last executing test programs: 6.14715808s ago: executing program 0 (id=933): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/147, 0x93}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x14, 0x80, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x150}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) close(r2) r3 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f00000000c0)={0x4, 0xb1, 0x1000, 0x4, 0x5, 0x6}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) fchdir(0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x800, 0xa, 0x0, 0x0, 0x2c}}, {{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe4) mkdir(0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) 5.223559825s ago: executing program 0 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0xc2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r5 = syz_open_pts(r4, 0x141601) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 4.835271531s ago: executing program 4 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40106614, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {}, 0x0, 0xa4, &(0x7f0000002b00)={0x1, 0x1}, 0x8, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0}) 4.64158883s ago: executing program 0 (id=945): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x680}], 0x1, 0x800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c", 0x4f, 0x1, 0x0, 0x0) 4.05481836s ago: executing program 3 (id=948): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3.946150014s ago: executing program 2 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) setreuid(0xffffffffffffffff, 0x0) 3.879367831s ago: executing program 3 (id=950): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[@ANYBLOB="0401"], 0x104}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 3.865075205s ago: executing program 4 (id=951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x40000}, 0x18) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlockall(0x5) 3.844060034s ago: executing program 2 (id=952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) 3.795332285s ago: executing program 3 (id=953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0xfb) getsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r6, 0x0, 0x22) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000000140)={0x11, 0x4}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(r7, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.769783294s ago: executing program 0 (id=954): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x700, 0x1, 0x7fff, 0x6, {{0x2b, 0x4, 0x3, 0x5, 0xac, 0x65, 0x0, 0x21, 0x2f, 0x0, @loopback, @loopback, {[@generic={0x88, 0xb, "cad938dcd2d4cc9b0f"}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x5, 0x8, "f63744b7aeb1"}, {0x5, 0x8, "5f41a6c79fc0"}]}, @cipso={0x86, 0x1b, 0x3, [{0x5, 0x4, "1d98"}, {0x5, 0x5, "c151ab"}, {0x0, 0xc, "f0d78588234397d1484a"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xd4, 0x3, 0x0, [{@remote, 0x3}, {@loopback, 0x790}, {@loopback, 0x2}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x8}]}, @ssrr={0x89, 0x1f, 0xff, [@rand_addr=0x64010102, @private=0xa010101, @multicast2, @private=0xa010102, @local, @loopback, @remote]}, @rr={0x7, 0xb, 0xd9, [@empty, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.628693799s ago: executing program 2 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mount$bind(&(0x7f00000001c0)='./file3\x00', &(0x7f0000000280)='./file3\x00', &(0x7f0000000300), 0x20040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket(0x29, 0xa, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffd}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, &(0x7f0000005280)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 2.770293838s ago: executing program 4 (id=956): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9}, 0x8) 2.609985813s ago: executing program 1 (id=957): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 2.608475636s ago: executing program 2 (id=958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2}) 2.399393884s ago: executing program 2 (id=959): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) 2.399110036s ago: executing program 1 (id=960): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x0, r2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(r5, r1, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/133], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r8, &(0x7f0000000480), 0x21, 0x0) 2.318776852s ago: executing program 2 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40106614, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {}, 0x0, 0xa4, &(0x7f0000002b00)={0x1, 0x1}, 0x8, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0}) 1.96388313s ago: executing program 1 (id=962): pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) 1.839356749s ago: executing program 1 (id=963): syz_open_procfs(0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x2}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000109"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9000000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.757679381s ago: executing program 4 (id=964): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x680}], 0x1, 0x800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c", 0x4f, 0x1, 0x0, 0x0) 1.318098603s ago: executing program 3 (id=965): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x32}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 950.428374ms ago: executing program 0 (id=966): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x3dd}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) 887.236725ms ago: executing program 1 (id=967): socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=0x80004001, 0x4) socket$inet6(0xa, 0x200000000003, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x1}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, &(0x7f0000000c00)=""/4096, 0x29, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) 886.978691ms ago: executing program 3 (id=968): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 775.10762ms ago: executing program 4 (id=969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r0}, 0x2a) r1 = io_uring_setup(0x3a7b, &(0x7f0000000080)={0x0, 0x663d, 0x400, 0x3, 0x2ed}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) 349.746168ms ago: executing program 0 (id=970): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x0) syz_usb_connect(0x0, 0x41, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0, 0x166676000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000500)=""/58, 0x6000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x7, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000600)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x29, 0x0, 0x20, 0x7, 0x4, 0x401, 0x9}}, 0x50) close(r5) io_destroy(r3) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000540)={0x3, 0x6}) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000180)=0x4) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x90) unshare(0x2040400) 294.99767ms ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000010008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000000c0)=""/188, 0xbc}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000180)=""/114, 0x72, 0x0, &(0x7f0000000300)=""/186, 0xba}}, 0x10) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e28, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="200000000000000029000000370000002f00000000000000c204000000070000200000000000000034000000360000007300000000000000c2040000000900001400000000000000290000000800000000000000000000001400000000000000290000003400000080000000000000001400000000000000290000000b000000000004010000000020000000000000002900000037000000080000000000000000010004010000e3170000000000000029000000040000002b0000000000000014"], 0xd8}}], 0x2, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 36.713175ms ago: executing program 3 (id=972): ioperm(0x0, 0x82, 0x1f) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080), 0x1) 0s ago: executing program 1 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, 0x0, 0x2, {0x0, 0xff}}, 0x18, &(0x7f0000000280)={0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. [ 51.828598][ T5823] cgroup: Unknown subsys name 'net' [ 51.956217][ T5823] cgroup: Unknown subsys name 'cpuset' [ 