last executing test programs: 1m28.423867846s ago: executing program 4 (id=505): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0x565c, &(0x7f0000000000)={0x0, 0xec5b, 0x40, 0x0, 0x2b9}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x0, 0x0, 0x4, &(0x7f00000001c0), 0x0}, 0x20) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001d00)=""/4096, 0x1000, 0x100, &(0x7f0000000500)={0xa, 0x4e21, 0xf016, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff54a9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) 1m27.588188847s ago: executing program 4 (id=506): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084146, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000aad000/0x4000)=nil, 0x4000, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m25.325687214s ago: executing program 4 (id=514): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0x400007, 0x288}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r3, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_register(r4, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '(', 0x3a, '', 0x3a, './file0'}, 0x28) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1m23.688746315s ago: executing program 4 (id=520): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010001e08003950323030302e75"], 0x15) dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a40)=[0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0xd4aa6c3a0ba5a270, 0x0, 0x0, 0x9, 0x8001, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x5, 0xea, 0x32, 0x0, @multicast2, @loopback}}}}}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000380)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb807c70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) 1m18.479144989s ago: executing program 4 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000005c0)={0x6, 0x20000000, 0x3, 0x8, 0x7, 0x0, [{0x4, 0x7, 0x10001, '\x00', 0xa}, {0x1, 0x4, 0x7, '\x00', 0x2004}, {0x6, 0xe, 0x9, '\x00', 0x900}, {0x83, 0x1ff, 0x4, '\x00', 0x288}, {0xe, 0x3, 0x1, '\x00', 0x101}, {0x800, 0x7fffffffffffffff, 0x9, '\x00', 0x80}, {0x80000000, 0x3, 0x9, '\x00', 0x1800}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ftruncate(r5, 0x2) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x27fff13, 0x4002011, r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 1m17.703002928s ago: executing program 4 (id=534): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 1m2.504735676s ago: executing program 32 (id=534): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 11.715743645s ago: executing program 5 (id=686): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x8008080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20000000}, &(0x7f0000000100)=0x108) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x4040000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 10.703646517s ago: executing program 5 (id=687): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x8, &(0x7f0000000080)={0x0, 0x11}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) timer_settime(0x0, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 10.44366955s ago: executing program 5 (id=689): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000180)=0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x8e, "00005c02ac56f967e45706449300004ed82ff400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000"], 0x58) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000004000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="35ec224abca6c8e0c54d4965d4dc46a50efac31a46f15029e36aed35b71a5cbfac454e51b4a33869"], 0x40}}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0x40010, r3, 0xab233000) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)) add_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) 10.070420775s ago: executing program 5 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 10.021384615s ago: executing program 2 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x800) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) 10.020898806s ago: executing program 0 (id=693): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f0000000400)="64d76682", 0x4, 0x8, 0x0, 0x0) 9.779628298s ago: executing program 0 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4840) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) 9.077590167s ago: executing program 5 (id=696): socket$kcm(0x11, 0x3, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) bind$l2tp6(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x6c}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) 8.711665841s ago: executing program 2 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_vlan\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xffe0}}]}}]}, 0x4c}}, 0x4000084) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x3) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x100000, 0x800000000000000, 0x0, 0x0, 0x9, 0x8000000000000001}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) 7.311124509s ago: executing program 5 (id=698): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084146, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1300000000000000) 6.015210075s ago: executing program 3 (id=701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x3000}}, "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", "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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.829472867s ago: executing program 0 (id=702): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000180)=0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x8e, "00005c02ac56f967e45706449300004ed82ff400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000"], 0x58) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000004000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="35ec224abca6c8e0c54d4965d4dc46a50efac31a46f15029e36aed35b71a5cbfac454e51b4a33869"], 0x40}}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0x40010, r3, 0xab233000) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)) add_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) 5.821944138s ago: executing program 1 (id=703): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) 5.821104988s ago: executing program 2 (id=704): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 5.183337685s ago: executing program 1 (id=705): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 5.119703836s ago: executing program 0 (id=706): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084146, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 5.099874697s ago: executing program 1 (id=707): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x0, 0x1}, {0x2}}, {{0x0, 0x0, 0x0, 0x1}, {0x3}}], 0x10) bind$can_raw(r0, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) 5.043980967s ago: executing program 2 (id=708): socket$kcm(0x11, 0x3, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) bind$l2tp6(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x6c}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) 4.640143622s ago: executing program 3 (id=709): r0 = fsopen(&(0x7f0000000100)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000340)='\'{!\x00', 0x0, 0x0) 4.639229292s ago: executing program 1 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x108, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x23}}}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="eca7d46299504cfbcde4bd9b7a65396ad0f67347aa5198e49f62038c16771362"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2d671695ad733c4b"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a53fea83707468726bf145678baad717"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f556d806aebc4e32"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfbd}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7c86ce322b2921be347231d14c74aa1e5eae3e97a0c1d864"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "913c3f2432909099"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d8ce0f00d66977321feab64825223a40"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3188c6c883e184a9f1a4acd888fccb11f5bf0ca04978fc8a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff5934}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9772fe4d79bf491e1bd1a9be4953dd91"}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20800}, 0x8800) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x44, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x78202}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0x7fffffff, 0x7f, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r8, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) 3.387159198s ago: executing program 3 (id=711): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000025c0)=""/4114, 0x1012}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 3.287170919s ago: executing program 0 (id=712): open(0x0, 0x400141042, 0x766c618eb221465a) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x97}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) 1.877599246s ago: executing program 1 (id=713): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xffffffff00000000, 0x40) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0x6}}, 0x51, 0xfffffff9, &(0x7f0000000040)="185bc925f5e755dab472885782b9d475f6e96f2d918679b77aea2de948414f84767a23cc3d176e47226c71b3558d3c5458fbf0756b30ea041aa46a9913883c930b0d433d069808abe43c5a16f8af643368"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.877132236s ago: executing program 2 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 1.873111996s ago: executing program 0 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020009001cc579be3d4889d96dd92e000500"/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ac1e010100000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000004ec5a1d20e3300000000000100000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000feffffffffffffff000000000000000000000000000000004cf15a4c332159cb1b7969173daebd19ba5777a37e7a2c69941ac86b8ed27189ca40e66e54a75ab023dec44bb1df64c2be7bd42dc212373df8c42dee722867892b2851ebd05dc9bbdd44f912fe72cc1c9781f8d80e552ccf1d31"], 0xb8}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x26, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, &(0x7f0000000280)) bind$netlink(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000809000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) 1.872638146s ago: executing program 3 (id=716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x1, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x0, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2000000000000}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x5f8, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 755.79179ms ago: executing program 2 (id=717): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000180)=0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0x8e, "00005c02ac56f967e45706449300004ed82ff400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000"], 0x58) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000004000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="35ec224abca6c8e0c54d4965d4dc46a50efac31a46f15029e36aed35b71a5cbfac454e51b4a33869"], 0x40}}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0x40010, r3, 0xab233000) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)) add_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) 619.715732ms ago: executing program 3 (id=718): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 494.830783ms ago: executing program 1 (id=719): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x2, 0x5001) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r8}, 0x18) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r10, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, 0x0) 0s ago: executing program 3 (id=720): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) capget(&(0x7f0000feaff9)={0x19980330}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. [ 51.350505][ T4159] cgroup: Unknown subsys name 'net' [ 51.466391][ T4159] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.656561][ T4159] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.063617][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 54.158312][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 54.205904][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 54.220015][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 54.293520][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 54.327439][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.336954][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.349676][ T4176] device bridge_slave_0 entered promiscuous mode [ 54.374745][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.382200][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.389987][ T4176] device bridge_slave_1 entered promiscuous mode [ 54.473331][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.481786][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.490666][ T4181] device bridge_slave_0 entered promiscuous mode [ 54.502292][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.511990][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.519503][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.528057][ T4170] device bridge_slave_0 entered promiscuous mode [ 54.541232][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.548465][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.558195][ T4169] device bridge_slave_0 entered promiscuous mode [ 54.567772][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.577879][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.587774][ T4181] device bridge_slave_1 entered promiscuous mode [ 54.600549][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.612260][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.619796][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.628894][ T4170] device bridge_slave_1 entered promiscuous mode [ 