last executing test programs: 12.713028282s ago: executing program 2 (id=64): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xd3, 0x30, 0x2b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x401, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0xe, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8d, 0x4e, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x6, 0x40}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x2, 0x7, 0x9, 0x40, 0x5}, 0x10, &(0x7f0000000340)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x1, 0x5, 0x0, 0x1}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x419}}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000240)=0x1, 0x4) close(r2) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002115"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}}, 0x20}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000300000000000008000000000000002e001989e0b40b0a35564f9eab3ad51ec7ba9da185b346d2d11419b48d34b176ec7c76007c8c76f97056fdfae3462cd1cd3abf6f12862802fc73af59db1d92abe185eff0faeb7265ca914acbf910340efbd6ca0b7b005283b389"], 0x0, 0x29, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 10.506626623s ago: executing program 1 (id=69): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) close(0xffffffffffffffff) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x240800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r4, &(0x7f00000000c0)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 10.03581107s ago: executing program 0 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='devpts\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r3, 0x100, 0x0) 9.462933751s ago: executing program 1 (id=73): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000240)={0x1, 0xfffe, "be4108"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="e7efda01", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf2531000000050033000300000005003400020000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x40890) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) write$binfmt_misc(r6, &(0x7f0000000100), 0x6) 8.752990459s ago: executing program 4 (id=74): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000240)={0x1, 0xfffe, "be4108"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) 8.420190035s ago: executing program 0 (id=76): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000003c0)={0x4, 0x20, [0x4, 0x9, 0x2, 0x3], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r1 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r2) 8.300793738s ago: executing program 3 (id=77): r0 = openat$smackfs_access(0xffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/access\x00', 0x2, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet(0x2, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000007c0)={0x0, 0x6, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r5, 0x65283e1aaa2ddbb1, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4003f00) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006cc0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0x0) 8.156241719s ago: executing program 0 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r8, 0xc048aeca, &(0x7f0000000200)) 7.851962459s ago: executing program 4 (id=79): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@private1}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@local, {0x0, 0x0, 0x1}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 7.706058846s ago: executing program 3 (id=80): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000240)={0x1, 0xfffe, "be4108"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="e7efda01", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf2531000000050033000300000005003400020000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x40890) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) 6.83205538s ago: executing program 3 (id=81): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='hrtimer_expire_entry\x00', r3}, 0xffffff7c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000002000000850000001c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000001c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x198003c, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0xc}}, {@fscache}], [{@permit_directio}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x62, 0x64, 0x66, 0x32, 0x35, 0x32, 0x64], 0x2d, [0x38, 0x61, 0x32, 0x66], 0x2d, [0x64, 0x33, 0x64, 0x39], 0x2d, [0x32, 0x36, 0x36, 0x63], 0x2d, [0x32, 0x30, 0x35, 0x64, 0x38, 0x63, 0x32, 0x65]}}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_measure}, {@appraise_type}, {@uid_eq={'uid', 0x3d, r9}}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x2e00, &(0x7f0000000040)="61df712bc884fed5722780b605a7", 0x0, 0x10000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1f, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) eventfd(0x100) read$alg(0xffffffffffffffff, &(0x7f00000001c0)=""/68, 0x44) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x154}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 6.708157459s ago: executing program 4 (id=82): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000007, 0x12, r3, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000400)="c06d87", 0x3}], 0x1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r5) 6.677377854s ago: executing program 2 (id=83): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) close(0xffffffffffffffff) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x240800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r4, &(0x7f00000000c0)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 6.276027311s ago: executing program 0 (id=84): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x48801) r0 = syz_io_uring_setup(0x4e5e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681", 0x5}], 0x1}, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x1f, 0x2, 0x520, 0x290, 0x1c0, 0x360, 0xd0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth0_to_hsr\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @mcast1, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'veth0_to_bond\x00', 'caif0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x98, 0x9, 0x58, @mcast1, @dev={0xfe, 0x80, '\x00', 0xa}, 0x20, 0x20, 0x10001, 0x1}}) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0) 5.589599383s ago: executing program 2 (id=85): r0 = openat$smackfs_access(0xffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/access\x00', 0x2, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet(0x2, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000007c0)={0x0, 0x6, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r3, 0x65283e1aaa2ddbb1, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4003f00) 5.4534637s ago: executing program 3 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='devpts\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r3, 0x100, 0x0) 5.362054051s ago: executing program 1 (id=87): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100008404000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r2) 5.308297026s ago: executing program 0 (id=88): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000003c0)={0x4, 0x20, [0x4, 0x9, 0x2, 0x3], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r1 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r2) 4.716120659s ago: executing program 1 (id=89): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(0x0, 0x1000, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r5, &(0x7f0000001a80)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1, 0x4, 0x5) 4.664330254s ago: executing program 2 (id=90): r0 = openat$smackfs_access(0xffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/access\x00', 0x2, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet(0x2, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000007c0)={0x0, 0x6, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r5, 0x65283e1aaa2ddbb1, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4003f00) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006cc0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0x0) 3.802755547s ago: executing program 3 (id=91): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) recvmsg(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/246, 