last executing test programs: 3m6.207810206s ago: executing program 2 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b0506d5bedbc1a85d836005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3m1.749341116s ago: executing program 2 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$isdn_base(0x22, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x5385, 0x1000000000000) 3m0.064881499s ago: executing program 2 (id=48): bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000000, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m58.955247021s ago: executing program 2 (id=51): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000380)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000002140)={{0x12, 0x1, 0x0, 0x8d, 0xdf, 0xb2, 0x40, 0xb49, 0x64f, 0xd4fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x1, 0xe6, 0xf6, 0x52, 0x0, [], [{{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x458, 0x500f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3d, 0x2, 0x3, 0x1, 0x3, 0x7f, {0x9, 0x21, 0x101, 0xff, 0x1, {0x22, 0xa9c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x9, 0xe, 0x8, 0x4}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x7, 0xf000, 0xff81, [0xffff5f, 0x3f00, 0x10100ff, 0xc030]}]}, 0x2, [{0xc2, &(0x7f00000000c0)=@string={0xc2, 0x3, "273cb14ae5ea4ce9bf6f7a2e3f3523b8669f22cebbde2ae3f5fa05ff7af2cab99ce51723d76ab8b76f1c63651fd70fe0e4e586332458c3d34fa4f7278cfd830d8be1c5b2203687fd83a8bdb7de1de1f6cebcf0efe8feac454e9a8120aabb296acfdde21de0bebc7a57841c49df8d0316012e2570e05bc96b0a9e868389611d2fbd4f3c83b6e46fdabec7c3a9089265c142029e1363c1cbec97cb40c0913d65481b1055f30f30c30ff49ca35f69220d3e09fedb415bc11021da55682c4bf8e459"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x430}}]}) 2m55.605787904s ago: executing program 2 (id=60): socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 2m54.593767885s ago: executing program 2 (id=64): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000001240)='y\x105\xfb\xf7u\x83%:\xf2\xc2\xb9x\xa4q\xc1\xea_2\x12\xb7l\xbe\x85J\x92zi\xd5\x14\xe5\xf6=\xd4\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x01\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb\x06\x00\x00\x00\x00\x00\x00\x00DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x18b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97\xc0\x162\xee+\xb7\xa7\x94\xc6$\xc8\x82X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3R\t\xaacB\x04\xa7I\v\xad\xa8\t\f\x11\x86EZ\x96\xd5\x14OD\\\xf0\x03\x19\n\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd98\x12\xc17_\x8a\x195\xe2@\n-\x9fv\\\x1a\xd6\x89-\xc2\xe2\r\xf77\xa8F?\x06\x05S:\"\xd7\x10\xad\xe1\x9dq\x99{Q\xd2\x13\xf9Iu\xb2\x01\x9b\xceem`b\v\xf3ipc\xf6\x9c\a\"\xbe\xee\x7f0\x12\xf8\xe2N\xc8\x8cRg\xfesLr\x97\xcf\xfd\x95\b\f$\xee\x9bo\xb4\f(.~&\xcf78\"\xb4\xb5\x82Fm\x95\x8e\xa5\x86V!\xaep\xb4\xbc\xf8!\xb1Z\xf7,\xe6s\xc3\x13tH\xc1\xc1+\xa1456(\x18\xbc\x14HP1\x14\xb1\\\x11\v\xda\x7f\x04\xf3\xfe;\xfb\xb9\xa39\x1d\n9\xc7\xc9\x00\x00\x00\x00\x00\x00\xf3-t\xbf\x19\xfa\x92o\x8a\x04\xfc\xfa|:`.\xa9\xb6;z\x87c\x82f\xbbcEra\x1f\xc2\xa8\f\xc8oB\x03\xa8)\xa0\x93\x06\xaf#\xec\xee\xa7k\xca\xdc\xb2\xc57\xc9v\xf8\n\xb22\br\x15\xc8z\xd7\x06<\xd5\x06]\xee\xd2\xad\xa1|r\xfb\x91\xb3/Mh\x1f\xf9\x82\xd2\xe4\xc4\xf7XO\xbd\xe5\x19/\x1a|\xc8\n\xa8\x99;\xab\x18\'\xd2\xc7\x1dX&\xcb\xfd{R)j\x84\xb9\xb0\xd7\xa0fJ\x13y\xe9\x16@\xa3\xea93\x11p\xb6\x8e\x7f\x8e\xf5.\xa4\xf4\xc9<\x06\xcc\x910xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000001fc0)=ANY=[@ANYBLOB="45000000060000000000000000000000000000000000000000000000000000001c"], 0x45) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) 1m23.887707563s ago: executing program 1 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003ef000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000380)="0f201766b9e309000066b83f46151e66ba1cc889580f302ef4ba6100ed0f0966b90602000066b80100000066ba000000000f300f20c06635000000400f22c066adbaa100ecf9", 0x25}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m21.427324433s ago: executing program 1 (id=283): socket$kcm(0x2, 0x200000000000001, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x4, 0x0]}}]}]}, 0x54}}, 0x0) 1m16.526998337s ago: executing program 1 (id=281): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 1m14.481556906s ago: executing program 1 (id=286): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) getpeername(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80) sendfile(r7, r7, 0x0, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) r10 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x24800, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, 0x0) 1m12.259133327s ago: executing program 1 (id=288): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe) syz_clone3(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup(r1) r2 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r2, 0x6a, 0x5, 0x0, 0x20000071) 57.083199621s ago: executing program 33 (id=288): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe) syz_clone3(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup(r1) r2 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r2, 0x6a, 0x5, 0x0, 0x20000071) 19.190901607s ago: executing program 4 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000120000"]) 18.464418558s ago: executing program 0 (id=372): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="4200000003"], 0x42) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2f, 0x0, 0x0) 16.576869359s ago: executing program 0 (id=374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x608000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib_table_lookup\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r3, 0x0, 0x8000002b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 16.469661611s ago: executing program 4 (id=375): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) lstat(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x10, 0x4, 0x418, 0x220, 0x220, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @mac=@remote, @rand_addr=0x64010102, @local, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @loopback, @empty, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 15.379435632s ago: executing program 4 (id=377): socket$key(0xf, 0x3, 0x2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0xb101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r3, &(0x7f000000ae80)={0x2020}, 0x2020) pread64(r3, &(0x7f00000002c0)=""/220, 0xdc, 0x0) read$FUSE(r3, &(0x7f0000004b80)={0x2020}, 0x2020) 14.290558468s ago: executing program 0 (id=379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000580), 0x2, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x3c0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x1004, 0x0, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x2, 0x2, 0x2, 0x9, 0x9, 0x96, 0x7fffffff, 0xffffffff00000000, 0x4, 0x4, 0x0, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0x10000004, 0x20000000006, 0x8, 0x9, 0x1000, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x9, 0xd, 0x6, 0xbbdc, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xec, 0x4, 0x6, 0x1, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r3, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x880) 14.218777524s ago: executing program 4 (id=381): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0x0, r1, 0x2}}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14}}, 0x70}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcd, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="832a0a65bd8c002b0304000e0580a7b6070d63e2", 0x14) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.59616092s ago: executing program 5 (id=383): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x8815}, 0x24000004) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x68}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.780087279s ago: executing program 3 (id=385): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) 11.688774066s ago: executing program 4 (id=386): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000c80)={0x20, 0xe, 0x2, {0x2, 0x7e8e703122aff25f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random='\x00\x00\x00\x00@&', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.561820431s ago: executing program 0 (id=387): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x288404, 0x0) 11.478024974s ago: executing program 5 (id=388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c00)=""/122, 0x0, 0x7a, 0x1, 0x0, 0x10000, @value}, 0x28) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000"], 0x54}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) ioctl$sock_netdev_private(r4, 0x8924, &(0x7f0000000000)) 10.376497627s ago: executing program 3 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 10.137784673s ago: executing program 0 (id=390): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x5) 8.982654678s ago: executing program 5 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) 7.289869752s ago: executing program 6 (id=311): socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.287465866s ago: executing program 5 (id=392): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) syz_usbip_server_init(0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x90101840}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x44c, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfd, {0x6, 0x0, 0x2b, [0x3ff, 0x9, 0x0, 0x2, 0x80000000, 0x2, 0x5, 0xfffffffc, 0x7f, 0xd84, 0x9, 0x80000000, 0x1c64, 0x8000, 0xff, 0x2380, 0xfffffffd, 0x8, 0xfffffff9, 0x10001, 0xa814, 0xa, 0x0, 0xff, 0xd, 0x2, 0x3, 0x8, 0x1, 0x64, 0x7, 0x9, 0x89ce, 0x200, 0x2, 0x101, 0x7, 0x3, 0x8, 0x4, 0x4, 0x6, 0x10000, 0x9be, 0x1, 0x7ff, 0x88d, 0x9, 0x10000, 0x5, 0xbc, 0x7f, 0x2, 0x7fffffff, 0x1, 0x80, 0x5, 0x8000, 0x1, 0x3, 0x2, 0x3, 0x0, 0x118], [0x2, 0x101, 0xec, 0x9, 0x1, 0x81, 0x9, 0x9, 0xfffffbff, 0xfff, 0x720, 0x7, 0x2, 0x3, 0x81, 0x3, 0x8, 0x4, 0xfffffffd, 0xf5cf, 0x8, 0x5, 0xcef, 0x2, 0x2, 0xc9d, 0x4, 0x6ee, 0xffffffff, 0x0, 0x4, 0xffff, 0x0, 0x1000, 0x4, 0x6, 0xff, 0x322b, 0x7, 0x6, 0x2, 0x8, 0x2, 0x7f, 0x7, 0x4, 0x0, 0x5, 0xab, 0x9, 0xbb, 0x5, 0x0, 0x1, 0x40, 0x10000, 0x6, 0xffffffef, 0x5, 0x9, 0xe7ab, 0xed46, 0x101], [0x7ff, 0x2e, 0x2, 0x401, 0x64, 0x7, 0x6, 0x2, 0x0, 0x70dba000, 0x0, 0x4000000, 0x3, 0x10000, 0x2, 0xfffffffa, 0x7, 0x2, 0x4, 0xd2c1, 0x7f, 0x7f, 0x9, 0x8, 0x9, 0x80000000, 0x22f2, 0xffff, 0x7, 0x3, 0x8, 0xbcf, 0x5, 0xce2, 0x3, 0xdf95, 0xe02, 0xffffffff, 0x3ff, 0xfff, 0xffffffff, 0x3, 0xffff, 0xc, 0x8, 0xa, 0x401, 0x4, 0x8, 0x8, 0x5, 0x3, 0xffff, 0x9, 0x1, 0x9, 0x945, 0x4, 0x5, 0x6, 0x6fe, 0x5, 0x3, 0x6], [0x40, 0x3, 0x8001, 0x3cc3ad25, 0x83a, 0xc890, 0x4, 0x69e8, 0x1, 0x4, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, 0x8, 0x3860, 0x598, 0x2, 0x4, 0x4, 0x0, 0x8, 0x9a, 0x4, 0x5, 0xb, 0x4, 0x0, 0x10000, 0xf, 0x5, 0x100, 0x6, 0x2, 0x9, 0x5, 0x8, 0x5, 0x10000, 0x7, 0x7, 0xc28, 0x3ff, 0x2, 0x5, 0x8, 0xd0, 0x5, 0x1b9, 0x4, 0xfffff482, 0xb5, 0x5, 0x0, 0x2, 0x2, 0x4b, 0x1, 0x8, 0x40, 0x6, 0x1], 0x2b, ['bridge0\x00', 'bridge0\x00', '\x00', '/dev/cpu/#/msr\x00', ',\',\x00', '$+[}\x00', '[\x00']}, ["", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x10}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYRES8=r4], 0x4c}}, 0x40000) 6.315853561s ago: executing program 3 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) ppoll(0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) 5.981609222s ago: executing program 6 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e20, @multicast2}}, [0x2, 0x7, 0x1, 0x21e, 0x401, 0x7, 0x7, 0x1, 0x9, 0x9, 0x1, 0x5, 0xce, 0x5, 0xb01a]}, &(0x7f00000000c0)=0x100) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 3.942557377s ago: executing program 4 (id=395): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1f) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 3.228699917s ago: executing program 6 (id=396): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc286, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0xd0, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x2c3a, 0x8, 0x1, {0x22, 0x271}}, {{{0x9, 0x5, 0x81, 0x3, 0x30, 0x9, 0x9, 0x8}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2, 