(0x7f0000000980)="42952684389be3ccacaee7584a698ac88af3a30f8bccc8accb23e7f46897069fba219a1a30bd9cabfb74d80f8683f17abd649693515befca06df716e9a55114aec110f5b6ac933a4d8762cff78f0c001957ea5c3f2f328df7d8a8849626e5fa473bd79eb9c81931c5dbec04c38b0fbbab00713474f4bd214003b9389ce1e65b221908195650d757602ee8b9962e2c7cfca56d5f25fa4a318317b50d3e410ae73743c55aa3eb3cd1dd53a242e14c31c752ca93c77f559738ac20a0838fe6faff4d7c69639803037334c0ff4f5b14d27e4a3cf26fe2f2176467043b54cd20cc7055d8a8b4325f11b", 0xe7}, {&(0x7f0000001800)="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", 0x258}, {&(0x7f0000001200)="72f4ea9ef0b5a6868ffafef2445a4cfc0a4d479828c365520eaa77a16cc996f204a67d08926c0bd89cb4cc17a32aa50765a51506002fbb36fe212a08000000fe2daaa5a7b9768d3b73f74e89d4054488dc05dcb26b77f3f69eece905800cfa835016be2eb3da6cfba2bdc6d18e3a95a4c1328d1a0e849cb7340473394253186813d4a0fbdb0cf2bb2cc6a311fb1699e6e24de75136a56f2485aac3ea0c444bbd5f3292ad989770a5ae3d1672432f99d92e3677dfba7a22e85d5a514c4c3a9b29a2f277f552ba6abb6f137b1ec7b4bcd92557859801d280800406d2d6aee9593754907230", 0xe4}], 0x6}, 0x0) 4.748376158s ago: executing program 2 (id=248): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0xe4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0xba, 0x33, @beacon={{{}, {}, @device_a, @broadcast, @random="90e488f9971a"}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x6, "eb13a8b3df32"}, {0xdd, 0x39, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc35"}, {0xdd, 0x2f, "83534cd40fda26eabadf3814f88fa9c5d39124ac6ffcf2583cbdd58fa0969b3e6783c46ed2318e977c080347f36fa8"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001580), 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f10bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d00b07862c4fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52c094016406cdd32abf77fea373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515dca8811922929e08538fab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f57cbc05cd897f40693ec427ea71578130cde48de3b4dda0c7b615b57ccd4f8ac729a80f891d91a89d967948b9d95b1f22480ab48969e86b854a8c17f3e264ce11f9f63552364e759eec94572f2f7b0e2f293573d0b80709815f4344f908c00"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000003000000010000a40cdbd684466233299900ffffffff000000000000000100000000000000040000"], &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) 4.592857146s ago: executing program 3 (id=249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x18) 4.364976785s ago: executing program 0 (id=250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 4.251724548s ago: executing program 0 (id=251): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fd"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 4.031281646s ago: executing program 2 (id=252): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/image_size', 0x400000, 0x2e) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_submit(0x0, 0x0, &(0x7f0000000740)) socket$kcm(0x10, 0x0, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]}, 0x78) 3.931120713s ago: executing program 3 (id=253): r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a2007"], 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000004d564b0008000007"]) 3.781463604s ago: executing program 0 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x3, 0x122, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}}, 0x0) write$cgroup_pid(r6, &(0x7f0000000880)=r10, 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) r11 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f00000001c0)={0x9}, 0x10) 3.644422497s ago: executing program 3 (id=255): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x0, 0xe80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x100400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_usbip_server_init(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e040000000c0902120001000100000904000000ef"], 0x0) socket$inet(0x2, 0x80000, 0x0) listen(r2, 0x0) fchdir(0xffffffffffffffff) syz_usbip_server_init(0x4) syz_open_procfs(0x0, 0x0) 3.367094971s ago: executing program 4 (id=256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.720161678s ago: executing program 2 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x7, 0x4e21, 0x8, 0xa, 0x0, 0xa0, 0x1}, {0x0, 0x4, 0x8, 0x0, 0x8, 0x1, 0x0, 0x5}, {0x0, 0x3cb, 0x7f}, 0x8, 0x6e6bbc}, {{@in=@multicast2, 0x0, 0x33}, 0x4, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0x4, 0x2, 0x1000}}, 0xe8) 2.653070844s ago: executing program 1 (id=148): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x9}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.652175084s ago: executing program 4 (id=258): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000000000000000000500000008000200000000000800030009000010"], 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r7, r8, 0x0, 0x7ffff000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 1.616217393s ago: executing program 1 (id=259): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e70000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.615891844s ago: executing program 2 (id=260): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x10000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x24000984}, 0x4040000) connect$inet(r0, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000005400038050000080100003400000000244000b802c0001800a0001"], 0x104}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}], 0x1}}], 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) unshare(0xc040480) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[], 0x0, 0x2b, 0x5, 0x0, 0x5}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000000020300000000000000000001080004200003801400018008000100ac141406000340004b4e5a70faeaab0b000000080008400000e6cd0000000000000000"], 0x44}}, 0x40024) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01957473cdcbcb1d12611db70b980c68a1007ff6204474f3c500000000000000000c", @ANYRES32=r6, @ANYRESHEX=r2], 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="44ae10e11ebcc4e05a83590dfc40b73d353d2330d30ab1c5aba89e4d038d710189d89b4d52262abce85e7c9376ae427f2ff8be0f4c49bc94c3ee9e598d3151c68f9ea905a9d3ab37a190698b512cbd93157f116ec73736fdc976f416113ff6d58b125756f28b78a941181e48eb42d7c759f107d3ed568fcedd7c674ec87da6057ac530bf74e4313546ed0963b6b124717e7f852392a01903b31424237f394733842558e572614ba282eb7042b5a14bfd64e2100928b3c7c2651b645ad3c6952920cecee85abd2b228aeaee8db3303b63e0c012b57391d4bd5b3910b2568b206d71b497f0dc5dd950ac5fbd0c01db963398", @ANYRES16=r8, @ANYBLOB="000228bd7000fbdbdf2555000000"], 0x14}}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000410400"/20, @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00ffffffffffffffff050007001f"], 0x6c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) 1.608313301s ago: executing program 0 (id=261): bind$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000800), 0x0, &(0x7f00000002c0)={0x3fc}, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.48582247s ago: executing program 1 (id=262): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000000000000000000500000008000200000000000800030009000010"], 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 1.425227735s ago: executing program 4 (id=263): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fd"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 1.152692236s ago: executing program 0 (id=264): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000011c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0xffffffffffffff4c}, {0x5, 0xc9, 0x2}}}, 0x7) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x14, 0x1, 0x5, 0x401}, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c800397058abce57033f29eb6dc1f8b128a7537a3409329d374c37fd2f23cfa5a5495ffc36ac891ea6f898ba2a0784b3781c51e6bd91a231a605e31d"], 0x3d) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0x0, 0x7, 0xffff, 0x0, 0x7}}}}, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x1) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x16000281) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.137241661s ago: executing program 1 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') getdents64(r3, 0xffffffffffffffff, 0x43) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 871.393877ms ago: executing program 2 (id=266): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/image_size', 0x400000, 0x2e) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_submit(0x0, 0x0, &(0x7f0000000740)) socket$kcm(0x10, 0x0, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d966000000000000000000000000000000000000000000000000000018e0000000000000feffffff01000000110000000000000081006263736630000002000800000000000073697430000002000000ffff00000000626f6e643000000000000000000000007600000000010000005c121d00000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff030000002000000000000000000000000000000000000000080000000000007f0000000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaacc030000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]}, 0x78) 663.1332ms ago: executing program 4 (id=267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 192.225158ms ago: executing program 4 (id=268): socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x0, 0x3, 0x40, 0x4, 0x9}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x1014}, 0x48) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x28402, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000041401000000000000000000080001"], 0x20}}, 0x0) 0s ago: executing program 1 (id=269): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x9}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts. [ 53.675916][ T5065] cgroup: Unknown subsys name 'net' [ 53.842352][ T5065] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.252361][ T5065] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.451074][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.457015][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.459156][ T5092] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.468187][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.473844][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.482080][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.488220][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.495319][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.504105][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.509955][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.516156][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.522903][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.529666][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.535915][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.552997][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.553273][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.567309][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.567760][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.583583][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.583921][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.591276][ T5097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.599212][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.605386][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.613221][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.619680][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.629413][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.640699][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.645745][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.663253][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.672336][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.152366][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 