0xf6}], 0x1}, 0x40010100) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238f6711f", 0x5c}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0e7", 0x58}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f90cc578b2bafbdcfd62f2ef4861b76e32272e8c799fdffd209b1c8fc26d842bd31482458ef705a7ff7f14faa90a193977eb376443d524cbb7ec9c6b73d441c57d69e2389a1fed974289ad4ce97d971edd3d7d678ee9de3caeeefe4cfcb09bc11ca162e06e98a2ce596070d83081e8d4014d917145aeb224f2a4a530cf5bbf1021647b99cd5", 0xed}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f5412e40742ee435f6774a8edced6ae721b6ce231cfeedd7d71", 0x60}, {&(0x7f0000000100)="cfc4a70042dd2be7b702132c50d70d2ea1c6b672d9269c28", 0x18}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc1ae037fba1f6fb5a060fd0ec2dfc4edf69fdc23a30e510d2fba92bd55ed7f4f893103b2772151cbdb17e1ddb141ea1e99c28e7482afc2dfc1386d6a8cba0fb55b4997f0e28b04c7642e528fd0b224592d2a7a5cd33d94f", 0x85}], 0x7, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)="76dbc0d5db133f8d506c91234e6d", 0xe}, {&(0x7f00000007c0)="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", 0xfb}, {&(0x7f00000008c0)="0754dc5013d057cd169513cbe6353375cc9c3efbdd65b66665cb22853cb7e3c75ade300e8bd8da3a32d4532822a3d7599164458c14d5306c86b52510a68002ff0230edcfb268a12de4c67cc18598d7b41b0a5103a23800c36727a0340a687bf96bd2467bc1f7ef66d4711f92e2", 0x6d}, {&(0x7f0000001040)="eac15318f152c40b585555f48c5e581a5ea857b96be857f6904e53ee179dccb0c86909e1a6e0f5c6fc745fd3dbb7f275a1838e64dff1dcaa76710f8e6650474f06c3933b1176ddf0c3abc5a72f7e50579f86830f10f32185afb78142111bcff5377a48ec359ff36b4cfcec5e7be25aff12fc51e53e547a62c94cd7c921479f5c696f2f464e9ad366fbac44f0693e17a28ddc083ee5cdc137b165c20faa35958419ebdf5c7e84fa2ea11567b9c2646a18853acc6aa66b2d00341a160b7b", 0xbd}, {&(0x7f0000000ac0)="c4276463274cfc00b7e31e39077773e9d4b5c7a9809ab6d24c56aa11ca25ec2c3a98d1d5b554e9ffe3e759ebbee3f69f89b797169f33802dacbf554e8741", 0x3e}], 0x5}}], 0x2, 0x10) 3.394917202s ago: executing program 2 (id=92): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@private1}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@local, {0x0, 0x0, 0x1}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 3.319350661s ago: executing program 0 (id=93): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000240)={0x1, 0xfffe, "be4108"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="e7efda01", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf2531000000050033000300000005003400020000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x40890) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f0000000180)=[{0x0, 0x80}, {0x1, 0x1}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) 3.064459921s ago: executing program 1 (id=94): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) close(0xffffffffffffffff) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x240800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r6, &(0x7f00000000c0)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c, 0x0}}], 0x1, 0x2004c004) 2.592043881s ago: executing program 4 (id=95): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) close(0xffffffffffffffff) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x240800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r4, &(0x7f00000000c0)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.46058371s ago: executing program 2 (id=96): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00000000000000000700", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.534876832s ago: executing program 4 (id=97): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='hrtimer_expire_entry\x00', r3}, 0xffffff7c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000002000000850000001c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000001c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x198003c, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0xc}}, {@fscache}], [{@permit_directio}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x62, 0x64, 0x66, 0x32, 0x35, 0x32, 0x64], 0x2d, [0x38, 0x61, 0x32, 0x66], 0x2d, [0x64, 0x33, 0x64, 0x39], 0x2d, [0x32, 0x36, 0x36, 0x63], 0x2d, [0x32, 0x30, 0x35, 0x64, 0x38, 0x63, 0x32, 0x65]}}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_measure}, {@appraise_type}, {@uid_eq={'uid', 0x3d, r9}}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x2e00, &(0x7f0000000040)="61df712bc884fed5722780b605a7", 0x0, 0x10000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1f, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) eventfd(0x100) read$alg(0xffffffffffffffff, &(0x7f00000001c0)=""/68, 0x44) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[], 0x154}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.31525568s ago: executing program 3 (id=98): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x48801) r0 = syz_io_uring_setup(0x4e5e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681", 0x5}], 0x1}, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x1f, 0x2, 0x520, 0x290, 0x1c0, 0x360, 0xd0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth0_to_hsr\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @mcast1, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'veth0_to_bond\x00', 'caif0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x98, 0x9, 0x58, @mcast1, @dev={0xfe, 0x80, '\x00', 0xa}, 0x20, 0x20, 0x10001, 0x1}}) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0) 1.231702831s ago: executing program 1 (id=99): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) close(0xffffffffffffffff) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsu(&(0x7f0000000140), 0x2, 0x240800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r5, &(0x7f00000000c0)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 0s ago: executing program 4 (id=100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0xc}, {{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {0x0}], 0x2}, 0x7e0}], 0x3, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) syz_emit_vhci(&(0x7f00000012c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "0d24b2002987f91c"}}}, 0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='sched_switch\x00', 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='pkcs7_test\x00', 0x0, &(0x7f0000000500)="14a0fc15d269a3523a7dea685da36a300909cbe0aba8074bdfe7551333d7016251775fad74a68ddc5e18861e2e6a44a4eba2c2768aff295a2d166fc4048f2b1ee6b772659141fbee0423fdf5d750ae383fa2b1dee861052ec402a4eedbd535332d9219a6b4e01e0c1ef9bb43194f83b66448dfe6d9a03c8c5f0d6091e546a244b05fdd931e73f300f78053d4c832efe6a44022c456361e8fb7b4220b4bff57163b7debb9ec7cdc3d2eb7f07d77c3a78aeb10ac2fc4b5358a3d395828750457674ad03cbec0b7f18994f20edd750563be608a600dfd0c64989c324ff30cabb04850fd", 0xe2, 0xfffffffffffffffb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 73.842450][ T5809] cgroup: Unknown subsys name 'net' [ 73.951706][ T5809] cgroup: Unknown subsys name 'cpuset' [ 73.961380][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.577451][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.015827][ T5131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.024757][ T5131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.038013][ T5131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.054557][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.062867][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.071563][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.088217][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.126129][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.154772][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.181940][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.204719][ T5820] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.218162][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.236810][ T5131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.252675][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.269779][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.282429][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.292557][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.300222][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.307955][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.327000][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.339005][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.339704][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.355163][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.357158][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.372183][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.372755][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.387631][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.388747][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.402970][ T5820] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.410631][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.758015][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 78.812693][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 78.911447][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 78.922250][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.932634][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.941289][ T5819] bridge_slave_0: entered allmulticast mode [ 78.949673][ T5819] bridge_slave_0: entered promiscuous mode [ 79.000587][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.007979][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.015416][ T5819] bridge_slave_1: entered allmulticast mode [ 79.023374][ T5819] bridge_slave_1: entered promiscuous mode [ 79.124745][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.193997][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.214422][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.222365][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.230352][ T5829] bridge_slave_0: entered allmulticast mode [ 79.238024][ T5829] bridge_slave_0: entered promiscuous mode [ 79.246342][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.253556][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.261208][ T5829] bridge_slave_1: entered allmulticast mode [ 79.268719][ T5829] bridge_slave_1: entered promiscuous mode [ 79.286869][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.295126][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.302814][ T5823] bridge_slave_0: entered allmulticast mode [ 79.310243][ T5823] bridge_slave_0: entered promiscuous mode [ 79.322392][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.329712][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.337044][ T5823] bridge_slave_1: entered allmulticast mode [ 79.344851][ T5823] bridge_slave_1: entered promiscuous mode [ 79.364835][ T5819] team0: Port device team_slave_0 added [ 79.394010][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.426384][ T5819] team0: Port device team_slave_1 added [ 79.433036][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 79.445548][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.455239][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 79.470248][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.482531][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.573490][ T5829] team0: Port device team_slave_0 added [ 79.586971][ T5829] team0: Port device team_slave_1 added [ 79.596166][ T5823] team0: Port device team_slave_0 added [ 79.603456][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.611390][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.637586][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.690571][ T5823] team0: Port device team_slave_1 added [ 79.696944][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.704475][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.730738][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.765691][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.772914][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.799510][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.828883][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.835889][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.862012][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.882925][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.890507][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.916752][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.946163][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.953267][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.979269][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.073963][ T5829] hsr_slave_0: entered promiscuous mode [ 80.081479][ T5829] hsr_slave_1: entered promiscuous mode [ 80.111574][ T5819] hsr_slave_0: entered promiscuous mode [ 80.118446][ T5819] hsr_slave_1: entered promiscuous mode [ 80.124872][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.133142][ T5819] Cannot create hsr debugfs directory [ 80.139046][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.146253][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.153610][ T5831] bridge_slave_0: entered allmulticast mode [ 80.160755][ T5831] bridge_slave_0: entered promiscuous mode [ 80.168750][ T5825] Bluetooth: hci0: command tx timeout [ 80.170467][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.181526][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.188814][ T5831] bridge_slave_1: entered allmulticast mode [ 80.195740][ T5831] bridge_slave_1: entered promiscuous mode [ 80.202722][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.210389][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.218076][ T5832] bridge_slave_0: entered allmulticast mode [ 80.225482][ T5832] bridge_slave_0: entered promiscuous mode [ 80.237452][ T5825] Bluetooth: hci1: command tx timeout [ 80.238650][ T5823] hsr_slave_0: entered promiscuous mode [ 80.249690][ T5823] hsr_slave_1: entered promiscuous mode [ 80.256093][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.263814][ T5823] Cannot create hsr debugfs directory [ 80.291759][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.302277][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.309701][ T5832] bridge_slave_1: entered allmulticast mode [ 80.316581][ T5832] bridge_slave_1: entered promiscuous mode [ 80.322621][ T5825] Bluetooth: hci2: command tx timeout [ 80.376148][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.400824][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.434201][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.465584][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.477957][ T5825] Bluetooth: hci3: command tx timeout [ 80.483789][ T5825] Bluetooth: hci4: command tx timeout [ 80.551830][ T5832] team0: Port device team_slave_0 added [ 80.569022][ T5831] team0: Port device team_slave_0 added [ 80.586026][ T5832] team0: Port device team_slave_1 added [ 80.602340][ T5831] team0: Port device team_slave_1 added [ 80.687223][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.694418][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.721136][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.736987][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.747423][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.773841][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.816101][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.823485][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.850691][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.871953][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.883902][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.912243][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.017056][ T5832] hsr_slave_0: entered promiscuous mode [ 81.026563][ T5832] hsr_slave_1: entered promiscuous mode [ 81.034850][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.042938][ T5832] Cannot create hsr debugfs directory [ 81.064788][ T5831] hsr_slave_0: entered promiscuous mode [ 81.071903][ T5831] hsr_slave_1: entered promiscuous mode [ 81.078865][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.086686][ T5831] Cannot create hsr debugfs directory [ 