0x0, 0x1}, 0x18) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000000c0)=0x80000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000480)={0xd, 0x2, 0x0, 'queue1\x00', 0x81}) tkill(r4, 0x7) syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x24, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000003480)={0x24, 0x0, &(0x7f0000003300)={0x0, 0x3, 0x37, @string={0x37, 0x3, "72f459e7f4214cb0a2ef66e31293922cacb3f9f0470eecf45074d5ba56bc62be269e7b77be7d70d9601ee8413783c094192d1f39a7"}}, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) 3.138069533s ago: executing program 3 (id=397): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x80000001}}]}, {0x0, [0x61]}}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1013c, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 2.07976769s ago: executing program 3 (id=398): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 2.023396691s ago: executing program 5 (id=399): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 445.985956ms ago: executing program 6 (id=400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 365.900911ms ago: executing program 3 (id=401): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c001400000000", 0x2b}], 0x1) getpeername(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80) sendfile(r7, r7, 0x0, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) r10 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x24800, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, 0x0) 236.652814ms ago: executing program 5 (id=402): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c001400000000", 0x2b}], 0x1) getpeername(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80) sendfile(r7, r7, 0x0, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) r10 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x24800, 0x0) 0s ago: executing program 0 (id=403): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1) getpeername(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffe) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80) sendfile(r7, r7, 0x0, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) r10 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x66, 0x33, 0x0, 0x35, 0x61, 0x64, 0x66, 0x63, 0x35, 0x38, 0x65, 0x37, 0x61, 0x31]}, 0x0, 0x0, r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x24800, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 73.390010][ T5812] cgroup: Unknown subsys name 'net' [ 73.507933][ T5812] cgroup: Unknown subsys name 'cpuset' [ 73.516503][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.018158][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.867896][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.879357][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.892460][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.900451][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.908769][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.919883][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.928601][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.936259][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.946803][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.953067][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.954556][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.962157][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.968920][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.982981][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.991651][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.999836][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.007711][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.024307][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.043975][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.052244][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.060183][ T5825] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.064713][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.067777][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.077924][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.091139][ T5135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.104098][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.104189][ T5135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.112847][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.126839][ T5135] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.145795][ T5135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.509935][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 79.605477][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 79.666437][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 79.725836][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 79.777716][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.788460][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.796688][ T5826] bridge_slave_0: entered allmulticast mode [ 79.803717][ T5826] bridge_slave_0: entered promiscuous mode [ 79.822646][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 79.849636][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.856900][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.864172][ T5826] bridge_slave_1: entered allmulticast mode [ 79.870887][ T5826] bridge_slave_1: entered promiscuous mode [ 79.932281][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.957030][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.964252][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.971441][ T5822] bridge_slave_0: entered allmulticast mode [ 79.979249][ T5822] bridge_slave_0: entered promiscuous mode [ 80.006149][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.027363][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.035055][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.042277][ T5835] bridge_slave_0: entered allmulticast mode [ 80.049648][ T5835] bridge_slave_0: entered promiscuous mode [ 80.057296][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.065389][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.072676][ T5822] bridge_slave_1: entered allmulticast mode [ 80.079900][ T5822] bridge_slave_1: entered promiscuous mode [ 80.094781][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.102014][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.109347][ T5834] bridge_slave_0: entered allmulticast mode [ 80.117709][ T5834] bridge_slave_0: entered promiscuous mode [ 80.148675][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.159756][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.168293][ T5835] bridge_slave_1: entered allmulticast mode [ 80.179038][ T5835] bridge_slave_1: entered promiscuous mode [ 80.210308][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.217948][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.229855][ T5834] bridge_slave_1: entered allmulticast mode [ 80.236972][ T5834] bridge_slave_1: entered promiscuous mode [ 80.264246][ T5826] team0: Port device team_slave_0 added [ 80.284298][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.296305][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.316067][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.342819][ T5826] team0: Port device team_slave_1 added [ 80.355440][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.367262][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.394434][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.407552][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.414889][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.422059][ T5827] bridge_slave_0: entered allmulticast mode [ 80.429260][ T5827] bridge_slave_0: entered promiscuous mode [ 80.462496][ T5822] team0: Port device team_slave_0 added [ 80.474353][ T5822] team0: Port device team_slave_1 added [ 80.498904][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.506245][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.513558][ T5827] bridge_slave_1: entered allmulticast mode [ 80.520792][ T5827] bridge_slave_1: entered promiscuous mode [ 80.557870][ T5835] team0: Port device team_slave_0 added [ 80.566368][ T5835] team0: Port device team_slave_1 added [ 80.597190][ T5834] team0: Port device team_slave_0 added [ 80.603933][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.610914][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.636987][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.657535][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.669006][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.696226][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.709867][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.720973][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.747073][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.767601][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.774748][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.800879][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.816260][ T5834] team0: Port device team_slave_1 added [ 80.822824][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.829861][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.855878][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.867783][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.875054][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.901307][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.914801][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.964625][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.996352][ T5826] hsr_slave_0: entered promiscuous mode [ 81.002730][ T5826] hsr_slave_1: entered promiscuous mode [ 81.010532][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.017721][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.044239][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.057360][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.064504][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.090573][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.104605][ T5135] Bluetooth: hci0: command tx timeout [ 81.124915][ T5827] team0: Port device team_slave_0 added [ 81.132628][ T5827] team0: Port device team_slave_1 added [ 81.174343][ T5135] Bluetooth: hci3: command tx timeout [ 81.174464][ T54] Bluetooth: hci1: command tx timeout [ 81.180426][ T5135] Bluetooth: hci4: command tx timeout [ 81.185540][ T5832] Bluetooth: hci2: command tx timeout [ 81.208082][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.215250][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.242008][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.282908][ T5822] hsr_slave_0: entered promiscuous mode [ 81.290280][ T5822] hsr_slave_1: entered promiscuous mode [ 81.297064][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.305292][ T5822] Cannot create hsr debugfs directory [ 81.311373][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.321149][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.348238][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.378590][ T5835] hsr_slave_0: entered promiscuous mode [ 81.384968][ T5835] hsr_slave_1: entered promiscuous mode [ 81.391011][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.399035][ T5835] Cannot create hsr debugfs directory [ 81.444886][ T5834] hsr_slave_0: entered promiscuous mode [ 81.451181][ T5834] hsr_slave_1: entered promiscuous mode [ 81.457909][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.466064][ T5834] Cannot create hsr debugfs directory [ 81.570537][ T5827] hsr_slave_0: entered promiscuous mode [ 81.577278][ T5827] hsr_slave_1: entered promiscuous mode [ 81.584230][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.591814][ T5827] Cannot create hsr debugfs directory [ 