58.251377][ T5079] chnl_net:caif_netlink_parms(): no params data found [ 58.309589][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 58.338508][ T5084] chnl_net:caif_netlink_parms(): no params data found [ 58.475614][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.482782][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.491078][ T5076] bridge_slave_0: entered allmulticast mode [ 58.499960][ T5076] bridge_slave_0: entered promiscuous mode [ 58.523447][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 58.550785][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.558256][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.565583][ T5076] bridge_slave_1: entered allmulticast mode [ 58.572326][ T5076] bridge_slave_1: entered promiscuous mode [ 58.632213][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.639580][ T5079] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.647329][ T5079] bridge_slave_0: entered allmulticast mode [ 58.654214][ T5079] bridge_slave_0: entered promiscuous mode [ 58.708803][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.719492][ T5079] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.727192][ T5079] bridge_slave_1: entered allmulticast mode [ 58.734068][ T5079] bridge_slave_1: entered promiscuous mode [ 58.750712][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.758017][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.766174][ T5081] bridge_slave_0: entered allmulticast mode [ 58.773038][ T5081] bridge_slave_0: entered promiscuous mode [ 58.780662][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.788633][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.796125][ T5081] bridge_slave_1: entered allmulticast mode [ 58.802923][ T5081] bridge_slave_1: entered promiscuous mode [ 58.813955][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.821375][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.828730][ T5084] bridge_slave_0: entered allmulticast mode [ 58.835503][ T5084] bridge_slave_0: entered promiscuous mode [ 58.846358][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.882444][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.889743][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.897072][ T5084] bridge_slave_1: entered allmulticast mode [ 58.903933][ T5084] bridge_slave_1: entered promiscuous mode [ 58.913774][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.929354][ T5079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.998831][ T5079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.023127][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.032561][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.040998][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.049133][ T5077] bridge_slave_0: entered allmulticast mode [ 59.056120][ T5077] bridge_slave_0: entered promiscuous mode [ 59.078348][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.102240][ T5076] team0: Port device team_slave_0 added [ 59.123902][ T5079] team0: Port device team_slave_0 added [ 59.132243][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.142482][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.150088][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.157619][ T5077] bridge_slave_1: entered allmulticast mode [ 59.164488][ T5077] bridge_slave_1: entered promiscuous mode [ 59.179627][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.190941][ T5076] team0: Port device team_slave_1 added [ 59.209033][ T5079] team0: Port device team_slave_1 added [ 59.312773][ T5084] team0: Port device team_slave_0 added [ 59.320179][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.329770][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.357048][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.369695][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.376717][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.402687][ T5079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.418419][ T5081] team0: Port device team_slave_0 added [ 59.427559][ T5081] team0: Port device team_slave_1 added [ 59.436049][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.448246][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.459158][ T5084] team0: Port device team_slave_1 added [ 59.465707][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.472732][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.498928][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.510711][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.518363][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.544405][ T5079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.611765][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.618914][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.646111][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.646195][ T5085] Bluetooth: hci4: command tx timeout [ 59.695534][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.702503][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.728678][ T5085] Bluetooth: hci1: command tx timeout [ 59.728931][ T5085] Bluetooth: hci3: command tx timeout [ 59.734404][ T5097] Bluetooth: hci0: command tx timeout [ 59.740589][ T5085] Bluetooth: hci2: command tx timeout [ 59.745591][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.773824][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.780946][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.807179][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.820381][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.827500][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.854002][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.869463][ T5077] team0: Port device team_slave_0 added [ 59.907242][ T5079] hsr_slave_0: entered promiscuous mode [ 59.913543][ T5079] hsr_slave_1: entered promiscuous mode [ 59.928017][ T5077] team0: Port device team_slave_1 added [ 59.940651][ T5076] hsr_slave_0: entered promiscuous mode [ 59.947091][ T5076] hsr_slave_1: entered promiscuous mode [ 59.953215][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.961972][ T5076] Cannot create hsr debugfs directory [ 60.051506][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.058721][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.085851][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.108501][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.115605][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.141699][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.156698][ T5081] hsr_slave_0: entered promiscuous mode [ 60.163077][ T5081] hsr_slave_1: entered promiscuous mode [ 60.169496][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.177181][ T5081] Cannot create hsr debugfs directory [ 60.223004][ T5084] hsr_slave_0: entered promiscuous mode [ 60.229286][ T5084] hsr_slave_1: entered promiscuous mode [ 60.236851][ T5084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.244489][ T5084] Cannot create hsr debugfs directory [ 60.366754][ T5077] hsr_slave_0: entered promiscuous mode [ 60.373354][ T5077] hsr_slave_1: entered promiscuous mode [ 60.380563][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.388622][ T5077] Cannot create hsr debugfs directory [ 60.743776][ T5076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.760616][ T5076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.792651][ T5076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.816773][ T5076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.856442][ T5079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.874284][ T5079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.897839][ T5079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.910189][ T5079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.986732][ T5081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.998140][ T5081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.010651][ T5081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.021379][ T5081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.107647][ T5077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.128695][ T5077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.188442][ T5077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.217565][ T5077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.252798][ T5084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.278212][ T5084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.290593][ T5084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.319039][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.339011][ T5084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.359890][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.400024][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.407444][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.463524][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.470729][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.538408][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.597999][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.636677][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.643880][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.660012][ T5079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.687868][ T5076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.720220][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.725614][ T5085] Bluetooth: hci4: command tx timeout [ 61.727422][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.774121][ T5079] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.794021][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.808935][ T5085] Bluetooth: hci2: command tx timeout [ 61.809023][ T5096] Bluetooth: hci3: command tx timeout [ 61.814352][ T5095] Bluetooth: hci1: command tx timeout [ 61.820198][ T5097] Bluetooth: hci0: command tx timeout [ 61.903126][ T5081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.915277][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.935036][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.942157][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.985973][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.013124][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.045645][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.053141][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.115921][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.123272][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.147727][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.168837][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.198434][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.205625][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.254602][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.261762][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.329657][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.336784][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.372497][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.500837][ T5076] veth0_vlan: entered promiscuous mode [ 62.595105][ T5076] veth1_vlan: entered promiscuous mode [ 62.651376][ T5079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.680063][ T5081] veth0_vlan: entered promiscuous mode [ 62.729259][ T5076] veth0_macvtap: entered promiscuous mode [ 62.752952][ T5081] veth1_vlan: entered promiscuous mode [ 62.778417][ T5076] veth1_macvtap: entered promiscuous mode [ 62.921807][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.959994][ T5081] veth0_macvtap: entered promiscuous mode [ 62.971052][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.990416][ T5081] veth1_macvtap: entered promiscuous mode [ 63.027702][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.047197][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.066701][ T5076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.075977][ T5076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.088699][ T5076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.098334][ T5076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.160187][ T5084] veth0_vlan: entered promiscuous mode [ 63.180890][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.192024][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.205826][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.233417][ T5084] veth1_vlan: entered promiscuous mode [ 63.247662][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.261329][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.274329][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.306499][ T5081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.315892][ T5081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.333885][ T5081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.343084][ T5081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.445567][ T5079] veth0_vlan: entered promiscuous mode [ 63.461377][ T5077] veth0_vlan: entered promiscuous mode [ 63.475276][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.484260][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.509912][ T5079] veth1_vlan: entered promiscuous mode [ 63.553026][ T5084] veth0_macvtap: entered promiscuous mode [ 63.564115][ T5084] veth1_macvtap: entered promiscuous mode [ 63.588026][ T5077] veth1_vlan: entered promiscuous mode [ 63.632587][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.641424][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.683626][ T2478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.697211][ T2478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.742971][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.755502][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.766437][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.780630][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.792261][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.805039][ T5097] Bluetooth: hci4: command tx timeout [ 63.812994][ T5077] veth0_macvtap: entered promiscuous mode [ 63.840347][ T5079] veth0_macvtap: entered promiscuous mode [ 63.855451][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.866550][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.878514][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.892121][ T5097] Bluetooth: hci1: command tx timeout [ 63.892207][ T5085] Bluetooth: hci0: command tx timeout [ 63.898072][ T5097] Bluetooth: hci3: command tx timeout [ 63.908219][ T5095] Bluetooth: hci2: command tx timeout [ 63.909450][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.925741][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.939781][ T5077] veth1_macvtap: entered promiscuous mode [ 63.950694][ T5079] veth1_macvtap: entered promiscuous mode [ 63.977456][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.986172][ T5084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.002695][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.015101][ T5084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.023843][ T5084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.063110][ T5084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.128327][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.144871][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.158038][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.171990][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.183663][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.196147][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.210448][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.259972][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.277430][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.306300][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.335368][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.345650][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.361623][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.387743][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.415730][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.427520][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.437739][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.448690][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.459865][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.474112][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.484191][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.496457][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.507710][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.530524][ T5172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.569791][ T5077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.579905][ T5077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.589770][ T5077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.599648][ T5077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.619558][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.634181][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.644193][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.658268][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.658897][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.676554][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.679667][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.692754][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.710788][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.721468][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.733035][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.756109][ T5079] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.766922][ T5079] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.775974][ T5079] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.779822][ T5176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 64.785164][ T5079] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.821873][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.836893][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.842969][ T5176] team0: entered promiscuous mode [ 64.850410][ T5176] team_slave_0: entered promiscuous mode [ 64.858370][ T5176] team_slave_1: entered promiscuous mode [ 64.910132][ T5176] team_slave_0: entered allmulticast mode [ 64.956196][ T5176] team0: Port device team_slave_0 removed [ 64.961982][ T5179] Zero length message leads to an empty skb [ 64.968257][ T5175] team0: left promiscuous mode [ 64.973767][ T5175] team_slave_1: left promiscuous mode [ 65.148757][ T5182] netdevsim netdevsim2: Direct firmware load for 5 00ee 00dd 0000 0005 0002 [ 65.148757][ T5182] failed with error -2 [ 65.162617][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.175448][ T5182] netdevsim netdevsim2: Falling back to sysfs fallback for: 5 00ee 00dd 0000 0005 0002 [ 65.175448][ T5182] [ 65.181200][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.271995][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.289602][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.301213][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.313838][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.366118][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.374013][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.884895][ T5095] Bluetooth: hci4: command tx timeout [ 66.027994][ T5097] Bluetooth: hci0: command tx timeout [ 66.033463][ T5097] Bluetooth: hci1: command tx timeout [ 66.039118][ T5095] Bluetooth: hci2: command tx timeout [ 67.114907][ T5208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.136327][ T5217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 67.201268][ T5217] team0: entered promiscuous mode [ 67.217778][ T5217] team_slave_0: entered promiscuous mode [ 67.229201][ T5221] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 67.249133][ T5223] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.261902][ T5217] team_slave_1: entered promiscuous mode [ 67.315405][ T5217] team_slave_0: entered allmulticast mode [ 67.364665][ T5217] team0: Port device team_slave_0 removed [ 67.432675][ T5212] team0: left promiscuous mode [ 67.446192][ T5212] team_slave_1: left promiscuous mode [ 67.938244][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 69.136375][ T5137] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.251847][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 69.251884][ T5095] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 69.287831][ T5095] Bluetooth: hci3: Injecting HCI hardware error event [ 69.314717][ T5097] Bluetooth: hci3: hardware error 0x00 [ 69.354099][ T5137] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 69.366329][ T5137] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 69.377855][ T5137] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.388021][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.704175][ T5095] Bluetooth: hci2: SCO packet for unknown connection handle 1009 [ 69.704405][ T5137] usb 4-1: string descriptor 0 read error: -22 [ 69.823623][ T29] audit: type=1326 audit(1720670524.718:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fd775bd9 code=0x7ffc0000 [ 69.854781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.915080][ T5123] usb 4-1: USB disconnect, device number 2 [ 69.945158][ T29] audit: type=1326 audit(1720670524.748:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fd775bd9 code=0x7ffc0000 [ 70.009345][ T29] audit: type=1326 audit(1720670524.748:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44fd774610 code=0x7ffc0000 [ 70.035559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.062061][ T29] audit: type=1326 audit(1720670524.748:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44fd7757db code=0x7ffc0000 [ 70.140823][ T29] audit: type=1326 audit(1720670524.748:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44fd7757db code=0x7ffc0000 [ 70.154570][ T5137] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 70.179590][ T29] audit: type=1326 audit(1720670524.758:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44fd7757db code=0x7ffc0000 [ 70.204103][ T5267] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.290356][ T29] audit: type=1326 audit(1720670524.758:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44fd7757db code=0x7ffc0000 [ 70.350364][ T29] audit: type=1326 audit(1720670524.908:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44fd7757db code=0x7ffc0000 [ 70.373306][ T29] audit: type=1326 audit(1720670524.988:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44fd7757db code=0x7ffc0000 [ 70.399586][ T29] audit: type=1326 audit(1720670525.168:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5261 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44fd7757db code=0x7ffc0000 [ 70.449443][ T5137] usb 