81.189906][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.215452][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.226111][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.270843][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.356512][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.387981][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.398221][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.420653][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.484633][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.496414][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.514590][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.537903][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.628621][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.642406][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.652852][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.693506][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.764807][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.793225][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.811312][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.821900][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.848762][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.911801][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.932921][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.952452][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.995222][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.002607][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.013716][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.020977][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.080854][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.109531][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.116646][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.128013][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.153859][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.161062][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.181344][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.195226][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.202460][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.238377][ T5825] Bluetooth: hci0: command tx timeout [ 82.255076][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.262281][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.278448][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.285617][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.318509][ T5825] Bluetooth: hci1: command tx timeout [ 82.364478][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.397646][ T5825] Bluetooth: hci2: command tx timeout [ 82.426811][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.441080][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.455534][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.488608][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.495881][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.509481][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.516642][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.540036][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.558004][ T5131] Bluetooth: hci3: command tx timeout [ 82.564032][ T5825] Bluetooth: hci4: command tx timeout [ 82.616536][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.624194][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.646903][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.695276][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.702515][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.766329][ T5829] veth0_vlan: entered promiscuous mode [ 82.862039][ T5829] veth1_vlan: entered promiscuous mode [ 82.875632][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.940647][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.975701][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.031571][ T5829] veth0_macvtap: entered promiscuous mode [ 83.097080][ T5829] veth1_macvtap: entered promiscuous mode [ 83.140826][ T5819] veth0_vlan: entered promiscuous mode [ 83.205758][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.234325][ T5819] veth1_vlan: entered promiscuous mode [ 83.252094][ T5823] veth0_vlan: entered promiscuous mode [ 83.263495][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.302849][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.313475][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.323424][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.333125][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.361794][ T5823] veth1_vlan: entered promiscuous mode [ 83.394956][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.422874][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.439771][ T5819] veth0_macvtap: entered promiscuous mode [ 83.507184][ T5819] veth1_macvtap: entered promiscuous mode [ 83.562845][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.572642][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.585107][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.596332][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.611620][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.625564][ T5823] veth0_macvtap: entered promiscuous mode [ 83.669316][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.683020][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.695329][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.706551][ T5823] veth1_macvtap: entered promiscuous mode [ 83.740725][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.749967][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.751889][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.761544][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.776661][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.783382][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.800468][ T5831] veth0_vlan: entered promiscuous mode [ 83.823163][ T5831] veth1_vlan: entered promiscuous mode [ 83.906512][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.925456][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.935657][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.946772][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.968769][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.973810][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.980351][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.009447][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.019701][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.030520][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.042429][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.097104][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.107046][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.116651][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.125978][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.220699][ T5831] veth0_macvtap: entered promiscuous mode [ 84.233597][ T5831] veth1_macvtap: entered promiscuous mode [ 84.318449][ T5825] Bluetooth: hci0: command tx timeout [ 84.341994][ T5832] veth0_vlan: entered promiscuous mode [ 84.352145][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.362139][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.397830][ T5825] Bluetooth: hci1: command tx timeout [ 84.439159][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.474194][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.485923][ T5825] Bluetooth: hci2: command tx timeout [ 84.495976][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.523901][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.547458][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.569001][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.586385][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.603694][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.627574][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.634071][ T5832] veth1_vlan: entered promiscuous mode [ 84.640880][ T5825] Bluetooth: hci4: command tx timeout [ 84.646834][ T5825] Bluetooth: hci3: command tx timeout [ 84.671398][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.688505][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.699136][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.710205][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.721714][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.732896][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.744404][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.773125][ T5832] veth0_macvtap: entered promiscuous mode [ 84.791267][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.800621][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.815362][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.825265][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.838146][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.846916][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.872776][ T5832] veth1_macvtap: entered promiscuous mode [ 84.913393][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.926131][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.937099][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.948640][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.959877][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.971111][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.995683][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.017573][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.029112][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.050291][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.070432][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.089815][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.102170][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.113082][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.129846][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.140158][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.154730][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.167920][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.178975][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.191149][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.223573][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.247205][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.271053][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.287410][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.487588][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.509622][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.620618][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.647418][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.691615][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.691646][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.815161][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.815192][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.834921][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.898754][ T5917] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 86.211636][ T5930] ax25_connect(): syz.3.10 uses autobind, please contact jreuter@yaina.de [ 86.438441][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.441836][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 86.455074][ T5131] Bluetooth: hci0: command tx timeout [ 86.479275][ T5131] Bluetooth: hci1: command tx timeout [ 86.569262][ T5131] Bluetooth: hci2: command tx timeout [ 86.588194][ T9] usb 3-1: device descriptor read/64, error -32 [ 86.722430][ T5131] Bluetooth: hci3: command tx timeout [ 86.722504][ T5131] Bluetooth: hci4: command tx timeout [ 86.879125][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.498165][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 246: 255, using maximum allowed: 30 [ 87.498338][ T9] usb 3-1: config 0 interface 0 altsetting 246 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 87.498373][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.638584][ T5824] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.678726][ T9] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 87.678771][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 87.678801][ T9] usb 3-1: Product: syz [ 87.678821][ T9] usb 3-1: Manufacturer: syz [ 87.678840][ T9] usb 3-1: SerialNumber: syz [ 87.691710][ T9] usb 3-1: config 0 descriptor?? [ 87.699835][ T9] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 87.797379][ T5867] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.817808][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.874849][ T5824] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.874892][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.877170][ T5824] usb 5-1: config 0 descriptor?? [ 87.986816][ T5941] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 87.989221][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.990364][ T5867] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.990907][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.009787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.081555][ T5867] usb 2-1: config 0 descriptor?? [ 88.112212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.214551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.317419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.419322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.427384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 88.527436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 88.560822][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 88.592990][ T5824] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 88.624147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.694329][ T5824] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 88.714842][ T5869] usb 3-1: USB disconnect, device number 3 [ 88.757659][ T5867] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 88.765290][ T5867] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input6 [ 88.855554][ T5824] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 88.921449][ T5867] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 89.678013][ T5824] usb 5-1: USB disconnect, device number 2 [ 89.894433][ T5869] usb 2-1: USB disconnect, device number 2 [ 92.386876][ T25] cfg80211: failed to load regulatory.db [ 92.437507][ T5871] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.845338][ T6005] Zero length message leads to an empty skb [ 93.139658][ T6003] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.146090][ T6003] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.179892][ T6003] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.231410][ T6003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.238844][ T6003] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.247818][ T6003] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.308998][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 93.319746][ T6003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.326197][ T6003] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.338218][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.355138][ T5871] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 93.365326][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 93.375678][ T5871] usb 4-1: Product: syz [ 93.381024][ T5871] usb 4-1: Manufacturer: syz [ 93.386870][ T6003] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.395742][ T5871] usb 4-1: SerialNumber: syz [ 93.403977][ T6003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.410269][ T6003] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.418593][ T6003] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.428279][ T6003] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 93.434308][ T6003] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 93.444574][ T6003] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 93.453830][ T5871] usb 4-1: config 0 descriptor?? [ 93.694621][ T5824] usb 4-1: USB disconnect, device number 2 [ 93.727460][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.889421][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 246: 255, using maximum allowed: 30 [ 93.889476][ T25] usb 3-1: config 0 interface 0 altsetting 246 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 93.889510][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.891888][ T25] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 93.891925][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 93.891950][ T25] usb 3-1: Product: syz [ 93.891968][ T25] usb 3-1: Manufacturer: syz [ 93.891987][ T25] usb 3-1: SerialNumber: syz [ 93.895952][ T25] usb 3-1: config 0 descriptor?? [ 93.904140][ T25] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 94.672023][ T6020] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 94.767849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.769112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.300600][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.300877][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 95.407500][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.447764][ T5131] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.535283][ T5131] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.552440][ T118] usb 3-1: USB disconnect, device number 4 [ 95.947604][ T6022] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 95.981181][ T62] Bluetooth: Error in BCSP hdr checksum [ 96.085855][ T6024] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 96.186498][ T6034] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.707510][ T5824] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 97.041386][ T5824] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 97.102511][ T5824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.134776][ T5824] usb 5-1: config 0 has no interface number 0 [ 97.143706][ T5824] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 97.157445][ T5824] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.196345][ T5824] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 97.250427][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.295686][ T5824] usb 5-1: Product: syz [ 97.323455][ T5824] usb 5-1: Manufacturer: syz [ 97.341103][ T5824] usb 5-1: SerialNumber: syz [ 97.358382][ T5820] Bluetooth: hci1: command 0x080f tx timeout [ 97.358396][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.438713][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.439805][ T5824] usb 5-1: config 0 descriptor?? [ 97.503201][ T6037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.527423][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.599187][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.604924][ T6050] netlink: 68 bytes leftover after parsing attributes in process `syz.2.40'. [ 97.798023][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 97.804624][ T5131] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 97.832114][ T5824] usb 5-1: probing VID:PID(0424:012C) [ 97.843419][ T5824] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 97.850060][ T5824] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0F [ 97.856550][ T5824] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 97.867589][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.921304][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 97.927863][ T5131] Bluetooth: hci6: command 0x1003 tx timeout [ 98.009359][ T5824] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 98.025280][ T5824] usb 5-1: USB disconnect, device number 3 [ 98.050413][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.070774][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.091031][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.122159][ T25] usb 2-1: config 0 descriptor?? [ 99.354203][ T5869] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.368530][ T25] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 99.403837][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input7 [ 99.446367][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 99.453067][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.518109][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.587407][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 99.594414][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 99.594466][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 99.598266][ T5869] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 99.598308][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 99.598335][ T5869] usb 4-1: Product: syz [ 99.598355][ T5869] usb 4-1: Manufacturer: syz [ 99.598375][ T5869] usb 4-1: SerialNumber: syz [ 99.603402][ T5869] usb 4-1: config 0 descriptor?? [ 99.605494][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.681488][ T25] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 99.690637][ T5825] Bluetooth: hci4: command 0x0c1a tx timeout [ 99.817193][ T5869] usb 4-1: USB disconnect, device number 3 [ 100.030687][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.209496][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 246: 255, using maximum allowed: 30 [ 100.234955][ T25] usb 3-1: config 0 interface 0 altsetting 246 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 100.293470][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.333083][ T25] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 100.375621][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 100.384664][ T25] usb 3-1: Product: syz [ 100.388981][ T25] usb 3-1: Manufacturer: syz [ 100.393701][ T25] usb 3-1: SerialNumber: syz [ 100.509424][ T25] usb 3-1: config 0 descriptor?? [ 100.576887][ T25] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 100.653749][ T5910] usb 2-1: USB disconnect, device number 3 [ 100.939305][ T6087] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 101.557839][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 101.627413][ T5871] usb 3-1: USB disconnect, device number 5 [ 101.692455][ T6089] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 102.459692][ T54] Bluetooth: hci5: sending frame failed (-49) [ 102.467465][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 102.493992][ T6094] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 103.525072][ T6106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.55'. [ 103.715343][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 105.659120][ T6122] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 106.375092][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 106.727385][ T5871] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.008141][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 108.016857][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 108.041406][ T5871] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 108.052380][ T118] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 108.078856][ T6146] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 108.309152][ T5871] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.318655][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.326951][ T5871] usb 5-1: Product: syz [ 108.346049][ T6159] ax25_connect(): syz.1.69 uses autobind, please contact jreuter@yaina.de [ 108.374605][ T5871] usb 5-1: Manufacturer: syz [ 108.392300][ T118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.410845][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 108.417623][ T118] usb 3-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00 [ 108.433402][ T5871] usb 5-1: SerialNumber: syz [ 108.441624][ T118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.499071][ T5871] usb 5-1: config 0 descriptor?? [ 108.836471][ T5871] usb 5-1: can't set config #0, error -71 [ 108.856490][ T5871] usb 5-1: USB disconnect, device number 4 [ 108.864756][ T118] usb 3-1: config 0 descriptor?? [ 110.049440][ T118] wacom 0003:056A:00D8.0004: unknown main item tag 0x0 [ 110.056511][ T118] wacom 0003:056A:00D8.0004: unknown main item tag 0x0 [ 110.068073][ T118] wacom 0003:056A:00D8.0004: unknown main item tag 0x0 [ 110.075046][ T118] wacom 0003:056A:00D8.0004: unknown main item tag 0x0 [ 110.083713][ T118] wacom 0003:056A:00D8.0004: unknown main item tag 0x0 [ 110.092235][ T118] wacom 0003:056A:00D8.0004: Unknown device_type for 'HID 056a:00d8'. Assuming pen. [ 110.115445][ T118] wacom 0003:056A:00D8.0004: hidraw0: USB HID v0.04 Device [HID 056a:00d8] on usb-dummy_hcd.2-1/input0 [ 110.131476][ T118] input: Wacom Bamboo Comic 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D8.0004/input/input8 [ 110.204698][ T6171] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 110.269786][ T6141] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.345892][ T6176] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 