54.646736][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.654197][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.662791][ T4169] device bridge_slave_1 entered promiscuous mode [ 54.725562][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.735811][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.744903][ T4180] device bridge_slave_0 entered promiscuous mode [ 54.760388][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.772647][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.784420][ T4176] team0: Port device team_slave_0 added [ 54.794458][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.806668][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.816611][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.824522][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.833462][ T4180] device bridge_slave_1 entered promiscuous mode [ 54.842785][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.854501][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.865797][ T4176] team0: Port device team_slave_1 added [ 54.911821][ T4170] team0: Port device team_slave_0 added [ 54.946916][ T4170] team0: Port device team_slave_1 added [ 54.956583][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.970143][ T4169] team0: Port device team_slave_0 added [ 54.983478][ T4169] team0: Port device team_slave_1 added [ 54.993394][ T4181] team0: Port device team_slave_0 added [ 55.003063][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.010477][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.039952][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.062988][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.081747][ T4181] team0: Port device team_slave_1 added [ 55.098630][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.106585][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.136097][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.197359][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.205741][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.236228][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.248627][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.256961][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.284814][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.304273][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.311408][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.338430][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.351833][ T4180] team0: Port device team_slave_0 added [ 55.358068][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.365702][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.392224][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.404753][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.412145][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.440145][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.456749][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.465294][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.493603][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.506450][ T4180] team0: Port device team_slave_1 added [ 55.534583][ T4176] device hsr_slave_0 entered promiscuous mode [ 55.541375][ T4176] device hsr_slave_1 entered promiscuous mode [ 55.565360][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.572846][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.600104][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.630100][ T4169] device hsr_slave_0 entered promiscuous mode [ 55.638466][ T4169] device hsr_slave_1 entered promiscuous mode [ 55.645394][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.653608][ T4169] Cannot create hsr debugfs directory [ 55.668198][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.675402][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.701974][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.752106][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 55.760791][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 55.761382][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 55.772376][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 55.783654][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 55.796006][ T4170] device hsr_slave_0 entered promiscuous mode [ 55.805891][ T4170] device hsr_slave_1 entered promiscuous mode [ 55.814025][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.823508][ T4170] Cannot create hsr debugfs directory [ 55.849997][ T4181] device hsr_slave_0 entered promiscuous mode [ 55.857341][ T4181] device hsr_slave_1 entered promiscuous mode [ 55.864384][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.872428][ T4181] Cannot create hsr debugfs directory [ 55.940314][ T4180] device hsr_slave_0 entered promiscuous mode [ 55.951668][ T4180] device hsr_slave_1 entered promiscuous mode [ 55.960791][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.973004][ T4180] Cannot create hsr debugfs directory [ 56.257587][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.268762][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.280693][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.319284][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.328112][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.338425][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.353705][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.376043][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.425737][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.455079][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.488620][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.503695][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.537328][ T4180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.556941][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.567904][ T4180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.589406][ T4180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.599270][ T4180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.637081][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.649601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.662340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.680045][ T4169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.689952][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.704324][ T4169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.722398][ T4169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.737778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.748129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.758034][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.765227][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.777114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.786487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.798633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.807432][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.814770][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.836170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.845069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.861121][ T4169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.879020][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.895641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.908703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.918344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.928327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.938715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.979557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.998905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.009921][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.019372][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.048011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.057686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.067320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.077325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.087508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.096426][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.104339][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.112709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.128650][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.156291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.165441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.178045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.186900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.217564][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.230038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.239634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.252048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.268186][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.308058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.320482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.331021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.339978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.349417][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.356869][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.367670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.377634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.386985][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.394691][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.403487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.421400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.429908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.440175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.449450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.459833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.468958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.506796][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.517501][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.534199][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.548701][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.565199][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.573818][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.583598][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.593210][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.602499][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.612515][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.622560][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.631974][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.640715][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.650012][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.659388][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.669238][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.695838][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.715200][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.755381][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.772790][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.787128][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.794574][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.804253][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.814118][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.825776][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.831188][ T4171] Bluetooth: hci1: command 0x041b tx timeout [ 57.833163][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.840319][ T4171] Bluetooth: hci2: command 0x041b tx timeout [ 57.849150][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.858222][ T4171] Bluetooth: hci0: command 0x041b tx timeout [ 57.861872][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.867146][ T4171] Bluetooth: hci3: command 0x041b tx timeout [ 57.875773][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.885819][ T4171] Bluetooth: hci4: command 0x041b tx timeout [ 57.889407][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.903044][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.911762][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.927645][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.944817][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.968242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.993885][ T628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.004984][ T628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.014411][ T628] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.021759][ T628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.032863][ T628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.042580][ T628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.052207][ T628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.073616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.086861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.097564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.114215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.124714][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.133020][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.142491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.177605][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.195369][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.206946][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.224370][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.235605][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.247678][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.258161][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.274889][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.295763][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.305273][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.314335][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.323926][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.336150][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.345251][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.370118][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.381517][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.416095][ T4181] device veth0_vlan entered promiscuous mode [ 58.424476][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.435245][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.444774][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.455902][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.464594][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.473957][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.482986][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.491969][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.500597][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.510225][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.520175][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.531712][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.539700][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.556220][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.579762][ T4181] device veth1_vlan entered promiscuous mode [ 58.594374][ T4176] device veth0_vlan entered promiscuous mode [ 58.634010][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.683854][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.701805][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.717790][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.726828][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.738113][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.747625][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.758877][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.768664][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.784003][ T4176] device veth1_vlan entered promiscuous mode [ 58.828022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.862750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.881612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.899146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.946425][ T4181] device veth0_macvtap entered promiscuous mode [ 58.968018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.984278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.997553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.008653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.019297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.033038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.045653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.070777][ T4181] device veth1_macvtap entered promiscuous mode [ 59.085717][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.105522][ T4170] device veth0_vlan entered promiscuous mode [ 59.118462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.132619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.145726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.161874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.177729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.208187][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.222775][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.246240][ T4176] device veth0_macvtap entered promiscuous mode [ 59.266753][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.300376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.326973][ T4176] device veth1_macvtap entered promiscuous mode [ 59.384949][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.398654][ T4170] device veth1_vlan entered promiscuous mode [ 59.418003][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.428620][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.454635][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.466746][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.479992][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.502666][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.517666][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.533291][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.545575][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.556094][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.574507][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.585067][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.596452][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.608283][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.622631][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.634002][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.645742][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.660571][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.676053][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.710798][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.722005][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.760039][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.771728][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.781548][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.793422][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.812269][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.823497][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.833226][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.843180][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.852171][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.862240][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.872552][ T4170] device veth0_macvtap entered promiscuous mode [ 59.893391][ T4180] device veth0_vlan entered promiscuous mode [ 59.911620][ T4170] device veth1_macvtap entered promiscuous mode [ 59.918651][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 59.926373][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 59.940592][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 59.948910][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.950484][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 59.959536][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.969478][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 59.973069][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.995903][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.045203][ T4169] device veth0_vlan entered promiscuous mode [ 60.064883][ T4180] device veth1_vlan entered promiscuous mode [ 60.075586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.088922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.102038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.112893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.125651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.144649][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.158724][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.170648][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.183375][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.197921][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.249452][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.259209][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.270302][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.281706][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.294003][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.307396][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.325841][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.349602][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.371813][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.385571][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.397041][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.412620][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.444947][ T4169] device veth1_vlan entered promiscuous mode [ 60.454707][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.463705][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.473434][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.485074][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.494882][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.507309][ T4180] device veth0_macvtap entered promiscuous mode [ 60.529943][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.539188][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.559866][ T4180] device veth1_macvtap entered promiscuous mode [ 60.570669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.580199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.657715][ T4169] device veth0_macvtap entered promiscuous mode [ 60.664724][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.673464][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.673845][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.681937][ T628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.697284][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.698234][ T628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.707130][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.724067][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.733347][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.770778][ T4169] device veth1_macvtap entered promiscuous mode [ 60.814854][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.835297][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.846156][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.857316][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.869245][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.882905][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.897905][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.915391][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.926345][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.936738][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.949172][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.962158][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.975992][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.992806][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.009715][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.029831][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.046963][ T3067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.065757][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.070382][ T3067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.082620][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.091627][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.100629][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.118849][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.155409][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.168746][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.182153][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.200139][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.216302][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.236010][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.267533][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.288124][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.300856][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.313584][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.326380][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.341293][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.361001][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.380424][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.406661][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.441568][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.475119][ T628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.487079][ T628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.487770][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.521735][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.537126][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.552594][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.563076][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.573933][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.594674][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.605038][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.631928][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.650746][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.672929][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.682901][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.693870][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.702827][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.724473][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.731865][ T4256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6'. [ 61.742322][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.743069][ T4256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6'. [ 61.763803][ T4256] device netdevsim0 entered promiscuous mode [ 61.770797][ T4256] device dummy0 entered promiscuous mode [ 61.795490][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.827511][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 61.882419][ T4258] loop0: detected capacity change from 0 to 512 [ 61.965110][ T4258] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.997541][ T4214] Bluetooth: hci1: command 0x0419 tx timeout [ 62.019485][ T4214] Bluetooth: hci2: command 0x0419 tx timeout [ 62.067145][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.078201][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 62.096175][ T4214] Bluetooth: hci3: command 0x0419 tx timeout [ 62.112283][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.129713][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.138889][ T4214] Bluetooth: hci4: command 0x0419 tx timeout [ 62.175531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.188652][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.198459][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.211576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.251675][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.309851][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.380103][ T4258] EXT4-fs (loop0): 1 orphan inode deleted [ 62.391303][ T4258] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.397816][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.032591][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.096683][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.105889][ T4258] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.248197][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.259209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.271741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.282101][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.292454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.302241][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.312446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.322059][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.331833][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.341576][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.037044][ T4289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.140849][ C0] sched: RT throttling activated [ 71.116617][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.123416][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.420791][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.438227][ T4330] device batadv_slave_0 entered promiscuous mode [ 76.259231][ T23] cfg80211: failed to load regulatory.db [ 76.654640][ T4358] binder: 4357:4358 ioctl 4018620d 0 returned -22 [ 76.690986][ T4214] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.700703][ T4358] binder: 4357:4358 ioctl c018620c 0 returned -14 [ 76.921116][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.128194][ T4214] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 77.142505][ T4214] usb 4-1: config 0 has no interface number 0 [ 77.159234][ T4214] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.201226][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 77.231507][ T3507] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.320938][ T4215] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.342022][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 77.352741][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.363766][ T4214] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 77.373848][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.383666][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.392223][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.402523][ T4214] usb 4-1: Product: syz [ 77.406984][ T4214] usb 4-1: Manufacturer: syz [ 77.411709][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.425681][ T4214] usb 4-1: SerialNumber: syz [ 77.437330][ T4214] usb 4-1: config 0 descriptor?? [ 77.442729][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.454298][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.501516][ T3507] usb 5-1: Using ep0 maxpacket: 16 [ 77.518962][ T4214] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 77.652109][ T3507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.665197][ T3507] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 77.675839][ T3507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.681171][ T4215] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.687689][ T3507] usb 5-1: config 0 descriptor?? [ 77.705886][ T4215] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.716822][ T4215] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.726957][ T4215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 77.731082][ T23] usb 1-1: GET_CAPABILITIES returned 0 [ 77.738429][ T4215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 77.751579][ T23] usbtmc 1-1:16.0: can't read capabilities [ 77.846728][ T4363] udc-core: couldn't find an available UDC or it's busy [ 77.854106][ T4363] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.865908][ T4363] udc-core: couldn't find an available UDC or it's busy [ 77.873013][ T4363] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.901241][ T4215] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.910627][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.918998][ T4215] usb 3-1: Product: syz [ 77.923481][ T4215] usb 3-1: Manufacturer: syz [ 77.938358][ T4364] udc-core: couldn't find an available UDC or it's busy [ 77.946067][ T4364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.962636][ T4215] cdc_wdm 3-1:1.0: skipping garbage [ 77.968110][ T4215] cdc_wdm 3-1:1.0: skipping garbage [ 77.972159][ T4364] udc-core: couldn't find an available UDC or it's busy [ 77.981042][ T4364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.019178][ T4365] udc-core: couldn't find an available UDC or it's busy [ 78.026800][ T4365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.168394][ T4362] udc-core: couldn't find an available UDC or it's busy [ 78.176229][ T4362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.241314][ T3507] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 78.286547][ T4369] udc-core: couldn't find an available UDC or it's busy [ 78.294199][ T4369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.295148][ T4366] udc-core: couldn't find an available UDC or it's busy [ 78.310267][ T4366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.386062][ T4362] udc-core: couldn't find an available UDC or it's busy [ 78.399111][ T4362] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.540140][ T4366] udc-core: couldn't find an available UDC or it's busy [ 78.548978][ T4366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.561404][ T3818] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.628035][ T3507] usb 5-1: USB disconnect, device number 2 [ 78.971200][ T3818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.983047][ T3818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.993371][ T3818] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 79.003027][ T3818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.013522][ T3818] usb 2-1: config 0 descriptor?? [ 79.336409][ T4280] usb 1-1: USB disconnect, device number 2 [ 79.341379][ T4215] cdc_wdm 3-1:1.0: cdc-wdm2: USB WDM device [ 79.378482][ T4215] cdc_wdm 3-1:1.0: Unknown control protocol [ 79.395703][ T7] usb 4-1: USB disconnect, device number 2 [ 79.413436][ T4215] usb 3-1: USB disconnect, device number 2 [ 79.437018][ T7] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 79.627703][ T3818] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 79.635804][ T3818] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 79.646139][ T3818] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 79.653691][ T3818] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 79.666700][ T3818] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 79.684191][ T3818] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving [ 79.708624][ T3818] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 80.692415][ T4213] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.931149][ T4213] usb 5-1: Using ep0 maxpacket: 8 [ 81.561027][ T3818] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 81.853925][ T4213] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 81.951507][ T4213] usb 5-1: config 16 has an invalid interface number: 3 but max is 0 [ 81.967866][ T4213] usb 5-1: config 16 has no interface number 0 [ 81.978953][ T4213] usb 5-1: config 16 interface 3 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.838022][ T4214] usb 2-1: USB disconnect, device number 2 [ 82.873427][ T4213] usb 5-1: config 16 interface 3 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.894704][ T4213] usb 5-1: config 16 interface 3 altsetting 0 endpoint 0x8B has invalid maxpacket 32800, setting to 1024 [ 82.915140][ T4213] usb 5-1: config 16 interface 3 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 82.953478][ T4213] usb 5-1: config 16 interface 3 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.046518][ T4405] netlink: 'syz.1.42': attribute type 8 has an invalid length. [ 83.781675][ T4213] usb 5-1: string descriptor 0 read error: -71 [ 83.840187][ T4213] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.887013][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=199, SerialNumber=0 [ 85.013837][ T4213] usb 5-1: can't set config #16, error -71 [ 85.086249][ T4213] usb 5-1: USB disconnect, device number 3 [ 85.333299][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.501174][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.601637][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 85.751559][ T13] usb 2-1: config index 0 descriptor too short (expected 1821, got 853) [ 85.769023][ T13] usb 2-1: config 0 has an invalid interface number: 103 but max is 2 [ 85.803193][ T13] usb 2-1: config 0 has an invalid interface number: 255 but max is 2 [ 85.837568][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.888744][ T13] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 85.911898][ T7] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.245600][ T7] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.693787][ T13] usb 2-1: config 0 has no interface number 0 [ 86.710433][ T13] usb 2-1: config 0 has no interface number 1 [ 86.741265][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.750739][ T13] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 86.804479][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.807607][ T4448] device bridge1 entered promiscuous mode [ 86.819671][ T13] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 86.871871][ T4435] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.883054][ T13] usb 2-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 86.933923][ T13] usb 2-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 87.016496][ T13] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 87.065609][ T13] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 87.133439][ T13] usb 2-1: config 0 interface 103 has no altsetting 0 [ 87.163877][ T13] usb 2-1: config 0 interface 255 has no altsetting 0 [ 87.231116][ T13] usb 2-1: string descriptor 0 read error: -71 [ 87.243213][ T13] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 87.296859][ T4435] udc-core: couldn't find an available UDC or it's busy [ 87.304478][ T4435] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.328830][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.498761][ T13] usb 2-1: config 0 descriptor?? [ 87.541937][ T13] usb 2-1: can't set config #0, error -71 [ 87.961818][ T13] usb 2-1: USB disconnect, device number 3 [ 89.441503][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.592382][ T3818] usb 3-1: USB disconnect, device number 3 [ 89.711204][ T4213] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.874479][ T13] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 89.901014][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.970956][ T4213] usb 5-1: Using ep0 maxpacket: 16 [ 90.247945][ T4213] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 90.258142][ T13] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.387806][ T4213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.465965][ T4495] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 90.475087][ T4495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.72'. [ 90.519009][ T4498] CUSE: unknown device info "ÿ" [ 90.524989][ T4498] CUSE: zero length info key specified [ 90.552465][ T4495] team0: Port device geneve0 added [ 91.084977][ T13] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 91.093615][ T13] usb 2-1: Product: syz [ 91.097807][ T13] usb 2-1: Manufacturer: syz [ 91.102526][ T4213] usb 5-1: config 0 has no interface number 0 [ 91.109010][ T13] usb 2-1: SerialNumber: syz [ 91.116304][ T13] usb 2-1: config 0 descriptor?? [ 91.143427][ T13] usb 2-1: can't set config #0, error -71 [ 91.160521][ T13] usb 2-1: USB disconnect, device number 4 [ 91.262207][ T4213] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 91.281007][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.299348][ T4213] usb 5-1: Product: syz [ 91.304103][ T4213] usb 5-1: Manufacturer: syz [ 91.308820][ T4213] usb 5-1: SerialNumber: syz [ 91.325588][ T4213] usb 5-1: config 0 descriptor?? [ 91.385368][ T4213] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 91.421439][ T4213] usb 5-1: No valid video chain found. [ 91.732889][ T13] usb 5-1: USB disconnect, device number 4 [ 93.163915][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 93.181307][ T4534] device bridge_slave_1 left promiscuous mode [ 93.211733][ T4517] Bluetooth: hci5: Frame reassembly failed (-84) [ 93.220957][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.286798][ T4534] device bridge_slave_0 left promiscuous mode [ 93.342335][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.591441][ T3818] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.911316][ T3818] usb 1-1: Using ep0 maxpacket: 8 [ 94.284469][ T3818] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 94.312019][ T3818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.353659][ T3818] usb 1-1: Product: syz [ 94.365975][ T3818] usb 1-1: Manufacturer: syz [ 94.378703][ T3818] usb 1-1: SerialNumber: syz [ 94.415958][ T3818] usb 1-1: config 0 descriptor?? [ 94.485859][ T3818] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 94.509541][ T3818] usb 1-1: setting power ON [ 94.521098][ T3818] dvb-usb: bulk message failed: -22 (2/0) [ 94.534464][ T3818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.565113][ T3818] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 