81.865089][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.887596][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.920135][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.947772][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.962438][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.976877][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.998629][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.009931][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.070557][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.080087][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.111213][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.136893][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.179171][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.189559][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.203071][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.245189][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.313173][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.329782][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.370968][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.395031][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.411262][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.447788][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.461172][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.503545][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.510871][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.530234][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.537423][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.571228][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.616019][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.623225][ T5036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.641502][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.685261][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.703690][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.711077][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.755264][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.797304][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.804483][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.833306][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.858269][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.865465][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.931264][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.938488][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.971630][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.992917][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.000162][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.067973][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.122585][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.174888][ T5832] Bluetooth: hci0: command tx timeout [ 83.185932][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.216877][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.224051][ T5036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.259348][ T5832] Bluetooth: hci2: command tx timeout [ 83.264982][ T54] Bluetooth: hci1: command tx timeout [ 83.270444][ T54] Bluetooth: hci4: command tx timeout [ 83.276289][ T5833] Bluetooth: hci3: command tx timeout [ 83.286041][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.293171][ T5036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.478930][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.571442][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.622590][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.661190][ T5822] veth0_vlan: entered promiscuous mode [ 83.732329][ T5822] veth1_vlan: entered promiscuous mode [ 83.764944][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.804379][ T5835] veth0_vlan: entered promiscuous mode [ 83.849191][ T5835] veth1_vlan: entered promiscuous mode [ 83.869574][ T5822] veth0_macvtap: entered promiscuous mode [ 83.896938][ T5827] veth0_vlan: entered promiscuous mode [ 83.930355][ T5822] veth1_macvtap: entered promiscuous mode [ 83.956593][ T5827] veth1_vlan: entered promiscuous mode [ 83.965743][ T5835] veth0_macvtap: entered promiscuous mode [ 83.974836][ T5826] veth0_vlan: entered promiscuous mode [ 83.992807][ T5835] veth1_macvtap: entered promiscuous mode [ 84.008702][ T5834] veth0_vlan: entered promiscuous mode [ 84.025064][ T5826] veth1_vlan: entered promiscuous mode [ 84.042933][ T5834] veth1_vlan: entered promiscuous mode [ 84.065009][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.099134][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.114253][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.126023][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.140105][ T5826] veth0_macvtap: entered promiscuous mode [ 84.150308][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.171112][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.182281][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.195422][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.210448][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.219823][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.229778][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.238968][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.256245][ T5826] veth1_macvtap: entered promiscuous mode [ 84.269983][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.280110][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.289334][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.298948][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.311227][ T5827] veth0_macvtap: entered promiscuous mode [ 84.322893][ T5827] veth1_macvtap: entered promiscuous mode [ 84.387902][ T5834] veth0_macvtap: entered promiscuous mode [ 84.398501][ T5834] veth1_macvtap: entered promiscuous mode [ 84.420747][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.437843][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.447757][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.459361][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.472143][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.518821][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.529910][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.539936][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.550786][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.561027][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.573515][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.584794][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.624236][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.625442][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.633518][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.649876][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.660177][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.672507][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.683855][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.693283][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.704447][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.714425][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.729585][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.739490][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.750136][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.762661][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.800969][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.811609][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.821931][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.832453][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.842374][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.853356][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.863312][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.881710][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.892637][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.902384][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.911379][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.920196][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.928994][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.941272][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.947998][ T5036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.950066][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.966233][ T5036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.974992][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.980648][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.985188][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.999863][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.035361][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.050430][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.060608][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.071335][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.082073][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.092704][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.104742][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.115374][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.126374][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.145861][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.155087][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.209711][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.229588][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.239149][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.253897][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.254505][ T54] Bluetooth: hci0: command tx timeout [ 85.263792][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.333704][ T5832] Bluetooth: hci4: command tx timeout [ 85.339162][ T5832] Bluetooth: hci2: command tx timeout [ 85.344807][ T5833] Bluetooth: hci3: command tx timeout [ 85.350398][ T54] Bluetooth: hci1: command tx timeout [ 85.357589][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.375342][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.383231][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.391624][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.453010][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.461165][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.469173][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.477235][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.492040][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.062413][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.130275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.228611][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.318857][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.328383][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.262126][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.985845][ T5135] Bluetooth: hci0: command tx timeout [ 87.991329][ T5135] Bluetooth: hci1: command tx timeout [ 88.005362][ T5135] Bluetooth: hci2: command tx timeout [ 88.011489][ T5135] Bluetooth: hci3: command tx timeout [ 88.020931][ T5135] Bluetooth: hci4: command tx timeout [ 88.557700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.643688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.652249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.653611][ T5945] random: crng reseeded on system resumption [ 88.661931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.676062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.762461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.172603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 89.205639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.333741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.971845][ T5964] ALSA: mixer_oss: invalid OSS volume '' [ 91.071372][ T5964] ALSA: mixer_oss: invalid OSS volume 'DIGITA' [ 93.085707][ T1203] cfg80211: failed to load regulatory.db [ 94.934258][ T1203] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.103164][ T1203] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 95.114942][ T1203] usb 3-1: config 0 has no interface number 0 [ 95.121648][ T1203] usb 3-1: config 0 interface 2 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 95.134607][ T1203] usb 3-1: config 0 interface 2 has no altsetting 0 [ 95.660513][ T1203] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 95.669962][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.679296][ T1203] usb 3-1: Product: syz [ 95.684345][ T1203] usb 3-1: Manufacturer: syz [ 95.689427][ T1203] usb 3-1: SerialNumber: syz [ 95.727183][ T1203] usb 3-1: config 0 descriptor?? [ 95.757024][ T5977] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 96.091349][ T1203] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.121874][ T1203] usb 3-1: invalid MIDI in EP 0 [ 96.266564][ T1203] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 96.294142][ T1203] usb 3-1: USB disconnect, device number 2 [ 96.712828][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.688740][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.150238][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.163679][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.170606][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.209987][ T8] usb 4-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 102.249556][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.399368][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 102.439174][ T5875] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.488488][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.524335][ T8] usb 4-1: config 0 descriptor?? [ 102.535022][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 102.570954][ T5875] usb 1-1: Product: syz [ 102.585445][ T5875] usb 1-1: Manufacturer: syz [ 102.592366][ T5875] usb 1-1: SerialNumber: syz [ 102.602025][ T5875] usb 1-1: config 0 descriptor?? [ 103.779993][ T5875] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.136801][ T8] usb 4-1: USB disconnect, device number 2 [ 105.864725][ T5875] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 108.856692][ T5875] usb 1-1: USB disconnect, device number 2 [ 109.673500][ T5876] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.686060][ T6070] kvm: emulating exchange as write [ 109.850184][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.873818][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 109.882376][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.909777][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.921446][ T5876] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 109.933565][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.954255][ T5876] usb 4-1: config 0 descriptor?? [ 110.153960][ T6090] ======================================================= [ 110.153960][ T6090] WARNING: The mand mount option has been deprecated and [ 110.153960][ T6090] and is ignored by this kernel. Remove the mand [ 110.153960][ T6090] option from the mount to silence this warning. [ 110.153960][ T6090] ======================================================= [ 110.226854][ T6072] netlink: 'syz.3.49': attribute type 15 has an invalid length. [ 110.255490][ T5876] usb 4-1: string descriptor 0 read error: -71 [ 110.284683][ T5876] usbhid 4-1:0.0: can't add hid device: -71 [ 110.307849][ T5876] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 110.333715][ T5876] usb 4-1: USB disconnect, device number 3 [ 111.244798][ T5875] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.449550][ T5875] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 111.458074][ T5875] usb 3-1: config 0 has no interface number 0 [ 111.466489][ T5875] usb 3-1: config 0 interface 222 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 111.532866][ T5875] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 111.570289][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.624009][ T5875] usb 3-1: Product: syz [ 111.628488][ T5875] usb 3-1: Manufacturer: syz [ 111.652083][ T5875] usb 3-1: SerialNumber: syz [ 111.769605][ T5875] usb 3-1: config 0 descriptor?? [ 112.075041][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.093876][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.168657][ T1203] usb 3-1: USB disconnect, device number 3 [ 112.487905][ T6110] veth3: entered promiscuous mode [ 112.493105][ T6110] veth3: entered allmulticast mode [ 113.481280][ T6116] Attempt to restore checkpoint with obsolete wellknown handles [ 115.437634][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.643333][ T5135] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.655992][ T3537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.667035][ T5135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.678732][ T5135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.704861][ T5135] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.719979][ T5135] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.727626][ T5135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.787015][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 115.822992][ T25] usb 1-1: config 67 has too many interfaces: 229, using maximum allowed: 32 [ 115.850425][ T25] usb 1-1: config 67 has 1 interface, different from the descriptor's value: 229 [ 115.896058][ T25] usb 1-1: config 67 has no interface number 0 [ 115.940769][ T25] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 115.975399][ T3537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.003606][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.011673][ T25] usb 1-1: Product: syz [ 116.028872][ T25] usb 1-1: Manufacturer: syz [ 116.034412][ T25] usb 1-1: SerialNumber: syz [ 116.051829][ T25] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 116.087166][ T25] usb 1-1: selecting invalid altsetting 1 [ 116.114590][ T25] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 116.297208][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.385213][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.421940][ T25] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.521805][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 116.583208][ T6130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.608044][ T25] usb 1-1: media controller created [ 116.626964][ T6130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.698683][ T3537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.792505][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.864100][ T5905] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.899037][ T25] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 116.921169][ T25] zl10353_read_register: readreg error (reg=127, ret==-32) [ 116.945694][ T25] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 116.966520][ T3537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.033466][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 117.045306][ T5905] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 117.054881][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.063084][ T5905] usb 4-1: Product: syz [ 117.067696][ T5905] usb 4-1: Manufacturer: syz [ 117.072367][ T5905] usb 4-1: SerialNumber: syz [ 117.085601][ T5905] usb 4-1: config 0 descriptor?? [ 117.095134][ T5905] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 117.106262][ T5905] usb 4-1: Detected FT232H [ 117.121345][ T25] usb 1-1: USB disconnect, device number 3 [ 117.406970][ T5905] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 117.450495][ T6135] chnl_net:caif_netlink_parms(): no params data found [ 117.820843][ T54] Bluetooth: hci4: command tx timeout [ 118.055421][ T3537] bridge_slave_1: left allmulticast mode [ 118.082398][ T3537] bridge_slave_1: left promiscuous mode [ 118.111047][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.224164][ T3537] bridge_slave_0: left allmulticast mode [ 118.229891][ T3537] bridge_slave_0: left promiscuous mode [ 118.240048][ T5905] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 118.252015][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.256166][ T5905] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 118.287301][ T6168] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.326047][ T5905] usb 4-1: USB disconnect, device number 4 [ 118.356936][ T5905] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 118.368840][ T5905] ftdi_sio 4-1:0.0: device disconnected [ 118.935842][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.978493][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.007326][ T3537] bond0 (unregistering): Released all slaves [ 119.312623][ T5876] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.544980][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 119.551897][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 119.572550][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 119.634873][ T5876] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 119.681285][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.757657][ T5876] usb 5-1: Product: syz [ 119.778603][ T5876] usb 5-1: Manufacturer: syz [ 119.833162][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.842112][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.857950][ T6135] bridge_slave_0: entered allmulticast mode [ 119.868156][ T6135] bridge_slave_0: entered promiscuous mode [ 119.880632][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.894347][ T54] Bluetooth: hci4: command tx timeout [ 119.907046][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.918756][ T6135] bridge_slave_1: entered allmulticast mode [ 119.938982][ T6135] bridge_slave_1: entered promiscuous mode [ 119.950819][ T6193] tipc: Started in network mode [ 119.956102][ T6193] tipc: Node identity ac14140f, cluster identity 4711 [ 119.963716][ T6193] tipc: New replicast peer: 10.1.1.2 [ 119.969310][ T6193] tipc: Enabled bearer , priority 10 [ 120.029279][ T5876] usb 5-1: SerialNumber: syz [ 120.090452][ T5876] usb 5-1: config 0 descriptor?? [ 120.104985][ T5876] hub 5-1:0.0: bad descriptor, ignoring hub [ 120.110964][ T5876] hub 5-1:0.0: probe with driver hub failed with error -5 [ 120.173788][ T5876] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 120.248415][ T6192] bond0: entered promiscuous mode [ 120.281514][ T6192] bond_slave_0: entered promiscuous mode [ 120.445228][ T6192] bond_slave_1: entered promiscuous mode [ 120.456807][ T6192] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 120.563051][ T6192] bond0: left promiscuous mode [ 120.671559][ T6192] bond_slave_0: left promiscuous mode [ 120.741535][ T6192] bond_slave_1: left promiscuous mode [ 120.916672][ T5876] input: failed to attach handler mousedev to device input5, error: -5 [ 121.096975][ T1203] tipc: Node number set to 2886997007 [ 121.108132][ T5876] usb 5-1: USB disconnect, device number 2 [ 121.313179][ T6198] tipc: Started in network mode [ 121.319986][ T6198] tipc: Node identity ac14140f, cluster identity 4711 [ 121.328524][ T6198] tipc: New replicast peer: 10.1.1.2 [ 121.334318][ T6198] tipc: Enabled bearer , priority 10 [ 121.547981][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.580845][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.909904][ T6223] evm: overlay not supported [ 121.974504][ T54] Bluetooth: hci4: command tx timeout [ 122.061314][ T3537] hsr_slave_0: left promiscuous mode [ 122.095529][ T3537] hsr_slave_1: left promiscuous mode [ 122.133562][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.154104][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 122.161777][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.194828][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.203210][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.291795][ T3537] veth1_macvtap: left promiscuous mode [ 122.315680][ T3537] veth0_macvtap: left promiscuous mode [ 122.335485][ T3537] veth1_vlan: left promiscuous mode [ 122.347281][ T6166] tipc: Node number set to 2886997007 [ 122.357072][ T3537] veth0_vlan: left promiscuous mode [ 123.209966][ T973] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.065072][ T54] Bluetooth: hci4: command tx timeout [ 124.113504][ T973] usb 1-1: Using ep0 maxpacket: 8 [ 124.123184][ T973] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 124.159779][ T973] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.447856][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fdd0400: rx timeout, send abort [ 124.450646][ T973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.458114][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fdd2c00: rx timeout, send abort [ 124.475964][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fdd0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.491820][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fdd2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.503410][ T973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.475856][ T973] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.489154][ T973] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.498582][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.740261][ T973] usb 1-1: usb_control_msg returned -32 [ 125.747132][ T973] usbtmc 1-1:16.0: can't read capabilities [ 126.219155][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 126.316346][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 126.322583][ T5877] usb 1-1: USB disconnect, device number 4 [ 126.341411][ T6256] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 126.785986][ T6135] team0: Port device team_slave_0 added [ 126.818981][ T6254] tipc: Started in network mode [ 126.824053][ T6254] tipc: Node identity ac14140f, cluster identity 4711 [ 126.831126][ T6254] tipc: New replicast peer: 10.1.1.2 [ 126.836697][ T6254] tipc: Enabled bearer , priority 10 [ 126.947094][ T6135] team0: Port device team_slave_1 added [ 127.281754][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.371254][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.423538][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.454886][ T6271] tipc: Enabling of bearer rejected, already enabled [ 127.735215][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.742344][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.768603][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.829787][ T6135] hsr_slave_0: entered promiscuous mode [ 127.838244][ T6135] hsr_slave_1: entered promiscuous mode [ 127.849765][ T6135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.859725][ T6135] Cannot create hsr debugfs directory [ 127.993154][ T1203] tipc: Node number set to 2886997007 [ 130.125045][ T1203] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.429685][ T1203] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 130.507570][ T6135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.526389][ T1203] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 130.644430][ T6308] hub 2-0:1.0: USB hub found [ 130.652220][ T6308] hub 2-0:1.0: 1 port detected [ 131.505867][ T1203] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.525082][ T6135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.538692][ T1203] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 131.547905][ T1203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.556497][ T1203] usb 5-1: Product: syz [ 131.560707][ T1203] usb 5-1: Manufacturer: syz [ 131.586401][ T6135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.697994][ T1203] usb 5-1: SerialNumber: syz [ 131.725250][ T6135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.758709][ T1203] usb 5-1: config 0 descriptor?? [ 131.782885][ T1203] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 131.812461][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 131.889153][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 131.913549][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 131.921233][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 132.762823][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 132.771989][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 132.774651][ T1203] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 132.791517][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 132.800097][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 132.808268][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 132.815989][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 132.823827][ T1203] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 132.832903][ T1203] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 132.996310][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.025918][ T6135] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.066015][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.073195][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.082945][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.090188][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.131026][ T6135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.192806][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.211711][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.145456][ T1203] usb 5-1: USB disconnect, device number 3 [ 134.156344][ T1203] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 134.170547][ T1203] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 134.180721][ T1203] keyspan 5-1:0.0: device disconnected [ 134.310415][ T5877] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 134.685780][ T5877] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.195185][ T1203] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 135.895522][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.934374][ T1203] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.903095][ T1203] usb 5-1: no configurations [ 136.907864][ T1203] usb 5-1: can't read configurations, error -22 [ 141.388919][ T6135] veth0_vlan: entered promiscuous mode [ 141.458575][ T6135] veth1_vlan: entered promiscuous mode [ 141.579066][ T6135] veth0_macvtap: entered promiscuous mode [ 141.602112][ T6135] veth1_macvtap: entered promiscuous mode [ 141.625196][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.643284][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.669777][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.687937][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.699817][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.761982][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.940541][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.111325][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.426290][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.627848][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.703573][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.739640][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.783547][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.802487][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.850865][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.881345][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.941909][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.963285][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.999951][ T6135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.019202][ T6135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.048481][ T6135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.075026][ T6135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.152870][ T6414] kvm: kvm [6412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 143.164390][ T1203] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.217849][ T6414] kvm: kvm [6412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 143.272645][ T6414] kvm: kvm [6412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 143.292443][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.300525][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.331214][ T6414] kvm: kvm [6412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 143.340456][ T1203] usb 2-1: Using ep0 maxpacket: 32 [ 143.373613][ T1203] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 143.389449][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.391077][ T1203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.406520][ T6414] kvm: kvm [6412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 143.430487][ T1203] usb 2-1: Product: syz [ 143.436294][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.441493][ T1203] usb 2-1: Manufacturer: syz [ 143.463837][ T1203] usb 2-1: SerialNumber: syz [ 143.496255][ T1203] usb 2-1: config 0 descriptor?? [ 143.517527][ T6414] kvm: kvm [6412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 143.536058][ T1203] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 143.586412][ T6414] kvm: kvm [6412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 143.640287][ T6414] kvm: kvm [6412]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 144.350133][ T6436] netlink: 128 bytes leftover after parsing attributes in process `syz.4.122'. [ 144.360113][ T6436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.122'. [ 144.654610][ T29] audit: type=1326 audit(1734454305.463:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6413 comm="syz.0.120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1dc385d29 code=0x0 [ 146.047835][ T1203] gspca_ov534_9: sccb_write failed [ 146.280473][ T6459] bond0: entered promiscuous mode [ 146.300315][ T6459] bond_slave_0: entered promiscuous mode [ 146.335598][ T6459] bond_slave_1: entered promiscuous mode [ 146.380001][ T6458] bond0: left promiscuous mode [ 146.421496][ T6442] kvm: kvm [6441]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 146.440692][ T6458] bond_slave_0: left promiscuous mode [ 146.447466][ T6458] bond_slave_1: left promiscuous mode [ 146.476107][ T6442] kvm: kvm [6441]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 146.732094][ T1203] gspca_ov534_9: reg_r err -71 [ 146.739274][ T5836] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 147.965248][ T1203] gspca_ov534_9: Unknown sensor 0000 [ 147.965354][ T1203] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 148.259501][ T1203] usb 2-1: USB disconnect, device number 2 [ 148.466007][ T5836] usb 6-1: config 2 has an invalid interface number: 186 but max is 0 [ 148.529919][ T5836] usb 6-1: config 2 has no interface number 0 [ 148.585075][ T5876] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.675292][ T5836] usb 6-1: config 2 interface 186 has no altsetting 0 [ 148.739539][ T5836] usb 6-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 148.773566][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.843529][ T5836] usb 6-1: Product: syz [ 148.858125][ T5836] usb 6-1: Manufacturer: syz [ 149.193705][ T5836] usb 6-1: SerialNumber: syz [ 149.233463][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 149.271516][ T5876] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=27.51 [ 149.301888][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.321310][ T5876] usb 1-1: Product: syz [ 149.341480][ T5876] usb 1-1: Manufacturer: syz [ 149.384587][ T5876] usb 1-1: SerialNumber: syz [ 149.696750][ T5876] usb 1-1: config 0 descriptor?? [ 149.736937][ T5876] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 149.834533][ T6497] tipc: Started in network mode [ 149.839575][ T6497] tipc: Node identity ac14140f, cluster identity 4711 [ 149.847519][ T6497] tipc: New replicast peer: 10.1.1.2 [ 149.853746][ T6497] tipc: Enabled bearer , priority 10 [ 151.006200][ T973] tipc: Node number set to 2886997007 [ 151.238380][ T5836] catc 6-1:2.186: Can't set altsetting 1. [ 151.246313][ T5836] catc 6-1:2.186: probe with driver catc failed with error -5 [ 151.262647][ T5876] usb 1-1: USB disconnect, device number 5 [ 151.265599][ T5836] usb 6-1: USB disconnect, device number 2 [ 153.433469][ T5877] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.573152][ T6538] syz.4.142 uses obsolete (PF_INET,SOCK_PACKET) [ 153.584543][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 153.600042][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.618741][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.629119][ T5877] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 153.649127][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.686820][ T5877] usb 2-1: config 0 descriptor?? [ 154.305257][ T5877] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0002/input/input6 [ 154.453611][ T5877] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 157.074742][ T5877] usb 2-1: USB disconnect, device number 3 [ 157.602535][ T6595] syz_tun: entered promiscuous mode [ 157.726863][ T6595] batadv_slave_0: entered