3-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 70.490008][ T5137] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 70.502852][ T5137] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 70.541999][ T5137] usb 3-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 70.553405][ T5137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.562495][ T5137] usb 3-1: Product: syz [ 70.566981][ T5137] usb 3-1: Manufacturer: syz [ 70.593772][ T5137] usb 3-1: SerialNumber: syz [ 70.639964][ T5137] usb 3-1: config 0 descriptor?? [ 70.758793][ T5282] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.404778][ T5097] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 71.792043][ T5286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.825911][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.832584][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.963567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.126878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.302365][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.312826][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.324997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.333819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.351594][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.371581][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.385658][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.393290][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.421515][ T5296] netdevsim netdevsim0: Direct firmware load for d 01d8 0128 0000 0000 0003 [ 72.421515][ T5296] failed with error -2 [ 72.435179][ T5296] netdevsim netdevsim0: Falling back to sysfs fallback for: d 01d8 0128 0000 0000 0003 [ 72.435179][ T5296] [ 72.485804][ T5079] syz-executor (5079) used greatest stack depth: 18864 bytes left [ 72.562757][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.726946][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.880496][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.018119][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.136459][ T931] usb 3-1: USB disconnect, device number 2 [ 73.186474][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 73.205504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.214140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.677277][ T5297] chnl_net:caif_netlink_parms(): no params data found [ 73.736678][ T35] bridge_slave_1: left allmulticast mode [ 73.754541][ T35] bridge_slave_1: left promiscuous mode [ 73.764835][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.876713][ T35] bridge_slave_0: left allmulticast mode [ 73.929957][ T35] bridge_slave_0: left promiscuous mode [ 73.979035][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.351081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.365193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.405783][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 74.454896][ T5095] Bluetooth: hci2: command tx timeout [ 75.154977][ T5369] netlink: 'syz.2.51': attribute type 3 has an invalid length. [ 75.164204][ T5369] netlink: 48 bytes leftover after parsing attributes in process `syz.2.51'. [ 75.182526][ T5369] netlink: 'syz.2.51': attribute type 3 has an invalid length. [ 75.206937][ T5369] netlink: 48 bytes leftover after parsing attributes in process `syz.2.51'. [ 75.256324][ T5374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 75.492183][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.518661][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.542145][ T35] bond0 (unregistering): Released all slaves [ 75.615314][ T5369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 75.636432][ T5369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 76.395948][ T5095] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 76.404744][ T5095] Bluetooth: hci0: Injecting HCI hardware error event [ 76.413719][ T5095] Bluetooth: hci0: hardware error 0x00 [ 76.527860][ T5097] Bluetooth: hci2: command tx timeout [ 76.559290][ T5368] kexec: Could not allocate control_code_buffer [ 76.681220][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 76.707733][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 76.707748][ T29] audit: type=1326 audit(1720670531.608:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca7b75bd9 code=0x7ffc0000 [ 76.801302][ T29] audit: type=1326 audit(1720670531.648:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca7b75bd9 code=0x7ffc0000 [ 76.853388][ T29] audit: type=1326 audit(1720670531.648:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ca7b74610 code=0x7ffc0000 [ 76.882566][ T29] audit: type=1326 audit(1720670531.648:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ca7b757db code=0x7ffc0000 [ 77.022477][ T5297] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.034763][ T931] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.059466][ T29] audit: type=1326 audit(1720670531.648:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ca7b757db code=0x7ffc0000 [ 77.068041][ T5297] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.125268][ T29] audit: type=1326 audit(1720670531.648:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ca7b757db code=0x7ffc0000 [ 77.151324][ T5297] bridge_slave_0: entered allmulticast mode [ 77.176101][ T5297] bridge_slave_0: entered promiscuous mode [ 77.199395][ T29] audit: type=1326 audit(1720670531.648:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ca7b757db code=0x7ffc0000 [ 77.315807][ T931] usb 1-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 77.329978][ T29] audit: type=1326 audit(1720670531.808:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ca7b757db code=0x7ffc0000 [ 77.362036][ T35] hsr_slave_0: left promiscuous mode [ 77.367687][ T931] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.440919][ T29] audit: type=1326 audit(1720670531.858:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ca7b757db code=0x7ffc0000 [ 77.443439][ T931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 77.502546][ T35] hsr_slave_1: left promiscuous mode [ 77.597422][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.614912][ T29] audit: type=1326 audit(1720670531.988:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5385 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ca7b757db code=0x7ffc0000 [ 77.634700][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.679662][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.691729][ T931] usb 1-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 77.712286][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.729297][ T931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.785183][ T931] usb 1-1: Product: syz [ 77.789398][ T931] usb 1-1: Manufacturer: syz [ 77.794029][ T931] usb 1-1: SerialNumber: syz [ 77.854201][ T931] usb 1-1: config 0 descriptor?? [ 77.915787][ T35] veth1_macvtap: left promiscuous mode [ 77.921756][ T35] veth0_macvtap: left promiscuous mode [ 78.127181][ T35] veth1_vlan: left promiscuous mode [ 78.155458][ T35] veth0_vlan: left promiscuous mode [ 78.525652][ T5095] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 78.605090][ T5097] Bluetooth: hci2: command tx timeout [ 79.985802][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 80.099081][ T5442] netlink: 'syz.2.63': attribute type 3 has an invalid length. [ 80.124036][ T5442] netlink: 48 bytes leftover after parsing attributes in process `syz.2.63'. [ 80.160918][ T5444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'. [ 80.179203][ T5442] netlink: 'syz.2.63': attribute type 3 has an invalid length. [ 80.212428][ T5442] netlink: 48 bytes leftover after parsing attributes in process `syz.2.63'. [ 80.239972][ T5123] usb 1-1: USB disconnect, device number 2 [ 80.464994][ T35] team0 (unregistering): Port device team_slave_1 removed [ 80.506600][ T35] team0 (unregistering): Port device team_slave_0 removed [ 80.605041][ T5095] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 80.694817][ T5095] Bluetooth: hci2: command tx timeout [ 81.600999][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 81.612469][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.620334][ T5297] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.628305][ T5297] bridge_slave_1: entered allmulticast mode [ 81.635973][ T5297] bridge_slave_1: entered promiscuous mode [ 81.718121][ T5444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'. [ 81.735380][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 81.987871][ T5297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.048141][ T5297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.063489][ T58] cfg80211: failed to load regulatory.db [ 83.376298][ T5297] team0: Port device team_slave_0 added [ 83.501898][ T5297] team0: Port device team_slave_1 added [ 83.526253][ T5478] kexec: Could not allocate control_code_buffer [ 83.608656][ T5297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.616492][ T5297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.643720][ T5297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.766285][ T5297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.796392][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 83.796396][ T5297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.796409][ T29] audit: type=1326 audit(1720670538.698:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e9175bd9 code=0x7ffc0000 [ 83.850883][ T29] audit: type=1326 audit(1720670538.758:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e9175bd9 code=0x7ffc0000 [ 83.876769][ T5297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.938335][ T29] audit: type=1326 audit(1720670538.768:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64e9174610 code=0x7ffc0000 [ 84.053852][ T29] audit: type=1326 audit(1720670538.768:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e91757db code=0x7ffc0000 [ 84.092270][ T5297] hsr_slave_0: entered promiscuous mode [ 84.122190][ T29] audit: type=1326 audit(1720670538.768:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e91757db code=0x7ffc0000 [ 84.144528][ T58] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 84.168281][ T5297] hsr_slave_1: entered promiscuous mode [ 84.215999][ T29] audit: type=1326 audit(1720670538.768:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e91757db code=0x7ffc0000 [ 84.307569][ T29] audit: type=1326 audit(1720670538.768:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e91757db code=0x7ffc0000 [ 84.377611][ T58] usb 2-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 84.426336][ T29] audit: type=1326 audit(1720670538.888:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e91757db code=0x7ffc0000 [ 84.450132][ T58] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.475225][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 84.493820][ T29] audit: type=1326 audit(1720670538.978:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e91757db code=0x7ffc0000 [ 84.554288][ T58] usb 2-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 84.572760][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.585599][ T29] audit: type=1326 audit(1720670539.058:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5486 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64e91757db code=0x7ffc0000 [ 84.590795][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 84.615783][ T58] usb 2-1: Product: syz [ 84.615807][ T58] usb 2-1: Manufacturer: syz [ 84.615823][ T58] usb 2-1: SerialNumber: syz [ 84.626634][ T58] usb 2-1: config 0 descriptor?? [ 