51.963037][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.916454][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.711837][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.719165][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.720369][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.726408][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.741121][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.749905][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.757074][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.764607][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.772048][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.772048][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.772115][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.779595][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.787386][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.800783][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.814416][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.814924][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.823932][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.829614][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.842892][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.851084][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.853122][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.858549][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.873110][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.880668][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.893241][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.905578][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.915209][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.915294][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.929751][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.934371][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.169697][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 55.231415][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 55.244608][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 55.268168][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 55.397652][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.404996][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.412139][ T5834] bridge_slave_0: entered allmulticast mode [ 55.419006][ T5834] bridge_slave_0: entered promiscuous mode [ 55.442075][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.449203][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.456499][ T5839] bridge_slave_0: entered allmulticast mode [ 55.462875][ T5839] bridge_slave_0: entered promiscuous mode [ 55.469619][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.476984][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.484424][ T5834] bridge_slave_1: entered allmulticast mode [ 55.490811][ T5834] bridge_slave_1: entered promiscuous mode [ 55.497133][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 55.506394][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.513468][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.520698][ T5841] bridge_slave_0: entered allmulticast mode [ 55.527077][ T5841] bridge_slave_0: entered promiscuous mode [ 55.538575][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.545693][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.552822][ T5839] bridge_slave_1: entered allmulticast mode [ 55.559375][ T5839] bridge_slave_1: entered promiscuous mode [ 55.591520][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.598789][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.606227][ T5841] bridge_slave_1: entered allmulticast mode [ 55.612534][ T5841] bridge_slave_1: entered promiscuous mode [ 55.618945][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.626462][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.633531][ T5833] bridge_slave_0: entered allmulticast mode [ 55.640056][ T5833] bridge_slave_0: entered promiscuous mode [ 55.652140][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.668522][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.675698][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.682792][ T5833] bridge_slave_1: entered allmulticast mode [ 55.689366][ T5833] bridge_slave_1: entered promiscuous mode [ 55.696998][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.707522][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.718244][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.772948][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.784775][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.794961][ T5839] team0: Port device team_slave_0 added [ 55.801708][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.821110][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.836997][ T5839] team0: Port device team_slave_1 added [ 55.855145][ T5834] team0: Port device team_slave_0 added [ 55.876891][ T5841] team0: Port device team_slave_0 added [ 55.890089][ T5834] team0: Port device team_slave_1 added [ 55.896949][ T5833] team0: Port device team_slave_0 added [ 55.908426][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.915684][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.922884][ T5844] bridge_slave_0: entered allmulticast mode [ 55.929416][ T5844] bridge_slave_0: entered promiscuous mode [ 55.937448][ T5841] team0: Port device team_slave_1 added [ 55.943222][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.950327][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.957778][ T5844] bridge_slave_1: entered allmulticast mode [ 55.964464][ T5844] bridge_slave_1: entered promiscuous mode [ 55.971196][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.978206][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.004209][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.016185][ T5833] team0: Port device team_slave_1 added [ 56.022268][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.029761][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.055783][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.093122][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.101142][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.127618][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.145523][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.152476][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.178599][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.194825][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.201782][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.227883][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.240000][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.246988][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.272939][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.288260][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.295289][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.321354][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.333575][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.346567][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.356301][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.363274][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.389179][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.428979][ T5839] hsr_slave_0: entered promiscuous mode [ 56.435753][ T5839] hsr_slave_1: entered promiscuous mode [ 56.461313][ T5844] team0: Port device team_slave_0 added [ 56.469013][ T5844] team0: Port device team_slave_1 added [ 56.491590][ T5841] hsr_slave_0: entered promiscuous mode [ 56.497940][ T5841] hsr_slave_1: entered promiscuous mode [ 56.505023][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.512578][ T5841] Cannot create hsr debugfs directory [ 56.536967][ T5834] hsr_slave_0: entered promiscuous mode [ 56.542967][ T5834] hsr_slave_1: entered promiscuous mode [ 56.549389][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.557286][ T5834] Cannot create hsr debugfs directory [ 56.565207][ T5833] hsr_slave_0: entered promiscuous mode [ 56.571267][ T5833] hsr_slave_1: entered promiscuous mode [ 56.577425][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.585046][ T5833] Cannot create hsr debugfs directory [ 56.590892][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.598125][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.624095][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.635901][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.642851][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.668838][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.814389][ T5844] hsr_slave_0: entered promiscuous mode [ 56.820416][ T5844] hsr_slave_1: entered promiscuous mode [ 56.827411][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.835137][ T5844] Cannot create hsr debugfs directory [ 56.894152][ T5847] Bluetooth: hci1: command tx timeout [ 56.899628][ T5838] Bluetooth: hci0: command tx timeout [ 56.919345][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.930259][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.941205][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.956373][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.974211][ T5838] Bluetooth: hci4: command tx timeout [ 56.979629][ T5838] Bluetooth: hci3: command tx timeout [ 56.985092][ T5847] Bluetooth: hci2: command tx timeout [ 