94.586758][ T3818] usb 1-1: media controller created [ 94.669290][ T3818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.686474][ T4537] dvb-usb: bulk message failed: -22 (3/0) [ 94.700990][ T4537] usb 1-1: gpio_write failed. [ 94.708306][ T4537] cxusb: i2c rd: len=8192 is too big! [ 94.708306][ T4537] [ 94.820966][ T4537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 94.893511][ T3818] usb 1-1: selecting invalid altsetting 6 [ 94.900652][ T3818] usb 1-1: digital interface selection failed (-22) [ 94.907899][ T3818] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 94.972855][ T3818] usb 1-1: setting power OFF [ 94.979311][ T3818] dvb-usb: bulk message failed: -22 (2/0) [ 95.127672][ T3818] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 95.184147][ T3818] (NULL device *): no alternate interface [ 95.337552][ T4564] Bluetooth: hci5: command 0x1003 tx timeout [ 95.440992][ T4177] Bluetooth: hci5: sending frame failed (-49) [ 96.381121][ T4580] Zero length message leads to an empty skb [ 96.845792][ T3818] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 96.990684][ T3818] usb 1-1: USB disconnect, device number 3 [ 97.088632][ T4571] netlink: 'syz.2.92': attribute type 4 has an invalid length. [ 97.411274][ T4214] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.510975][ T3507] Bluetooth: hci5: command 0x1001 tx timeout [ 97.538658][ T4177] Bluetooth: hci5: sending frame failed (-49) [ 97.661197][ T4214] usb 4-1: Using ep0 maxpacket: 16 [ 97.871328][ T4214] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 97.898727][ T4214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.910786][ T4214] usb 4-1: config 0 has no interface number 0 [ 98.951302][ T4214] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 98.965311][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.975909][ T4214] usb 4-1: Product: syz [ 98.981885][ T4214] usb 4-1: Manufacturer: syz [ 98.987341][ T4214] usb 4-1: SerialNumber: syz [ 99.019165][ T4214] usb 4-1: config 0 descriptor?? [ 99.097070][ T4214] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 99.361124][ T4214] usb 4-1: No valid video chain found. [ 99.591174][ T4214] Bluetooth: hci5: command 0x1009 tx timeout [ 99.668499][ T4214] usb 4-1: USB disconnect, device number 3 [ 100.672105][ T4620] xt_TPROXY: Can be used only with -p tcp or -p udp [ 103.741093][ T3507] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.822722][ T4213] Bluetooth: hci0: command 0x0401 tx timeout [ 103.924142][ T4535] sp0: Synchronizing with TNC [ 104.160132][ T3507] usb 2-1: Using ep0 maxpacket: 16 [ 104.391426][ T3507] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 104.399884][ T3507] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.457805][ T3507] usb 2-1: config 0 has no interface number 0 [ 104.518744][ T4655] device syzkaller0 entered promiscuous mode [ 104.651434][ T3507] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 104.651467][ T3507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.651488][ T3507] usb 2-1: Product: syz [ 104.651504][ T3507] usb 2-1: Manufacturer: syz [ 104.651520][ T3507] usb 2-1: SerialNumber: syz [ 104.654457][ T3507] usb 2-1: config 0 descriptor?? [ 104.693392][ T3507] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 104.693424][ T3507] usb 2-1: No valid video chain found. [ 104.904418][ T21] usb 2-1: USB disconnect, device number 5 [ 106.763802][ T4673] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 109.960585][ T4697] device syzkaller0 entered promiscuous mode [ 110.671709][ T4716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 110.682224][ T4716] ======================================================= [ 110.682224][ T4716] WARNING: The mand mount option has been deprecated and [ 110.682224][ T4716] and is ignored by this kernel. Remove the mand [ 110.682224][ T4716] option from the mount to silence this warning. [ 110.682224][ T4716] ======================================================= [ 111.615836][ T4727] xt_hashlimit: size too large, truncated to 1048576 [ 114.803364][ T4752] device syzkaller0 entered promiscuous mode [ 115.650934][ T4260] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 116.641009][ T4260] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 116.851168][ T4260] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 116.881025][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.920025][ T4260] usb 2-1: Product: syz [ 116.930196][ T4260] usb 2-1: Manufacturer: syz [ 116.950598][ T4260] usb 2-1: SerialNumber: syz [ 117.549703][ T4260] usb 2-1: config 0 descriptor?? [ 117.571217][ T4768] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.592836][ T4260] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 119.177579][ T4801] device syzkaller0 entered promiscuous mode [ 120.051873][ T4260] usb 2-1: USB disconnect, device number 6 [ 122.587851][ T4846] device syzkaller0 entered promiscuous mode [ 127.650599][ T4890] device syzkaller0 entered promiscuous mode [ 132.141975][ T4938] device syzkaller0 entered promiscuous mode [ 132.622176][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.628620][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.750233][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 134.405276][ T26] audit: type=1800 audit(1748179755.430:2): pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.198" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 134.405626][ T4960] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 134.435002][ T4960] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 134.444547][ T4960] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 134.547600][ T4960] syz.4.198 (4960) used greatest stack depth: 19744 bytes left [ 135.714716][ T4984] tmpfs: Unknown parameter 'usrquota' [ 135.730264][ T4984] capability: warning: `syz.1.206' uses deprecated v2 capabilities in a way that may be insecure [ 136.591426][ T4986] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 136.651133][ T4986] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 136.726482][ T4991] device syzkaller0 entered promiscuous mode [ 138.410949][ T4214] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.608271][ T5008] netlink: 332 bytes leftover after parsing attributes in process `syz.2.214'. [ 140.061069][ T4214] usb 2-1: Using ep0 maxpacket: 32 [ 140.181523][ T4214] usb 2-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 140.201014][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.203698][ T5018] loop2: detected capacity change from 0 to 7 [ 140.247889][ T4214] usb 2-1: config 0 descriptor?? [ 140.281370][ T5018] Dev loop2: unable to read RDB block 7 [ 140.290992][ T5018] loop2: unable to read partition table [ 140.370884][ T5018] loop2: partition table beyond EOD, truncated [ 140.402941][ T5018] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.647470][ T5017] netlink: 'syz.3.218': attribute type 4 has an invalid length. [ 141.466768][ T5023] overlayfs: failed to resolve './file1': -2 [ 143.008897][ T5043] device syzkaller0 entered promiscuous mode [ 145.526551][ T5068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.227'. [ 145.811438][ T4214] usbhid 2-1:0.0: can't add hid device: -32 [ 145.820756][ T4214] usbhid: probe of 2-1:0.0 failed with error -32 [ 146.367838][ T4213] usb 2-1: USB disconnect, device number 7 [ 148.666504][ T5096] device syzkaller0 entered promiscuous mode [ 151.093403][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.236039][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.301199][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.335447][ T5116] device bridge_slave_0 left promiscuous mode [ 151.355589][ T3507] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.361988][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.384261][ T5116] device bridge_slave_1 left promiscuous mode [ 151.408343][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.448027][ T5116] bond0: (slave bond_slave_0): Releasing backup interface [ 151.517566][ T5116] bond0: (slave bond_slave_1): Releasing backup interface [ 151.593988][ T5116] team0: Port device team_slave_0 removed [ 151.625340][ T5116] team0: Port device team_slave_1 removed [ 151.650670][ T5116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.662424][ T5116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.673336][ T5116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.685619][ T5116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.791176][ T3507] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.816543][ T3507] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.011298][ T3507] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.047008][ T3507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.115672][ T3507] usb 5-1: Product: syz [ 152.158011][ T3507] usb 5-1: Manufacturer: syz [ 152.182037][ T3507] usb 5-1: SerialNumber: syz [ 152.306407][ T5161] device syzkaller0 entered promiscuous mode [ 152.725385][ T5182] hub 9-0:1.0: USB hub found [ 152.730606][ T5182] hub 9-0:1.0: 1 port detected [ 153.322358][ T5201] netlink: 'syz.3.266': attribute type 27 has an invalid length. [ 153.460892][ T1109] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.580930][ T1109] usb 1-1: Using ep0 maxpacket: 16 [ 156.652543][ T3507] cdc_ncm 5-1:1.0: bind() failure [ 156.861074][ T3507] usbtest: probe of 5-1:1.1 failed with error -71 [ 156.923154][ T1109] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 157.039235][ T3507] usb 5-1: USB disconnect, device number 5 [ 157.180723][ T1109] usb 1-1: can't read configurations, error -71 [ 158.981101][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 159.230915][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 159.351126][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.363163][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.373868][ T13] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 159.383114][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.399350][ T13] usb 1-1: config 0 descriptor?? [ 160.161827][ T5230] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 160.435108][ T5230] netlink: 'syz.0.272': attribute type 2 has an invalid length. [ 160.901330][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 160.948998][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 161.497856][ T13] usb 1-1: USB disconnect, device number 6 [ 161.837703][ T5257] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.229670][ T5201] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.242287][ T5201] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.251559][ T5201] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.265219][ T5201] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.280929][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.384647][ T5227] device syzkaller0 entered promiscuous mode [ 162.550993][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 162.827386][ T5273] Cannot find add_set index 0 as target [ 163.566900][ T13] usb 1-1: config 8 has an invalid interface number: 145 but max is 0 [ 164.068022][ T13] usb 1-1: config 8 has no interface number 0 [ 164.090549][ T13] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xF has invalid maxpacket 1088, setting to 64 [ 164.102919][ T13] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 164.114766][ T13] usb 1-1: config 8 interface 145 altsetting 252 has an invalid endpoint with address 0x0, skipping [ 164.126080][ T13] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 164.143780][ T13] usb 1-1: config 8 interface 145 has no altsetting 0 [ 164.206950][ T13] usb 1-1: string descriptor 0 read error: -71 [ 164.345816][ T13] usb 1-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=37.4b [ 164.713527][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.319918][ T13] usb 1-1: can't set config #8, error -71 [ 165.368465][ T13] usb 1-1: USB disconnect, device number 7 [ 165.809404][ T5294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'. [ 167.029015][ T5310] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 167.756625][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 167.781291][ T5316] Cannot find add_set index 0 as target [ 167.872646][ T5318] netlink: 'syz.1.295': attribute type 11 has an invalid length. [ 168.505996][ T26] audit: type=1326 audit(1748179789.530:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.1.299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f713f626969 code=0x0 [ 168.741098][ T4280] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 169.731627][ T4280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.924808][ T4280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.063238][ T4280] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 170.155648][ T4280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.334331][ T4280] usb 3-1: config 0 descriptor?? [ 171.129016][ T5366] Cannot find add_set index 0 as target [ 171.291082][ T4280] usb 3-1: string descriptor 0 read error: -22 [ 171.643281][ T4280] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input7 [ 171.844532][ T4280] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 171.898832][ T4280] usb 3-1: USB disconnect, device number 4 [ 172.709103][ T5380] fido_id[5380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 173.354659][ T5393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.042048][ T5406] Cannot find add_set index 0 as target [ 176.078950][ T5411] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 176.091554][ T21] kernel read not supported for file /vga_arbiter (pid: 21 comm: kworker/1:0) [ 176.934333][ T13] libceph: connect (1)[c::]:6789 error -101 [ 176.952402][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 177.101278][ T13] libceph: connect (1)[c::]:6789 error -101 [ 177.107665][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 177.960477][ T5418] ceph: No mds server is up or the cluster is laggy [ 178.023235][ T5441] netlink: 44 bytes leftover after parsing attributes in process `syz.4.331'. [ 178.055451][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 178.234627][ T13] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 178.639205][ T13] Bluetooth: hci1: Injecting HCI hardware error event [ 178.882384][ T4182] Bluetooth: hci1: hardware error 0x00 [ 178.891090][ T13] libceph: connect (1)[c::]:6789 error -101 [ 178.905351][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 180.314899][ T4213] libceph: connect (1)[c::]:6789 error -101 [ 180.321288][ T4213] libceph: mon0 (1)[c::]:6789 connect error [ 180.658201][ T5466] 9pnet: Insufficient options for proto=fd [ 180.798103][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 180.804893][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 180.811257][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 183.475312][ T4171] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.810902][ T4171] usb 5-1: Using ep0 maxpacket: 32 [ 184.898326][ T5509] binder: 5507:5509 unknown command 1074553619 [ 184.905220][ T5509] binder: 5507:5509 ioctl c0306201 200000000540 returned -22 [ 185.084517][ T4171] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 185.093754][ T4171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.103932][ T4171] usb 5-1: config 0 descriptor?? [ 185.786066][ T4171] usb 5-1: can't set config #0, error -71 [ 185.793470][ T4171] usb 5-1: USB disconnect, device number 6 [ 186.314247][ T5535] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 188.510966][ T4213] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 189.761106][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.881069][ T4213] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 189.980081][ T4213] usb 5-1: config 0 has no interface number 0 [ 190.261203][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 190.285702][ T4213] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 190.320571][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.362235][ T4213] usb 5-1: Product: syz [ 190.366446][ T4213] usb 5-1: Manufacturer: syz [ 190.371762][ T4213] usb 5-1: SerialNumber: syz [ 190.388245][ T4213] usb 5-1: config 0 descriptor?? [ 190.421373][ T13] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 190.437027][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.461347][ T13] usb 1-1: config 0 descriptor?? [ 190.883071][ T4213] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 190.900347][ T4213] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 191.344636][ T4213] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 191.352972][ T4213] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 191.645932][ T4213] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 192.205611][ T4213] usb 5-1: USB disconnect, device number 7 [ 192.217718][ T4213] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 192.249807][ T4213] keyspan 5-1:0.133: device disconnected [ 193.202462][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 193.216288][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 193.259860][ T13] usb 1-1: USB disconnect, device number 8 [ 193.994100][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.000377][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.187193][ T5626] process 'syz.0.375' launched './file0' with NULL argv: empty string added [ 195.854139][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 197.741257][ T5259] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 198.015488][ T5259] usb 1-1: Using ep0 maxpacket: 32 [ 198.161179][ T5259] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 198.183412][ T5259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.234768][ T5259] usb 1-1: config 0 descriptor?? [ 199.830948][ T5259] usbhid 1-1:0.0: can't add hid device: -71 [ 199.837324][ T5259] usbhid: probe of 1-1:0.0 failed with error -71 [ 199.997925][ T5259] usb 1-1: USB disconnect, device number 9 [ 201.061761][ T5689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.393'. [ 201.919815][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 202.708625][ T5683] netlink: 'syz.4.390': attribute type 33 has an invalid length. [ 202.716578][ T5683] netlink: 152 bytes leftover after parsing attributes in process `syz.4.390'. [ 203.341523][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'. [ 203.981556][ T5699] device syzkaller0 entered promiscuous mode [ 204.232181][ T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.333750][ T5710] Cannot find add_set index 0 as target [ 205.170965][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 205.332164][ T21] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 205.344848][ T21] usb 1-1: config 0 has no interface number 0 [ 205.355032][ T21] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.370978][ T21] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.472190][ T4562] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 205.511214][ T21] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 205.524897][ T21] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 205.535892][ T21] usb 1-1: Product: syz [ 205.540233][ T21] usb 1-1: SerialNumber: syz [ 205.578860][ T21] usb 1-1: config 0 descriptor?? [ 205.634875][ T21] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 205.648524][ T21] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8 [ 205.741292][ T4562] usb 4-1: Using ep0 maxpacket: 8 [ 205.746854][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 205.828410][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 205.836028][ T21] usb 1-1: USB disconnect, device number 10 [ 205.908823][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 205.915936][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 205.941425][ T21] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 206.041285][ T4562] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 206.060022][ T4562] usb 4-1: config 0 has no interface number 0 [ 206.067539][ T4562] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 206.078916][ T4562] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 206.090243][ T4562] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.104544][ T4562] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 206.115220][ T4562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.146085][ T4562] usb 4-1: config 0 descriptor?? [ 206.192661][ T4562] ldusb 4-1:0.55: Interrupt in endpoint not found [ 206.350910][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 206.396575][ T4562] usb 4-1: USB disconnect, device number 4 [ 206.620952][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 206.893716][ T21] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 208.116694][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.173303][ T21] usb 1-1: config 0 descriptor?? [ 208.336985][ T5738] tmpfs: Unknown parameter 'usrquota' [ 210.150554][ T5754] netlink: set zone limit has 8 unknown bytes [ 211.071043][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 211.077241][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 211.106034][ T21] usb 1-1: USB disconnect, device number 11 [ 213.967701][ T5792] binder: 5786:5792 ioctl c0306201 0 returned -14 [ 215.741293][ T4567] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.066191][ T5805] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 216.087221][ T5805] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 217.875777][ T4567] usb 2-1: Using ep0 maxpacket: 32 [ 217.961361][ T4567] usb 2-1: device descriptor read/all, error -71 [ 219.349060][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 220.040923][ T4213] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.310846][ T4213] usb 5-1: Using ep0 maxpacket: 32 [ 220.692522][ T4213] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 220.830375][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.957600][ T4213] usb 5-1: Product: syz [ 221.185514][ T4213] usb 5-1: Manufacturer: syz [ 221.190354][ T4213] usb 5-1: SerialNumber: syz [ 221.213395][ T4213] usb 5-1: config 0 descriptor?? [ 221.301623][ T5857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.437'. [ 221.467324][ T4213] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 221.481249][ T4213] cyphidcom ttyUSB0: required endpoint is missing [ 221.505684][ T4213] usb 5-1: USB disconnect, device number 8 [ 221.545089][ T4213] cypress_m8 5-1:0.0: device disconnected [ 223.367704][ T5893] mmap: syz.2.449 (5893) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 224.043923][ T5902] ax25_connect(): syz.3.453 uses autobind, please contact jreuter@yaina.de [ 224.213049][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.259960][ T5902] bond0: (slave rose0): Enslaving as an active interface with an up link [ 224.310310][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 224.340958][ T13] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 224.741029][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 225.017655][ T5921] ubi31: attaching mtd0 [ 225.036269][ T5921] ubi31: scanning is finished [ 225.041222][ T5921] ubi31: empty MTD device detected [ 225.465874][ T13] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 225.551159][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.579561][ T13] usb 2-1: Product: syz [ 225.584209][ T13] usb 2-1: Manufacturer: syz [ 225.617470][ T13] usb 2-1: SerialNumber: syz [ 225.947643][ T13] usb 2-1: config 0 descriptor?? [ 226.060387][ T5921] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 226.091179][ T5904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 226.107299][ T5921] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 226.118259][ T13] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 226.152147][ T5921] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 226.211035][ T5921] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 226.249381][ T5921] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 226.263572][ T5921] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 226.272098][ T5921] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 178129499 [ 226.282498][ T5921] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 226.294674][ T5932] ubi31: background thread "ubi_bgt31d" started, PID 5932 [ 228.061208][ T4562] usb 2-1: USB disconnect, device number 10 [ 228.856280][ T5974] device syzkaller0 entered promiscuous mode [ 232.781090][ T4562] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 233.070408][ T6023] syz.1.480 uses obsolete (PF_INET,SOCK_PACKET) [ 234.513326][ T4562] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 234.995076][ T4562] usb 4-1: string descriptor 0 read error: -71 [ 235.010984][ T4562] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 235.030286][ T4562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.051651][ T4562] usb 4-1: config 0 descriptor?? [ 235.074901][ T4562] usb 4-1: can't set config #0, error -71 [ 235.082607][ T4562] usb 4-1: USB disconnect, device number 5 [ 237.231190][ T4567] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 237.502211][ T4567] usb 1-1: Using ep0 maxpacket: 16 [ 237.621334][ T4567] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 237.630030][ T4567] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.650416][ T4567] usb 1-1: config 0 has no interface number 0 [ 237.821073][ T4567] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 237.844437][ T4567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.910727][ T4567] usb 1-1: Product: syz [ 237.918087][ T4567] usb 1-1: Manufacturer: syz [ 237.954315][ T4567] usb 1-1: SerialNumber: syz [ 237.983252][ T4567] usb 1-1: config 0 descriptor?? [ 238.043013][ T4567] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 238.049425][ T4567] usb 1-1: No valid video chain found. [ 238.146788][ T4567] usb 1-1: USB disconnect, device number 12 [ 243.341699][ T1109] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 245.431292][ T1109] usb 4-1: device descriptor read/all, error -71 [ 248.156539][ T6174] syz.3.517 sent an empty control message without MSG_MORE. [ 249.611037][ T4562] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 250.814677][ T6202] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 250.826049][ T6202] qnx6: wrong signature (magic) in superblock #1. [ 250.832756][ T6202] qnx6: unable to read the first superblock [ 250.840932][ T4562] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 251.970907][ T4562] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 251.984407][ T4562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.002501][ T4562] usb 5-1: Product: syz [ 252.012678][ T4562] usb 5-1: Manufacturer: syz [ 252.017418][ T4562] usb 5-1: SerialNumber: syz [ 252.028420][ T4562] usb 5-1: config 0 descriptor?? [ 252.051246][ T6188] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 252.072829][ T4562] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 252.415402][ T6219] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.482685][ T6221] atomic_op ffff88801f910198 conn xmit_atomic 0000000000000000 [ 253.123818][ T4562] usb 5-1: USB disconnect, device number 9 [ 253.508846][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 253.626283][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 253.770771][ C1] hrtimer: interrupt took 61245 ns [ 254.156341][ T6233] syz.4.530 (6233) used greatest stack depth: 16992 bytes left [ 255.444196][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.450715][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.536656][ T6256] xt_hashlimit: size too large, truncated to 1048576 [ 258.396363][ T26] audit: type=1326 audit(1748179879.420:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.4.