85.496664][ T5297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.562993][ T5297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.613857][ T5297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.672897][ T5297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.924871][ T5524] netlink: 'syz.2.78': attribute type 3 has an invalid length. [ 85.974334][ T5524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.78'. [ 86.024936][ T5527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.78'. [ 86.082985][ T5524] netlink: 'syz.2.78': attribute type 3 has an invalid length. [ 86.093098][ T5297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.110501][ T5530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.78'. [ 86.136037][ T5524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.78'. [ 86.141330][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 86.163043][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 86.263094][ T5297] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.336644][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.343865][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.407856][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.415042][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.767825][ T5132] usb 2-1: USB disconnect, device number 2 [ 88.509306][ T5297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.586516][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 88.831523][ T5586] netlink: 'syz.0.89': attribute type 3 has an invalid length. [ 88.911596][ T5586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.89'. [ 88.947809][ T5586] netlink: 'syz.0.89': attribute type 3 has an invalid length. [ 88.956418][ T5586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.89'. [ 88.992830][ T5586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.89'. [ 89.009707][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 89.010716][ T29] audit: type=1326 audit(1720670543.908:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d89f75bd9 code=0x7ffc0000 [ 89.047796][ T29] audit: type=1326 audit(1720670543.908:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d89f75bd9 code=0x7ffc0000 [ 89.130735][ T29] audit: type=1326 audit(1720670543.908:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d89f74610 code=0x7ffc0000 [ 89.210662][ T29] audit: type=1326 audit(1720670543.908:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 89.314081][ T29] audit: type=1326 audit(1720670543.908:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 89.335907][ T58] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 89.375327][ T29] audit: type=1326 audit(1720670543.948:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 89.446143][ T29] audit: type=1326 audit(1720670543.948:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 89.714580][ T58] usb 4-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 89.727240][ T29] audit: type=1326 audit(1720670544.088:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 89.775335][ T58] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.792317][ T29] audit: type=1326 audit(1720670544.168:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 89.843215][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 89.960445][ T29] audit: type=1326 audit(1720670544.298:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5585 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 89.971042][ T5594] kexec: Could not allocate control_code_buffer [ 90.137270][ T58] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 90.177539][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.253171][ T5297] veth0_vlan: entered promiscuous mode [ 90.361836][ T58] usb 4-1: Product: syz [ 90.380733][ T58] usb 4-1: Manufacturer: syz [ 90.414782][ T58] usb 4-1: SerialNumber: syz [ 90.422194][ T5297] veth1_vlan: entered promiscuous mode [ 90.476310][ T58] usb 4-1: config 0 descriptor?? [ 90.601054][ T5297] veth0_macvtap: entered promiscuous mode [ 90.688953][ T5297] veth1_macvtap: entered promiscuous mode [ 90.768766][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.833686][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.881411][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.912756][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.941924][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.978455][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.023839][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.065245][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.101939][ T5297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.212574][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.290102][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.322198][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.443893][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.501089][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.536236][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.570048][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.620287][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.664053][ T5297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.742196][ T5297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.781589][ T5297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.878174][ T5297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.908229][ T5297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.309040][ T5132] usb 4-1: USB disconnect, device number 3 [ 93.393837][ T5095] Bluetooth: hci4: SCO packet for unknown connection handle 1009 [ 93.443419][ T2478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.490081][ T2478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.664617][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.720397][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.997313][ T5666] __nla_validate_parse: 2 callbacks suppressed [ 93.997331][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 94.021136][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 94.055488][ T5666] team0: entered promiscuous mode [ 94.084947][ T5666] team_slave_0: entered promiscuous mode [ 94.110584][ T5666] team_slave_1: entered promiscuous mode [ 94.167389][ T5666] team_slave_0: entered allmulticast mode [ 94.422558][ T5666] team0: Port device team_slave_0 removed [ 94.436142][ T5673] netlink: 'syz.1.100': attribute type 3 has an invalid length. [ 94.472865][ T5673] netlink: 48 bytes leftover after parsing attributes in process `syz.1.100'. [ 94.493638][ T5665] team0: left promiscuous mode [ 94.506327][ T5673] netlink: 'syz.1.100': attribute type 3 has an invalid length. [ 94.514218][ T5665] team_slave_1: left promiscuous mode [ 94.561364][ T5681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.100'. [ 94.593389][ T5673] netlink: 48 bytes leftover after parsing attributes in process `syz.1.100'. [ 94.668088][ T5681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.100'. [ 94.885658][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 95.797585][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.058764][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 96.075186][ T8] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 96.145287][ T8] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 96.207008][ T8] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 96.227611][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.443106][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 96.510033][ T8] usb 2-1: string descriptor 0 read error: -71 [ 96.532449][ T5728] team0: entered promiscuous mode [ 96.543001][ T8] usb 2-1: USB disconnect, device number 3 [ 96.564386][ T5728] team_slave_1: entered promiscuous mode [ 96.581890][ T5734] netlink: 'syz.4.116': attribute type 3 has an invalid length. [ 96.602058][ T5725] team0: left promiscuous mode [ 96.617079][ T5734] netlink: 48 bytes leftover after parsing attributes in process `syz.4.116'. [ 96.631369][ T5725] team_slave_1: left promiscuous mode [ 96.642278][ T5734] netlink: 'syz.4.116': attribute type 3 has an invalid length. [ 99.133101][ T5095] Bluetooth: hci1: SCO packet for unknown connection handle 1009 [ 99.223251][ T5776] __nla_validate_parse: 4 callbacks suppressed [ 99.223272][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 99.367971][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 99.401424][ T5785] netlink: 'syz.4.128': attribute type 3 has an invalid length. [ 99.440794][ T5783] team0: entered promiscuous mode [ 99.446107][ T5785] netlink: 48 bytes leftover after parsing attributes in process `syz.4.128'. [ 99.460955][ T5783] team_slave_1: entered promiscuous mode [ 99.476672][ T5785] netlink: 'syz.4.128': attribute type 3 has an invalid length. [ 99.500397][ T5782] team0: left promiscuous mode [ 99.505878][ T5782] team_slave_1: left promiscuous mode [ 99.511060][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.128'. [ 99.534574][ T5785] netlink: 48 bytes leftover after parsing attributes in process `syz.4.128'. [ 99.576482][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.128'. [ 99.647019][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 105.906546][ T5815] netdevsim netdevsim0: Direct firmware load for e 0256 012b 0000 0000 0003 [ 105.906546][ T5815] failed with error -2 [ 105.932555][ T5815] netdevsim netdevsim0: Falling back to sysfs fallback for: e 0256 012b 0000 0000 0003 [ 105.932555][ T5815] [ 106.108780][ T5095] Bluetooth: hci2: SCO packet for unknown connection handle 1009 [ 106.119313][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 106.499892][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 106.499909][ T29] audit: type=1326 audit(1720670561.398:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d89f75bd9 code=0x7ffc0000 [ 106.583557][ T29] audit: type=1326 audit(1720670561.438:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d89f75bd9 code=0x7ffc0000 [ 106.678661][ T29] audit: type=1326 audit(1720670561.438:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d89f74610 code=0x7ffc0000 [ 106.679256][ T5833] netlink: 'syz.4.144': attribute type 3 has an invalid length. [ 106.757491][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.144'. [ 106.787009][ T5833] netlink: 48 bytes leftover after parsing attributes in process `syz.4.144'. [ 106.799925][ T29] audit: type=1326 audit(1720670561.448:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 106.891424][ T5833] netlink: 'syz.4.144': attribute type 3 has an invalid length. [ 106.892423][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.144'. [ 106.923021][ T29] audit: type=1326 audit(1720670561.448:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 106.954878][ T5137] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 106.957903][ T5833] netlink: 48 bytes leftover after parsing attributes in process `syz.4.144'. [ 107.028001][ T29] audit: type=1326 audit(1720670561.468:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 107.118355][ T29] audit: type=1326 audit(1720670561.468:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 107.129731][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 107.268431][ T5137] usb 4-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 107.287334][ T5137] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.331562][ T29] audit: type=1326 audit(1720670561.638:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 107.357340][ T5137] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 113.524052][ T5137] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 113.555957][ T29] audit: type=1326 audit(1720670561.758:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 113.614567][ T5137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.698928][ T29] audit: type=1326 audit(1720670561.958:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 113.725576][ T5137] usb 4-1: config 0 descriptor?? [ 113.767516][ T5137] usb 4-1: can't set config #0, error -71 [ 113.769047][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.789617][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.804163][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.814371][ T5137] usb 4-1: USB disconnect, device number 4 [ 113.814580][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.821539][ T29] audit: type=1326 audit(1720670561.958:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 113.868902][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 113.884512][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.896215][ T29] audit: type=1326 audit(1720670561.978:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 114.047229][ T29] audit: type=1326 audit(1720670562.068:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 114.140080][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 114.187823][ T29] audit: type=1326 audit(1720670562.158:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 114.289705][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.323542][ T29] audit: type=1326 audit(1720670562.168:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 114.353355][ T29] audit: type=1326 audit(1720670562.168:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 114.419169][ T29] audit: type=1326 audit(1720670562.168:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 114.450924][ T29] audit: type=1326 audit(1720670562.168:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5826 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d89f757db code=0x7ffc0000 [ 114.796877][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.838482][ T5095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.849672][ T5095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.859422][ T5095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.878186][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.886862][ T5095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 114.895221][ T5095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.966145][ T5868] netdevsim netdevsim3: Direct firmware load for e 024c 012b 0000 0000 0000 [ 114.966145][ T5868] failed with error -2 [ 115.003995][ T5868] netdevsim netdevsim3: Falling back to sysfs fallback for: e 024c 012b 0000 0000 0000 [ 115.003995][ T5868] [ 115.137752][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.200007][ T5876] netlink: 'syz.0.156': attribute type 3 has an invalid length. [ 115.218318][ T5876] netlink: 48 bytes leftover after parsing attributes in process `syz.0.156'. [ 115.258430][ T5876] netlink: 'syz.0.156': attribute type 3 has an invalid length. [ 115.269565][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.306446][ T5878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'. [ 115.324328][ T5876] netlink: 48 bytes leftover after parsing attributes in process `syz.0.156'. [ 115.343414][ T5878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'. [ 115.360159][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 115.808610][ T62] bridge_slave_1: left allmulticast mode [ 115.844374][ T62] bridge_slave_1: left promiscuous mode [ 115.885561][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.898124][ T62] bridge_slave_0: left allmulticast mode [ 115.920708][ T62] bridge_slave_0: left promiscuous mode [ 115.934942][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.045382][ T5097] Bluetooth: hci3: command tx timeout [ 116.146390][ T58] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 116.393669][ T58] usb 4-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 116.436673][ T58] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.483387][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.573404][ T58] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 116.624742][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.650637][ T58] usb 4-1: Product: syz [ 116.664488][ T58] usb 4-1: Manufacturer: syz [ 116.681513][ T58] usb 4-1: SerialNumber: syz [ 116.740655][ T58] usb 4-1: config 0 descriptor?? [ 116.924672][ T5097] Bluetooth: hci5: command tx timeout [ 117.310511][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.331877][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.348614][ T62] bond0 (unregistering): Released all slaves [ 117.467007][ T62] bond1 (unregistering): Released all slaves [ 117.581843][ T62] bond2 (unregistering): Released all slaves [ 117.649705][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 117.742545][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 118.124964][ T5097] Bluetooth: hci3: command tx timeout [ 118.375145][ T5927] netlink: 'syz.4.165': attribute type 3 has an invalid length. [ 118.383952][ T5927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.165'. [ 118.394159][ T5927] netlink: 'syz.4.165': attribute type 3 has an invalid length. [ 118.402759][ T5927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.165'. [ 118.418439][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.165'. [ 118.543446][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.558616][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.572733][ T5849] bridge_slave_0: entered allmulticast mode [ 118.582787][ T5849] bridge_slave_0: entered promiscuous mode [ 118.637843][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.669517][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.698899][ T5849] bridge_slave_1: entered allmulticast mode [ 118.732078][ T5849] bridge_slave_1: entered promiscuous mode [ 118.794197][ T9] usb 4-1: USB disconnect, device number 5 [ 118.833395][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 118.924944][ T5097] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 118.935092][ T5097] Bluetooth: hci1: Injecting HCI hardware error event [ 118.942904][ T5095] Bluetooth: hci1: hardware error 0x00 [ 118.951035][ T62] hsr_slave_0: left promiscuous mode [ 118.976545][ T62] hsr_slave_1: left promiscuous mode [ 118.999576][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.007733][ T5097] Bluetooth: hci5: command tx timeout [ 119.020181][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.036902][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.049389][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.097572][ T62] veth1_macvtap: left promiscuous mode [ 119.109634][ T62] veth0_macvtap: left promiscuous mode [ 119.121599][ T62] veth1_vlan: left promiscuous mode [ 119.134662][ T62] veth0_vlan: left promiscuous mode [ 119.956559][ T62] team0 (unregistering): Port device team_slave_1 removed [ 120.204532][ T5097] Bluetooth: hci3: command tx timeout [ 120.621764][ T5935] netdevsim netdevsim4: Direct firmware load for f 0247 0131 0000 0000 0003 [ 120.621764][ T5935] failed with error -2 [ 120.641418][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.656881][ T5935] netdevsim netdevsim4: Falling back to sysfs fallback for: f 0247 0131 0000 0000 0003 [ 120.656881][ T5935] [ 120.819493][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.004863][ T5095] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 121.086993][ T5097] Bluetooth: hci5: command tx timeout [ 121.155578][ T5973] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 121.182409][ T5973] __nla_validate_parse: 2 callbacks suppressed [ 121.182435][ T5973] netlink: 48 bytes leftover after parsing attributes in process `syz.0.175'. [ 121.201990][ T5973] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 121.204135][ T5975] netlink: 'syz.4.177': attribute type 29 has an invalid length. [ 121.213605][ T5849] team0: Port device team_slave_0 added [ 121.229490][ T5973] netlink: 48 bytes leftover after parsing attributes in process `syz.0.175'. [ 121.247089][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.254065][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 121.254296][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.298867][ T5867] bridge_slave_0: entered allmulticast mode [ 121.309107][ T5867] bridge_slave_0: entered promiscuous mode [ 121.345801][ T5975] netlink: 'syz.4.177': attribute type 29 has an invalid length. [ 121.355634][ T5977] netlink: 'syz.4.177': attribute type 29 has an invalid length. [ 121.363670][ T5978] netlink: 'syz.4.177': attribute type 29 has an invalid length. [ 121.411666][ T5849] team0: Port device team_slave_1 added [ 121.424790][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 121.444162][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 121.522342][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.547616][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.574738][ T5867] bridge_slave_1: entered allmulticast mode [ 121.592593][ T5867] bridge_slave_1: entered promiscuous mode [ 122.287285][ T5097] Bluetooth: hci3: command tx timeout [ 122.435501][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.471497][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.494464][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.534496][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.567420][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.584561][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.634220][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.675554][ T5991] netdevsim netdevsim0: Direct firmware load for f 0270 0130 0000 0002 0003 [ 122.675554][ T5991] failed with error -2 [ 122.682208][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.698897][ T5991] netdevsim netdevsim0: Falling back to sysfs fallback for: f 0270 0130 0000 0002 0003 [ 122.698897][ T5991] [ 122.810989][ T5867] team0: Port device team_slave_0 added [ 122.849550][ T5867] team0: Port device team_slave_1 added [ 122.927637][ T5097] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 122.936833][ T5097] Bluetooth: hci2: Injecting HCI hardware error event [ 122.947574][ T5096] Bluetooth: hci2: hardware error 0x00 [ 123.000827][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.010923][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.038820][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.084911][ T5095] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 123.122160][ T5849] hsr_slave_0: entered promiscuous mode [ 123.129244][ T5849] hsr_slave_1: entered promiscuous mode [ 123.141977][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.153994][ T5849] Cannot create hsr debugfs directory [ 123.164755][ T5095] Bluetooth: hci5: command tx timeout [ 123.181696][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.209078][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.217621][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 123.299551][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.480685][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.508088][ T6015] team0: entered promiscuous mode [ 123.524959][ T6015] team_slave_1: entered promiscuous mode [ 123.597974][ T6024] netlink: 'syz.3.188': attribute type 3 has an invalid length. [ 123.625453][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.188'. [ 123.643602][ T6024] netlink: 'syz.3.188': attribute type 3 has an invalid length. [ 123.654835][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.188'. [ 