56.999597][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.008316][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.021714][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.030773][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.073411][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.086200][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.095751][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.112691][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.137839][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.158370][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.166539][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.176343][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.208074][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.217102][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.238835][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.246093][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.258371][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.279874][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.316164][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.331922][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.339056][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.351516][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.363403][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.370553][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.395378][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.402467][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.410876][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.417996][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.481155][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.497659][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.517692][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.546974][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.554100][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.571158][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.585439][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.620466][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.640240][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.647368][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.656254][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.663347][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.671714][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.678782][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.703026][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.710150][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.721660][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.728769][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.778363][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.802348][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.821409][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.925563][ T5834] veth0_vlan: entered promiscuous mode [ 57.939477][ T5839] veth0_vlan: entered promiscuous mode [ 57.958119][ T5839] veth1_vlan: entered promiscuous mode [ 57.970946][ T5834] veth1_vlan: entered promiscuous mode [ 58.006946][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.022815][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.046836][ T5834] veth0_macvtap: entered promiscuous mode [ 58.053374][ T5839] veth0_macvtap: entered promiscuous mode [ 58.071751][ T5834] veth1_macvtap: entered promiscuous mode [ 58.083810][ T5839] veth1_macvtap: entered promiscuous mode [ 58.107658][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.128714][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.144460][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.155280][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.166688][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.178655][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.190203][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.200476][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.210240][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.219658][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.233084][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.244434][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.256359][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.273324][ T5841] veth0_vlan: entered promiscuous mode [ 58.281956][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.290858][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.299924][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.308758][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.326953][ T5841] veth1_vlan: entered promiscuous mode [ 58.348222][ T5833] veth0_vlan: entered promiscuous mode [ 58.363653][ T5833] veth1_vlan: entered promiscuous mode [ 58.385183][ T5841] veth0_macvtap: entered promiscuous mode [ 58.407156][ T5841] veth1_macvtap: entered promiscuous mode [ 58.449435][ T5844] veth0_vlan: entered promiscuous mode [ 58.459657][ T5844] veth1_vlan: entered promiscuous mode [ 58.470870][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.482119][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.492328][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.503348][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.514913][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.527070][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.527753][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.536608][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.554258][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.556781][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.562980][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.579677][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.590249][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.600832][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.617984][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.627087][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.636205][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.644985][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.681972][ T5833] veth0_macvtap: entered promiscuous mode [ 58.690162][ T5844] veth0_macvtap: entered promiscuous mode [ 58.699775][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.703209][ T5833] veth1_macvtap: entered promiscuous mode [ 58.714671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.716594][ T5844] veth1_macvtap: entered promiscuous mode [ 58.739030][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.746944][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.752767][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.765206][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.775378][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.785920][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.796874][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.807470][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.818464][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.830296][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.831677][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.840896][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.865255][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.876003][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.886014][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.897000][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.906971][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.917438][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.928090][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.942756][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.953536][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.963584][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.974445][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.984298][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.985349][ T5838] Bluetooth: hci0: command tx timeout [ 58.995017][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.000386][ T5847] Bluetooth: hci1: command tx timeout [ 59.016695][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.028991][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.038067][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.046860][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.056430][ T5838] Bluetooth: hci4: command tx timeout [ 59.061908][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.070830][ T5838] Bluetooth: hci3: command tx timeout [ 59.070857][ T5838] Bluetooth: hci2: command tx timeout [ 