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3685648969 code=0x7fc00000 [ 258.679345][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 259.783779][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 259.818354][ T6283] mkiss: ax0: crc mode is auto. [ 260.390939][ T7] usb 4-1: unable to read config index 0 descriptor/all [ 260.398992][ T7] usb 4-1: can't read configurations, error -71 [ 275.232861][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 275.855207][ T6391] chnl_net:caif_netlink_parms(): no params data found [ 277.044553][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 277.503578][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 277.594934][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.769953][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.802890][ T6391] device bridge_slave_0 entered promiscuous mode [ 277.854260][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.868162][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.879454][ T6391] device bridge_slave_1 entered promiscuous mode [ 277.970920][ T6447] sctp: failed to load transform for md5: -2 [ 278.464003][ T6391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.574172][ T628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.007168][ T6391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.030644][ T6479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.589'. [ 279.896307][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 279.982867][ T628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.513773][ T6391] team0: Port device team_slave_0 added [ 280.644528][ T628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.677228][ T6391] team0: Port device team_slave_1 added [ 280.716095][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.729212][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.814802][ T6391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.866381][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.063718][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 281.425776][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.471587][ T6391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.589071][ T628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.990898][ T4213] Bluetooth: hci0: command 0x0419 tx timeout [ 282.330349][ T6391] device hsr_slave_0 entered promiscuous mode [ 283.291748][ T6391] device hsr_slave_1 entered promiscuous mode [ 283.319289][ T6391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.328272][ T6391] Cannot create hsr debugfs directory [ 283.389860][ T6523] Cannot find add_set index 0 as target [ 284.495064][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 288.040886][ T13] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 288.166118][ T6577] --map-set only usable from mangle table [ 288.216285][ T6391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 288.229215][ T6391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 288.247239][ T6391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.264352][ T6391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.451047][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.555621][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.566286][ T13] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 288.576877][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.099858][ T13] usb 3-1: config 0 descriptor?? [ 289.142633][ T6391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.160166][ T26] audit: type=1326 audit(1748179911.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992785969 code=0x7ffc0000 [ 290.188099][ T26] audit: type=1326 audit(1748179911.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992785969 code=0x7ffc0000 [ 290.243460][ T6391] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.464583][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 290.500783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.528385][ T26] audit: type=1326 audit(1748179911.550:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99278556b code=0x7ffc0000 [ 290.731194][ T26] audit: type=1326 audit(1748179911.550:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc99278556b code=0x7ffc0000 [ 290.933107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.966099][ T26] audit: type=1326 audit(1748179911.550:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992785969 code=0x7ffc0000 [ 290.988933][ T26] audit: type=1326 audit(1748179911.560:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc992785969 code=0x7ffc0000 [ 291.421055][ T26] audit: type=1326 audit(1748179911.560:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992785969 code=0x7ffc0000 [ 291.444537][ T26] audit: type=1326 audit(1748179911.560:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992785969 code=0x7ffc0000 [ 291.468793][ T26] audit: type=1326 audit(1748179911.560:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc992785969 code=0x7ffc0000 [ 291.552772][ T26] audit: type=1326 audit(1748179911.560:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992785969 code=0x7ffc0000 [ 291.652771][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.752525][ T13] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 291.772670][ T13] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 291.780274][ T13] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 291.784372][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.806770][ T13] usb 3-1: USB disconnect, device number 5 [ 291.839663][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.846877][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.079413][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.090607][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.128731][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.968802][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.976052][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.991593][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.003967][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.052145][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.094554][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.586230][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 294.069772][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.078015][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.088826][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.128939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.179636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.316353][ T6391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.348821][ T6640] --map-set only usable from mangle table [ 294.496220][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.973051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.990295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.840385][ T628] device hsr_slave_0 left promiscuous mode [ 300.021563][ T628] device hsr_slave_1 left promiscuous mode [ 300.037982][ T6682] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 300.075413][ T628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.084833][ T6682] qnx6: wrong signature (magic) in superblock #1. [ 300.096882][ T6682] qnx6: unable to read the first superblock [ 300.219087][ T628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.547105][ T628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.555992][ T628] device bridge_slave_1 left promiscuous mode [ 300.564227][ T628] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.601053][ T7] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 300.663885][ T628] device bridge_slave_0 left promiscuous mode [ 300.670103][ T628] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.970807][ T7] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 301.022256][ T628] device veth1_macvtap left promiscuous mode [ 301.042715][ T628] device veth0_macvtap left promiscuous mode [ 301.161023][ T7] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 301.196554][ T628] device veth1_vlan left promiscuous mode [ 301.202506][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.210572][ T628] device veth0_vlan left promiscuous mode [ 301.237413][ T7] usb 4-1: Product: syz [ 301.245611][ T7] usb 4-1: Manufacturer: syz [ 301.250534][ T7] usb 4-1: SerialNumber: syz [ 301.286440][ T7] usb 4-1: config 0 descriptor?? [ 301.331218][ T6679] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 301.354971][ T7] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 301.755254][ T6703] --map-set only usable from mangle table [ 302.272862][ T628] team0 (unregistering): Port device team_slave_1 removed [ 302.279339][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 302.317045][ T628] team0 (unregistering): Port device team_slave_0 removed [ 302.333385][ T628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.346522][ T628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.402650][ T628] bond0 (unregistering): Released all slaves [ 302.487308][ T7] usb 4-1: USB disconnect, device number 10 [ 302.550102][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.561487][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.573802][ T6391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.789884][ T6731] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.166062][ T6761] Cannot find add_set index 0 as target [ 305.461067][ T4280] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 306.451267][ T4280] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 306.701303][ T4280] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 306.854888][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.863607][ T4280] usb 2-1: Product: syz [ 306.868051][ T4280] usb 2-1: Manufacturer: syz [ 306.876569][ T4280] usb 2-1: SerialNumber: syz [ 306.956747][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 307.403393][ T4280] usb 2-1: config 0 descriptor?? [ 307.421078][ T6759] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 307.450779][ T4280] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 307.526587][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.546135][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.789492][ T6391] device veth0_vlan entered promiscuous mode [ 308.333699][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.406024][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.479409][ T7] usb 2-1: USB disconnect, device number 11 [ 308.578438][ T6391] device veth1_vlan entered promiscuous mode [ 308.592081][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.973746][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.057551][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 309.486607][ T6391] device veth0_macvtap entered promiscuous mode [ 309.563905][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.588403][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.610529][ T6391] device veth1_macvtap entered promiscuous mode [ 310.200649][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.490789][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.501871][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.513166][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.523420][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.534677][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.546519][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.847849][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.859497][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.868847][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.885051][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.931324][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.974614][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.985531][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.001877][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.034083][ T6391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.064781][ T6391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.104699][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.198878][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.258208][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.985991][ T6391] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.008679][ T6391] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.029052][ T6391] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.066851][ T6391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.130848][ T5259] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 312.303554][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.320066][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.424961][ T3067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.439373][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.480393][ T3067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.520040][ T5259] usb 2-1: Using ep0 maxpacket: 8 [ 312.540689][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.658528][ T5259] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 312.839279][ T5259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.169062][ T5259] usb 2-1: config 0 descriptor?? [ 313.460065][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 313.510307][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 313.601526][ T5259] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 315.821173][ T5259] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 316.021531][ T5259] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 316.129718][ T5259] asix: probe of 2-1:0.0 failed with error -71 [ 316.159911][ T5259] usb 2-1: USB disconnect, device number 12 [ 316.420989][ T4280] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 316.800803][ T4280] usb 6-1: Using ep0 maxpacket: 8 [ 316.884038][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.895955][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.640945][ T4280] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 317.751210][ T4280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.782775][ T4280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.801388][ T4280] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 318.578867][ T4280] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 318.600939][ T4280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.644517][ T4280] usb 6-1: config 0 descriptor?? [ 320.140992][ T4280] usbhid 6-1:0.0: can't add hid device: -71 [ 320.147028][ T4280] usbhid: probe of 6-1:0.0 failed with error -71 [ 320.270794][ T4280] usb 6-1: USB disconnect, device number 2 [ 321.373891][ T6940] Cannot find add_set index 0 as target [ 321.977015][ T6957] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.967729][ T6986] --map-set only usable from mangle table [ 332.158165][ T7065] ------------[ cut here ]------------ [ 332.164290][ T7065] WARNING: CPU: 0 PID: 7065 at kernel/trace/bpf_trace.c:1411 bpf_get_stack_raw_tp+0x196/0x1d0 [ 332.174626][ T7065] Modules linked in: [ 332.178541][ T7065] CPU: 0 PID: 7065 Comm: syz.1.719 Not tainted 5.15.184-syzkaller #0 [ 332.186644][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.196738][ T7065] RIP: 0010:bpf_get_stack_raw_tp+0x196/0x1d0 [ 332.202768][ T7065] Code: c8 45 31 c0 e8 6b ce 13 00 65 ff 0d ac f2 81 7e 4c 63 e0 4c 89 e0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 aa 76 f6 ff <0f> 0b 65 ff 0d 89 f2 81 7e 49 c7 c4 f0 ff ff ff eb d7 e8 93 76 f6 [ 332.222520][ T7065] RSP: 0000:ffffc9000343ebf8 EFLAGS: 00010293 [ 332.228612][ T7065] RAX: ffffffff81814a96 RBX: ffff8880b9000000 RCX: ffff8880768e5940 [ 332.236637][ T7065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 332.244657][ T7065] RBP: ffffc9000343ec30 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 332.252671][ T7065] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: 0000000000000000 [ 332.260789][ T7065] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 332.268786][ T7065] FS: 0000555582027500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 332.277762][ T7065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.284385][ T7065] CR2: 000000110c38a91e CR3: 00000000621f3000 CR4: 00000000003506f0 [ 332.292407][ T7065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.300397][ T7065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.308410][ T7065] Call Trace: [ 332.311730][ T7065] [ 332.314686][ T7065] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 332.320256][ T7065] bpf_trace_run4+0x188/0x330 [ 332.324982][ T7065] ? bpf_trace_run3+0x320/0x320 [ 332.329861][ T7065] ? get_mm_memcg_path+0x24f/0x330 [ 332.335017][ T7065] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 332.341770][ T7065] ? get_mm_memcg_path+0x330/0x330 [ 332.346898][ T7065] ? mark_lock+0x94/0x320 [ 332.351301][ T7065] ? __init_rwsem+0x160/0x160 [ 332.356024][ T7065] stack_map_get_build_id_offset+0x83d/0x860 [ 332.362082][ T7065] ? get_perf_callchain+0x3b1/0x480 [ 332.367327][ T7065] ? put_callchain_entry+0xb0/0xb0 [ 332.372491][ T7065] ? __bpf_get_stackid+0x920/0x920 [ 332.377624][ T7065] ? verify_lock_unused+0x140/0x140 [ 332.382881][ T7065] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 332.388888][ T7065] __bpf_get_stack+0x44a/0x4f0 [ 332.393701][ T7065] ? stack_map_get_build_id_offset+0x860/0x860 [ 332.400210][ T7065] ? read_lock_is_recursive+0x10/0x10 [ 332.405683][ T7065] ? __cant_sleep+0x210/0x210 [ 332.410376][ T7065] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 332.416177][ T7065] bpf_get_stack_raw_tp+0x175/0x1d0 [ 332.421385][ T7065] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 332.426910][ T7065] bpf_trace_run4+0x188/0x330 [ 332.431620][ T7065] ? bpf_trace_run3+0x320/0x320 [ 332.436485][ T7065] ? get_mm_memcg_path+0x24f/0x330 [ 332.441595][ T7065] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 332.448271][ T7065] ? get_mm_memcg_path+0x330/0x330 [ 332.453393][ T7065] ? mark_lock+0x94/0x320 [ 332.457740][ T7065] ? __init_rwsem+0x160/0x160 [ 332.462431][ T7065] stack_map_get_build_id_offset+0x83d/0x860 [ 332.468393][ T7065] ? get_perf_callchain+0x3b1/0x480 [ 332.473584][ T7065] ? put_callchain_entry+0xb0/0xb0 [ 332.478673][ T7065] ? __bpf_get_stackid+0x920/0x920 [ 332.483774][ T7065] ? verify_lock_unused+0x140/0x140 [ 332.488954][ T7065] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 332.494932][ T7065] __bpf_get_stack+0x44a/0x4f0 [ 332.499722][ T7065] ? stack_map_get_build_id_offset+0x860/0x860 [ 332.505894][ T7065] ? read_lock_is_recursive+0x10/0x10 [ 332.511277][ T7065] ? __cant_sleep+0x210/0x210 [ 332.515937][ T7065] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 332.521661][ T7065] bpf_get_stack_raw_tp+0x175/0x1d0 [ 332.526862][ T7065] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 332.532428][ T7065] bpf_trace_run4+0x188/0x330 [ 332.537093][ T7065] ? bpf_trace_run3+0x320/0x320 [ 332.541943][ T7065] ? get_mm_memcg_path+0x24f/0x330 [ 332.547120][ T7065] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 332.553804][ T7065] ? get_mm_memcg_path+0x330/0x330 [ 332.558980][ T7065] ? mark_lock+0x94/0x320 [ 332.563432][ T7065] ? __init_rwsem+0x160/0x160 [ 332.568092][ T7065] stack_map_get_build_id_offset+0x83d/0x860 [ 332.574075][ T7065] ? get_perf_callchain+0x3b1/0x480 [ 332.579266][ T7065] ? put_callchain_entry+0xb0/0xb0 [ 332.584371][ T7065] ? __bpf_get_stackid+0x920/0x920 [ 332.589463][ T7065] ? __bpf_get_stack+0xfd/0x4f0 [ 332.594315][ T7065] __bpf_get_stack+0x44a/0x4f0 [ 332.599063][ T7065] ? stack_map_get_build_id_offset+0x860/0x860 [ 332.605209][ T7065] ? read_lock_is_recursive+0x10/0x10 [ 332.610582][ T7065] ? __cant_sleep+0x210/0x210 [ 332.615263][ T7065] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 332.620985][ T7065] bpf_get_stack_raw_tp+0x175/0x1d0 [ 332.626186][ T7065] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 332.631728][ T7065] bpf_trace_run4+0x188/0x330 [ 332.636393][ T7065] ? bpf_trace_run3+0x320/0x320 [ 332.641241][ T7065] ? get_mm_memcg_path+0x24f/0x330 [ 332.646347][ T7065] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 332.653131][ T7065] ? get_mm_memcg_path+0x330/0x330 [ 332.658235][ T7065] ? __init_rwsem+0x160/0x160 [ 332.662920][ T7065] do_user_addr_fault+0xbbb/0xc80 [ 332.667948][ T7065] ? vtime_user_exit+0x2dc/0x400 [ 332.672917][ T7065] ? rcu_is_watching+0x11/0xa0 [ 332.677868][ T7065] exc_page_fault+0x60/0x100 [ 332.682482][ T7065] asm_exc_page_fault+0x22/0x30 [ 332.687521][ T7065] RIP: 0033:0x7f713f506cad [ 332.691967][ T7065] Code: ff 48 83 e8 01 48 89 ee bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 e9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 11 fd ff ff e9 c0 fd ff ff e8 7b 2b [ 332.711661][ T7065] RSP: 002b:00007ffd09b5c230 EFLAGS: 00010202 [ 332.717728][ T7065] RAX: 000000110c388000 RBX: 00007f714037d720 RCX: 0000000000000004 [ 332.725700][ T7065] RDX: 0000000000001fa3 RSI: 00000000000008fe RDI: 0000000000000010 [ 332.733693][ T7065] RBP: ffffffff87a23fa3 R08: 00007f713f84e1f8 R09: 00007f713f83a000 [ 332.741721][ T7065] R10: 00007f713e493008 R11: 0000000000000019 R12: 0000000000000019 [ 332.749672][ T7065] R13: 0000000000000000 R14: ffffffff87a23130 R15: 000000000000661b [ 332.757729][ T7065] ? dummy_pcm_open+0x20/0x4a0 [ 332.762500][ T7065] ? dummy_systimer_stop+0x43/0x80 [ 332.767610][ T7065] [ 332.770632][ T7065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 332.777895][ T7065] CPU: 0 PID: 7065 Comm: syz.1.719 Not tainted 5.15.184-syzkaller #0 [ 332.785940][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.795984][ T7065] Call Trace: [ 332.799256][ T7065] [ 332.802169][ T7065] dump_stack_lvl+0x168/0x230 [ 332.806828][ T7065] ? show_regs_print_info+0x20/0x20 [ 332.812026][ T7065] ? load_image+0x3b0/0x3b0 [ 332.816689][ T7065] panic+0x2c9/0x7f0 [ 332.820571][ T7065] ? bpf_jit_dump+0xd0/0xd0 [ 332.825070][ T7065] ? dummy_systimer_stop+0x43/0x80 [ 332.830177][ T7065] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 332.835550][ T7065] __warn+0x248/0x2b0 [ 332.839526][ T7065] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 332.844882][ T7065] report_bug+0x1b7/0x2e0 [ 332.849195][ T7065] handle_bug+0x3a/0x70 [ 332.853332][ T7065] exc_invalid_op+0x16/0x40 [ 332.857810][ T7065] asm_exc_invalid_op+0x16/0x20 [ 332.862653][ T7065] RIP: 0010:bpf_get_stack_raw_tp+0x196/0x1d0 [ 332.868628][ T7065] Code: c8 45 31 c0 e8 6b ce 13 00 65 ff 0d ac f2 81 7e 4c 63 e0 4c 89 e0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 aa 76 f6 ff <0f> 0b 65 ff 0d 89 f2 81 7e 49 c7 c4 f0 ff ff ff eb d7 e8 93 76 f6 [ 332.888232][ T7065] RSP: 0000:ffffc9000343ebf8 EFLAGS: 00010293 [ 332.894305][ T7065] RAX: ffffffff81814a96 RBX: ffff8880b9000000 RCX: ffff8880768e5940 [ 332.902269][ T7065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffc [ 332.910240][ T7065] RBP: ffffc9000343ec30 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 332.918219][ T7065] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: 0000000000000000 [ 332.926188][ T7065] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 332.934149][ T7065] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 332.939611][ T7065] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 332.945119][ T7065] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 332.950672][ T7065] bpf_trace_run4+0x188/0x330 [ 332.955348][ T7065] ? bpf_trace_run3+0x320/0x320 [ 332.960181][ T7065] ? get_mm_memcg_path+0x24f/0x330 [ 332.965276][ T7065] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 332.971938][ T7065] ? get_mm_memcg_path+0x330/0x330 [ 332.977026][ T7065] ? mark_lock+0x94/0x320 [ 332.981358][ T7065] ? __init_rwsem+0x160/0x160 [ 332.986016][ T7065] stack_map_get_build_id_offset+0x83d/0x860 [ 332.991976][ T7065] ? get_perf_callchain+0x3b1/0x480 [ 332.997178][ T7065] ? put_callchain_entry+0xb0/0xb0 [ 333.002299][ T7065] ? __bpf_get_stackid+0x920/0x920 [ 333.007512][ T7065] ? verify_lock_unused+0x140/0x140 [ 333.012704][ T7065] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 333.018685][ T7065] __bpf_get_stack+0x44a/0x4f0 [ 333.023457][ T7065] ? stack_map_get_build_id_offset+0x860/0x860 [ 333.029604][ T7065] ? read_lock_is_recursive+0x10/0x10 [ 333.034958][ T7065] ? __cant_sleep+0x210/0x210 [ 333.039622][ T7065] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 333.045346][ T7065] bpf_get_stack_raw_tp+0x175/0x1d0 [ 333.050570][ T7065] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 333.056114][ T7065] bpf_trace_run4+0x188/0x330 [ 333.060785][ T7065] ? bpf_trace_run3+0x320/0x320 [ 333.065621][ T7065] ? get_mm_memcg_path+0x24f/0x330 [ 333.070718][ T7065] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 333.077386][ T7065] ? get_mm_memcg_path+0x330/0x330 [ 333.082489][ T7065] ? mark_lock+0x94/0x320 [ 333.086811][ T7065] ? __init_rwsem+0x160/0x160 [ 333.091469][ T7065] stack_map_get_build_id_offset+0x83d/0x860 [ 333.097567][ T7065] ? get_perf_callchain+0x3b1/0x480 [ 333.102759][ T7065] ? put_callchain_entry+0xb0/0xb0 [ 333.107860][ T7065] ? __bpf_get_stackid+0x920/0x920 [ 333.112958][ T7065] ? verify_lock_unused+0x140/0x140 [ 333.118142][ T7065] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 333.124120][ T7065] __bpf_get_stack+0x44a/0x4f0 [ 333.128892][ T7065] ? stack_map_get_build_id_offset+0x860/0x860 [ 333.135025][ T7065] ? read_lock_is_recursive+0x10/0x10 [ 333.140400][ T7065] ? __cant_sleep+0x210/0x210 [ 333.145069][ T7065] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 333.150881][ T7065] bpf_get_stack_raw_tp+0x175/0x1d0 [ 333.156114][ T7065] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 333.161642][ T7065] bpf_trace_run4+0x188/0x330 [ 333.166299][ T7065] ? bpf_trace_run3+0x320/0x320 [ 333.171129][ T7065] ? get_mm_memcg_path+0x24f/0x330 [ 333.176350][ T7065] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 333.183008][ T7065] ? get_mm_memcg_path+0x330/0x330 [ 333.188095][ T7065] ? mark_lock+0x94/0x320 [ 333.192447][ T7065] ? __init_rwsem+0x160/0x160 [ 333.197109][ T7065] stack_map_get_build_id_offset+0x83d/0x860 [ 333.203069][ T7065] ? get_perf_callchain+0x3b1/0x480 [ 333.208248][ T7065] ? put_callchain_entry+0xb0/0xb0 [ 333.213521][ T7065] ? __bpf_get_stackid+0x920/0x920 [ 333.218624][ T7065] ? __bpf_get_stack+0xfd/0x4f0 [ 333.223461][ T7065] __bpf_get_stack+0x44a/0x4f0 [ 333.228218][ T7065] ? stack_map_get_build_id_offset+0x860/0x860 [ 333.234363][ T7065] ? read_lock_is_recursive+0x10/0x10 [ 333.239722][ T7065] ? __cant_sleep+0x210/0x210 [ 333.244382][ T7065] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 333.250089][ T7065] bpf_get_stack_raw_tp+0x175/0x1d0 [ 333.255357][ T7065] bpf_prog_ec3b2eefa702d8d3+0x3a/0xb00 [ 333.260986][ T7065] bpf_trace_run4+0x188/0x330 [ 333.265667][ T7065] ? bpf_trace_run3+0x320/0x320 [ 333.270508][ T7065] ? get_mm_memcg_path+0x24f/0x330 [ 333.275603][ T7065] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 333.282264][ T7065] ? get_mm_memcg_path+0x330/0x330 [ 333.287369][ T7065] ? __init_rwsem+0x160/0x160 [ 333.292028][ T7065] do_user_addr_fault+0xbbb/0xc80 [ 333.297034][ T7065] ? vtime_user_exit+0x2dc/0x400 [ 333.301967][ T7065] ? rcu_is_watching+0x11/0xa0 [ 333.306709][ T7065] exc_page_fault+0x60/0x100 [ 333.311280][ T7065] asm_exc_page_fault+0x22/0x30 [ 333.316125][ T7065] RIP: 0033:0x7f713f506cad [ 333.320540][ T7065] Code: ff 48 83 e8 01 48 89 ee bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 e9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 11 fd ff ff e9 c0 fd ff ff e8 7b 2b [ 333.340133][ T7065] RSP: 002b:00007ffd09b5c230 EFLAGS: 00010202 [ 333.346186][ T7065] RAX: 000000110c388000 RBX: 00007f714037d720 RCX: 0000000000000004 [ 333.354152][ T7065] RDX: 0000000000001fa3 RSI: 00000000000008fe RDI: 0000000000000010 [ 333.362109][ T7065] RBP: ffffffff87a23fa3 R08: 00007f713f84e1f8 R09: 00007f713f83a000 [ 333.370056][ T7065] R10: 00007f713e493008 R11: 0000000000000019 R12: 0000000000000019 [ 333.378014][ T7065] R13: 0000000000000000 R14: ffffffff87a23130 R15: 000000000000661b [ 333.385976][ T7065] ? dummy_pcm_open+0x20/0x4a0 [ 333.390727][ T7065] ? dummy_systimer_stop+0x43/0x80 [ 333.395845][ T7065] [ 333.399080][ T7065] Kernel Offset: disabled [ 333.403708][ T7065] Rebooting in 86400 seconds..