123.671320][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 123.687119][ T6011] team0: left promiscuous mode [ 123.692128][ T6011] team_slave_1: left promiscuous mode [ 123.723330][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.794115][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 123.895919][ T5867] hsr_slave_0: entered promiscuous mode [ 123.915300][ T5867] hsr_slave_1: entered promiscuous mode [ 123.959128][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.968455][ T5867] Cannot create hsr debugfs directory [ 124.107299][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.309483][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.004763][ T5096] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 125.239442][ T6075] netlink: 'syz.3.201': attribute type 3 has an invalid length. [ 125.289373][ T6075] netlink: 'syz.3.201': attribute type 3 has an invalid length. [ 125.670753][ T62] bridge_slave_1: left allmulticast mode [ 125.692440][ T62] bridge_slave_1: left promiscuous mode [ 125.707061][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.756356][ T62] bridge_slave_0: left allmulticast mode [ 125.770822][ T62] bridge_slave_0: left promiscuous mode [ 125.787195][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.505902][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.529560][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.551068][ T62] bond0 (unregistering): Released all slaves [ 126.681214][ T6108] tipc: Started in network mode [ 126.711108][ T6108] tipc: Node identity e6e9729c2172, cluster identity 4711 [ 126.724054][ T6108] tipc: Enabled bearer , priority 0 [ 126.730946][ T6113] __nla_validate_parse: 9 callbacks suppressed [ 126.730962][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'. [ 126.755506][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 126.817697][ T6117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 126.842096][ T6111] tipc: Resetting bearer [ 126.968664][ T6105] tipc: Resetting bearer [ 127.825154][ T25] tipc: Node number set to 3348853404 [ 128.379979][ T6105] tipc: Disabling bearer [ 128.909843][ T62] hsr_slave_0: left promiscuous mode [ 128.921853][ T62] hsr_slave_1: left promiscuous mode [ 128.947835][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.992627][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.022998][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.049212][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.092631][ T62] veth1_macvtap: left promiscuous mode [ 129.103860][ T6140] validate_nla: 2 callbacks suppressed [ 129.103872][ T6140] netlink: 'syz.4.224': attribute type 3 has an invalid length. [ 129.123371][ T62] veth0_macvtap: left promiscuous mode [ 129.130150][ T62] veth1_vlan: left promiscuous mode [ 129.139766][ T6140] netlink: 48 bytes leftover after parsing attributes in process `syz.4.224'. [ 129.158436][ T62] veth0_vlan: left promiscuous mode [ 129.173883][ T6140] netlink: 'syz.4.224': attribute type 3 has an invalid length. [ 129.217805][ T6140] netlink: 48 bytes leftover after parsing attributes in process `syz.4.224'. [ 129.236145][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.224'. [ 129.979444][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.225'. [ 130.199044][ T62] team0 (unregistering): Port device team_slave_1 removed [ 130.247739][ T62] team0 (unregistering): Port device team_slave_0 removed [ 130.708748][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.744289][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.224'. [ 130.753710][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 130.776083][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.813357][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.866204][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.111618][ T6160] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 131.502518][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.646882][ T6145] infiniband syz1: set active [ 131.653042][ T6145] infiniband syz1: added veth1_vlan [ 131.675592][ T6145] syz1: rxe_create_cq: returned err = -12 [ 131.693266][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.700854][ T6145] infiniband syz1: Couldn't create ib_mad CQ [ 131.731805][ T6145] infiniband syz1: Couldn't open port 1 [ 131.809727][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.816972][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.857269][ T6145] RDS/IB: syz1: added [ 131.861633][ T6145] smc: adding ib device syz1 with port count 1 [ 131.934749][ T6145] smc: ib device syz1 port 1 has pnetid [ 131.969669][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.976923][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.039894][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.080330][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.152990][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.245776][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.645528][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.741368][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.853652][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.860818][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.911576][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.918743][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.133116][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.202722][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.248354][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.254858][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.547691][ T5849] veth0_vlan: entered promiscuous mode [ 133.613920][ T6200] netlink: 'syz.4.237': attribute type 3 has an invalid length. [ 133.616521][ T5849] veth1_vlan: entered promiscuous mode [ 133.637490][ T6200] netlink: 48 bytes leftover after parsing attributes in process `syz.4.237'. [ 133.697854][ T6200] netlink: 'syz.4.237': attribute type 3 has an invalid length. [ 133.743377][ T6200] netlink: 48 bytes leftover after parsing attributes in process `syz.4.237'. [ 133.792814][ T5849] veth0_macvtap: entered promiscuous mode [ 133.814771][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.237'. [ 133.847222][ T5849] veth1_macvtap: entered promiscuous mode [ 133.887470][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.237'. [ 133.961238][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 134.069583][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.098271][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.110099][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.121023][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.181433][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.231115][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.250008][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.271598][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.406946][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.458790][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.487854][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.521433][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.561138][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.584774][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.613337][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.651820][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.690559][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.733226][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.762529][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.991907][ T5867] veth0_vlan: entered promiscuous mode [ 135.088649][ T5867] veth1_vlan: entered promiscuous mode [ 135.136840][ T6235] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 135.272631][ T2478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.313622][ T2478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.419817][ T5867] veth0_macvtap: entered promiscuous mode [ 135.506521][ T5867] veth1_macvtap: entered promiscuous mode [ 135.592608][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.617363][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.657834][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.714886][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.742111][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.755144][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.772826][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.786382][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.807086][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.847599][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.911729][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.005841][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.046969][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.090032][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.146602][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.157093][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.169575][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.179907][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.181453][ T6254] netlink: 'syz.0.246': attribute type 3 has an invalid length. [ 136.980247][ T6254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.246'. [ 137.001835][ T6254] netlink: 'syz.0.246': attribute type 3 has an invalid length. [ 137.010207][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.053313][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.065937][ T6254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.246'. [ 137.075627][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 137.107384][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 137.108614][ T5867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.162094][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.192435][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.203103][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.248661][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 137.289270][ T6262] team0: entered promiscuous mode [ 137.300265][ T6262] team_slave_0: entered promiscuous mode [ 137.311832][ T6262] team_slave_1: entered promiscuous mode [ 137.364310][ T6261] team_slave_0: entered allmulticast mode [ 137.446062][ T6261] team0: Port device team_slave_0 removed [ 137.578532][ T6260] team0: left promiscuous mode [ 137.594463][ T6260] team_slave_1: left promiscuous mode [ 137.961195][ T2478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.004937][ T2478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.177489][ T2478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.349131][ T2478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.573659][ T6287] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 140.069298][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.256189][ T6313] netlink: 'syz.2.260': attribute type 3 has an invalid length. [ 140.282349][ T8] usb 4-1: too many configurations: 12, using maximum allowed: 8 [ 140.294543][ T6313] __nla_validate_parse: 1 callbacks suppressed [ 140.294560][ T6313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.260'. [ 140.357389][ T6313] netlink: 'syz.2.260': attribute type 3 has an invalid length. [ 140.359497][ T8] usb 4-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 140.393351][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.411275][ T6313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.260'. [ 140.416318][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.260'. [ 