59.085059][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.095601][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.105939][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.116594][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.126437][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.137355][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.147272][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.157773][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.168824][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.178722][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.187584][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.196582][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.205878][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.241768][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.266686][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.314493][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.322388][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.388335][ T5922] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 59.433262][ T5925] xt_bpf: check failed: parse error [ 59.460606][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.468647][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.522405][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.540870][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.581081][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.581726][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.589954][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.642506][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.748556][ T5940] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.950309][ T5951] syz.4.5[5951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.950393][ T5951] syz.4.5[5951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.964270][ T5951] syz.4.5[5951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.112581][ T5963] mmap: syz.3.16 (5963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.838315][ T5888] kernel write not supported for file /uhid (pid: 5888 comm: kworker/1:6) [ 61.108414][ T5847] Bluetooth: hci0: command tx timeout [ 61.113890][ T5847] Bluetooth: hci1: command tx timeout [ 61.155854][ T5838] Bluetooth: hci2: command tx timeout [ 61.161280][ T5838] Bluetooth: hci4: command tx timeout [ 61.189317][ T5838] Bluetooth: hci3: command tx timeout [ 61.348494][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19'. [ 61.474110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.482495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.491021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.499513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.507953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.516419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.524871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.631503][ T5983] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.678599][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.733398][ T5986] netem: change failed [ 62.462459][ T6010] usb usb8: usbfs: process 6010 (syz.1.33) did not claim interface 0 before use [ 62.494550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.494566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.495739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.596275][ T6012] overlayfs: overlapping lowerdir path [ 63.316272][ T5847] Bluetooth: hci1: command tx timeout [ 63.321709][ T5847] Bluetooth: hci0: command tx timeout [ 63.327145][ T5847] Bluetooth: hci3: command tx timeout [ 63.332525][ T5847] Bluetooth: hci4: command tx timeout [ 63.337992][ T5847] Bluetooth: hci2: command tx timeout [ 63.687168][ T6023] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 63.898921][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 63.911736][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 65.674030][ T6064] Zero length message leads to an empty skb [ 66.416944][ T6074] syz.1.53[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.417032][ T6074] syz.1.53[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.428355][ T6074] syz.1.53[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.385002][ T6080] can0: slcan on pts0. [ 67.713149][ T6088] netlink: 47 bytes leftover after parsing attributes in process `syz.4.58'. [ 67.754962][ T6070] can0 (unregistered): slcan off pts0. [ 69.220204][ T6114] usb usb8: usbfs: process 6114 (syz.4.66) did not claim interface 0 before use [ 70.526125][ T6129] syz.4.68[6129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.526574][ T6129] syz.4.68[6129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.538171][ T6129] syz.4.68[6129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.979191][ T6133] can0: slcan on pts1. [ 71.074608][ T6131] can0 (unregistered): slcan off pts1. [ 71.604198][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.610500][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.658951][ T6146] serio: Serial port pts0 [ 71.874224][ T6155] Driver unsupported XDP return value 0 on prog (id 48) dev N/A, expect packet loss! [ 73.084502][ T6176] usb usb8: usbfs: process 6176 (syz.2.79) did not claim interface 0 before use [ 74.197054][ T6201] syz.4.86[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.197146][ T6201] syz.4.86[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.208584][ T6201] syz.4.86[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.561873][ T6229] syz.0.94 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.803120][ T6234] usb usb8: usbfs: process 6234 (syz.1.95) did not claim interface 0 before use [ 75.205222][ T1209] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.704378][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 75.731083][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 75.752603][ T1209] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.788322][ T1209] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.801473][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.812976][ T1209] usb 4-1: config 0 descriptor?? [ 75.819290][ T6221] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.315585][ T1209] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.323530][ T1209] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 76.398597][ T6275] syz.4.107[6275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.398982][ T6275] syz.4.107[6275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.411326][ T6275] syz.4.107[6275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.673040][ T972] cfg80211: failed to load regulatory.db [ 76.804519][ T1209] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 76.819700][ T1209] usb 4-1: USB disconnect, device number 2 [ 77.379107][ T6287] block device autoloading is deprecated and will be removed. [ 78.001068][ T6321] syz.0.125[6321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.001457][ T6321] syz.0.125[6321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.013304][ T6321] syz.0.125[6321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.503093][ T6338] syz.3.133[6338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.564061][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.820775][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.842152][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.885150][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 79.907220][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.937065][ T8] usb 1-1: config 0 descriptor?? [ 82.071122][ T6406] usb usb8: usbfs: process 6406 (syz.2.155) did not claim interface 0 before use [ 82.515094][ T8] wacom 0003:056A:0003.0002: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 82.544694][ T8] wacom 0003:056A:0003.0002: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.0-1/input0 [ 82.560113][ T8] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0003.0002/input/input5 [ 83.004676][ T6425] input: syz1 as /devices/virtual/input/input8 [ 83.750349][ T8] usb 1-1: USB disconnect, device number 2 [ 83.777848][ T6437] bpf_get_probe_write_proto: 2 callbacks suppressed [ 83.777868][ T6437] syz.4.163[6437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.799404][ T6437] syz.4.163[6437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.836600][ T6437] syz.4.163[6437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.108463][ T6441] hub 6-0:1.0: USB hub found [ 84.126482][ T6441] hub 6-0:1.0: 1 port detected [ 84.987593][ T6459] usb usb8: usbfs: process 6459 (syz.1.169) did not claim interface 0 before use [ 85.822646][ T6471] vlan2: entered promiscuous mode [ 85.851989][ T6471] bridge0: entered promiscuous mode [ 85.868354][ T6471] bridge0: port 3(vlan2) entered blocking state [ 85.880124][ T6471] bridge0: port 3(vlan2) entered disabled state [ 85.901822][ T6471] vlan2: entered allmulticast mode [ 85.907996][ T6471] bridge0: entered allmulticast mode [ 85.916822][ T6471] vlan2: left allmulticast mode [ 85.921816][ T6471] bridge0: left allmulticast mode [ 85.928822][ T6471] bridge0: left promiscuous mode [ 85.999796][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 86.565669][ T6491] kvm: kvm [6488]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0xc1) = 0x1 [ 86.574672][ T6491] kvm_intel: kvm [6488]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x1d9) = 0x1 [ 86.823647][ T6506] usb usb8: usbfs: process 6506 (syz.4.184) did not claim interface 0 before use [ 88.247838][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 88.259051][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 88.694550][ T6555] usb usb8: usbfs: process 6555 (syz.2.199) did not claim interface 0 before use [ 90.933732][ T6583] syz.4.208[6583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.933867][ T6583] syz.4.208[6583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.945321][ T6583] syz.4.208[6583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.301117][ T6629] syz.4.225[6629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.313722][ T6629] syz.4.225[6629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.325809][ T6629] syz.4.225[6629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.972622][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 93.997566][ T6649] overlayfs: missing 'lowerdir' [ 95.133976][ T52] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.283923][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 95.297964][ T52] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.417695][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.424771][ T52] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 95.434568][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.443805][ T52] usb 4-1: config 0 descriptor?? [ 96.404542][ T52] prodikeys 0003:041E:2801.0003: unknown main item tag 0x2 [ 96.413469][ T52] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.08 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 96.499074][ T6698] syz.0.245[6698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.499382][ T6698] syz.0.245[6698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.511254][ T6698] syz.0.245[6698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.814675][ T52] usb 4-1: USB disconnect, device number 3 [ 97.402537][ T6718] syz.3.255 uses obsolete (PF_INET,SOCK_PACKET) [ 97.466397][ T6723] xt_bpf: check failed: parse error [ 98.580602][ T6744] syz.4.261[6744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.580689][ T6744] syz.4.261[6744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.592299][ T6744] syz.4.261[6744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.190065][ T6751] pim6reg1: entered promiscuous mode [ 99.207425][ T6751] pim6reg1: entered allmulticast mode [ 99.349454][ T1209] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 99.358379][ T1209] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 103.007393][ T6802] syz.1.277[6802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.007802][ T6802] syz.1.277[6802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.019714][ T6802] syz.1.277[6802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.423920][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.993946][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 104.002134][ T8] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 104.013511][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.028243][ T8] usb 1-1: Product: syz [ 104.036658][ T8] usb 1-1: Manufacturer: syz [ 104.046533][ T8] usb 1-1: SerialNumber: syz [ 104.058755][ T8] usb 1-1: config 0 descriptor?? [ 105.142288][ T6842] syz.1.295[6842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.142377][ T6842] syz.1.295[6842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.153873][ T6842] syz.1.295[6842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.247709][ T6792] syz.0.278[6792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.349026][ T6792] syz.0.278[6792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.567440][ T6792] syz.0.278[6792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.289531][ T8] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9e:b6:82:80:c0:43 [ 106.318735][ T8] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 106.326801][ T8] usb 1-1: USB disconnect, device number 3 [ 107.444245][ T6900] syz.1.311[6900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.059136][ T6925] veth1_macvtap: left promiscuous mode [ 109.076573][ T6925] macsec0: entered promiscuous mode [ 109.527434][ T6946] usb usb8: usbfs: process 6946 (syz.2.327) did not claim interface 0 before use [ 110.120304][ T29] audit: type=1326 audit(1732569029.593:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.4.329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd272f7e819 code=0x0 [ 111.286825][ T6988] usb usb8: usbfs: process 6988 (syz.4.343) did not claim interface 0 before use [ 112.122101][ T7006] bpf_get_probe_write_proto: 2 callbacks suppressed [ 112.122136][ T7006] syz.1.347[7006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.154359][ T7006] syz.1.347[7006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.344980][ T7006] syz.1.347[7006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.919789][ T7029] usb usb8: usbfs: process 7029 (syz.0.356) did not claim interface 0 before use [ 115.387693][ T7066] syz.4.365[7066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.387776][ T7066] syz.4.365[7066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.399966][ T7066] syz.4.365[7066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.408273][ T7081] usb usb8: usbfs: process 7081 (syz.4.371) did not claim interface 0 before use [ 118.261389][ T7120] syz.4.380[7120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.264529][ T7120] syz.4.380[7120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.275923][ T7120] syz.4.380[7120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.723370][ T7126] usb usb8: usbfs: process 7126 (syz.1.384) did not claim interface 0 before use [ 120.746602][ T7169] usb usb8: usbfs: process 7169 (syz.4.396) did not claim interface 0 before use [ 121.290303][ T7184] syz.0.399[7184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.290690][ T7184] syz.0.399[7184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.302754][ T7184] syz.0.399[7184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.421616][ T7236] syz.4.415[7236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.435139][ T7236] syz.4.415[7236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.447993][ T7236] syz.4.415[7236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.837235][ T7316] syz.3.438[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.930773][ T7316] syz.3.438[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.943994][ T7316] syz.3.438[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.002182][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.060307][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.121570][ T7352] 9pnet_fd: Insufficient options for proto=fd [ 134.937201][ T7373] syz.3.457[7373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.937292][ T7373] syz.3.457[7373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.948741][ T7373] syz.3.457[7373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.260150][ T7393] usb usb8: usbfs: process 7393 (syz.2.463) did not claim interface 0 before use [ 136.915625][ T7398] 9pnet_fd: Insufficient options for proto=fd [ 137.402450][ T7427] syz.0.472[7427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.402539][ T7427] syz.0.472[7427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.414994][ T7427] syz.0.472[7427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.963338][ T7445] usb usb8: usbfs: process 7445 (syz.3.477) did not claim interface 0 before use [ 139.572896][ T7447] 9pnet_fd: Insufficient options for proto=fd [ 140.506067][ T7480] syz.3.489[7480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.506582][ T7480] syz.3.489[7480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.519060][ T7480] syz.3.489[7480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.075519][ T7497] usb usb8: usbfs: process 7497 (syz.2.494) did not claim interface 0 before use [ 143.581825][ T7530] syz.0.504[7530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.582169][ T7530] syz.0.504[7530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.594505][ T7530] syz.0.504[7530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.486791][ T7543] usb usb8: usbfs: process 7543 (syz.0.508) did not claim interface 0 before use [ 147.224451][ T7593] syz.3.520[7593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.224589][ T7593] syz.3.520[7593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.236131][ T7593] syz.3.520[7593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.247901][ T7598] usb usb8: usbfs: process 7598 (syz.1.522) did not claim interface 0 before use [ 152.024818][ T7647] syz.2.538[7647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.025300][ T7647] syz.2.538[7647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.037311][ T7647] syz.2.538[7647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.217295][ T7643] usb usb8: usbfs: process 7643 (syz.1.539) did not claim interface 0 before use [ 156.941637][ T7706] usb usb8: usbfs: process 7706 (syz.2.553) did not claim interface 0 before use [ 157.463894][ T29] audit: type=1326 audit(1732569076.953:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.4.559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd272f7e819 code=0x0 [ 157.987275][ T7732] syz.2.564[7732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.987365][ T7732] syz.2.564[7732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.999626][ T7732] syz.2.564[7732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.813491][ T7762] usb usb8: usbfs: process 7762 (syz.0.571) did not claim interface 0 before use [ 161.177437][ T7793] tipc: Failed to remove unknown binding: 66,1,1/0:3368701676/3368701678 [ 161.213917][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 161.375380][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 161.397062][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.571785][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.694972][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.708871][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 161.719013][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.729733][ T25] usb 5-1: config 0 descriptor?? [ 162.601826][ T25] ryos 0003:1E7D:31CE.0005: unknown main item tag 0x0 [ 162.609831][ T25] ryos 0003:1E7D:31CE.0005: unknown main item tag 0x0 [ 162.620141][ T25] ryos 0003:1E7D:31CE.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.4-1/input0 [ 162.948881][ T7824] usb usb8: usbfs: process 7824 (syz.0.589) did not claim interface 0 before use [ 163.514200][ T972] usb 5-1: USB disconnect, device number 2 [ 165.579992][ T7879] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 166.718263][ T7933] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 166.746347][ T7933] syzkaller0: entered promiscuous mode [ 166.751915][ T7933] syzkaller0: entered allmulticast mode [ 167.354038][ T5848] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.523885][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 167.538872][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.658156][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.668383][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.681763][ T5848] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 167.690906][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.703010][ T5848] usb 4-1: config 0 descriptor?? [ 168.325734][ T5848] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0006/input/input10 [ 168.341414][ T5848] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 168.373908][ T5887] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.439875][ T7994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 168.466650][ T7994] kvm: pic: non byte write [ 168.529810][ T5848] usb 4-1: USB disconnect, device number 4 [ 168.574112][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 168.659170][ T5887] usb 5-1: config 0 has no interfaces? [ 168.666487][ T5887] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 168.676873][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.685302][ T5887] usb 5-1: Product: syz [ 168.689830][ T5887] usb 5-1: Manufacturer: syz [ 168.694521][ T5887] usb 5-1: SerialNumber: syz [ 168.741455][ T8007] cgroup: Unknown subsys name 'cpuset' [ 168.761748][ T5887] r8152-cfgselector 5-1: Unknown version 0x0000 [ 168.768197][ T5887] r8152-cfgselector 5-1: config 0 descriptor?? [ 169.846067][ T8034] xt_hashlimit: size too large, truncated to 1048576 [ 169.888854][ T8036] input: syz0 as /devices/virtual/input/input11 [ 170.992814][ T8066] netlink: 'syz.0.678': attribute type 6 has an invalid length. [ 171.259754][ T5848] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 172.394404][ T8114] usb usb8: usbfs: process 8114 (syz.3.694) did not claim interface 0 before use [ 173.942757][ T5887] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.352473][ T8142] netlink: 'syz.0.705': attribute type 15 has an invalid length. [ 174.705141][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 174.723933][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 174.742072][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.755201][ T5887] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.764764][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.966719][ T8154] usb usb8: usbfs: process 8154 (syz.0.708) did not claim interface 0 before use [ 175.772338][ T5887] usb 5-1: config 0 descriptor?? [ 175.784665][ T8123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.830469][ T8157] usb usb8: usbfs: process 8157 (syz.2.707) did not claim interface 0 before use [ 175.873471][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 175.885392][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 175.896026][ T5887] usb 5-1: USB disconnect, device number 4 [ 176.109398][ T8174] netlink: 47 bytes leftover after parsing attributes in process `syz.4.716'. [ 176.856092][ T52] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.147789][ T8189] usb usb8: usbfs: process 8189 (syz.1.720) did not claim interface 0 before use [ 177.777670][ T52] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 177.793720][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.807104][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.817364][ T52] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 177.835098][ T52] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 177.852710][ T52] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 177.869817][ T52] usb 1-1: Manufacturer: syz [ 177.876018][ T52] usb 1-1: config 0 descriptor?? [ 178.289942][ T52] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 178.297886][ T52] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 178.307828][ T52] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 178.551965][ T8217] cgroup: Unknown subsys name 'cpuset' [ 178.591318][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 178.599452][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.613321][ T52] usb 1-1: USB disconnect, device number 4 [ 178.613869][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.628623][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.637213][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.645172][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.652898][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.663139][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.672447][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.679910][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.687954][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.696766][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4 [ 178.704951][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.712585][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.720941][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 178.728811][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.737266][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.753206][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 178.824170][ T5887] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.929082][ T8227] usb usb8: usbfs: process 8227 (syz.3.733) did not claim interface 0 before use [ 179.390489][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.398933][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.407392][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.415579][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.459545][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.480696][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.488635][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.497826][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.505384][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.512790][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.520259][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.528434][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.539016][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.549918][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.558695][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.566981][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.579453][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.590745][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.611387][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.630414][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.652123][ T5887] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 179.671904][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 179.681986][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.063206][ T1209] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 180.072440][ T5887] usb 5-1: config 0 descriptor?? [ 180.077616][ T1209] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 180.343064][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 180.349252][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 180.366149][ T5887] usb 5-1: USB disconnect, device number 5 [ 180.967203][ T8267] usb usb8: usbfs: process 8267 (syz.0.745) did not claim interface 0 before use [ 181.461472][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 181.467722][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 181.477939][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 181.484268][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 181.490841][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 182.380115][ T8318] hub 6-0:1.0: USB hub found [ 182.385870][ T8318] hub 6-0:1.0: 1 port detected [ 183.393977][ T8331] usb usb8: usbfs: process 8331 (syz.1.769) did not claim interface 0 before use [ 183.797369][ T8341] pim6reg1: entered promiscuous mode [ 183.802827][ T8341] pim6reg1: entered allmulticast mode [ 184.224825][ T8349] hub 6-0:1.0: USB hub found [ 184.232099][ T8349] hub 6-0:1.0: 1 port detected [ 185.206876][ T8356] Invalid ELF header magic: != ELF [ 185.305603][ T8363] bridge0: port 3(erspan0) entered blocking state [ 185.305986][ T8363] bridge0: port 3(erspan0) entered disabled state [ 185.306916][ T8363] erspan0: entered allmulticast mode [ 185.312751][ T8363] erspan0: entered promiscuous mode [ 185.314541][ T8363] bridge0: port 3(erspan0) entered blocking state [ 185.314604][ T8363] bridge0: port 3(erspan0) entered forwarding state [ 186.176194][ T8381] usb usb8: usbfs: process 8381 (syz.3.784) did not claim interface 0 before use [ 186.201930][ T8362] tty tty20: ldisc open failed (-12), clearing slot 19 [ 186.523243][ T8397] netlink: 47 bytes leftover after parsing attributes in process `syz.4.786'. [ 187.141952][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.149121][ T8408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.630216][ T8428] syz.4.799[8428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.630304][ T8428] syz.4.799[8428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.683347][ T8428] syz.4.799[8428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.235436][ T8439] usb usb8: usbfs: process 8439 (syz.1.798) did not claim interface 0 before use [ 189.922860][ T8444] bridge0: port 3(vlan2) entered blocking state [ 189.929467][ T8444] bridge0: port 3(vlan2) entered disabled state [ 189.943478][ T8444] vlan2: entered allmulticast mode [ 189.950546][ T8444] vlan2: entered promiscuous mode [ 190.158512][ T8464] netlink: 47 bytes leftover after parsing attributes in process `syz.3.806'. [ 190.915217][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.812'. [ 191.298991][ T8487] usb usb8: usbfs: process 8487 (syz.4.814) did not claim interface 0 before use [ 192.677216][ T8523] netlink: 47 bytes leftover after parsing attributes in process `syz.3.826'. [ 192.954066][ T5848] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 193.173951][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 193.181988][ T5848] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=58.4c [ 193.191570][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.200264][ T5848] usb 1-1: Product: syz [ 193.204660][ T5848] usb 1-1: Manufacturer: syz [ 193.209258][ T5848] usb 1-1: SerialNumber: syz [ 193.234331][ T5848] usb 1-1: config 0 descriptor?? [ 193.582181][ T1209] usb 1-1: USB disconnect, device number 5 [ 193.825381][ T8540] usb usb8: usbfs: process 8540 (syz.1.832) did not claim interface 0 before use [ 194.489629][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.496029][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.017945][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 195.483144][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 195.500906][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 195.564529][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.643665][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.673453][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.712737][ T9] usb 4-1: config 0 descriptor?? [ 195.727180][ T8552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.172264][ T8621] syz.2.841[8621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.172670][ T8621] syz.2.841[8621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.184593][ T8621] syz.2.841[8621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.706269][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 196.739704][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 196.756079][ T9] usb 4-1: USB disconnect, device number 5 [ 197.523891][ T1209] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 197.677998][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.692354][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.703232][ T1209] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 197.724600][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.745857][ T1209] usb 5-1: config 0 descriptor?? [ 198.167548][ T1209] hid (null): bogus close delimiter [ 198.379941][ T8658] syz.2.854[8658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.380269][ T8658] syz.2.854[8658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.391880][ T8658] syz.2.854[8658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.718680][ T1209] usb 5-1: language id specifier not provided by device, defaulting to English [ 199.097102][ T1209] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 199.541866][ T25] usb 5-1: USB disconnect, device number 6 [ 200.243907][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 200.442205][ T8700] syz.3.867[8700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.442296][ T8700] syz.3.867[8700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.453706][ T8700] syz.3.867[8700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.549885][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.771193][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.033904][ T5848] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 201.042983][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.170016][ T5848] usb 2-1: config 0 descriptor?? [ 201.566447][ T8704] usb usb8: usbfs: process 8704 (syz.4.870) did not claim interface 0 before use [ 201.834076][ T8717] netlink: 104 bytes leftover after parsing attributes in process `syz.2.873'. [ 202.524413][ T5848] hid (null): bogus close delimiter [ 202.875259][ T5848] usb 2-1: string descriptor 0 read error: -71 [ 202.881769][ T5848] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 202.890646][ T5848] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 202.898935][ T5848] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 202.907116][ T5848] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 202.914889][ T5848] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 202.925439][ T5848] usb 2-1: USB disconnect, device number 2 [ 204.821214][ T8758] syz.1.883[8758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.821396][ T8758] syz.1.883[8758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.833283][ T8758] syz.1.883[8758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.166091][ T8760] usb usb8: usbfs: process 8760 (syz.2.884) did not claim interface 0 before use [ 205.476148][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 208.107517][ T8810] syz.2.899[8810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.107891][ T8810] syz.2.899[8810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.119715][ T8810] syz.2.899[8810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.186635][ T8822] usb usb8: usbfs: process 8822 (syz.1.901) did not claim interface 0 before use [ 209.922728][ T8835] syz.4.908[8835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.922814][ T8835] syz.4.908[8835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.944097][ T8835] syz.4.908[8835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.008748][ T8841] netlink: 47 bytes leftover after parsing attributes in process `syz.1.909'. [ 211.149383][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'. [ 211.162789][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'. [ 212.105371][ T5848] hid-generic 0200:EA00000:0200.000B: item fetching failed at offset 5/7 [ 212.114751][ T5848] hid-generic 0200:EA00000:0200.000B: probe with driver hid-generic failed with error -22 [ 213.803378][ T8932] usb usb8: usbfs: process 8932 (syz.4.944) did not claim interface 0 before use [ 214.484715][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 217.122052][ T8991] usb usb8: usbfs: process 8991 (syz.2.961) did not claim interface 0 before use [ 218.161809][ T9012] syz.4.971[9012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.161900][ T9012] syz.4.971[9012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.173458][ T9012] syz.4.971[9012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.353506][ C0] ------------[ cut here ]------------ [ 218.370291][ C0] refcount_t: underflow; use-after-free. [ 218.376512][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 218.385789][ C0] Modules linked in: [ 218.389735][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 