110.417469][ T118] usb 3-1: USB disconnect, device number 6 [ 110.477442][ T54] Bluetooth: hci1: command 0x080f tx timeout [ 111.605615][ T6195] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 112.208605][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 112.228478][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.299369][ T6206] ax25_connect(): syz.2.83 uses autobind, please contact jreuter@yaina.de [ 112.497720][ T5871] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.597461][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 113.047087][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 113.055662][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 113.066296][ T5871] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 113.079318][ T5871] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 113.088564][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 113.096803][ T5871] usb 5-1: Product: syz [ 113.101457][ T5871] usb 5-1: Manufacturer: syz [ 113.106100][ T5871] usb 5-1: SerialNumber: syz [ 113.208808][ T5871] usb 5-1: config 0 descriptor?? [ 113.720462][ T5908] usb 5-1: USB disconnect, device number 5 [ 114.638217][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 116.321037][ T6252] ax25_connect(): syz.1.94 uses autobind, please contact jreuter@yaina.de [ 116.479657][ T6251] ax25_connect(): syz.4.95 uses autobind, please contact jreuter@yaina.de [ 116.720225][ T5825] Bluetooth: hci1: command 0x080f tx timeout [ 116.742865][ T6245] Bluetooth: hci1: Opcode 0x080f failed: -110 [ 118.525768][ C0] ------------[ cut here ]------------ [ 118.531716][ C0] WARNING: CPU: 0 PID: 6244 at net/mac80211/tx.c:5040 __ieee80211_beacon_get+0x1202/0x15c0 [ 118.541939][ C0] Modules linked in: [ 118.545926][ C0] CPU: 0 UID: 0 PID: 6244 Comm: syz.0.93 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 118.556700][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 118.566894][ C0] RIP: 0010:__ieee80211_beacon_get+0x1202/0x15c0 [ 118.573358][ C0] Code: e8 13 0f 64 f6 eb 0d e8 0c 0f 64 f6 4c 8b bc 24 98 00 00 00 4c 89 ef e8 2c 45 bc f6 45 31 ed e9 4c fe ff ff e8 ef 0e 64 f6 90 <0f> 0b 90 e9 00 f7 ff ff e8 e1 0e 64 f6 90 0f 0b 90 e9 e8 f8 ff ff [ 118.593163][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 118.599462][ C0] RAX: ffffffff8b3b64b1 RBX: 0000000000000000 RCX: ffff888029b71e00 [ 118.607802][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.616784][ C0] RBP: dffffc0000000000 R08: ffffffff8b3b5bad R09: ffffffff8b3b55b0 [ 118.625328][ C0] R10: 0000000000000003 R11: ffff888029b71e00 R12: ffff88806e8ba500 [ 118.633406][ C0] R13: ffff8880277f6400 R14: ffff88806e8ba9d0 R15: ffff88806e8b8d80 [ 118.641657][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 118.650891][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.657623][ C0] CR2: 00007f8fb0cd6d58 CR3: 000000006485e000 CR4: 00000000003526f0 [ 118.665805][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.674134][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.682388][ C0] Call Trace: [ 118.685779][ C0] [ 118.688798][ C0] ? __warn+0x165/0x4d0 [ 118.693075][ C0] ? __ieee80211_beacon_get+0x1202/0x15c0 [ 118.699090][ C0] ? report_bug+0x2b3/0x500 [ 118.703808][ C0] ? __ieee80211_beacon_get+0x1202/0x15c0 [ 118.709817][ C0] ? handle_bug+0x60/0x90 [ 118.714317][ C0] ? exc_invalid_op+0x1a/0x50 [ 118.719169][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 118.724374][ C0] ? __ieee80211_beacon_get+0x300/0x15c0 [ 118.730242][ C0] ? __ieee80211_beacon_get+0x8fd/0x15c0 [ 118.735991][ C0] ? __ieee80211_beacon_get+0x1201/0x15c0 [ 118.741898][ C0] ? __ieee80211_beacon_get+0x1202/0x15c0 [ 118.743674][ T6272] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.747766][ C0] ? __ieee80211_beacon_get+0x36/0x15c0 [ 118.747833][ C0] ieee80211_beacon_get_tim+0xb4/0x320 [ 118.747874][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 118.747919][ C0] mac80211_hwsim_beacon_tx+0x39d/0x850 [ 118.782621][ C0] __iterate_interfaces+0x297/0x570 [ 118.788105][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 118.794248][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 118.800517][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 118.807895][ C0] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 118.815108][ C0] mac80211_hwsim_beacon+0xd4/0x1f0 [ 118.820643][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 118.826629][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 118.832004][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 118.838297][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 118.844238][ C0] ? read_tsc+0x9/0x20 [ 118.848461][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 118.854629][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 118.859944][ C0] handle_softirqs+0x2d4/0x9b0 [ 118.864839][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 118.869831][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 118.875309][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 118.880803][ C0] __irq_exit_rcu+0xf7/0x220 [ 118.885550][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 118.891009][ C0] irq_exit_rcu+0x9/0x30 [ 118.895378][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 118.901312][ C0] [ 118.904346][ C0] [ 118.907445][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.913681][ C0] RIP: 0010:kasan_check_range+0x8c/0x290 [ 118.919577][ C0] Code: 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 <49> ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc 41 83 e4 07 0f 84 [ 118.939512][ C0] RSP: 0018:ffffc90003387130 EFLAGS: 00000246 [ 118.945811][ C0] RAX: ffff888029b71e01 RBX: 1ffff92000670e3c RCX: ffffffff814bd0a6 [ 118.954039][ C0] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc900033871e0 [ 118.962259][ C0] RBP: ffffffffffffffff R08: ffffc9000338723f R09: 1ffff92000670e47 [ 118.970539][ C0] R10: dffffc0000000000 R11: fffff52000670e47 R12: 0000000000000000 [ 118.978779][ C0] R13: ffffffff818b3990 R14: dffffc0000000001 R15: fffff52000670e48 [ 118.986880][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 118.993234][ C0] ? __unwind_start+0x36/0x740 [ 118.998251][ C0] __asan_memset+0x23/0x50 [ 119.002841][ C0] __unwind_start+0x36/0x740 [ 119.007572][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.013914][ C0] arch_stack_walk+0xe5/0x150 [ 119.018848][ C0] stack_trace_save+0x118/0x1d0 [ 119.023897][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 119.029514][ C0] save_stack+0xfb/0x1f0 [ 119.033965][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 119.039166][ C0] ? __pfx_save_stack+0x10/0x10 [ 119.044217][ C0] ? page_ext_get+0x20/0x2a0 [ 119.049021][ C0] __reset_page_owner+0x76/0x430 [ 119.054019][ C0] ? page_ext_get+0x1d6/0x2a0 [ 119.058946][ C0] free_unref_folios+0xe23/0x1890 [ 119.064366][ C0] ? __page_cache_release+0xa4/0xb90 [ 119.069992][ C0] folios_put_refs+0x76c/0x860 [ 119.075076][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 119.080675][ C0] ? free_swap_cache+0xa2/0x3e0 [ 119.085742][ C0] free_pages_and_swap_cache+0x5c8/0x690 [ 119.091633][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 119.098023][ C0] ? tlb_table_flush+0x143/0x410 [ 119.103381][ C0] tlb_flush_mmu+0x3a3/0x680 [ 119.108302][ C0] ? __pfx_down_write+0x10/0x10 [ 119.113309][ C0] tlb_finish_mmu+0xd4/0x200 [ 119.118133][ C0] exit_mmap+0x496/0xc20 [ 119.122540][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 119.127563][ C0] ? __pfx_exit_aio+0x10/0x10 [ 119.132947][ C0] ? uprobe_clear_state+0x271/0x290 [ 119.138302][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 119.144532][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 119.150071][ C0] __mmput+0x115/0x3b0 [ 119.154379][ C0] exit_mm+0x220/0x310 [ 119.158681][ C0] ? __pfx_exit_mm+0x10/0x10 [ 119.163402][ C0] ? taskstats_exit+0x326/0xa60 [ 119.168432][ C0] do_exit+0x9b2/0x28e0 [ 119.172789][ C0] ? preempt_schedule_common+0x84/0xd0 [ 119.178401][ C0] ? __pfx_do_exit+0x10/0x10 [ 119.183150][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.189277][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.195680][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 119.201198][ C0] do_group_exit+0x207/0x2c0 [ 