140.422608][ T8] usb 4-1: config 0 descriptor?? [ 140.523094][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.260'. [ 140.595719][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 140.825321][ T6287] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 140.832278][ T6287] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.898055][ T6287] vhci_hcd vhci_hcd.0: Device attached [ 141.146677][ T6333] vhci_hcd: connection closed [ 141.147913][ T8] usb 4-1: string descriptor 0 read error: -71 [ 141.175091][ T58] vhci_hcd: vhci_device speed not set [ 141.182308][ T1058] vhci_hcd: stop threads [ 141.238689][ T1058] vhci_hcd: release socket [ 141.274899][ T58] usb 15-2: new full-speed USB device number 2 using vhci_hcd [ 141.285532][ T1058] vhci_hcd: disconnect device [ 141.312790][ T8] usb 4-1: USB disconnect, device number 6 [ 141.319801][ T58] usb 15-2: enqueue for inactive port 1 [ 141.446654][ T58] vhci_hcd: vhci_device speed not set [ 141.813161][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 141.824859][ T6356] smc: removing ib device syz1 [ 142.952115][ T6356] ------------[ cut here ]------------ [ 142.957628][ T6356] WARNING: CPU: 1 PID: 6356 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x47/0x50 [ 142.968382][ T6356] Modules linked in: [ 142.972296][ T6356] CPU: 1 PID: 6356 Comm: syz.4.268 Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 142.982338][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 142.992431][ T6356] RIP: 0010:rxe_pool_cleanup+0x47/0x50 [ 142.997918][ T6356] Code: 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 29 5a f9 48 83 3b 00 75 0b e8 e5 bd f7 f8 5b c3 cc cc cc cc e8 da bd f7 f8 90 <0f> 0b 90 5b c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 143.018429][ T6356] RSP: 0018:ffffc9000488f178 EFLAGS: 00010246 [ 143.024541][ T6356] RAX: ffffffff889e68e6 RBX: ffff88802393d2a8 RCX: 0000000000040000 [ 143.033071][ T6356] RDX: ffffc9001289e000 RSI: 000000000003ffff RDI: 0000000000040000 [ 143.041101][ T6356] RBP: 000000000000000c R08: ffffffff88770c3f R09: 1ffff110047278ea [ 143.049095][ T6356] R10: dffffc0000000000 R11: ffffffff889c7c20 R12: dffffc0000000000 [ 143.057120][ T6356] R13: 0000000000000000 R14: ffff88802393c638 R15: dffffc0000000000 [ 143.065357][ T6356] FS: 00007fe0f10726c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 143.074328][ T6356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.080941][ T6356] CR2: 00007ffcc61f8fe8 CR3: 0000000022134000 CR4: 00000000003506f0 [ 143.089320][ T6356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.097343][ T6356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.105338][ T6356] Call Trace: [ 143.108603][ T6356] [ 143.111517][ T6356] ? __warn+0x163/0x4e0 [ 143.115712][ T6356] ? rxe_pool_cleanup+0x47/0x50 [ 143.120552][ T6356] ? report_bug+0x2b3/0x500 [ 143.125088][ T6356] ? rxe_pool_cleanup+0x47/0x50 [ 143.130649][ T6356] ? handle_bug+0x3e/0x70 [ 143.135044][ T6356] ? exc_invalid_op+0x1a/0x50 [ 143.139703][ T6356] ? asm_exc_invalid_op+0x1a/0x20 [ 143.144737][ T6356] ? __pfx_rxe_dealloc+0x10/0x10 [ 143.149658][ T6356] ? __ib_unregister_device+0xff/0x170 [ 143.155155][ T6356] ? rxe_pool_cleanup+0x46/0x50 [ 143.159994][ T6356] ? rxe_pool_cleanup+0x47/0x50 [ 143.165070][ T6356] ? rxe_pool_cleanup+0x46/0x50 [ 143.169927][ T6356] rxe_dealloc+0x33/0x100 [ 143.174238][ T6356] ? __pfx_rxe_dealloc+0x10/0x10 [ 143.179210][ T6356] ib_dealloc_device+0x50/0x200 [ 143.184048][ T6356] __ib_unregister_device+0x111/0x170 [ 143.189407][ C1] sched: RT throttling activated [ 143.194487][ T6356] ib_unregister_device_and_put+0xb6/0xf0 [ 143.200196][ T6356] nldev_dellink+0x2d2/0x320 [ 143.204806][ T6356] ? __pfx_nldev_dellink+0x10/0x10 [ 143.209945][ T6356] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 143.215872][ T6356] ? cap_capable+0x1b4/0x250 [ 143.220446][ T6356] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 143.226813][ T6356] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.233238][ T6356] ? cap_capable+0x1b4/0x250 [ 143.238320][ T6356] ? safesetid_security_capable+0xb2/0x1d0 [ 143.244128][ T6356] ? bpf_lsm_capable+0x9/0x10 [ 143.248849][ T6356] ? security_capable+0x90/0xb0 [ 143.253696][ T6356] ? __pfx_nldev_dellink+0x10/0x10 [ 143.258858][ T6356] rdma_nl_rcv+0x6dd/0x9e0 [ 143.263289][ T6356] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 143.268244][ T6356] ? rcu_is_watching+0x15/0xb0 [ 143.273005][ T6356] ? __rcu_read_unlock+0xa1/0x110 [ 143.278059][ T6356] netlink_unicast+0x7ea/0x980 [ 143.282819][ T6356] ? __pfx_netlink_unicast+0x10/0x10 [ 143.288153][ T6356] ? __check_object_size+0x49c/0x900 [ 143.293425][ T6356] ? bpf_lsm_netlink_send+0x9/0x10 [ 143.298582][ T6356] netlink_sendmsg+0x8db/0xcb0 [ 143.303363][ T6356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.308691][ T6356] ? __import_iovec+0x536/0x820 [ 143.313547][ T6356] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 143.318866][ T6356] ? security_socket_sendmsg+0x87/0xb0 [ 143.324313][ T6356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.329725][ T6356] __sock_sendmsg+0x221/0x270 [ 143.334911][ T6356] ____sys_sendmsg+0x525/0x7d0 [ 143.339705][ T6356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.345243][ T6356] __sys_sendmsg+0x2b0/0x3a0 [ 143.349825][ T6356] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.354977][ T6356] ? __schedule+0x179e/0x49d0 [ 143.359667][ T6356] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.366003][ T6356] ? do_syscall_64+0x100/0x230 [ 143.370756][ T6356] ? do_syscall_64+0xb6/0x230 [ 143.375466][ T6356] do_syscall_64+0xf3/0x230 [ 143.379964][ T6356] ? clear_bhb_loop+0x35/0x90 [ 143.384676][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.390644][ T6356] RIP: 0033:0x7fe0f0375bd9 [ 143.395112][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.414953][ T6356] RSP: 002b:00007fe0f1072048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.423357][ T6356] RAX: ffffffffffffffda RBX: 00007fe0f0504110 RCX: 00007fe0f0375bd9 [ 143.431414][ T6356] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000009 [ 143.439648][ T6356] RBP: 00007fe0f03e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 143.447826][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.455837][ T6356] R13: 000000000000006e R14: 00007fe0f0504110 R15: 00007ffe5c73f508 [ 143.463809][ T6356] [ 143.466901][ T6356] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.474176][ T6356] CPU: 1 PID: 6356 Comm: syz.4.268 Not tainted 6.10.0-rc7-syzkaller-00025-ga19ea421490d #0 [ 143.484141][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 143.494182][ T6356] Call Trace: [ 143.497447][ T6356] [ 143.500365][ T6356] dump_stack_lvl+0x241/0x360 [ 143.505037][ T6356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.510241][ T6356] ? __pfx__printk+0x10/0x10 [ 143.514816][ T6356] ? _printk+0xd5/0x120 [ 143.518963][ T6356] ? vscnprintf+0x5d/0x90 [ 143.523272][ T6356] panic+0x349/0x860 [ 143.527164][ T6356] ? __warn+0x172/0x4e0 [ 143.531310][ T6356] ? __pfx_panic+0x10/0x10 [ 143.535711][ T6356] ? show_trace_log_lvl+0x4e6/0x520 [ 143.540938][ T6356] __warn+0x346/0x4e0 [ 143.544929][ T6356] ? rxe_pool_cleanup+0x47/0x50 [ 143.549767][ T6356] report_bug+0x2b3/0x500 [ 143.554107][ T6356] ? rxe_pool_cleanup+0x47/0x50 [ 143.558949][ T6356] handle_bug+0x3e/0x70 [ 143.563104][ T6356] exc_invalid_op+0x1a/0x50 [ 143.567595][ T6356] asm_exc_invalid_op+0x1a/0x20 [ 143.572519][ T6356] RIP: 0010:rxe_pool_cleanup+0x47/0x50 [ 143.577983][ T6356] Code: 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 29 5a f9 48 83 3b 00 75 0b e8 e5 bd f7 f8 5b c3 cc cc cc cc e8 da bd f7 f8 90 <0f> 0b 90 5b c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 143.597674][ T6356] RSP: 0018:ffffc9000488f178 EFLAGS: 00010246 [ 143.603733][ T6356] RAX: ffffffff889e68e6 RBX: ffff88802393d2a8 RCX: 0000000000040000 [ 143.611695][ T6356] RDX: ffffc9001289e000 RSI: 000000000003ffff RDI: 0000000000040000 [ 143.619650][ T6356] RBP: 000000000000000c R08: ffffffff88770c3f R09: 1ffff110047278ea [ 143.627637][ T6356] R10: dffffc0000000000 R11: ffffffff889c7c20 R12: dffffc0000000000 [ 143.635595][ T6356] R13: 0000000000000000 R14: ffff88802393c638 R15: dffffc0000000000 [ 143.643645][ T6356] ? __pfx_rxe_dealloc+0x10/0x10 [ 143.648572][ T6356] ? __ib_unregister_device+0xff/0x170 [ 143.654014][ T6356] ? rxe_pool_cleanup+0x46/0x50 [ 143.658856][ T6356] ? rxe_pool_cleanup+0x46/0x50 [ 143.663692][ T6356] rxe_dealloc+0x33/0x100 [ 143.668088][ T6356] ? __pfx_rxe_dealloc+0x10/0x10 [ 143.673005][ T6356] ib_dealloc_device+0x50/0x200 [ 143.677843][ T6356] __ib_unregister_device+0x111/0x170 [ 143.683199][ T6356] ib_unregister_device_and_put+0xb6/0xf0 [ 143.688906][ T6356] nldev_dellink+0x2d2/0x320 [ 143.693484][ T6356] ? __pfx_nldev_dellink+0x10/0x10 [ 143.698639][ T6356] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 143.704519][ T6356] ? cap_capable+0x1b4/0x250 [ 143.709105][ T6356] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 143.715437][ T6356] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.721411][ T6356] ? cap_capable+0x1b4/0x250 [ 143.725991][ T6356] ? safesetid_security_capable+0xb2/0x1d0 [ 143.731792][ T6356] ? bpf_lsm_capable+0x9/0x10 [ 143.736457][ T6356] ? security_capable+0x90/0xb0 [ 143.741296][ T6356] ? __pfx_nldev_dellink+0x10/0x10 [ 143.746406][ T6356] rdma_nl_rcv+0x6dd/0x9e0 [ 143.750829][ T6356] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 143.755764][ T6356] ? rcu_is_watching+0x15/0xb0 [ 143.760523][ T6356] ? __rcu_read_unlock+0xa1/0x110 [ 143.765553][ T6356] netlink_unicast+0x7ea/0x980 [ 143.770309][ T6356] ? __pfx_netlink_unicast+0x10/0x10 [ 143.775593][ T6356] ? __check_object_size+0x49c/0x900 [ 143.780874][ T6356] ? bpf_lsm_netlink_send+0x9/0x10 [ 143.785987][ T6356] netlink_sendmsg+0x8db/0xcb0 [ 143.790782][ T6356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.796064][ T6356] ? __import_iovec+0x536/0x820 [ 143.800902][ T6356] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 143.806186][ T6356] ? security_socket_sendmsg+0x87/0xb0 [ 143.811647][ T6356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.816963][ T6356] __sock_sendmsg+0x221/0x270 [ 143.821735][ T6356] ____sys_sendmsg+0x525/0x7d0 [ 143.826500][ T6356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.831801][ T6356] __sys_sendmsg+0x2b0/0x3a0 [ 143.836382][ T6356] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.841503][ T6356] ? __schedule+0x179e/0x49d0 [ 143.846186][ T6356] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.852528][ T6356] ? do_syscall_64+0x100/0x230 [ 143.857285][ T6356] ? do_syscall_64+0xb6/0x230 [ 143.861953][ T6356] do_syscall_64+0xf3/0x230 [ 143.866533][ T6356] ? clear_bhb_loop+0x35/0x90 [ 143.871226][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.877196][ T6356] RIP: 0033:0x7fe0f0375bd9 [ 143.881594][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.901272][ T6356] RSP: 002b:00007fe0f1072048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.909670][ T6356] RAX: ffffffffffffffda RBX: 00007fe0f0504110 RCX: 00007fe0f0375bd9 [ 143.917625][ T6356] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000009 [ 143.925583][ T6356] RBP: 00007fe0f03e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 143.933539][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.941605][ T6356] R13: 000000000000006e R14: 00007fe0f0504110 R15: 00007ffe5c73f508 [ 143.949676][ T6356] [ 143.953057][ T6356] Kernel Offset: disabled [ 143.957528][ T6356] Rebooting in 86400 seconds..