218.400052][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.410134][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 218.416753][ C0] Code: a0 3b 60 8c e8 37 74 9e fc 90 0f 0b 90 90 eb 99 e8 ab ce dd fc c6 05 41 47 4f 0b 01 90 48 c7 c7 00 3c 60 8c e8 17 74 9e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 88 ce dd fc c6 05 1b 47 4f 0b 01 90 [ 218.436388][ C0] RSP: 0018:ffffc90000157480 EFLAGS: 00010246 [ 218.442449][ C0] RAX: 8689efa8f0104200 RBX: ffff88803292d5e4 RCX: ffff88801beeda00 [ 218.450439][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.458417][ C0] RBP: 0000000000000003 R08: ffffffff815687d2 R09: fffffbfff1cfa8a0 [ 218.466394][ C0] R10: dffffc0000000000 R11: fffffbfff1cfa8a0 R12: ffff888079af0000 [ 218.474376][ C0] R13: ffff88803292d5e4 R14: ffff888079af0000 R15: ffff88807e1b6118 [ 218.482335][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 218.491284][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.497878][ C0] CR2: 00000000ffffffff CR3: 000000007afc0000 CR4: 00000000003526f0 [ 218.505854][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 218.513845][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 218.521812][ C0] Call Trace: [ 218.525095][ C0] [ 218.528014][ C0] ? __warn+0x168/0x4e0 [ 218.532158][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 218.537727][ C0] ? report_bug+0x2b3/0x500 [ 218.542236][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 218.547794][ C0] ? handle_bug+0x60/0x90 [ 218.552111][ C0] ? exc_invalid_op+0x1a/0x50 [ 218.556793][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 218.561808][ C0] ? __warn_printk+0x292/0x360 [ 218.566574][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 218.572106][ C0] j1939_xtp_rx_cts+0x552/0xc70 [ 218.576960][ C0] j1939_tp_recv+0x8ae/0x1050 [ 218.581620][ C0] j1939_can_recv+0x732/0xb20 [ 218.586298][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 218.591491][ C0] ? rcu_is_watching+0x15/0xb0 [ 218.596277][ C0] ? lock_release+0xbf/0xa30 [ 218.600864][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 218.606073][ C0] can_rcv_filter+0x359/0x7f0 [ 218.610742][ C0] can_receive+0x327/0x480 [ 218.615165][ C0] ? can_receive+0x1c9/0x480 [ 218.619739][ C0] can_rcv+0x144/0x260 [ 218.623792][ C0] ? __pfx_can_rcv+0x10/0x10 [ 218.628417][ C0] __netif_receive_skb+0x2e0/0x650 [ 218.633518][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 218.638553][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 218.644198][ C0] ? __pfx_lock_release+0x10/0x10 [ 218.649208][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.655541][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 218.660643][ C0] ? rcu_is_watching+0x15/0xb0 [ 218.665417][ C0] ? process_backlog+0x33b/0x15b0 [ 218.670430][ C0] process_backlog+0x662/0x15b0 [ 218.675298][ C0] ? process_backlog+0x33b/0x15b0 [ 218.680322][ C0] ? __pfx_process_backlog+0x10/0x10 [ 218.685635][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 218.690649][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.696984][ C0] __napi_poll+0xcb/0x490 [ 218.701307][ C0] net_rx_action+0x89b/0x1240 [ 218.705995][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 218.711090][ C0] ? rcu_qs+0xf1/0x190 [ 218.715166][ C0] ? rcu_softirq_qs+0xf3/0x370 [ 218.719913][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.726253][ C0] handle_softirqs+0x2c5/0x980 [ 218.731005][ C0] ? run_ksoftirqd+0xca/0x130 [ 218.735689][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 218.740970][ C0] run_ksoftirqd+0xca/0x130 [ 218.745480][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 218.750573][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 218.756310][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 218.761414][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 218.766532][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 218.771631][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 218.776746][ C0] smpboot_thread_fn+0x544/0xa30 [ 218.781672][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 218.786706][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.792154][ C0] kthread+0x2f0/0x390 [ 218.796225][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 218.801670][ C0] ? __pfx_kthread+0x10/0x10 [ 218.806258][ C0] ret_from_fork+0x4b/0x80 [ 218.810651][ C0] ? __pfx_kthread+0x10/0x10 [ 218.815244][ C0] ret_from_fork_asm+0x1a/0x30 [ 218.819995][ C0] [ 218.823007][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.830269][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 218.840516][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.850557][ C0] Call Trace: [ 218.853829][ C0] [ 218.856757][ C0] dump_stack_lvl+0x241/0x360 [ 218.861427][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.866616][ C0] ? __pfx__printk+0x10/0x10 [ 218.871191][ C0] ? vscnprintf+0x5d/0x90 [ 218.875519][ C0] panic+0x349/0x880 [ 218.879404][ C0] ? __warn+0x177/0x4e0 [ 218.883544][ C0] ? __pfx_panic+0x10/0x10 [ 218.887945][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 218.892872][ C0] __warn+0x34b/0x4e0 [ 218.896840][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 218.902366][ C0] report_bug+0x2b3/0x500 [ 218.906684][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 218.912213][ C0] handle_bug+0x60/0x90 [ 218.916355][ C0] exc_invalid_op+0x1a/0x50 [ 218.920844][ C0] asm_exc_invalid_op+0x1a/0x20 [ 218.925681][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 218.931817][ C0] Code: a0 3b 60 8c e8 37 74 9e fc 90 0f 0b 90 90 eb 99 e8 ab ce dd fc c6 05 41 47 4f 0b 01 90 48 c7 c7 00 3c 60 8c e8 17 74 9e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 88 ce dd fc c6 05 1b 47 4f 0b 01 90 [ 218.951410][ C0] RSP: 0018:ffffc90000157480 EFLAGS: 00010246 [ 218.957470][ C0] RAX: 8689efa8f0104200 RBX: ffff88803292d5e4 RCX: ffff88801beeda00 [ 218.965428][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.973385][ C0] RBP: 0000000000000003 R08: ffffffff815687d2 R09: fffffbfff1cfa8a0 [ 218.981348][ C0] R10: dffffc0000000000 R11: fffffbfff1cfa8a0 R12: ffff888079af0000 [ 218.989395][ C0] R13: ffff88803292d5e4 R14: ffff888079af0000 R15: ffff88807e1b6118 [ 218.997355][ C0] ? __warn_printk+0x292/0x360 [ 219.002107][ C0] j1939_xtp_rx_cts+0x552/0xc70 [ 219.006965][ C0] j1939_tp_recv+0x8ae/0x1050 [ 219.011625][ C0] j1939_can_recv+0x732/0xb20 [ 219.016291][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 219.021471][ C0] ? rcu_is_watching+0x15/0xb0 [ 219.026248][ C0] ? lock_release+0xbf/0xa30 [ 219.030828][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 219.036006][ C0] can_rcv_filter+0x359/0x7f0 [ 219.040668][ C0] can_receive+0x327/0x480 [ 219.045065][ C0] ? can_receive+0x1c9/0x480 [ 219.049651][ C0] can_rcv+0x144/0x260 [ 219.053721][ C0] ? __pfx_can_rcv+0x10/0x10 [ 219.058294][ C0] __netif_receive_skb+0x2e0/0x650 [ 219.063390][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 219.068403][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 219.074026][ C0] ? __pfx_lock_release+0x10/0x10 [ 219.079059][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.085371][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 219.090469][ C0] ? rcu_is_watching+0x15/0xb0 [ 219.095236][ C0] ? process_backlog+0x33b/0x15b0 [ 219.100339][ C0] process_backlog+0x662/0x15b0 [ 219.105184][ C0] ? process_backlog+0x33b/0x15b0 [ 219.110213][ C0] ? __pfx_process_backlog+0x10/0x10 [ 219.115481][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 219.120499][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.126809][ C0] __napi_poll+0xcb/0x490 [ 219.131143][ C0] net_rx_action+0x89b/0x1240 [ 219.135808][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 219.140906][ C0] ? rcu_qs+0xf1/0x190 [ 219.144963][ C0] ? rcu_softirq_qs+0xf3/0x370 [ 219.149711][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.156030][ C0] handle_softirqs+0x2c5/0x980 [ 219.160781][ C0] ? run_ksoftirqd+0xca/0x130 [ 219.165452][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 219.170723][ C0] run_ksoftirqd+0xca/0x130 [ 219.175227][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 219.180324][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 219.186038][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 219.191140][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 219.196243][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 219.201374][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 219.206465][ C0] smpboot_thread_fn+0x544/0xa30 [ 219.211392][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 219.216400][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 219.221860][ C0] kthread+0x2f0/0x390 [ 219.225914][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 219.231365][ C0] ? __pfx_kthread+0x10/0x10 [ 219.235936][ C0] ret_from_fork+0x4b/0x80 [ 219.240334][ C0] ? __pfx_kthread+0x10/0x10 [ 219.244993][ C0] ret_from_fork_asm+0x1a/0x30 [ 219.249749][ C0] [ 219.253004][ C0] Kernel Offset: disabled [ 219.257323][ C0] Rebooting in 86400 seconds..