119.206040][ C0] __x64_sys_exit_group+0x3f/0x40 [ 119.211211][ C0] x64_sys_call+0x26a8/0x26b0 [ 119.215962][ C0] do_syscall_64+0xf3/0x230 [ 119.220615][ C0] ? clear_bhb_loop+0x35/0x90 [ 119.225371][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.231394][ C0] RIP: 0033:0x7f6ef7185d29 [ 119.235881][ C0] Code: Unable to access opcode bytes at 0x7f6ef7185cff. [ 119.243014][ C0] RSP: 002b:00007ffcc315b7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 119.251548][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ef7185d29 [ 119.259649][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.267814][ C0] RBP: 00007ffcc315b84c R08: 00007ffcc315b8df R09: 000000000001bcde [ 119.275851][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 119.283961][ C0] R13: 000000000001bcde R14: 00007ffcc315b8a0 R15: 00007ffcc315b8a0 [ 119.292167][ C0] [ 119.295258][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.302596][ C0] CPU: 0 UID: 0 PID: 6244 Comm: syz.0.93 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 119.313148][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 119.323276][ C0] Call Trace: [ 119.326596][ C0] [ 119.329480][ C0] dump_stack_lvl+0x241/0x360 [ 119.334220][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.339473][ C0] ? __pfx__printk+0x10/0x10 [ 119.344122][ C0] ? _printk+0xd5/0x120 [ 119.348337][ C0] ? __init_begin+0x41000/0x41000 [ 119.353413][ C0] ? vscnprintf+0x5d/0x90 [ 119.357793][ C0] panic+0x349/0x880 [ 119.361743][ C0] ? __warn+0x174/0x4d0 [ 119.365953][ C0] ? __pfx_panic+0x10/0x10 [ 119.370443][ C0] __warn+0x344/0x4d0 [ 119.374479][ C0] ? __ieee80211_beacon_get+0x1202/0x15c0 [ 119.380264][ C0] report_bug+0x2b3/0x500 [ 119.384645][ C0] ? __ieee80211_beacon_get+0x1202/0x15c0 [ 119.390434][ C0] handle_bug+0x60/0x90 [ 119.394634][ C0] exc_invalid_op+0x1a/0x50 [ 119.399188][ C0] asm_exc_invalid_op+0x1a/0x20 [ 119.404091][ C0] RIP: 0010:__ieee80211_beacon_get+0x1202/0x15c0 [ 119.410499][ C0] Code: e8 13 0f 64 f6 eb 0d e8 0c 0f 64 f6 4c 8b bc 24 98 00 00 00 4c 89 ef e8 2c 45 bc f6 45 31 ed e9 4c fe ff ff e8 ef 0e 64 f6 90 <0f> 0b 90 e9 00 f7 ff ff e8 e1 0e 64 f6 90 0f 0b 90 e9 e8 f8 ff ff [ 119.430171][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 119.436291][ C0] RAX: ffffffff8b3b64b1 RBX: 0000000000000000 RCX: ffff888029b71e00 [ 119.444334][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.452361][ C0] RBP: dffffc0000000000 R08: ffffffff8b3b5bad R09: ffffffff8b3b55b0 [ 119.460379][ C0] R10: 0000000000000003 R11: ffff888029b71e00 R12: ffff88806e8ba500 [ 119.468405][ C0] R13: ffff8880277f6400 R14: ffff88806e8ba9d0 R15: ffff88806e8b8d80 [ 119.476455][ C0] ? __ieee80211_beacon_get+0x300/0x15c0 [ 119.482163][ C0] ? __ieee80211_beacon_get+0x8fd/0x15c0 [ 119.487879][ C0] ? __ieee80211_beacon_get+0x1201/0x15c0 [ 119.493690][ C0] ? __ieee80211_beacon_get+0x36/0x15c0 [ 119.499410][ C0] ieee80211_beacon_get_tim+0xb4/0x320 [ 119.504948][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 119.511091][ C0] mac80211_hwsim_beacon_tx+0x39d/0x850 [ 119.516693][ C0] __iterate_interfaces+0x297/0x570 [ 119.521986][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 119.528480][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 119.535134][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 119.542409][ C0] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 119.549596][ C0] mac80211_hwsim_beacon+0xd4/0x1f0 [ 119.554975][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 119.560900][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 119.566165][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 119.572307][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 119.578107][ C0] ? read_tsc+0x9/0x20 [ 119.582246][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 119.588548][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 119.593849][ C0] handle_softirqs+0x2d4/0x9b0 [ 119.598698][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 119.603557][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 119.609094][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 119.614396][ C0] __irq_exit_rcu+0xf7/0x220 [ 119.619068][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 119.624338][ C0] irq_exit_rcu+0x9/0x30 [ 119.628762][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 119.634464][ C0] [ 119.637437][ C0] [ 119.640408][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.646462][ C0] RIP: 0010:kasan_check_range+0x8c/0x290 [ 119.652161][ C0] Code: 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 <49> ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc 41 83 e4 07 0f 84 [ 119.671825][ C0] RSP: 0018:ffffc90003387130 EFLAGS: 00000246 [ 119.677970][ C0] RAX: ffff888029b71e01 RBX: 1ffff92000670e3c RCX: ffffffff814bd0a6 [ 119.686015][ C0] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc900033871e0 [ 119.694039][ C0] RBP: ffffffffffffffff R08: ffffc9000338723f R09: 1ffff92000670e47 [ 119.702074][ C0] R10: dffffc0000000000 R11: fffff52000670e47 R12: 0000000000000000 [ 119.710113][ C0] R13: ffffffff818b3990 R14: dffffc0000000001 R15: fffff52000670e48 [ 119.718244][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.724484][ C0] ? __unwind_start+0x36/0x740 [ 119.729321][ C0] __asan_memset+0x23/0x50 [ 119.733796][ C0] __unwind_start+0x36/0x740 [ 119.738449][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.744670][ C0] arch_stack_walk+0xe5/0x150 [ 119.749418][ C0] stack_trace_save+0x118/0x1d0 [ 119.754340][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 119.759899][ C0] save_stack+0xfb/0x1f0 [ 119.764202][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 119.769288][ C0] ? __pfx_save_stack+0x10/0x10 [ 119.774215][ C0] ? page_ext_get+0x20/0x2a0 [ 119.778873][ C0] __reset_page_owner+0x76/0x430 [ 119.783873][ C0] ? page_ext_get+0x1d6/0x2a0 [ 119.788627][ C0] free_unref_folios+0xe23/0x1890 [ 119.793804][ C0] ? __page_cache_release+0xa4/0xb90 [ 119.799154][ C0] folios_put_refs+0x76c/0x860 [ 119.804001][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 119.809446][ C0] ? free_swap_cache+0xa2/0x3e0 [ 119.814369][ C0] free_pages_and_swap_cache+0x5c8/0x690 [ 119.820074][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 119.826341][ C0] ? tlb_table_flush+0x143/0x410 [ 119.831358][ C0] tlb_flush_mmu+0x3a3/0x680 [ 119.836023][ C0] ? __pfx_down_write+0x10/0x10 [ 119.840992][ C0] tlb_finish_mmu+0xd4/0x200 [ 119.845892][ C0] exit_mmap+0x496/0xc20 [ 119.850327][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 119.855188][ C0] ? __pfx_exit_aio+0x10/0x10 [ 119.860475][ C0] ? uprobe_clear_state+0x271/0x290 [ 119.865739][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 119.871301][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 119.876629][ C0] __mmput+0x115/0x3b0 [ 119.880777][ C0] exit_mm+0x220/0x310 [ 119.885014][ C0] ? __pfx_exit_mm+0x10/0x10 [ 119.889844][ C0] ? taskstats_exit+0x326/0xa60 [ 119.894777][ C0] do_exit+0x9b2/0x28e0 [ 119.899009][ C0] ? preempt_schedule_common+0x84/0xd0 [ 119.904571][ C0] ? __pfx_do_exit+0x10/0x10 [ 119.909198][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.915244][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.921630][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 119.927128][ C0] do_group_exit+0x207/0x2c0 [ 119.931745][ C0] __x64_sys_exit_group+0x3f/0x40 [ 119.936806][ C0] x64_sys_call+0x26a8/0x26b0 [ 119.941560][ C0] do_syscall_64+0xf3/0x230 [ 119.946096][ C0] ? clear_bhb_loop+0x35/0x90 [ 119.950837][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.956798][ C0] RIP: 0033:0x7f6ef7185d29 [ 119.961232][ C0] Code: Unable to access opcode bytes at 0x7f6ef7185cff. [ 119.968271][ C0] RSP: 002b:00007ffcc315b7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 119.976738][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ef7185d29 [ 119.984745][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.992740][ C0] RBP: 00007ffcc315b84c R08: 00007ffcc315b8df R09: 000000000001bcde [ 120.000766][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 120.008883][ C0] R13: 000000000001bcde R14: 00007ffcc315b8a0 R15: 00007ffcc315b8a0 [ 120.017026][ C0] [ 120.020387][ C0] Kernel Offset: disabled [ 120.024805][ C0] Rebooting in 86400 seconds..