promiscuous mode [ 157.807863][ T6603] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.156'. [ 157.853106][ T6603] openvswitch: netlink: Message has 44053 unknown bytes. [ 157.909240][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 159.122477][ T973] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.660089][ T6631] binder: BINDER_SET_CONTEXT_MGR already set [ 159.666575][ T6631] binder: 6630:6631 ioctl 4018620d 20000040 returned -16 [ 159.893654][ T973] usb 4-1: Using ep0 maxpacket: 8 [ 159.913065][ T973] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 159.933085][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.982648][ T973] usb 4-1: Product: syz [ 159.997335][ T973] usb 4-1: Manufacturer: syz [ 160.024545][ T973] usb 4-1: SerialNumber: syz [ 161.020806][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.031025][ T973] usb 4-1: config 0 descriptor?? [ 161.195999][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.333111][ T5876] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.861278][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.144362][ T973] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 162.167643][ T5876] usb 6-1: config 0 descriptor?? [ 162.224508][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 163.261458][ T5876] pwc: send_video_command error -71 [ 163.267215][ T5876] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 163.274993][ T5876] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 163.288881][ T5876] usb 6-1: USB disconnect, device number 3 [ 163.597642][ T973] usb write operation failed. (-71) [ 163.606395][ T973] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.621415][ T973] dvbdev: DVB: registering new adapter (Terratec H7) [ 163.673552][ T973] usb 4-1: media controller created [ 163.693873][ T973] usb read operation failed. (-71) [ 163.714165][ T973] usb write operation failed. (-71) [ 163.750598][ T973] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 163.820376][ T973] usb 4-1: USB disconnect, device number 5 [ 163.959173][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.991552][ T6686] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 164.037146][ T6686] kvm: pic: non byte read [ 164.123490][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 164.132932][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.147327][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.163126][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.173127][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.225694][ T8] usb 1-1: config 0 descriptor?? [ 164.288751][ T8] hub 1-1:0.0: USB hub found [ 164.369615][ T6694] tipc: Enabling of bearer rejected, already enabled [ 164.454708][ T8] hub 1-1:0.0: 1 port detected [ 164.524923][ T5877] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.697772][ T6701] binder: 6699:6701 ioctl c0306201 20000580 returned -14 [ 164.750948][ T5877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.771148][ T6701] capability: warning: `syz.4.175' uses deprecated v2 capabilities in a way that may be insecure [ 164.804411][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.897090][ T5877] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.206192][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.214594][ T5877] usb 2-1: SerialNumber: syz [ 166.783724][ T8] hub 1-1:0.0: activate --> -90 [ 166.913138][ T5877] usb 2-1: 0:2 : does not exist [ 166.958834][ T5877] usb 2-1: unit 255 not found! [ 167.011574][ T5877] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 167.137030][ T6715] netlink: 144 bytes leftover after parsing attributes in process `syz.3.179'. [ 167.268579][ T1203] usb 1-1: USB disconnect, device number 6 [ 167.311266][ T5877] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 167.455959][ T5877] usb 2-1: USB disconnect, device number 4 [ 167.553093][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 167.560842][ T6729] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.182'. [ 167.612653][ T6729] openvswitch: netlink: Message has 44053 unknown bytes. [ 167.651833][ T6727] dummy0: entered promiscuous mode [ 167.714953][ T6727] dummy0: left promiscuous mode [ 167.766447][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.323858][ T6756] process 'syz.0.187' launched './file0' with NULL argv: empty string added [ 170.113514][ T1203] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.274059][ T1203] usb 2-1: Using ep0 maxpacket: 32 [ 170.298172][ T1203] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.308241][ T1203] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 172.266560][ T1203] usb 2-1: config 5 has no interface number 0 [ 172.277127][ T1203] usb 2-1: config 5 interface 52 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.287138][ T1203] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 173.283780][ T1203] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 173.292896][ T1203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.337265][ T1203] usb 2-1: Product: syz [ 173.341756][ T1203] usb 2-1: Manufacturer: syz [ 173.496466][ T1203] usb 2-1: SerialNumber: syz [ 173.645403][ T1203] usb 2-1: can't set config #5, error -71 [ 173.652102][ T6778] random: crng reseeded on system resumption [ 173.664214][ T1203] usb 2-1: USB disconnect, device number 5 [ 176.842405][ T6789] ALSA: mixer_oss: invalid OSS volume '/dev/kvm' [ 176.894524][ T6796] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.199'. [ 176.918258][ T6796] openvswitch: netlink: Message has 44053 unknown bytes. [ 176.941816][ T6801] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 179.752205][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.761554][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.807929][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.815446][ T6801] bridge0: port 2(bridge_slave_1) entered listening state [ 179.824527][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.831897][ T6801] bridge0: port 1(bridge_slave_0) entered listening state [ 179.852796][ T6801] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 179.944357][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.979765][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.810062][ T6851] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 184.202283][ T6859] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.969178][ T6868] vlan2: entered promiscuous mode [ 185.021389][ T6868] bridge0: entered promiscuous mode [ 185.090391][ T6868] team0: Port device vlan2 added [ 185.371366][ T6889] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.220'. [ 185.385077][ T6889] openvswitch: netlink: Message has 44053 unknown bytes. [ 189.768940][ T6924] vlan2: entered promiscuous mode [ 189.801052][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.230'. [ 189.824906][ T6924] vlan2: entered allmulticast mode [ 189.847921][ T6924] hsr_slave_1: entered allmulticast mode [ 189.916721][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.230'. [ 189.950324][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 189.985473][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 190.028136][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 190.093666][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 190.247932][ T6924] hsr_slave_1 (unregistering): left allmulticast mode [ 190.297774][ T6924] hsr_slave_1 (unregistering): left promiscuous mode [ 190.353547][ T29] audit: type=1804 audit(1734454351.133:3): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.235" name="/newroot/27/bus/file1" dev="overlay" ino=162 res=1 errno=0 [ 190.539830][ T6932] bond0: (slave bond_slave_0): Releasing backup interface [ 191.413819][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 191.461738][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 191.505826][ T6953] dummy0: entered promiscuous mode [ 191.519242][ T6941] debugfs: Directory 'netdev:nicvf0' with parent 'phy7' already present! [ 192.347907][ T6963] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.014063][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.020633][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.255202][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 195.264097][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 198.563515][ T5877] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 198.787088][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 198.800995][ T5877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 198.816396][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.849451][ T5877] usb 5-1: Product: syz [ 198.863447][ T5877] usb 5-1: Manufacturer: syz [ 198.883983][ T5877] usb 5-1: SerialNumber: syz [ 198.919420][ T7028] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.379801][ T5877] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 201.085617][ T5875] usb 5-1: USB disconnect, device number 6 [ 201.096201][ T5875] usblp0: removed [ 202.358160][ T7062] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 202.453447][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 202.453553][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 202.459511][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 202.465629][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 203.793606][ T1203] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 203.837509][ T7062] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.010552][ T1203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.022630][ T1203] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.033165][ T1203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.054994][ T1203] usb 4-1: config 0 descriptor?? [ 204.065644][ T1203] pwc: Askey VC010 type 2 USB webcam detected. [ 205.762477][ T1203] pwc: recv_control_msg error -32 req 02 val 2b00 [ 205.823627][ T1203] pwc: recv_control_msg error -32 req 02 val 2700 [ 206.000841][ T1203] pwc: recv_control_msg error -32 req 02 val 2c00 [ 206.081442][ T1203] pwc: recv_control_msg error -32 req 04 val 1000 [ 206.126096][ T1203] pwc: recv_control_msg error -32 req 04 val 1300 [ 206.164659][ T1203] pwc: recv_control_msg error -32 req 04 val 1400 [ 206.189847][ T1203] pwc: recv_control_msg error -32 req 02 val 2000 [ 206.250576][ T1203] pwc: recv_control_msg error -32 req 02 val 2100 [ 206.281471][ T1203] pwc: recv_control_msg error -32 req 04 val 1500 [ 206.319242][ T1203] pwc: recv_control_msg error -32 req 02 val 2500 [ 206.330523][ T7099] kvm_pr_unimpl_wrmsr: 1 callbacks suppressed [ 206.330545][ T7099] kvm: kvm [7093]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0xc2) = 0x1 [ 206.443787][ T1203] pwc: recv_control_msg error -32 req 02 val 2400 [ 206.463164][ T7104] team_slave_0: entered promiscuous mode [ 206.469538][ T7104] team_slave_1: entered promiscuous mode [ 206.486098][ T7104] vlan2: entered promiscuous mode [ 206.491239][ T7104] team0: entered promiscuous mode [ 206.501389][ T7099] kvm: kvm [7093]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x186) = 0x1 [ 206.502221][ T1203] pwc: recv_control_msg error -32 req 02 val 2600 [ 206.516854][ T7104] team0: Device vlan2 is already an upper device of the team interface [ 206.534597][ T7099] kvm_intel: kvm [7093]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x1d9) = 0x1 [ 206.554412][ T7104] team0: left promiscuous mode [ 206.573371][ T7104] team_slave_0: left promiscuous mode [ 206.578941][ T7104] team_slave_1: left promiscuous mode [ 206.619680][ T5832] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 206.892734][ T1203] pwc: recv_control_msg error -32 req 02 val 2900 [ 207.127096][ T1203] pwc: recv_control_msg error -71 req 04 val 1100 [ 207.150542][ T1203] pwc: recv_control_msg error -71 req 04 val 1200 [ 207.180991][ T1203] pwc: Registered as video103. [ 207.220978][ T1203] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 207.286364][ T1203] usb 4-1: USB disconnect, device number 6 [ 207.581131][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.273'. [ 207.596019][ T7128] bond0: entered promiscuous mode [ 207.601133][ T7128] bond_slave_1: entered promiscuous mode [ 207.608289][ T7128] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.619903][ T7116] fuse: Unknown parameter 'group_id?00000000000000000000' [ 207.664518][ T7128] bond0: left promiscuous mode [ 207.669443][ T7128] bond_slave_1: left promiscuous mode [ 207.672270][ T7116] loop9: detected capacity change from 0 to 7 [ 207.707830][ T7116] Dev loop9: unable to read RDB block 7 [ 207.718706][ T7116] loop9: unable to read partition table [ 207.729364][ T7116] loop9: partition table beyond EOD, truncated [ 207.854953][ T7116] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 207.854953][ T7116] ) failed (rc=-5) [ 209.270209][ T7145] tipc: Enabling of bearer rejected, already enabled [ 210.623413][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.630699][ C1] bridge0: topology change detected, propagating [ 210.637690][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.645094][ C1] bridge0: topology change detected, propagating [ 210.992860][ T5832] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 211.001842][ T5832] Bluetooth: hci2: Injecting HCI hardware error event [ 211.012627][ T5832] Bluetooth: hci2: hardware error 0x00 [ 212.352273][ T7153] x_tables: unsorted underflow at hook 3 [ 212.360042][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.5.279'. [ 213.777630][ T5877] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 214.463513][ T5832] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 214.485973][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 214.877171][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 215.098574][ T7189] tipc: Enabling of bearer rejected, already enabled [ 215.677218][ T7181] netlink: 32 bytes leftover after parsing attributes in process `syz.5.284'. [ 215.842514][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.697094][ T7191] netlink: 32 bytes leftover after parsing attributes in process `syz.5.284'. [ 216.947822][ T7191] Zero length message leads to an empty skb [ 216.957636][ T5877] usb 1-1: string descriptor 0 read error: -71 [ 216.969789][ T5877] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 217.233508][ T5875] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.257900][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.276651][ T5877] usb 1-1: config 0 descriptor?? [ 217.282256][ T5877] usb 1-1: can't set config #0, error -71 [ 217.290399][ T5877] usb 1-1: USB disconnect, device number 7 [ 218.690828][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 218.774713][ T5832] Bluetooth: hci4: link tx timeout [ 218.780224][ T5832] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 218.789994][ T5832] Bluetooth: hci4: link tx timeout [ 218.795276][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.578650][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 223.753777][ T5135] Bluetooth: hci4: command 0x0406 tx timeout [ 223.995749][ T5875] usb 4-1: device descriptor read/all, error -110 [ 224.153467][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 224.164838][ T5877] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 224.333556][ T5875] usb 4-1: device descriptor read/64, error -32 [ 224.373623][ T5877] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 224.393227][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.412757][ T5877] usb 1-1: Product: syz [ 224.423692][ T5877] usb 1-1: Manufacturer: syz [ 224.428338][ T5877] usb 1-1: SerialNumber: syz [ 224.443758][ T5875] usb usb4-port1: attempt power cycle [ 224.468179][ T5877] usb 1-1: config 0 descriptor?? [ 225.073743][ T5875] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.774229][ T5875] usb 4-1: device descriptor read/8, error -32 [ 225.835391][ T5877] usb 1-1: Firmware version (0.0) predates our first public release. [ 225.885016][ T5877] usb 1-1: Please update to version 0.2 or newer [ 226.017073][ T5875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 226.024766][ T5877] usb 1-1: USB disconnect, device number 8 [ 226.157682][ T5875] usb 4-1: device descriptor read/8, error -32 [ 226.297026][ T5875] usb usb4-port1: unable to enumerate USB device [ 229.514509][ T7279] Illegal XDP return value 1833834493 on prog (id 56) dev N/A, expect packet loss! [ 232.064270][ T7312] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.312'. [ 232.119979][ T7312] openvswitch: netlink: Message has 44053 unknown bytes. [ 232.687437][ T5135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.700341][ T5135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.709268][ T5135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.717636][ T5135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.755859][ T5135] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.776364][ T5135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.127801][ T3537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.939814][ T3537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.137298][ T5135] Bluetooth: hci1: command tx timeout [ 236.789319][ T3537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.277471][ T5135] Bluetooth: hci1: command tx timeout [ 237.321710][ T3537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.336888][ T5135] Bluetooth: hci1: command tx timeout [ 239.802386][ T7322] chnl_net:caif_netlink_parms(): no params data found [ 239.855188][ T3537] bridge_slave_1: left allmulticast mode [ 239.871996][ T3537] bridge_slave_1: left promiscuous mode [ 239.892629][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.963593][ T5877] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 240.019587][ T3537] bridge_slave_0: left allmulticast mode [ 240.051316][ T3537] bridge_slave_0: left promiscuous mode [ 240.071444][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.146255][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.163900][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.225728][ T5877] usb 4-1: New USB device found, idVendor=22ed, idProduct=1010, bcdDevice= 0.00 [ 240.261454][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.274857][ T5877] usb 4-1: config 0 descriptor?? [ 240.320116][ T3537] bridge0: left promiscuous mode [ 240.693940][ T5877] hid-generic 0003:22ED:1010.0003: unknown main item tag 0x0 [ 240.715082][ T5877] hid-generic 0003:22ED:1010.0003: hidraw0: USB HID v10.00 Device [HID 22ed:1010] on usb-dummy_hcd.3-1/input0 [ 240.836191][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 241.414261][ T5135] Bluetooth: hci1: command tx timeout [ 241.500267][ T5877] usb 4-1: USB disconnect, device number 11 [ 241.742306][ T3537] team0: Port device vlan2 removed [ 242.735023][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.750748][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.768260][ T3537] bond0 (unregistering): Released all slaves [ 242.814742][ T7408] tipc: Enabling of bearer rejected, already enabled [ 243.114267][ T3537] tipc: Disabling bearer [ 243.131429][ T3537] tipc: Left network mode [ 243.241952][ T7418] : renamed from bond0 (while UP) [ 246.261319][ T7447] random: crng reseeded on system resumption [ 246.852760][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.860293][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.171980][ T7322] bridge_slave_0: entered allmulticast mode [ 247.216470][ T7322] bridge_slave_0: entered promiscuous mode [ 247.239605][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.295718][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.302952][ T7322] bridge_slave_1: entered allmulticast mode [ 247.345012][ T7322] bridge_slave_1: entered promiscuous mode [ 248.707111][ T3537] hsr_slave_0: left promiscuous mode [ 249.759432][ T3537] hsr_slave_1: left promiscuous mode [ 249.933235][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.961726][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.124816][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.132262][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.496529][ T3537] veth1_macvtap: left promiscuous mode [ 250.502086][ T3537] veth0_macvtap: left promiscuous mode [ 250.522727][ T3537] veth1_vlan: left promiscuous mode [ 250.533764][ T3537] veth0_vlan: left promiscuous mode [ 253.628791][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 253.713035][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 255.616250][ T7322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.625964][ T7462] tipc: Enabling of bearer rejected, already enabled [ 255.820187][ T7322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.318599][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.323776][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 256.365010][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.637895][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 256.881405][ T7322] team0: Port device team_slave_0 added [ 256.900789][ T9] usb 5-1: config 67 has too many interfaces: 229, using maximum allowed: 32 [ 256.909998][ T9] usb 5-1: config 67 has 1 interface, different from the descriptor's value: 229 [ 256.919481][ T9] usb 5-1: config 67 has no interface number 0 [ 256.928300][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 256.940325][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.949837][ T9] usb 5-1: Product: syz [ 256.965545][ T7322] team0: Port device team_slave_1 added [ 256.980988][ T7508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.004236][ T9] usb 5-1: Manufacturer: syz [ 257.029236][ T9] usb 5-1: SerialNumber: syz [ 257.047970][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 257.073214][ T9] usb 5-1: selecting invalid altsetting 1 [ 257.097955][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 257.135677][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 257.162928][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.179219][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 257.183356][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.192247][ T9] usb 5-1: media controller created [ 257.243462][ T7322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.259695][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.295507][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.302702][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.344210][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.363888][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.399242][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.431220][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.470018][ T7322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.508983][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 257.516406][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 257.554441][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 257.849532][ T9] usb 5-1: USB disconnect, device number 7 [ 258.435327][ T7322] hsr_slave_0: entered promiscuous mode [ 258.712401][ T7322] hsr_slave_1: entered promiscuous mode [ 258.792948][ T7322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.852934][ T7322] Cannot create hsr debugfs directory [ 260.878388][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 263.029196][ T7572] tipc: Enabling of bearer rejected, already enabled [ 263.586879][ T7579] input: syz0 as /devices/virtual/input/input8 [ 264.685175][ T7322] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 266.053107][ T7322] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 266.186430][ T7322] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 266.359450][ T7322] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.223510][ T7608] tipc: Started in network mode [ 269.228587][ T7608] tipc: Node identity ac14140f, cluster identity 4711 [ 269.235867][ T7608] tipc: New replicast peer: 10.1.1.2 [ 269.241357][ T7608] tipc: Enabled bearer , priority 10 [ 270.353657][ T5877] tipc: Node number set to 2886997007 [ 270.512330][ T7322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.633591][ T7322] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.707922][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.715118][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.065483][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.072689][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.179942][ T7624] vlan3: entered promiscuous mode [ 272.198075][ T7624] dummy0: entered promiscuous mode [ 272.290961][ T7624] dummy0: left promiscuous mode [ 272.610842][ T7322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.621418][ T7322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.673128][ T7322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.297816][ T7666] Bluetooth: MGMT ver 1.23 [ 277.389748][ T25] libceph: connect (1)[c::]:6789 error -22 [ 277.417765][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 277.431179][ T7322] veth0_vlan: entered promiscuous mode [ 277.448844][ T7322] veth1_vlan: entered promiscuous mode [ 277.480646][ T7707] ceph: No mds server is up or the cluster is laggy [ 277.539343][ T7322] veth0_macvtap: entered promiscuous mode [ 277.558794][ T7322] veth1_macvtap: entered promiscuous mode [ 277.603725][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.614416][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.624453][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.635099][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.645132][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.655956][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.666519][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.677186][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.691845][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.708109][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.718769][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.732924][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.743906][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.754127][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.764891][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.777004][ T7322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.787639][ T7322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.803057][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.821982][ T7322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.831112][ T7322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.840150][ T7322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.849106][ T7322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.957752][ T5876] libceph: connect (1)[c::]:6789 error -22 [ 277.964709][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 278.501243][ T5876] libceph: connect (1)[c::]:6789 error -22 [ 278.521290][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 278.534259][ T5877] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 278.812100][ T5877] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 278.822168][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.899873][ T5877] usb 5-1: config 0 descriptor?? [ 279.843946][ T7336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.844932][ T7687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.851981][ T7336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.938851][ T7687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.603607][ T7733] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 282.738155][ T5877] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 282.745026][ T5877] [drm] Initialized udl on minor 2 [ 283.021439][ T5877] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 283.034511][ T5877] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 284.003632][ T5877] usb 5-1: USB disconnect, device number 8 [ 285.960824][ T7745] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 285.967826][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 286.136343][ T7745] vhci_hcd vhci_hcd.0: Device attached [ 286.390423][ T7773] xt_hashlimit: invalid rate [ 286.473533][ T973] vhci_hcd: vhci_device speed not set [ 286.479479][ T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 286.544403][ T973] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 286.644558][ T46] usb 7-1: Using ep0 maxpacket: 8 [ 286.817500][ T46] usb 7-1: unable to get BOS descriptor or descriptor too short [ 286.852948][ T7768] vhci_hcd: connection reset by peer [ 286.878326][ T1312] vhci_hcd: stop threads [ 286.890421][ T46] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 286.896823][ T1312] vhci_hcd: release socket [ 286.938822][ T46] usb 7-1: can't read configurations, error -71 [ 287.046168][ T1312] vhci_hcd: disconnect device [ 290.082666][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.6.400'. [ 290.094503][ T7795] netlink: 16 bytes leftover after parsing attributes in process `syz.6.400'. [ 290.666407][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.6.400'. [ 290.685383][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.6.400'. [ 290.725473][ T7808] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 290.738131][ T7808] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 290.746590][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.6.400 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 290.757210][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 290.767305][ T7808] RIP: 0010:put_page+0x23/0x260 [ 290.772212][ T7808] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 c8 3a 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 4f 18 7e f8 48 8b 1b 48 89 de 48 83 [ 290.792049][ T7808] RSP: 0018:ffffc90003d2e990 EFLAGS: 00010202 [ 290.798165][ T7808] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000080000 [ 290.806168][ T7808] RDX: ffffc9001c001000 RSI: 00000000000035fb RDI: 00000000000035fc [ 290.814176][ T7808] RBP: dffffc0000000000 R08: ffffffff8984cbfd R09: 1ffff1100efaeb2c [ 290.822171][ T7808] R10: dffffc0000000000 R11: ffffed100efaeb2d R12: 0000000000000007 [ 290.830169][ T7808] R13: ffff888077d75942 R14: 0000000000000000 R15: 0000000000000000 [ 290.838167][ T7808] FS: 00007f56464596c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 290.847227][ T7808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.853843][ T7808] CR2: 000000110c3863a3 CR3: 000000007a458000 CR4: 00000000003526f0 [ 290.861930][ T7808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.870289][ T7808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.878315][ T7808] Call Trace: [ 290.881620][ T7808] [ 290.884574][ T7808] ? __die_body+0x5f/0xb0 [ 290.888954][ T7808] ? die_addr+0xb0/0xe0 [ 290.893153][ T7808] ? exc_general_protection+0x3dd/0x5d0 [ 290.898755][ T7808] ? asm_exc_general_protection+0x26/0x30 [ 290.904547][ T7808] ? skb_release_data+0x46d/0x8a0 [ 290.909625][ T7808] ? put_page+0x23/0x260 [ 290.913921][ T7808] skb_release_data+0x483/0x8a0 [ 290.918913][ T7808] __kfree_skb+0x55/0x70 [ 290.923207][ T7808] tcp_ack+0x2442/0x6bc0 [ 290.927563][ T7808] ? __pfx_tcp_ack+0x10/0x10 [ 290.932212][ T7808] tcp_rcv_state_process+0x8eb/0x44e0 [ 290.937650][ T7808] ? mark_lock+0x9a/0x360 [ 290.942049][ T7808] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 290.948127][ T7808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.954525][ T7808] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 290.960351][ T7808] ? __local_bh_enable_ip+0x168/0x200 [ 290.965742][ T7808] ? lockdep_hardirqs_on+0x99/0x150 [ 290.970959][ T7808] ? __local_bh_enable_ip+0x168/0x200 [ 290.976351][ T7808] ? __release_sock+0x9a/0x350 [ 290.981401][ T7808] tcp_v4_do_rcv+0x77d/0xc70 [ 290.986008][ T7808] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 290.991133][ T7808] __release_sock+0x214/0x350 [ 290.995826][ T7808] ? __tcp_close+0x4d7/0xde0 [ 291.000549][ T7808] __tcp_close+0x4fe/0xde0 [ 291.004988][ T7808] __mptcp_close_ssk+0x424/0x1080 [ 291.010029][ T7808] ? do_raw_spin_unlock+0x13c/0x8b0 [ 291.015248][ T7808] ? __pfx___mptcp_close_ssk+0x10/0x10 [ 291.020748][ T7808] ? mptcp_close_ssk+0x179/0x250 [ 291.025707][ T7808] mptcp_pm_nl_rm_addr_or_subflow+0x501/0xc00 [ 291.031800][ T7808] ? __pfx_mptcp_pm_nl_rm_addr_or_subflow+0x10/0x10 [ 291.038401][ T7808] ? mptcp_pm_nl_flush_addrs_doit+0x681/0xdd0 [ 291.044574][ T7808] ? mptcp_pm_nl_flush_addrs_doit+0x8f5/0xdd0 [ 291.050689][ T7808] ? mptcp_pm_remove_addr+0xa7/0x1d0 [ 291.056076][ T7808] mptcp_pm_nl_flush_addrs_doit+0x9ca/0xdd0 [ 291.062078][ T7808] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 291.068516][ T7808] ? __nla_parse+0x40/0x60 [ 291.072946][ T7808] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 291.079303][ T7808] genl_rcv_msg+0xb14/0xec0 [ 291.083868][ T7808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.088939][ T7808] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 291.094884][ T7808] ? __pfx_lock_acquire+0x10/0x10 [ 291.099970][ T7808] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 291.106426][ T7808] ? __pfx___might_resched+0x10/0x10 [ 291.111766][ T7808] netlink_rcv_skb+0x1e3/0x430 [ 291.116561][ T7808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.121611][ T7808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.126917][ T7808] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 291.132398][ T7808] genl_rcv+0x28/0x40 [ 291.136396][ T7808] netlink_unicast+0x7f6/0x990 [ 291.141192][ T7808] ? __pfx_netlink_unicast+0x10/0x10 [ 291.146500][ T7808] netlink_sendmsg+0x8e4/0xcb0 [ 291.151277][ T7808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.156573][ T7808] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 291.163002][ T7808] ? __pfx_inet_sendmsg+0x10/0x10 [ 291.168040][ T7808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.173338][ T7808] __sock_sendmsg+0x221/0x270 [ 291.178072][ T7808] ____sys_sendmsg+0x52a/0x7e0 [ 291.182854][ T7808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.188152][ T7808] ? __fget_files+0x2a/0x410 [ 291.192753][ T7808] ? __fget_files+0x2a/0x410 [ 291.197352][ T7808] __sys_sendmsg+0x269/0x350 [ 291.201965][ T7808] ? __pfx_futex_wake+0x10/0x10 [ 291.206837][ T7808] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.211995][ T7808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.218338][ T7808] ? do_syscall_64+0x100/0x230 [ 291.223123][ T7808] ? do_syscall_64+0xb6/0x230 [ 291.227815][ T7808] do_syscall_64+0xf3/0x230 [ 291.232335][ T7808] ? clear_bhb_loop+0x35/0x90 [ 291.237022][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.242931][ T7808] RIP: 0033:0x7f5645585d29 [ 291.247401][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.267123][ T7808] RSP: 002b:00007f5646459038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.275656][ T7808] RAX: ffffffffffffffda RBX: 00007f5645776080 RCX: 00007f5645585d29 [ 291.283662][ T7808] RDX: 0000000000000800 RSI: 0000000020000200 RDI: 0000000000000006 [ 291.291655][ T7808] RBP: 00007f5645601a20 R08: 0000000000000000 R09: 0000000000000000 [ 291.299638][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.307641][ T7808] R13: 0000000000000000 R14: 00007f5645776080 R15: 00007ffec927c668 [ 291.315652][ T7808] [ 291.318685][ T7808] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 291.324351][ T7808] ---[ end trace 0000000000000000 ]--- [ 291.335755][ T7808] RIP: 0010:put_page+0x23/0x260 [ 291.340778][ T7808] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 c8 3a 1a f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 4f 18 7e f8 48 8b 1b 48 89 de 48 83 [ 291.503384][ T7808] RSP: 0018:ffffc90003d2e990 EFLAGS: 00010202 [ 291.509536][ T7808] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000080000 [ 291.543407][ T7808] RDX: ffffc9001c001000 RSI: 00000000000035fb RDI: 00000000000035fc [ 291.551461][ T7808] RBP: dffffc0000000000 R08: ffffffff8984cbfd R09: 1ffff1100efaeb2c [ 291.723375][ T973] vhci_hcd: vhci_device speed not set [ 291.814023][ T7808] R10: dffffc0000000000 R11: ffffed100efaeb2d R12: 0000000000000007 [ 291.863621][ T7808] R13: ffff888077d75942 R14: 0000000000000000 R15: 0000000000000000 [ 291.871675][ T7808] FS: 00007f56464596c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 291.955328][ T7808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.961997][ T7808] CR2: 00007f836448fb5c CR3: 000000007a458000 CR4: 00000000003526f0 [ 292.027026][ T7808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.073430][ T7808] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.081937][ T7808] Kernel panic - not syncing: Fatal exception [ 292.088358][ T7808] Kernel Offset: disabled [ 292.092690][ T7808] Rebooting in 86400 seconds..